ebs:ListSnapshotBlocks is a Read access-level action in the ebs service. Grants permission to list the blocks in an Amazon Elastic Block Store (EBS) snapshot
ARNs that ebs:ListSnapshotBlocks can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ebs:ListSnapshotBlocks.
Filters access by a tag key and value pair that is allowed in the request
Filters access by a tag key and value pair of a resource
Filters access by a list of tag keys that are allowed in the request
Filters access by the description of the snapshot being created
Filters access by the ARN of the parent snapshot
Filters access by the size of the volume for the snapshot being created, in GiB
A minimal policy that allows ebs:ListSnapshotBlocks. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEbsListSnapshotBlocks",
"Effect": "Allow",
"Action": "ebs:ListSnapshotBlocks",
"Resource": "*"
}
]
}