ebs:PutSnapshotBlock is a Write access-level action in the ebs service. Grants permission to write a block of data to a snapshot created by the StartSnapshot operation
ARNs that ebs:PutSnapshotBlock can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ebs:PutSnapshotBlock.
Filters access by a tag key and value pair that is allowed in the request
Filters access by a tag key and value pair of a resource
Filters access by a list of tag keys that are allowed in the request
Filters access by the description of the snapshot being created
Filters access by the ARN of the parent snapshot
Filters access by the size of the volume for the snapshot being created, in GiB
A minimal policy that allows ebs:PutSnapshotBlock. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEbsPutSnapshotBlock",
"Effect": "Allow",
"Action": "ebs:PutSnapshotBlock",
"Resource": "*"
}
]
}