ec2:CopyVolumes is a Write access-level action in the ec2 service. Grants permission to create a copy of an EBS volume. Resource-level permissions specified for this action apply to the source and copied volume. Condition keys for the copied volume correspond to parameters specified in the CopyVolumes API request
ARNs that ec2:CopyVolumes can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2:CopyVolumes.
Filters access by the name of the AWS Region
Filters access by a tag key and value pair that is allowed in the request
Filters access by a list of tag keys that are allowed in the request
Filters access by the name of an Availability Zone in an AWS Region
Filters access by the ID of an Availability Zone in an AWS Region
Filters access by whether the EBS volume is encrypted
Filters access by the presence of an EC2 operator provisioning a managed resource
Filters access by the ARN of the parent snapshot
Filters access by the ARN of the parent volume from which the snapshot was created
Filters access by the initialization rate of the volume, in MiBps
Filters access by the the number of input/output operations per second (IOPS) provisioned for the volume
Filters access by the size of the volume, in GiB
Filters access by the throughput of the volume, in MiBps
Filters access by the type of volume (gp2, gp3, io1, io2, st1, sc1, or standard)
A minimal policy that allows ec2:CopyVolumes. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2CopyVolumes",
"Effect": "Allow",
"Action": "ec2:CopyVolumes",
"Resource": "*"
}
]
}