storagegateway:UpdateSMBLocalGroups is a Write access-level action in the storagegateway service. Grants permission to update the list of Active Directory users and groups that have special permissions for SMB file shares on the gateway
ARNs that storagegateway:UpdateSMBLocalGroups can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants storagegateway:UpdateSMBLocalGroups.
Filters access by tag-value associated with the resource
A minimal policy that allows storagegateway:UpdateSMBLocalGroups. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowStoragegatewayUpdateSMBLocalGroups",
"Effect": "Allow",
"Action": "storagegateway:UpdateSMBLocalGroups",
"Resource": "*"
}
]
}