What IAM permission does AWS require for EBS to create a snapshot

Newbee 0
Viewed 35

I tried allowing a IAM role to create snapshots of EBS volumes with these permissions

            "Action": [
                ...

                "ebs:StartSnapshot",
                "ebs:PutSnapshotBlock",
                "ebs:CompleteSnapshot",

                ...     
            ],
            "Resource": "*",
            "Effect": "Allow"

but I am getting a failure with this reason

"You are not authorized to perform this operation. Encoded authorization failure message: ...

The official AWS documentation says that these permission are the right ones for creating the snapshot, but as stated, they don't work. So what can I do here

Update: adding "ec2:*" to permissions seems to fix the problem, but I obviously can't leave it at that. "ec2:CreateSnapshot" alone doesn't seem to work

snapshot amazon-ebs amazon-iam amazon-web-services
1 Answers

I needed these permissions

"ec2:CreateSnapshot",
"ec2:CreateTags"

Dunno why people at amazon decided that to make ebs snapshots you need an ec2 permission, but hey I ain't the one making 200k a year

Newbee0
Related