AWS DataSync (IAM)

AWSdatasyncstorage

AWS DataSync is a data transfer service that simplifies, automates, and accelerates moving data between on-premises storage and AWS.

iamaws

docs ↗

Permissions

Actions in this service

datasync:ListTasks

datasync:DescribeTask

datasync:CreateTask

datasync:UpdateTask

datasync:ListAgents

datasync:DescribeAgent

datasync:CreateAgent

datasync:StartTaskExecution

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "datasync:ListTasks", "datasync:DescribeTask", "datasync:CreateTask", "datasync:UpdateTask", "datasync:ListAgents", "datasync:DescribeAgent", "datasync:CreateAgent", "datasync:StartTaskExecution" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid datasync:* — grants full control including delete and modify operations.

Avoid datasync:DeleteTask — can permanently delete data transfer tasks.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/datasync/datasync.json ↗