IAM / storage / snowball

AWS Snowball (IAM)

JSON →
AWSsnowballstorage

AWS Snowball is a petabyte-scale data transport solution that uses secure physical devices to transfer large amounts of data into and out of AWS.

iamaws
docs ↗
Permissions
Actions in this service
snowball:ListJobs
snowball:DescribeJob
snowball:CreateJob
snowball:UpdateJob
snowball:GetJobManifest
snowball:GetJobUnlockCode
snowball:ListClusters
snowball:DescribeCluster
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "snowball:ListJobs", "snowball:DescribeJob", "snowball:CreateJob", "snowball:UpdateJob", "snowball:GetJobManifest", "snowball:GetJobUnlockCode", "snowball:ListClusters", "snowball:DescribeCluster" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid snowball:* — grants full control including delete and modify operations.
Avoid snowball:CreateJob — can create costly data transfer jobs.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/snowball/snowball.json ↗