IAM / storage / storagegateway

AWS Storage Gateway (IAM)

JSON →
AWSstoragegatewaystorage

AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage.

iamaws
docs ↗
Permissions
Actions in this service
storagegateway:ListGateways
storagegateway:DescribeCache
storagegateway:ListVolumes
storagegateway:ListTapes
storagegateway:DescribeTapes
storagegateway:CreateSnapshot
storagegateway:ListFileShares
storagegateway:DescribeNFSFileShares
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "storagegateway:ListGateways", "storagegateway:DescribeCache", "storagegateway:ListVolumes", "storagegateway:ListTapes", "storagegateway:DescribeTapes", "storagegateway:CreateSnapshot", "storagegateway:ListFileShares", "storagegateway:DescribeNFSFileShares" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid storagegateway:* — grants full control including delete and modify operations.
Avoid storagegateway:DeleteVolume — can permanently delete volumes.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/storagegateway/storagegateway.json ↗