AWS snowball documentation change
Summary
Updated service name references from 'AWS Snowball' to 'AWS Snowball Edge' throughout the document, corrected section headers, and updated API references. Fixed a duplicated 'Edge' in section title.
Security assessment
Changes are primarily nomenclature updates and documentation corrections. No specific security vulnerabilities or new security features are mentioned. Updates clarify service name usage in existing security context but do not introduce new security-related content.
Diff
diff --git a/snowball/latest/developer-guide/authentication-and-access-control.md b/snowball/latest/developer-guide/authentication-and-access-control.md index 93936c07e..8ea5e6721 100644 --- a/snowball/latest/developer-guide/authentication-and-access-control.md +++ b/snowball/latest/developer-guide/authentication-and-access-control.md @@ -5 +5 @@ -Overview of Managing AccessAWS-Managed (Predefined) Policies for AWS Snowball Edge +Overview of Managing AccessAWS-Managed (Predefined) Policies for AWS Snowball Edge Edge @@ -9 +9 @@ Overview of Managing AccessAWS-Managed (Predefined) Policies for AWS Snowball Ed -As with all AWS services, access to AWS Snowball requires credentials that AWS can use to authenticate your requests. Those credentials must have permissions to access AWS resources, such an Amazon S3 bucket or an AWS Lambda function. AWS Snowball differs in two ways: +As with all AWS services, access to AWS Snowball Edge requires credentials that AWS can use to authenticate your requests. Those credentials must have permissions to access AWS resources, such an Amazon S3 bucket or an AWS Lambda function. AWS Snowball Edge differs in two ways: @@ -11 +11 @@ As with all AWS services, access to AWS Snowball requires credentials that AWS c - 1. Jobs in AWS Snowball do not have Amazon Resource Names (ARNs). + 1. Jobs in AWS Snowball Edge do not have Amazon Resource Names (ARNs). @@ -18 +18 @@ As with all AWS services, access to AWS Snowball requires credentials that AWS c -See [Identity and Access Management for AWS Snowball Edge](./security-iam.html) for details on how you can use [AWS Identity and Access Management (IAM)](https://docs.aws.amazon.com/IAM/latest/UserGuide/) and AWS Snowball to help secure your resources by controlling who can access them in the AWS Cloud, and also local access control recommendations. +See [Identity and Access Management for AWS Snowball Edge](./security-iam.html) for details on how you can use [AWS Identity and Access Management (IAM)](https://docs.aws.amazon.com/IAM/latest/UserGuide/) and AWS Snowball Edge to help secure your resources by controlling who can access them in the AWS Cloud, and also local access control recommendations. @@ -45 +45 @@ An _account administrator_ (or administrator user) is a user with administrator -In AWS Snowball, the primary resource is a _job_. AWS Snowball also has devices like the Snowball and the AWS Snowball Edge device, however, you can only use those devices in the context of an existing job. Amazon S3 buckets and Lambda functions are resources of Amazon S3 and Lambda respectively. +In AWS Snowball Edge, the primary resource is a _job_. AWS Snowball Edge also has devices like the Snowball and the AWS Snowball Edge device, however, you can only use those devices in the context of an existing job. Amazon S3 buckets and Lambda functions are resources of Amazon S3 and Lambda respectively. @@ -53 +53 @@ S3 bucket | `arn:aws:s3:`region`:`account-id`:`BucketName`/`ObjectName`` -AWS Snowball provides a set of operations to create and manage jobs. For a list of available operations, see the [AWS Snowball API Reference](https://docs.aws.amazon.com/snowball/latest/api-reference/api-reference.html). +AWS Snowball Edge provides a set of operations to create and manage jobs. For a list of available operations, see the [AWS Snowball Edge API Reference](https://docs.aws.amazon.com/snowball/latest/api-reference/api-reference.html). @@ -59 +59 @@ The AWS account owns the resources that are created in the account, regardless o - * If you use the root account credentials of your AWS account to create a S3 bucket, your AWS account is the owner of the resource (in AWS Snowball, the resource is the job). + * If you use the root account credentials of your AWS account to create a S3 bucket, your AWS account is the owner of the resource (in AWS Snowball Edge, the resource is the job). @@ -74 +74 @@ A _permissions policy_ describes who has access to what. The following section e -This section discusses using IAM in the context of AWS Snowball. It doesn't provide detailed information about the IAM service. For complete IAM documentation, see [What Is IAM?](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) in the _IAM User Guide_. For information about IAM policy syntax and descriptions, see [AWS IAM Policy Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html) in the _IAM User Guide_. +This section discusses using IAM in the context of AWS Snowball Edge. It doesn't provide detailed information about the IAM service. For complete IAM documentation, see [What Is IAM?](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) in the _IAM User Guide_. For information about IAM policy syntax and descriptions, see [AWS IAM Policy Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html) in the _IAM User Guide_. @@ -76 +76 @@ This section discusses using IAM in the context of AWS Snowball. It doesn't prov -Policies attached to an IAM identity are referred to as _identity-based_ policies (IAM polices) and policies attached to a resource are referred to as _resource-based_ policies. AWS Snowball supports only identity-based policies (IAM policies). +Policies attached to an IAM identity are referred to as _identity-based_ policies (IAM polices) and policies attached to a resource are referred to as _resource-based_ policies. AWS Snowball Edge supports only identity-based policies (IAM policies). @@ -87 +87 @@ Policies attached to an IAM identity are referred to as _identity-based_ policie -Other services, such as Amazon S3, also support resource-based permissions policies. For example, you can attach a policy to an S3 bucket to manage access permissions to that bucket. AWS Snowball doesn't support resource-based policies. +Other services, such as Amazon S3, also support resource-based permissions policies. For example, you can attach a policy to an S3 bucket to manage access permissions to that bucket. AWS Snowball Edge doesn't support resource-based policies. @@ -91 +91 @@ Other services, such as Amazon S3, also support resource-based permissions polic -For each job (see Resources and Operations), the service defines a set of API operations (see [AWS Snowball API Reference](https://docs.aws.amazon.com/snowball/latest/api-reference/api-reference.html)) to create and manage said job. To grant permissions for these API operations, AWS Snowball defines a set of actions that you can specify in a policy. For example, for a job, the following actions are defined: `CreateJob`, `CancelJob`, and `DescribeJob`. Note that, performing an API operation can require permissions for more than one action. +For each job (see Resources and Operations), the service defines a set of API operations (see [AWS Snowball Edge API Reference](https://docs.aws.amazon.com/snowball/latest/api-reference/api-reference.html)) to create and manage said job. To grant permissions for these API operations, AWS Snowball Edge defines a set of actions that you can specify in a policy. For example, for a job, the following actions are defined: `CreateJob`, `CancelJob`, and `DescribeJob`. Note that, performing an API operation can require permissions for more than one action. @@ -115 +115 @@ This is supported for Amazon EC2, Amazon S3, and IAM. - * **Principal** – In identity-based policies (IAM policies), the user that the policy is attached to is the implicit principal. For resource-based policies, you specify the user, account, service, or other entity that you want to receive permissions (applies to resource-based policies only). AWS Snowball doesn't support resource-based policies. + * **Principal** – In identity-based policies (IAM policies), the user that the policy is attached to is the implicit principal. For resource-based policies, you specify the user, account, service, or other entity that you want to receive permissions (applies to resource-based policies only). AWS Snowball Edge doesn't support resource-based policies. @@ -122 +122 @@ To learn more about IAM policy syntax and descriptions, see [AWS IAM Policy Refe -For a table showing all of the AWS Snowball API actions, see [AWS Snowball API Permissions: Actions, Resources, and Conditions Reference](./access-policy-examples-for-sdk-cli.html#snowball-api-permissions-ref). +For a table showing all of the AWS Snowball Edge API actions, see [AWS Snowball Edge API Permissions: Actions, Resources, and Conditions Reference](./access-policy-examples-for-sdk-cli.html#snowball-api-permissions-ref). @@ -128 +128 @@ When you grant permissions, you can use the IAM policy language to specify the c -To express conditions, you use predefined condition keys. There are no condition keys specific to AWS Snowball. However, there are AWS-wide condition keys that you can use as appropriate. For a complete list of AWS-wide keys, see [Available Keys for Conditions](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_. +To express conditions, you use predefined condition keys. There are no condition keys specific to AWS Snowball Edge. However, there are AWS-wide condition keys that you can use as appropriate. For a complete list of AWS-wide keys, see [Available Keys for Conditions](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_. @@ -130 +130 @@ To express conditions, you use predefined condition keys. There are no condition -## AWS-Managed (Predefined) Policies for AWS Snowball Edge +## AWS-Managed (Predefined) Policies for AWS Snowball Edge Edge @@ -134 +134 @@ AWS addresses many common use cases by providing standalone IAM policies that ar -You can use the following AWS-managed policies with AWS Snowball. +You can use the following AWS-managed policies with AWS Snowball Edge. @@ -136 +136 @@ You can use the following AWS-managed policies with AWS Snowball. -### Creating an IAM Role Policy for Snowball Edge +### Creating an IAM Role Policy for Snowball Edge Edge @@ -138 +138 @@ You can use the following AWS-managed policies with AWS Snowball. -An IAM role policy must be created with read and write permissions for your Amazon S3 buckets. The IAM role must also have a trust relationship with Snowball. Having a trust relationship means that AWS can write the data in the Snowball and in your Amazon S3 buckets, depending on whether you're importing or exporting data. +An IAM role policy must be created with read and write permissions for your Amazon S3 buckets. The IAM role must also have a trust relationship with Snowball Edge. Having a trust relationship means that AWS can write the data in the Snowball and in your Amazon S3 buckets, depending on whether you're importing or exporting data. @@ -140 +140 @@ An IAM role policy must be created with read and write permissions for your Amaz -When you create a job to order a Snowball Edge device in the AWS Snow Family Management Console, creating the necessary IAM role occurs in step 4 in the **Permission** section. This process is automatic. The IAM role that you allow Snowball to assume is only used to write your data to your bucket when the Snowball with your transferred data arrives at AWS. The following procedure outlines that process. +When you create a job to order a Snowball Edge device in the AWS Snow Family Management Console, creating the necessary IAM role occurs in step 4 in the **Permission** section. This process is automatic. The IAM role that you allow Snowball Edge to assume is only used to write your data to your bucket when the Snowball with your transferred data arrives at AWS. The following procedure outlines that process. @@ -144 +144 @@ When you create a job to order a Snowball Edge device in the AWS Snow Family Man - 1. Sign in to the AWS Management Console and open the AWS Snowball console at [https://console.aws.amazon.com/importexport/](https://console.aws.amazon.com/importexport/). + 1. Sign in to the AWS Management Console and open the AWS Snowball Edge console at [https://console.aws.amazon.com/importexport/](https://console.aws.amazon.com/importexport/). @@ -254 +254 @@ If you use server-side encryption with AWS KMS–managed keys to encrypt the Ama -You can create your own custom IAM policies to allow permissions for API operations for AWS Snowball job management. You can attach these custom policies to the IAM users or groups that require those permissions. +You can create your own custom IAM policies to allow permissions for API operations for AWS Snowball Edge job management. You can attach these custom policies to the IAM users or groups that require those permissions.