AWS ebs documentation change

Service: ebs · 2025-05-16 · Documentation low

File: ebs/latest/userguide/ebs-modifying-snapshot-permissions.md

Summary

Clarified snapshot sharing options (public vs specific AWS accounts) and updated CLI/PowerShell examples with detailed parameters

Security assessment

The change explicitly distinguishes between public sharing and targeted account sharing of snapshots, which is a security-relevant configuration. However, this update enhances existing security documentation rather than addressing a specific vulnerability. Example improvements demonstrate proper syntax for access control but do not introduce new security features.

Diff

diff --git a/ebs/latest/userguide/ebs-modifying-snapshot-permissions.md b/ebs/latest/userguide/ebs-modifying-snapshot-permissions.md
index 30222b9d4..29fec1656 100644
--- a//ebs/latest/userguide/ebs-modifying-snapshot-permissions.md
+++ b//ebs/latest/userguide/ebs-modifying-snapshot-permissions.md
@@ -51 +51 @@ The following considerations apply to sharing snapshots:
-You can share a snapshot using one of the methods described in the section.
+You can share a snapshot publicly or with specific AWS accounts.
@@ -87 +87,5 @@ For `--attribute`, specify `createVolumePermission`. For `--operation-type`, spe
-    $  aws ec2 modify-snapshot-attribute --snapshot-id 1234567890abcdef0 --attribute createVolumePermission --operation-type add --group-names all
+    aws ec2 modify-snapshot-attribute \
+        --snapshot-id snap-0abcdef1234567890 \
+        --attribute createVolumePermission \
+        --operation-type add \
+        --group-names all
@@ -96 +100,5 @@ For `--attribute`, specify `createVolumePermission`. For `--operation-type`, spe
-    $  aws ec2 modify-snapshot-attribute --snapshot-id 1234567890abcdef0 --attribute createVolumePermission --operation-type add --user-ids 123456789012
+    aws ec2 modify-snapshot-attribute \
+        --snapshot-id snap-0abcdef1234567890 \
+        --attribute createVolumePermission \
+        --operation-type add \
+        --user-ids 123456789012 111122223333
@@ -105 +113 @@ The permissions for a snapshot are specified using the `createVolumePermission`
-Use the [Edit-EC2SnapshotAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2SnapshotAttribute.html) command.
+Use the [Edit-EC2SnapshotAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2SnapshotAttribute.html) cmdlet.
@@ -110 +118,5 @@ For `-Attribute`, specify `CreateVolumePermission`. For `-OperationType`, specif
-    PS C:\>  Edit-EC2SnapshotAttribute -SnapshotId 1234567890abcdef0 -Attribute CreateVolumePermission -OperationType Add -GroupName all
+    Edit-EC2SnapshotAttribute `
+        -SnapshotId snap-0abcdef1234567890 `
+        -Attribute CreateVolumePermission `
+        -OperationType Add `
+        -GroupName all
@@ -114 +126 @@ For `-Attribute`, specify `CreateVolumePermission`. For `-OperationType`, specif
-Use the [Edit-EC2SnapshotAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2SnapshotAttribute.html) command.
+Use the [Edit-EC2SnapshotAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2SnapshotAttribute.html) cmdlet.
@@ -119 +131,5 @@ For `-Attribute`, specify `CreateVolumePermission`. For `-OperationType`, specif
-    PS C:\>  Edit-EC2SnapshotAttribute -SnapshotId 1234567890abcdef0 -Attribute CreateVolumePermission -OperationType Add -UserId 123456789012
+    Edit-EC2SnapshotAttribute `
+        -SnapshotId snap-0abcdef1234567890 `
+        -Attribute CreateVolumePermission `
+        -OperationType Add `
+        -UserId 123456789012 111122223333