AWS snowball high security documentation change

Service: snowball · 2025-05-19 · Security-related high

File: snowball/latest/developer-guide/access-control-managing-permissions.md

Summary

Narrowed IAM policy resource from wildcard (*) to snowball-specific roles

Security assessment

Implements principle of least privilege by restricting IAM permissions to specific snowball resources, reducing potential attack surface. Direct security improvement through permission scope reduction.

Diff

diff --git a/snowball/latest/developer-guide/access-control-managing-permissions.md b/snowball/latest/developer-guide/access-control-managing-permissions.md
index 4a011aea4..be351e01b 100644
--- a//snowball/latest/developer-guide/access-control-managing-permissions.md
+++ b//snowball/latest/developer-guide/access-control-managing-permissions.md
@@ -145 +145 @@ To use the AWS Snow Family Management Console, you need to grant permissions for
-                "Resource": "*",
+                "Resource": "arn:aws:iam::*:role/snowball*",