AWS snowball high security documentation change

Service: snowball · 2025-05-19 · Security-related high

File: snowball/latest/developer-guide/ec2-ami-import-cli.md

Summary

Narrowed IAM policy resource from wildcard (*) to snowball-specific roles

Security assessment

Reduces permission scope in IAM policies to prevent over-privileged access, directly addressing security best practices for IAM configuration.

Diff

diff --git a/snowball/latest/developer-guide/ec2-ami-import-cli.md b/snowball/latest/developer-guide/ec2-ami-import-cli.md
index feec10c79..c740a4d2b 100644
--- a//snowball/latest/developer-guide/ec2-ami-import-cli.md
+++ b//snowball/latest/developer-guide/ec2-ami-import-cli.md
@@ -237 +237 @@ The following is an example policy that allows a user to perform the `get-role`
-                "Resource": "*",
+                "Resource": "arn:aws:iam::*:role/snowball*",