AWS ebs documentation change

Service: ebs · 2025-08-28 · Documentation low

File: ebs/latest/userguide/snapshot-lock-iam.md

Summary

Removed JSON policy examples for snapshot locking operations and conditional policies

Security assessment

Removal of policy examples related to snapshot locking durations but no indication of security vulnerabilities being patched.

Diff

diff --git a/ebs/latest/userguide/snapshot-lock-iam.md b/ebs/latest/userguide/snapshot-lock-iam.md
index 7fa5bee90..36c2d2442 100644
--- a//ebs/latest/userguide/snapshot-lock-iam.md
+++ b//ebs/latest/userguide/snapshot-lock-iam.md
@@ -35,29 +34,0 @@ The following is an example IAM policy that gives users permission to lock and u
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowSnapshotLockOperations",
-          "Effect": "Allow",
-          "Action": [
-            "ec2:LockSnapshot",
-            "ec2:UnlockSnapshot",
-            "ec2:DescribeLockedSnapshots",
-            "ec2:DescribeSnapshots"
-          ],
-          "Resource": [
-            "arn:aws:ec2:*::snapshot/*",
-            "arn:aws:ec2:*::volume/*"
-          ]
-        }
-      ]
-    }
-    
-    
-
@@ -102,29 +72,0 @@ The following example policy restricts users to specifying a lock duration betwe
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowSnapshotLockWithDurationCondition",
-          "Effect": "Allow",
-          "Action": "ec2:LockSnapshot",
-          "Resource": "arn:aws:ec2:*::snapshot/*",
-          "Condition": {
-            "NumericGreaterThan": {
-              "ec2:SnapshotLockDuration": 10
-            },
-            "NumericLessThan": {
-              "ec2:SnapshotLockDuration": 50
-            }
-          }
-        }
-      ]
-    }
-    
-    
-
@@ -137,26 +78,0 @@ The following example policy restricts users to specifying a cooling-off period
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowSnapshotLockWithCondition",
-          "Effect": "Allow",
-          "Action": "ec2:LockSnapshot",
-          "Resource": "arn:aws:ec2:*::snapshot/*",
-          "Condition": {
-            "NumericGreaterThan": {
-              "ec2:SnapshotTime": 48
-            }
-          }
-        }
-      ]
-    }
-    
-    
-