AWS snowball documentation change

Service: snowball · 2025-08-28 · Documentation low

File: snowball/latest/developer-guide/transfer-troubleshooting.md

Summary

Removed JSON policy example enforcing encryption requirements and secure transport for S3 operations

Security assessment

While the removed policy included security controls (encryption enforcement, secure transport), the change itself removes documentation rather than addressing a specific security issue. No evidence of a vulnerability being patched.

Diff

diff --git a/snowball/latest/developer-guide/transfer-troubleshooting.md b/snowball/latest/developer-guide/transfer-troubleshooting.md
index 6390c4471..f8b63a0ef 100644
--- a//snowball/latest/developer-guide/transfer-troubleshooting.md
+++ b//snowball/latest/developer-guide/transfer-troubleshooting.md
@@ -225,70 +224,0 @@ When using the S3 interface to transfer data to or from a Snowball Edge device,
-JSON
-    
-
-****
-    
-    
-                {
-        "Version": "2012-10-17",
-        "Statement": [{
-                "Sid": "DenyIncorrectEncryptionHeader",
-                "Effect": "Deny",
-                "Principal": "*",
-                "Action": "s3:PutObject",
-                "Resource": "arn:aws:s3:::BucketName/*",
-                "Condition": {
-                    "StringNotLike": {
-                        "aws:PrincipalArn": "arn:aws:iam::1234567890:role/RoleName"
-                    },
-                    "StringNotEquals": {
-                        "s3:x-amz-server-side-encryption": [
-                            "aws:kms",
-                            "AES256"
-                        ]
-                    }
-                }
-            },
-            {
-                "Sid": "DenyUnEncryptedObjectUploads",
-                "Effect": "Deny",
-                "Principal": "*",
-                "Action": "s3:PutObject",
-                "Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*",
-                "Condition": {
-                    "StringNotLike": {
-                        "aws:PrincipalArn": "arn:aws:iam::1234567890:role/RoleName"
-                    },
-                    "Null": {
-                        "s3:x-amz-server-side-encryption": "true"
-                    }
-                }
-            },
-            {
-                "Sid": "DenyInsecureTransport",
-                "Effect": "Deny",
-                "Principal": "*",
-                "Action": "s3:*",
-                "Resource": [
-                    "arn:aws:s3:::BucketName/*",
-                    "arn:aws:s3:::BucketName"
-                ],
-                "Condition": {
-                    "Bool": {
-                        "aws:SecureTransport": "false"
-                    }
-                }
-            },
-            {
-                "Sid": "AllowSnowballPutObjectAccess",
-                "Effect": "Allow",
-                "Principal": {
-                    "AWS": "arn:aws:iam::1234567890:role/RoleName"
-                },
-                "Action": "s3:PutObject",
-                "Resource": "arn:aws:s3:::BucketName/*"
-            }
-        ]
-    }
-        
-    
-