How To Allow AWS IAM Users EBS Snapshot Create And Delete Access

Author: erics, July 29th, 2021

SUMMARY: Needed to create an AWS IAM Policy to allow a user access to create and delete EBS snapshots. This script also needed to be able to list volumes:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:DeleteSnapshot",
                "ec2:ModifySnapshotAttribute",
                "ec2:CreateSnapshots",
                "ec2:ResetSnapshotAttribute",
                "ec2:CreateSnapshot"
            ],
            "Resource": [
                "arn:aws:ec2:*:ACCOUNT_ID_HERE:volume/*",
                "arn:aws:ec2:*:ACCOUNT_ID_HERE:snapshot/*",
                "arn:aws:ec2:*:ACCOUNT_ID_HERE:instance/*"
            ]
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeSnapshotAttribute",
                "ec2:DescribeVolumes",
                "ec2:DescribeSnapshots"
            ],
            "Resource": "*"
        }
    ]
}

{

"Version": "2012-10-17",

"Statement": [

{

"Sid": "VisualEditor0",

"Effect": "Allow",

"Action": [

"ec2:DeleteSnapshot",

"ec2:ModifySnapshotAttribute",

"ec2:CreateSnapshots",

"ec2:ResetSnapshotAttribute",

"ec2:CreateSnapshot"

"Resource": [

"arn:aws:ec2:*:ACCOUNT_ID_HERE:volume/*",

"arn:aws:ec2:*:ACCOUNT_ID_HERE:snapshot/*",

"arn:aws:ec2:*:ACCOUNT_ID_HERE:instance/*"

]

{

"Sid": "VisualEditor1",

"Effect": "Allow",

"Action": [

"ec2:DescribeSnapshotAttribute",

"ec2:DescribeVolumes",

"ec2:DescribeSnapshots"

"Resource": "*"

}

]

}

Categories: How-To's, Technology Tags: Amazon, AWS, Create, Delete, howto, IAM, JSON, Policy, Snapshot, tips, User, volume | No comments

How To Fix aws Command Error “You must specify a region”

Author: erics, July 29th, 2021

I was getting error “You must specify a region” when running any aws CLI command. The fix: Using the aws command:

aws configure set region us-east-1 --profile demo

1	aws configure set region us-east-1 --profile demo

which will automatically add the following to the file ~/.aws/config:

[profile demo]
region = us-east-1

1 2	[profile demo] region = us-east-1

You many simply edit the ~/.aws/config file yourself and append the same thing:

vi ~/.aws/config

[profile demo]
region = us-east-1

vi ~/.aws/config

[profile demo]

region = us-east-1

Categories: How-To's, Technology Tags: AWS, aws cli, aws command, aws configure, aws set, cli, Command, Config, configure, Error, Region, You must specify a region | No comments

S	M	T	W	T	F	S
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

How To Allow AWS IAM Users EBS Snapshot Create And Delete Access

How To Fix aws Command Error “You must specify a region”

Our Link Network

Business

Client Websites

Fine Dining

Friends & Family

Galleries

Health

Resources

Technology

Travel

The Archives

Latest Ramblings…

Various Topics of No Interest