Snowball provides the safest way to transfer your data to the AWS Cloud. We can define security parameters for Snowball using IAM. IAM lets you authorize the users to create a Snowball job, and also access controls.
Before using Snowball, users must get authenticated with IAM. Once the user is authenticated, they should have sufficient privileges to access the AWS Snowball Management Console.
To use the Snowball Management Console, users must have the following access permissions defined in IAM:
- List all S3 buckets or create a new bucket, if required
- Create SNS topics to send notification
- Select AWS KMS keys
- Create an IAM role
Let's see an example of an IAM policy defined for Snowball:
{ "Version": "2012-10-17", "Statement": ...
