Enhancing resource-level permission for creating an Amazon EBS volume from a snapshot

AWS has enhanced resource-level permissions for creating Amazon EBS volumes from snapshots, providing more granular access control for IAM policies. This update allows users to specify additional authorization conditions when creating volumes from source snapshots.

• Introduces five new EC2-specific condition keys for snapshot permissions
• Requires explicit resource statements for both volumes and snapshots in IAM policies
• Enables more precise control over which snapshots can be used to create volumes
• Supports security, compliance, and resource optimization strategies

The transition timeline runs from February 17, 2025, to May 17, 2025, with most accounts being notified via email and AWS Health Dashboard. Users can use DryRun mode to validate their updated IAM policies.