IAM permissions - Amazon Elastic Compute Cloud

IAM permissions

The IAM role that's attached to your Amazon EC2 Windows instance must have permission to create application-consistent snapshots with VSS. To grant the necessary permissions, you can attach the AWSEC2VssSnapshotPolicy policy to your instance profile.

The policy enables Systems Manager to perform the following actions:

  • Create and tag EBS snapshots

  • Create and tag Amazon Machine Images (AMIs)

  • Attach metadata, such as the device ID, to the default snapshot tags that VSS creates.