Replicate Volumes - Additional IAM Policy

This policy contains the permissions needed for the replicate volumes across AWS accounts scheduled task.

If you are using the Ylastic Administrator user, you do NOT need this additional policy. This policy is only required if you are using the Ylastic Read only user.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:CopySnapshot",
        "ec2:CreateSnapshot",
        "ec2:CreateTags",
        "ec2:DeleteSnapshot",
        "ec2:DeleteTags",
        "ec2:DescribeSnapshotAttribute",
        "ec2:DescribeSnapshots",
        "ec2:DescribeTags",
        "ec2:DescribeVolumes",
        "ec2:ModifySnapshotAttribute",
        "ec2:ResetSnapshotAttribute",
        "kms:ListAliases",
        "sts:DecodeAuthorizationMessage"
      ],
      "Resource": "*"
    }
  ]
}