AWS Snowball - API Version; API Permission Policy Reference

AWS Snowball User Guide
API Version
For a list of AWS Regions that Snowball supports (where you can create and manage jobs), see AWS
Import/Export in the AWS General Reference.
The region-specific API endpoint defines the scope of the Snowball resources that are accessible when
you make an API call. For example, when you call the ListJobs operation using the preceding endpoint,
you get a list of jobs in the US West (Oregon) Region that have been created in your account.
API Version
The version of the API being used for a call is identified by the first path segment of the request URI, and
its form is a ISO 8601 date. The documentation describes API version 2016-06-30.
API Permission Policy Reference
The following policies are needed for creating jobs with the job management API for Snowball.
Role Trust Policy for Creating Jobs
Using the job management API to create jobs requires the following trust policy.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "",
"Effect": "Allow",
"Principal": {
"Service": "importexport.amazonaws.com"
},
"Action": "sts:AssumeRole",
"Condition": {
"StringEquals": {
"sts:ExternalId": "AWSIE"
}
}
}
]
}
Note
To learn more about trust policies, see Modifying a Role in the IAM User Guide.
Role Policy for Creating Import Jobs
Creating an import job requires the following role policy.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation",
"s3:ListBucketMultipartUploads"
],
"Resource": "arn:aws:s3:::*"
},
103