aws-ebs-snapshot-block-data

EBS Direct APIs expose raw snapshot blocks that may contain files, deleted data, credentials, and private keys.

awscritical service: aws:ebs emits CanReadData

Where it sits

locationGetSnapshotBlock.BlockData
location kinddata_record
data kindscredential password api_key access_key secret_key private_key customer_data source_code_secret
emits edgeCanReadData
serviceEBS (aws:ebs)

Collection recipe

access moderead_api
operationGetSnapshotBlock
response pathBlockData
encodingbinary
params{"BlockIndex": "\u003cblock-index\u003e", "BlockToken": "\u003cblock-token\u003e", "SnapshotId": "\u003csnapshot-id\u003e"}

Required permissions

ebs:GetSnapshotBlock
ebs:ListSnapshotBlocks

References

move · open · esc close