Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section XII. Cloud
  4. Configuration for Amazon Web Services (AWS)
  5. Mandatory probe user privileges
  6. For all probes

For all probes

{
    "Version": "2012-10-17",
    "Statement": [
        {           
            "Effect": "Allow",
            "Action": [
                "iam:GetUser",
                "iam:ListAccountAliases",
                "iam:GetAccountAuthorizationDetails",
                "organizations:DescribeOrganization",
                "ec2:DescribeInstances",
                "ec2:DescribeAddresses",
                "ec2:DescribeTags",
                "ec2:DescribeRegions",
                "ec2:DescribeSnapshots",
                "ec2:DescribeHosts",
                "ec2:DescribeImages",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DescribeAvailabilityZones",
                "ec2:DescribeVpcs",
                "ec2:DescribeVolumes",
                "ec2:DescribeAccountAttributes",
                "ec2:DescribeSubnets",
                "elasticfilesystem:DescribeFileSystems",
                "elasticfilesystem:DescribeMountTargets",
                "elasticfilesystem:DescribeTags",
                "glacier:ListVaults",
                "s3:GetBucketLogging",
                "s3:GetBucketTagging",
                "s3:GetBucketPolicy",
                "s3:GetBucketVersioning",
                "s3:GetReplicationConfiguration",
                "s3:GetLifecycleConfiguration",
                "s3:ListBucketVersions",
                "s3:ListBucket",
                "s3:GetBucketLocation",
                "s3:GetObjectAcl",
                "s3:GetObject",
                "s3:ListAllMyBuckets"
            ],
            "Resource": "*"
        }
    ]
}

Feedback

Was this page helpful?
Previous

Mandatory probe user privileges

Next

For independent probes

Feedback

Was this page helpful?