How do I enforce data residency on Outposts rack using EBS Local Snapshots on Outposts?
如何使用 EBS Local Snapshots on Outposts 在 Outposts 机架上实施数据驻留？
You can set resource-level IAM policies and permissions on your Outpost for EBS Local Snapshots on Outposts and AMI images to enforce data residency. Each account (or IAM user or role) can set up a data residency enforcement policy for single or multiple Outposts. This will block the creation or copy of local snapshots and images as well as API/CLI calls outside the specified Outposts rack ARN. All of the create, update, and copy operations are logged in CloudTrail audit logs, so you can track that local snapshots reside in your location. To learn more, visit the EBS Snapshots documentation.
您可以在 Outpost 上为 EBS Local Snapshots on Outposts 和 AMI 映像设置资源级的 IAM 策略和权限，以实施数据驻留。每个账户（或 IAM 用户或角色）都可以为单个或多个 Outposts 设置数据驻留实施策略。这将阻止创建或复制本地快照和映像，以及在指定的 Outposts 机架 ARN 之外调用 API/CLI。所有创建、更新和复制操作都会记录在 CloudTrail 审计日志中，因此您可以追踪本地快照已驻留在您的所在地。有关更多信息，请访问 EBS 快照文档。