You can create IAM policy without this Permission, if You add verify=false while registering the bucket
curl -XPUT 'http://localhost:9200/_snapshot/my_ttl_repository?verify=false' -d @configure_ttl
It won't create_and_delete files to check the permissions - so there You go.