AWS Kinesis (IAM)

aws analytics

Amazon Kinesis makes it easy to collect, process, and analyze real-time streaming data so you can get timely insights and react quickly to new information.

Common permissions

kinesis:PutRecordkinesis:PutRecordskinesis:GetRecordskinesis:GetShardIteratorkinesis:ListShardskinesis:ListStreamskinesis:DescribeStreamkinesis:DescribeStreamSummary

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kinesis:PutRecord",
        "kinesis:PutRecords",
        "kinesis:GetRecords",
        "kinesis:GetShardIterator",
        "kinesis:ListShards",
        "kinesis:ListStreams",
        "kinesis:DescribeStream",
        "kinesis:DescribeStreamSummary"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid kinesis:* — grants full control including stream deletion and encryption changes.
Avoid kinesis:DeleteStream — can permanently remove a data stream and all its data.

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/kinesis/kinesis.json ↗

API

full doc /v1/iam/kinesis