Service: Amazon Kinesis Data Streams
Short Name:
kinesis
ARN Format:
arn:aws:kinesis:${Region}:${Account}:${ResourceType}/${ResourceName}
ARN Regex:
^arn:aws:kinesis:.+
CloudFrontFullAccess
…
AWSConfigRoleAction | Access | Reference | Description |
---|---|---|---|
kinesis:ListShards | Docs | Grants permission to list the shards in a stream and provides information about each shard | |
kinesis:ListStreamConsumers | Docs | Grants permission to list the stream consumers registered to receive data from a Kinesis stream using enhanced fan-out, and provides information about each consumer | |
kinesis:ListStreams | Docs | Grants permission to list your streams | |
kinesis:DescribeLimits | Docs | Grants permission to describe the shard limits and usage for the account | |
kinesis:DescribeStream | Docs | Grants permission to describe the specified stream | |
kinesis:DescribeStreamConsumer | Docs | Grants permission to get the description of a registered stream consumer | |
kinesis:DescribeStreamSummary | Docs | Grants permission to provide a summarized description of the specified Kinesis data stream without the shard list | |
kinesis:GetRecords | Docs | Grants permission to get data records from a shard | |
kinesis:GetResourcePolicy | Docs | Grants permission to get a resource policy associated with a specified stream or consumer | |
kinesis:GetShardIterator | Docs | Grants permission to get a shard iterator. A shard iterator expires five minutes after it is returned to the requester | |
kinesis:ListTagsForStream | Docs | Grants permission to list the tags for the specified Amazon Kinesis stream | |
kinesis:SubscribeToShard | Docs | Grants permission to listen to a specific shard with enhanced fan-out | |
kinesis:AddTagsToStream | Docs | Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 10 tags | |
kinesis:RemoveTagsFromStream | Docs | Grants permission to remove tags from the specified Kinesis data stream. Removed tags are deleted and cannot be recovered after this operation successfully completes | |
kinesis:CreateStream | Docs | Grants permission to create a Amazon Kinesis stream | |
kinesis:DecreaseStreamRetentionPeriod | Docs | Grants permission to decrease the stream's retention period, which is the length of time data records are accessible after they are added to the stream | |
kinesis:DeleteResourcePolicy | Docs | Grants permission to delete a resource policy associated with a specified stream or consumer | |
kinesis:DeleteStream | Docs | Grants permission to delete a stream and all its shards and data | |
kinesis:DeregisterStreamConsumer | Docs | Grants permission to deregister a stream consumer with a Kinesis data stream | |
kinesis:DisableEnhancedMonitoring | Docs | Grants permission to disables enhanced monitoring | |
kinesis:EnableEnhancedMonitoring | Docs | Grants permission to enable enhanced Kinesis data stream monitoring for shard-level metrics | |
kinesis:IncreaseStreamRetentionPeriod | Docs | Grants permission to increase the stream's retention period, which is the length of time data records are accessible after they are added to the stream | |
kinesis:MergeShards | Docs | Grants permission to merge two adjacent shards in a stream and combines them into a single shard to reduce the stream's capacity to ingest and transport data | |
kinesis:PutRecord | Docs | Grants permission to write a single data record from a producer into an Amazon Kinesis stream | |
kinesis:PutRecords | Docs | Grants permission to write multiple data records from a producer into an Amazon Kinesis stream in a single call (also referred to as a PutRecords request) | |
kinesis:PutResourcePolicy | Docs | Grants permission to attach a resource policy to a specified stream or consumer | |
kinesis:RegisterStreamConsumer | Docs | Grants permission to register a stream consumer with a Kinesis data stream | |
kinesis:SplitShard | Docs | Grants permission to split a shard into two new shards in the Kinesis data stream, to increase the stream's capacity to ingest and transport data | |
kinesis:StartStreamEncryption | Docs | Grants permission to enable or update server-side encryption using an AWS KMS key for a specified stream | |
kinesis:StopStreamEncryption | Docs | Grants permission to disable server-side encryption for a specified stream | |
kinesis:UpdateShardCount | Docs | Grants permission to update the shard count of the specified stream to the specified number of shards | |
kinesis:UpdateStreamMode | Docs | Grants permission to update the capacity mode of the data stream |
No condition keys