IAM / analytics / firehose

AWS Firehose (IAM)

JSON →
AWSfirehoseanalytics

Amazon Kinesis Data Firehose is a fully managed service for delivering real-time streaming data to destinations such as Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk.

iamaws
docs ↗
Permissions
Actions in this service
firehose:PutRecord
firehose:PutRecordBatch
firehose:ListDeliveryStreams
firehose:DescribeDeliveryStream
firehose:TagDeliveryStream
firehose:ListTagsForDeliveryStream
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "firehose:PutRecord", "firehose:PutRecordBatch", "firehose:ListDeliveryStreams", "firehose:DescribeDeliveryStream", "firehose:TagDeliveryStream", "firehose:ListTagsForDeliveryStream" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid firehose:* — grants full control including stream deletion and destination updates.
Avoid firehose:DeleteDeliveryStream — can permanently remove a delivery stream and stop data delivery.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/firehose/firehose.json ↗