AWS Kinesis (IAM)

AWSkinesisanalytics

Amazon Kinesis makes it easy to collect, process, and analyze real-time streaming data so you can get timely insights and react quickly to new information.

iamaws

docs ↗

Permissions

Actions in this service

kinesis:PutRecord

kinesis:PutRecords

kinesis:GetRecords

kinesis:GetShardIterator

kinesis:ListShards

kinesis:ListStreams

kinesis:DescribeStream

kinesis:DescribeStreamSummary

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "kinesis:PutRecord", "kinesis:PutRecords", "kinesis:GetRecords", "kinesis:GetShardIterator", "kinesis:ListShards", "kinesis:ListStreams", "kinesis:DescribeStream", "kinesis:DescribeStreamSummary" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid kinesis:* — grants full control including stream deletion and encryption changes.

Avoid kinesis:DeleteStream — can permanently remove a data stream and all its data.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/kinesis/kinesis.json ↗