Kinesis
Prefix kinesis, 47 actions · Domain Analytics
14 AWS managed policies. 5 have reviewed guidance; the rest have authoritative permission data pending editorial review. 4 are service-linked role policies, shown with permission data only.
User access (5)
- AmazonKinesisAnalyticsFullAccessAdmin
- AmazonKinesisAnalyticsReadOnlyReader
- AmazonKinesisFullAccessAdmin
- AmazonKinesisReadOnlyAccessReader
- DataScientistHigh privilegeAdmin
Operator and limited (1)
- WorkLinkServiceRolePolicyOperator
Service roles (4)
- AmazonRekognitionServiceRoleOperator
- AWSIoTRuleActionsHigh privilegeOperator
- AWSLambdaKinesisExecutionRoleOperator
- CloudWatchEventsInvocationAccessOperator
Service-linked roles (4)
Also grants Kinesis actions (44)
- AdministratorAccess
- AdministratorAccess-Amplify
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonAuroraDSQLConsoleFullAccess
- AmazonChimeFullAccess
- AmazonCognitoPowerUser
- AmazonConnect_FullAccess
- AmazonDevOpsGuruServiceRolePolicy
- AmazonDynamoDBFullAccess
- AmazonDynamoDBFullAccess_v2
- AmazonDynamoDBReadOnlyAccess
- AmazonElasticMapReduceforEC2Role
- AmazonMonitronFullAccess
- AmazonQLDBConsoleFullAccess
- AmazonWorkSpacesSecureBrowserReadOnly
- AmazonWorkSpacesWebReadOnly
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSLambdaFullAccess
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSResourceGroupsReadOnlyAccess
- AWSSupportServiceRolePolicy
- AWSTrustedAdvisorServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudFrontFullAccess
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ServiceQuotasFullAccess
- ServiceQuotasReadOnlyAccess
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
addtagstostream associatestreamswithchannel createchannel createstream decreasestreamretentionperiod deletechannel deleteresourcepolicy deletestream deregisterstreamconsumer describeaccountsettings describechannel describelimits describestream describestreamconsumer describestreamsummary disableenhancedmonitoring enableenhancedmonitoring getrecords getresourcepolicy getsharditerator increasestreamretentionperiod injectapierror listchannels listshards liststreamconsumers liststreams listtagsforresource listtagsforstream mergeshards putrecord putrecords putresourcepolicy registerstreamconsumer removetagsfromstream splitshard startstreamencryption stopstreamencryption subscribetoshard tagresource untagresource updateaccountsettings updatechannel updatemaxrecordsize updateshardcount updatestreammode updatestreamrecorddistributionstrategy updatestreamwarmthroughput
Actions (47)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| kinesis:AddTagsToStream | Tagging | 7 | 2 |
| kinesis:AssociateStreamsWithChannel | Write | 6 | 1 |
| kinesis:CreateChannel | Tagging | 6 | 1 |
| kinesis:CreateStream | Write | 8 | 3 |
| kinesis:DecreaseStreamRetentionPeriod | Write | 6 | 1 |
| kinesis:DeleteChannel | Write | 6 | 1 |
| kinesis:DeleteResourcePolicy | Write | 6 | 1 |
| kinesis:DeleteStream | Write | 8 | 3 |
| kinesis:DeregisterStreamConsumer | Write | 6 | 1 |
| kinesis:DescribeAccountSettings | Read | 14 | 1 |
| kinesis:DescribeChannel | Read | 15 | 1 |
| kinesis:DescribeLimits | Read | 19 | 1 |
| kinesis:DescribeStream | Read | 31 | 6 |
| kinesis:DescribeStreamConsumer | Read | 19 | 2 |
| kinesis:DescribeStreamSummary | Read | 24 | 5 |
| kinesis:DisableEnhancedMonitoring | Write | 6 | 1 |
| kinesis:EnableEnhancedMonitoring | Write | 6 | 1 |
| kinesis:GetRecords | Read | 11 | 1 |
| kinesis:GetResourcePolicy | Read | 15 | 2 |
| kinesis:GetShardIterator | Read | 11 | 1 |
| kinesis:IncreaseStreamRetentionPeriod | Write | 6 | 1 |
| kinesis:InjectApiError | Write | 6 | 1 |
| kinesis:ListChannels | List | 15 | 1 |
| kinesis:ListShards | List | 17 | 1 |
| kinesis:ListStreamConsumers | List | 19 | 2 |
| kinesis:ListStreams | List | 40 | 3 |
| kinesis:ListTagsForResource | Read | 15 | 3 |
| kinesis:ListTagsForStream | Read | 20 | 4 |
| kinesis:MergeShards | Write | 7 | 2 |
| kinesis:PutRecord | Write | 13 | 6 |
| kinesis:PutRecords | Write | 8 | 7 |
| kinesis:PutResourcePolicy | Write | 6 | 1 |
| kinesis:RegisterStreamConsumer | Write | 6 | 1 |
| kinesis:RemoveTagsFromStream | Tagging | 7 | 1 |
| kinesis:SplitShard | Write | 7 | 2 |
| kinesis:StartStreamEncryption | Write | 6 | 1 |
| kinesis:StopStreamEncryption | Write | 6 | 1 |
| kinesis:SubscribeToShard | Read | 7 | 1 |
| kinesis:TagResource | Tagging | 6 | 1 |
| kinesis:UntagResource | Tagging | 6 | 1 |
| kinesis:UpdateAccountSettings | Write | 6 | 1 |
| kinesis:UpdateChannel | Write | 6 | 1 |
| kinesis:UpdateMaxRecordSize | Write | 6 | 1 |
| kinesis:UpdateShardCount | Write | 6 | 2 |
| kinesis:UpdateStreamMode | Write | 6 | 1 |
| kinesis:UpdateStreamRecordDistributionStrategy | Write | 6 | 1 |
| kinesis:UpdateStreamWarmThroughput | Write | 6 | 1 |