Kinesis Stream Permissions for Producers | AWS Certified Security - Specialty

Kinesis Stream Permissions for Producers

Question

Your team is developing an application that will make use of Kinesis streams.

Which of the following permissions need to be given to the producers for the streams? Choose 2 answers from the options given below.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - A and C.

Option A is CORRECT because DescribeStream is used for the producer to check if the stream exists and is active.

Option C is CORRECT because PutRecord is used for the producer to write records to Kinesis Data Streams.

Options B and D are incorrect because either GetStream or GetRecords is used for the Kinesis streams consumer instead of producer.

For more information on the policies that need to be assigned, please refer to the below URL.

https://docs.aws.amazon.com/streams/latest/dev/tutorial-stock-data-kplkcl-iam.html

When using Amazon Kinesis streams, producers need certain permissions to be able to produce data to the stream. Two of these permissions are:

  1. PutRecord: This permission is required to put a single data record into a Kinesis stream. This is the basic operation that producers will use to add data to the stream.

  2. DescribeStream: This permission is required to describe the details of a Kinesis stream, such as its name, status, number of shards, and so on. This can be useful for producers to know before they begin adding data to the stream.

The other two options, GetStream and GetRecords, are not relevant for producers. These permissions are used by consumers to retrieve data from a Kinesis stream.

To summarize, the correct answers are A. DescribeStream and C. PutRecord.