IAM permissions for Studio notebooks - Amazon Kinesis Data Analytics
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

IAM permissions for Studio notebooks

Kinesis Data Analytics creates an IAM role for you when you create a Studio notebook through the Amazon Web Services Management Console. It also associates with that role a policy that allows the following access:

Service Access

CloudWatch Logs

List

Amazon EC2

 List

Amazon Glue

 Read, Write

Kinesis Data Analytics

 Read

Kinesis Data Analytics V2

 Read

Amazon S3

 Read, Write