Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Kinesis Video Streams

Amazon Kinesis Video Streams (service prefix: kinesisvideo) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Kinesis Video Streams
Actions defined by Amazon Kinesis Video Streams
Resource types defined by Amazon Kinesis Video Streams
Condition keys for Amazon Kinesis Video Streams

API operations defined by Amazon Kinesis Video Streams

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Access level
GetClip	kinesis-video-archived-media	kinesisvideo:GetClip	Read
GetDASHStreamingSessionURL	kinesis-video-archived-media	kinesisvideo:GetDASHStreamingSessionURL	Read
GetHLSStreamingSessionURL	kinesis-video-archived-media	kinesisvideo:GetHLSStreamingSessionURL	Read
GetImages	kinesis-video-archived-media	kinesisvideo:GetImages	Read
GetMediaForFragmentList	kinesis-video-archived-media	kinesisvideo:GetMediaForFragmentList	Read
ListFragments	kinesis-video-archived-media	kinesisvideo:ListFragments	List
GetMedia	kinesis-video-media	kinesisvideo:GetMedia	Read
GetIceServerConfig	kinesis-video-signaling	kinesisvideo:GetIceServerConfig	Read
SendAlexaOfferToMaster	kinesis-video-signaling	kinesisvideo:SendAlexaOfferToMaster	Write
JoinStorageSession	kinesis-video-webrtc-storage	kinesisvideo:JoinStorageSession	Write
JoinStorageSessionAsViewer	kinesis-video-webrtc-storage	kinesisvideo:JoinStorageSessionAsViewer	Write
CreateSignalingChannel	kinesisvideo	kinesisvideo:CreateSignalingChannel	Write
CreateSignalingChannel	kinesisvideo	kinesisvideo:TagResource	Tagging, Write
CreateStream	kinesisvideo	kinesisvideo:CreateStream	Write
CreateStream	kinesisvideo	kinesisvideo:TagStream	Tagging, Write
DeleteEdgeConfiguration	kinesisvideo	kinesisvideo:DeleteEdgeConfiguration	Write
DeleteSignalingChannel	kinesisvideo	kinesisvideo:DeleteSignalingChannel	Write
DeleteStream	kinesisvideo	kinesisvideo:DeleteStream	Write
DescribeEdgeConfiguration	kinesisvideo	kinesisvideo:DescribeEdgeConfiguration	Read
DescribeImageGenerationConfiguration	kinesisvideo	kinesisvideo:DescribeImageGenerationConfiguration	Read
DescribeMappedResourceConfiguration	kinesisvideo	kinesisvideo:DescribeMappedResourceConfiguration	List
DescribeMediaStorageConfiguration	kinesisvideo	kinesisvideo:DescribeMediaStorageConfiguration	Read
DescribeNotificationConfiguration	kinesisvideo	kinesisvideo:DescribeNotificationConfiguration	Read
DescribeSignalingChannel	kinesisvideo	kinesisvideo:DescribeSignalingChannel	List
DescribeStream	kinesisvideo	kinesisvideo:DescribeStream	List
DescribeStreamStorageConfiguration	kinesisvideo	kinesisvideo:DescribeStreamStorageConfiguration	Read
GetDataEndpoint	kinesisvideo	kinesisvideo:GetDataEndpoint	Read
GetSignalingChannelEndpoint	kinesisvideo	kinesisvideo:GetSignalingChannelEndpoint	Read
ListEdgeAgentConfigurations	kinesisvideo	kinesisvideo:ListEdgeAgentConfigurations	List
ListSignalingChannels	kinesisvideo	kinesisvideo:ListSignalingChannels	List
ListStreams	kinesisvideo	kinesisvideo:ListStreams	List
ListTagsForResource	kinesisvideo	kinesisvideo:ListTagsForResource	Read
ListTagsForStream	kinesisvideo	kinesisvideo:ListTagsForStream	Read
StartEdgeConfigurationUpdate	kinesisvideo	kinesisvideo:StartEdgeConfigurationUpdate	Write
TagResource	kinesisvideo	kinesisvideo:TagResource	Tagging, Write
TagStream	kinesisvideo	kinesisvideo:TagStream	Tagging, Write
UntagResource	kinesisvideo	kinesisvideo:UntagResource	Tagging, Write
UntagStream	kinesisvideo	kinesisvideo:UntagStream	Tagging, Write
UpdateDataRetention	kinesisvideo	kinesisvideo:UpdateDataRetention	Write
UpdateImageGenerationConfiguration	kinesisvideo	kinesisvideo:UpdateImageGenerationConfiguration	Write
UpdateMediaStorageConfiguration	kinesisvideo	kinesisvideo:UpdateMediaStorageConfiguration	Write
UpdateNotificationConfiguration	kinesisvideo	kinesisvideo:UpdateNotificationConfiguration	Write
UpdateSignalingChannel	kinesisvideo	kinesisvideo:UpdateSignalingChannel	Write
UpdateStream	kinesisvideo	kinesisvideo:UpdateStream	Write
UpdateStreamStorageConfiguration	kinesisvideo	kinesisvideo:UpdateStreamStorageConfiguration	Write

Actions defined by Amazon Kinesis Video Streams

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
ConnectAsMaster	Grants permission to connect as a master to the signaling channel specified by the endpoint	channel*	aws:ResourceTag/${TagKey}	Write
ConnectAsViewer	Grants permission to connect as a viewer to the signaling channel specified by the endpoint	channel*	aws:ResourceTag/${TagKey}	Write
CreateSignalingChannel	Grants permission to create a signaling channel	channel*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateStream	Grants permission to create a Kinesis video stream	stream*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteEdgeConfiguration	Grants permission to delete the edge configuration of your Kinesis Video Stream	stream*	aws:ResourceTag/${TagKey}	Write
DeleteSignalingChannel	Grants permission to delete an existing signaling channel	channel*	aws:ResourceTag/${TagKey}	Write
DeleteStream	Grants permission to delete an existing Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
DescribeEdgeConfiguration	Grants permission to describe the edge configuration of your Kinesis Video Stream	stream*	aws:ResourceTag/${TagKey}	Read
DescribeImageGenerationConfiguration	Grants permission to describe the image generation configuration of your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Read
DescribeMappedResourceConfiguration	Grants permission to describe the resource mapped to the Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	List
DescribeMediaStorageConfiguration	Grants permission to describe the media storage configuration of a signaling channel	channel*	aws:ResourceTag/${TagKey}	Read
DescribeNotificationConfiguration	Grants permission to describe the notification configuration of your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Read
DescribeSignalingChannel	Grants permission to describe the specified signaling channel	channel*	aws:ResourceTag/${TagKey}	List
DescribeStream	Grants permission to describe the specified Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	List
DescribeStreamStorageConfiguration	Grants permission to describe the stream storage configuration of your Kinesis Video Stream	stream*	aws:ResourceTag/${TagKey}	Read
GetClip	Grants permission to get a media clip from a video stream	stream*	aws:ResourceTag/${TagKey}	Read
GetDASHStreamingSessionURL	Grants permission to create a URL for MPEG-DASH video streaming	stream*	aws:ResourceTag/${TagKey}	Read
GetDataEndpoint	Grants permission to get an endpoint for a specified stream for either reading or writing media data to Kinesis Video Streams	stream*	aws:ResourceTag/${TagKey}	Read
GetHLSStreamingSessionURL	Grants permission to create a URL for HLS video streaming	stream*	aws:ResourceTag/${TagKey}	Read
GetIceServerConfig	Grants permission to get the ICE server configuration	channel*	aws:ResourceTag/${TagKey}	Read
GetImages	Grants permission to get generated images from your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Read
GetMedia	Grants permission to return media content of a Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Read
GetMediaForFragmentList	Grants permission to read and return media data only from persisted storage	stream*	aws:ResourceTag/${TagKey}	Read
GetSignalingChannelEndpoint	Grants permission to get endpoints for a specified combination of protocol and role for a signaling channel	channel*	aws:ResourceTag/${TagKey}	Read
JoinStorageSession	Grants permission to join a storage session for a channel	channel*	aws:ResourceTag/${TagKey}	Write
JoinStorageSessionAsViewer	Grants permission to join a storage session for a channel as viewer	channel*	aws:ResourceTag/${TagKey}	Write
ListEdgeAgentConfigurations	Grants permission to list an edge agent configurations			List
ListFragments	Grants permission to list the fragments from archival storage based on the pagination token or selector type with range specified	stream*	aws:ResourceTag/${TagKey}	List
ListSignalingChannels	Grants permission to list your signaling channels			List
ListStreams	Grants permission to list your Kinesis video streams			List
ListTagsForResource	Grants permission to fetch the tags associated with your resource	channel	aws:ResourceTag/${TagKey}	Read
ListTagsForResource		stream	aws:ResourceTag/${TagKey}	Read
ListTagsForStream	Grants permission to fetch the tags associated with Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Read
PutMedia	Grants permission to send media data to a Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
SendAlexaOfferToMaster	Grants permission to send the Alexa SDP offer to the master	channel*	aws:ResourceTag/${TagKey}	Write
StartEdgeConfigurationUpdate	Grants permission to start edge configuration update of your Kinesis Video Stream	stream*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to attach set of tags to your resource	channel	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource	Grants permission to attach set of tags to your resource	stream	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagStream	Grants permission to attach set of tags to your Kinesis video streams	stream*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove one or more tags from your resource	channel	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource		stream	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagStream	Grants permission to remove one or more tags from your Kinesis video streams	stream*	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateDataRetention	Grants permission to update the data retention period of your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
UpdateImageGenerationConfiguration	Grants permission to update the image generation configuration of your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
UpdateMediaStorageConfiguration	Grants permission to create or update an mapping between a signaling channel and stream	channel*	aws:ResourceTag/${TagKey}	Write
UpdateNotificationConfiguration	Grants permission to update the notification configuration of your Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
UpdateSignalingChannel	Grants permission to update an existing signaling channel	channel*	aws:ResourceTag/${TagKey}	Write
UpdateStream	Grants permission to update an existing Kinesis video stream	stream*	aws:ResourceTag/${TagKey}	Write
UpdateStreamStorageConfiguration	Grants permission to update the stream storage configuration of your Kinesis Video Stream	stream*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Kinesis Video Streams

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
channel	arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/${ChannelName}/${CreationTime}	aws:ResourceTag/${TagKey}
stream	arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/${StreamName}/${CreationTime}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Kinesis Video Streams

Amazon Kinesis Video Streams defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters requests based on the allowed set of values for each of the tags	String
aws:ResourceTag/${TagKey}	Filters actions based on tag-value assoicated with the stream	String
aws:TagKeys	Filters requests based on the presence of mandatory tag keys in the request	ArrayOfString

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon Kinesis Firehose (firehose)

Amazon Managed Streaming for Apache Kafka (kafka)