Amazon Managed Streaming for Kafka Connect (kafkaconnect)

2021-09-18

11 new actions, 3 new resources

Additions

    Actions
  • CreateConnector
    • Description:  Grants permission to create an MSK Connect connector
    • Access:  Write
    • Dependents: 

      ec2:CreateNetworkInterface

      ec2:DescribeSecurityGroups

      ec2:DescribeSubnets

      ec2:DescribeVpcs

      firehose:TagDeliveryStream

      iam:AttachRolePolicy

      iam:CreateServiceLinkedRole

      iam:PassRole

      iam:PutRolePolicy

      logs:CreateLogDelivery

      logs:DescribeLogGroups

      logs:DescribeResourcePolicies

      logs:GetLogDelivery

      logs:ListLogDeliveries

      logs:PutResourcePolicy

      s3:GetBucketPolicy

      s3:PutBucketPolicy

  • CreateCustomPlugin
    • Description:  Grants permission to create an MSK Connect custom plugin
    • Access:  Write
    • Dependents: 

      s3:GetObject

  • CreateWorkerConfiguration
    • Description:  Grants permission to create an MSK Connect worker configuration
    • Access:  Write
  • DeleteConnector
    • Description:  Grants permission to delete an MSK Connect connector
    • Access:  Write
    • Dependents: 

      logs:DeleteLogDelivery

      logs:ListLogDeliveries

  • DescribeConnector
    • Description:  Grants permission to describe an MSK Connect connector
    • Access:  Read
  • DescribeCustomPlugin
    • Description:  Grants permission to describe an MSK Connect custom plugin
    • Access:  Read
  • DescribeWorkerConfiguration
    • Description:  Grants permission to describe an MSK Connect worker configuration
    • Access:  Read
  • ListConnectors
    • Description:  Grants permission to list all MSK Connect connectors in this account
    • Access:  Read
  • ListCustomPlugins
    • Description:  Grants permission to list all MSK Connect custom plugins in this account
    • Access:  Read
  • ListWorkerConfigurations
    • Description:  Grants permission to list all MSK Connect worker configurations in this account
    • Access:  Read
  • UpdateConnector
    • Description:  Grants permission to update an MSK Connect connector
    • Access:  Write
    Resources
  • connector
    • Arn:  arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/${ConnectorName}/${UUID}
  • custom plugin
    • Arn:  arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/${CustomPluginName}/${UUID}
  • worker configuration
    • Arn:  arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/${WorkerConfigurationName}/${UUID}