Amazon Managed Streaming for Apache Kafka (kafka)

Additions

Actions

• CreateReplicator
  
  • Description:  Grants permission to create a MSK replicator
  • Access:  Write
  • Resources: 

    Name: replicator

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

  • Dependents: 

    ec2:DescribeSecurityGroups

    ec2:DescribeSubnets

    ec2:DescribeVpcs

    iam:AttachRolePolicy

    iam:CreateServiceLinkedRole

    iam:PassRole

    iam:PutRolePolicy

    kafka:DescribeClusterV2

    kafka:GetBootstrapBrokers

• DeleteReplicator
  
  • Description:  Grants permission to delete a MSK replicator
  • Access:  Write
  • Resources: 

    Name: replicator

    Required: Yes

• DescribeReplicator
  
  • Description:  Grants permission to describe a MSK replicator
  • Access:  Read
  • Resources: 

    Name: replicator

    Required: Yes

• ListReplicators
  
  • Description:  Grants permission to list all MSK replicators in this account
  • Access:  List
• UpdateReplicationInfo
  
  • Description:  Grants permission to update the replication info of the MSK replicator
  • Access:  Write
  • Resources: 

    Name: replicator

    Required: Yes

Resources

• replicator
  
  • Arn:  arn:${Partition}:kafka:${Region}:${Account}:replicator/${ReplicatorName}/${Uuid}
  • Conditions: 

    aws:ResourceTag/${TagKey}