serverless-apigateway-service-proxy icon indicating copy to clipboard operation
serverless-apigateway-service-proxy copied to clipboard

Published 20 hours ago • verified publisher icon serverless-operations

Support server-side encryption for Kinesis stream

Open redcordlau opened this issue 5 years ago • 1 comments

If we enabled server-side encryption in Kinesis resource, the compiled IAM policy has not sufficient rights to do the putRecord(s), result in "__type": "KMSAccessDeniedException", "message": "User: arn:aws:sts::xxxxxxxxx:assumed-role/xxxxxxxxxxxxx is not authorized to perform: kms:GenerateDataKey on resource: arn:aws:kms:xxxxxxx:xxxxxx:key/xxxxxxxxxxxxxx"

redcordlau avatar Sep 04 '20 07:09 redcordlau

Is the only workaround currently for this to use a custom iam role?

codezninja avatar Dec 13 '22 09:12 codezninja