> For the complete documentation index, see [llms.txt](https://upsolver.gitbook.io/content/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://upsolver.gitbook.io/content/how-to-guides-1/connectors/configure-access/amazon-kinesis.md).

# Amazon Kinesis

In order to create an IAM role and a trust relationship, please visit the [Role Based AWS Credentials ](/content/how-to-guides-1/setup/deploy-upsolver-on-aws/role-based-aws-credentials.md)documentation, and use the following documentation to create the IAM policy with the required **Amazon Kinesis permissions**.

## Create an IAM policy with Amazon Kinesis permissions 

Upsolver requires the following permissions:

```
ListStreams
ListShards
GetShardIterator
GetRecords
DescribeStream
```

When creating an Amazon Kinesis connection in Upsolver, you can include the `STREAM_DISPLAY_FILTERS` property, which allows you to restrict the Amazon Kinesis streams that users can see in the Upsolver navigation tree. However, this does not limit the user’s ability to read objects; that is still managed by the permissions in the IAM role attached to the connection. This property is not to be used to restrict access to data.

If the `STREAMS_DISPLAY_FILTERS` property is omitted, Upsolver attempts to list all streams in the account. The available streams are listed in the Upsolver navigation tree to make it easier for users to discover datasets. For this to function correctly, Upsolver requires the IAM policy to include `kinesis:ListStreams`.

If `STREAMS_DISPLAY_FILTERS` is included when creating the Amazon Kinesis connection, you do not need to add the `kinesis:ListStreams` permission.

When creating the IAM policy, add the policy statements that allow Upsolver to access the data in your Amazon Kinesis:

```sql
{
	"Version": "2012-10-17",
	"Statement": [
    	{
        	"Effect": "Allow",
        	"Action": [
            	"kinesis:ListStreams"
        	],
        	"Resource": "*"
    	},
    	{
        	"Effect": "Allow",
        	"Action": [
                "kinesis:Get*",
                "kinesis:DescribeStream"
            ],
            "Resource": [
                "arn:aws:kinesis:us-east-1:111122223333:stream/stream1"
            ]
    	}
	]
}
```

***

{% hint style="success" %}
**Learn More**

To learn more about setting permissions for Amazon Kinesis, please read the [Controlling Access to Amazon Kinesis Data Streams Resources Using IAM](https://docs.aws.amazon.com/streams/latest/dev/controlling-access.html) guide from AWS.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://upsolver.gitbook.io/content/how-to-guides-1/connectors/configure-access/amazon-kinesis.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.