AWS fis documentation change
Summary
Added Amazon Kinesis Data Streams actions to FIS documentation, including error injection capabilities for ProvisionedThroughputExceededException and ExpiredIteratorException scenarios. Updated service parameters to include 'kinesis' alongside 'ec2' in multiple error injection actions.
Security assessment
The changes expand fault injection testing capabilities to Kinesis Data Streams but do not address any specific security vulnerability. This is a feature enhancement for resilience testing rather than a security fix or security feature documentation.
Diff
diff --git a/fis/latest/userguide/fis-actions-reference.md b/fis/latest/userguide/fis-actions-reference.md index 31f0fbad0..d6dd317e7 100644 --- a//fis/latest/userguide/fis-actions-reference.md +++ b//fis/latest/userguide/fis-actions-reference.md @@ -5 +5 @@ -Fault injection actionsRecovery actionWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon Aurora DSQL actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAWS Lambda actionsAmazon MemoryDB actionNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions +Fault injection actionsRecovery actionWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon Aurora DSQL actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAmazon Kinesis Data Streams actionsAWS Lambda actionsAmazon MemoryDB actionNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions @@ -38,0 +39,2 @@ For more information on how AWS FIS actions work, see [Actions for AWS FIS](./ac + * Amazon Kinesis Data Streams actions + @@ -92 +94 @@ Injects Internal Errors into requests made by the the target IAM role. The speci - * **service** – The target AWS API namespace. The supported value is `ec2`. + * **service** – The target AWS API namespace. The supported value is `ec2` and `kinesis`. @@ -96 +98 @@ Injects Internal Errors into requests made by the the target IAM role. The speci - * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Actions](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) in the _Amazon EC2 API Reference_. + * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Amazon EC2 API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) and [Amazon Kinesis Data Streams API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_Operations.html). @@ -123 +125 @@ Injects throttling errors into requests made by the target IAM role. The specifi - * **service** – The target AWS API namespace. The supported value is `ec2`. + * **service** – The target AWS API namespace. The supported value is `ec2` and `kinesis`. @@ -127 +129 @@ Injects throttling errors into requests made by the target IAM role. The specifi - * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Actions](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) in the _Amazon EC2 API Reference_. + * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Amazon EC2 API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) and [Amazon Kinesis Data Streams API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_Operations.html). @@ -154 +156 @@ Injects Unavailable errors into requests made by the target IAM role. The specif - * **service** – The target AWS API namespace. The supported value is `ec2`. + * **service** – The target AWS API namespace. The supported value is `ec2` and `kinesis`. @@ -158 +160 @@ Injects Unavailable errors into requests made by the target IAM role. The specif - * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Actions](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) in the _Amazon EC2 API Reference_. + * **operations** – The operations to inject the fault into, separated using commas. For a list of the API actions for the `ec2` namespace, see [Amazon EC2 API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Operations.html) and [Amazon Kinesis Data Streams API Reference](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_Operations.html). @@ -1569,0 +1572,67 @@ The ElastiCache interrupt AZ power action now supports all replication group typ +## Amazon Kinesis Data Streams actions + +Amazon Kinesis Data Streams supports the following Kinesis actions. + +###### Actions + + * aws:kinesis:stream-provisioned-throughput-exception + + * aws:kinesis:stream-expired-iterator-exception + + + + +### aws:kinesis:stream-provisioned-throughput-exception + +Injects `ProvisionedThroughputExceededException` error responses on requests for the targeted Kinesis Data Streams. Supported operations include: `GetRecords`, `GetShardIterator`, `PutRecord`, and `PutRecords`. + +###### Resource type + + * **aws:kinesis:stream** + + + + +###### Parameters + + * **duration** – The duration, which ranges from one minute to 12 hours. In the AWS FISAPI, the value is a string in ISO 8601 format. For example, PT1M represents one minute. In the AWS FIS console, you enter the number of seconds, minutes, or hours. + + * **percentage** – The percentage (1-100) of calls to inject the fault into. + + + + +###### Permissions + + * `kinesis:InjectApiError` + + + + +### aws:kinesis:stream-expired-iterator-exception + +Injects `ExpiredIteratorException` error responses for `GetRecords` calls targeting specified Kinesis Data Streams. + +###### Resource type + + * **aws:kinesis:stream** + + + + +###### Parameters + + * **duration** – The duration, which ranges from one minute to 12 hours. In the AWS FISAPI, the value is a string in ISO 8601 format. For example, PT1M represents one minute. In the AWS FIS console, you enter the number of seconds, minutes, or hours. + + * **percentage** – The percentage (1-100) of calls to inject the fault into. + + + + +###### Permissions + + * `kinesis:InjectApiError` + + + +