AWS Security ChangesHomeSearch

AWS kinesisvideostreams documentation change

Service: kinesisvideostreams · 2025-10-25 · Documentation medium

File: kinesisvideostreams/latest/dg/how-kms.md

Summary

Removed example IAM policies for KMS permissions required by producers/consumers

Security assessment

Removal of policy examples could reduce documentation clarity for encrypting streams, but doesn't directly indicate a security fix

Diff

diff --git a/kinesisvideostreams/latest/dg/how-kms.md b/kinesisvideostreams/latest/dg/how-kms.md
index bf8124661..3a66f53b8 100644
--- a//kinesisvideostreams/latest/dg/how-kms.md
+++ b//kinesisvideostreams/latest/dg/how-kms.md
@@ -113,21 +112,0 @@ Your Kinesis video stream producers must have the `kms:GenerateDataKey` permissi
-    
-    {
-      "Version": "2012-10-17",		 	 	 
-      "Statement": [
-        {
-            "Effect": "Allow",
-            "Action": [
-                "kms:GenerateDataKey"
-            ],
-            "Resource": "arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab"
-        }, 
-        {
-            "Effect": "Allow",
-            "Action": [
-                "kinesis-video:PutMedia",
-            ],
-            "Resource": "arn:aws:kinesis-video:*:123456789012:MyStream"
-        }
-      ]
-    }
-
@@ -138,21 +116,0 @@ Your Kinesis video stream consumers must have the `kms:Decrypt` permission:
-    
-    {
-      "Version": "2012-10-17",		 	 	 
-      "Statement": [
-        {
-            "Effect": "Allow",
-            "Action": [
-                "kms:Decrypt"
-            ],
-            "Resource": "arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab"
-        }, 
-        {
-            "Effect": "Allow",
-            "Action": [
-                "kinesis-video:GetMedia",
-            ],
-            "Resource": "arn:aws:kinesis-video:*:123456789012:MyStream"
-        }
-      ]
-    }
-