AWS kinesisvideostreams documentation change
Summary
Added example IAM policy and SNS resource policy JSON documents for notification permissions.
Security assessment
Adds examples of notification-related security policies but doesn't fix vulnerabilities. The policies show standard SNS publishing permissions and cross-account access configurations.
Diff
diff --git a/kinesisvideostreams/latest/dg/notifications.md b/kinesisvideostreams/latest/dg/notifications.md index 9ccf46911..be21e7f91 100644 --- a//kinesisvideostreams/latest/dg/notifications.md +++ b//kinesisvideostreams/latest/dg/notifications.md @@ -156,0 +157,28 @@ The IAM role or user that calls the `PutMedia` API must have `sns:Publish` permi +JSON + + +**** + + + + { + "Version":"2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "kinesisvideo:PutMedia", + "Resource": "arn:aws:kinesisvideo:us-east-1:123456789012:stream/*" + }, + { + "Effect": "Allow", + "Action": [ + "sns:Publish" + ], + "Resource": [ + "arn:aws:sns:us-east-1:123456789012:*" + ] + } + ] + } + + @@ -160,0 +189,24 @@ The Amazon SNS topic in the destination account must have a resource-based acces +JSON + + +**** + + + + { + "Version":"2012-10-17", + "Id": "__default_policy_ID", + "Statement": [ + { + "Sid": "__default_statement_ID", + "Effect": "Allow", + "Principal": { + "AWS": "arn:aws:iam::123456789012:root" + }, + "Action": "SNS:Publish", + "Resource": "arn:aws:sns:us-east-1:123456789012:topic-name" + } + ] + } + +