AWS kinesisvideostreams-webrtc-dg documentation change

Service: kinesisvideostreams-webrtc-dg · 2026-02-16 · Documentation low

File: kinesisvideostreams-webrtc-dg/latest/devguide/ingestion-grant-permission.md

Summary

Added example IAM policy JSON document for WebRTC master participants.

Security assessment

Adds concrete example of WebRTC permission policy but doesn't address vulnerabilities. The policy demonstrates standard signaling and media access permissions.

Diff

diff --git a/kinesisvideostreams-webrtc-dg/latest/devguide/ingestion-grant-permission.md b/kinesisvideostreams-webrtc-dg/latest/devguide/ingestion-grant-permission.md
index 4f82d7890..5432d9ca5 100644
--- a//kinesisvideostreams-webrtc-dg/latest/devguide/ingestion-grant-permission.md
+++ b//kinesisvideostreams-webrtc-dg/latest/devguide/ingestion-grant-permission.md
@@ -16,0 +17,35 @@ Refer to the sample IAM policy below for Master participants:
+JSON
+    
+
+****
+    
+    
+    
+    {
+      "Version":"2012-10-17",		 	 	 
+      "Statement": [
+        {
+          "Effect": "Allow",
+          "Action": [
+            "kinesisvideo:DescribeSignalingChannel",
+            "kinesisvideo:DescribeMediaStorageConfiguration",
+            "kinesisvideo:GetSignalingChannelEndpoint",
+            "kinesisvideo:GetIceServerConfig",
+            "kinesisvideo:ConnectAsMaster",
+            "kinesisvideo:JoinStorageSession"
+          ],
+          "Resource": "arn:aws:kinesisvideo:us-west-2:123456789012:channel/SignalingChannelName/1234567890123"
+        },
+        {
+          "Effect": "Allow",
+          "Action": [
+            "kinesisvideo:GetDataEndpoint",
+            "kinesisvideo:DescribeStream",
+            "kinesisvideo:PutMedia"
+          ],
+          "Resource": "arn:aws:kinesisvideo:us-west-2:123456789012:stream/VideoStreamName/1234567890123"
+        }
+      ]
+    }
+    
+