Is it possible to ingest data using Kinesis Data streams without creating an IAM user?

0

I was looking at ways in which we can ingest data using Kinesis data streams without creating an IAM user & generating access & security tokens. Possible alternatives I have found include:

  1. Let api gateway assume a role with correct permissions & use it to send data. I think this might be prohibitively expensive. Any insights?
  2. Generate temporary credentials using STS & send it to end user. Drawback would be needing to replace credentials every now and then.
  3. Maybe use anonymous users functionality in Cognito identity pool & allow access to Kinesis that way. Not sure if this is even viable.

Any insight would be very valuable. Thanks in advance!

2개 답변
0
  1. using IoT Core
    You can use IoT Core rules to work with Kinesis. In this case, you need a device certificate.
    https://docs.aws.amazon.com/iot/latest/developerguide/kinesis-rule-action.html

  2. use device certificate to get STS
    https://docs.aws.amazon.com/iot/latest/developerguide/authorizing-direct-aws.html This also uses a device certificate, but you can get an STS token to access Kinesis directly.  

  3. use Lambda function URLs
    https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html
    Lambda function URLs can be made without authentication, so it is possible to call Kinesis from Lambda. We do not know if it can withstand high loads or how much it will cost.

  4. Using AWS SigV4 Proxy
    https://github.com/awslabs/aws-sigv4-proxy No authentication information is required for the application, but authentication information is required for the Proxy.

Sorry, I couldn't come up with a good idea. 😥😥.

profile picture
답변함 2년 전
0

Using AWS Lambda to process Kinesis Data Streams is a way to do this. You can specify the permissions in the IAM Role assigned to the Lambda function. See: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html

profile pictureAWS
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠