AWS managed policy: AmazonChimeSDKMediaPipelinesServiceLinkedRolePolicy - Amazon Chime SDK

AWS managed policy: AmazonChimeSDKMediaPipelinesServiceLinkedRolePolicy

You can't attach the AmazonChimeSDKMediaPipelinesServiceLinkedRolePolicy to your IAM entities.

This policy allows Kinesis Video Streams to stream data to Amazon Chime SDK meetings and publish metrics to CloudWatch. It also allows Amazon Chime SDK media pipelines to access Amazon Chime SDK meetings on your behalf. For more information, see Using roles with Amazon Chime SDK media pipelines in this guide.

Permissions details

This policy includes the following permissions.

  • cloudwatch – Grants permission to put CloudWatch metrics.

  • kinesisvideo – Grants permissions to get data endpoints, put media, update data retention intervals, describe data streams, create data streams, and list data streams.

  • chime – Grants permissions to get meetings, create attendees, and delete attendees.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowPutMetricsForChimeSDKNamespace",
            "Effect": "Allow",
            "Action": "cloudwatch:PutMetricData",
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "cloudwatch:namespace": "AWS/ChimeSDK"
                }
            }
        },
        {
            "Sid": "AllowKinesisVideoStreamsAccess",
            "Effect": "Allow",
            "Action": [
                "kinesisvideo:GetDataEndpoint",
                "kinesisvideo:PutMedia",
                "kinesisvideo:UpdateDataRetention",
                "kinesisvideo:DescribeStream",
                "kinesisvideo:CreateStream"
            ],
            "Resource": [
                "arn:aws:kinesisvideo:*:*:stream/ChimeMediaPipelines-*"
            ]
        },
        {
            "Sid": "AllowKinesisVideoStreamsListAccess",
            "Effect": "Allow",
            "Action": [
                "kinesisvideo:ListStreams"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "AllowChimeMeetingAccess",
            "Effect": "Allow",
            "Action": [
                "chime:GetMeeting",
                "chime:CreateAttendee",
                "chime:DeleteAttendee"
            ],
            "Resource": "*"
        }
    ]
}