To use Amazon Kinesis Streams as sources, grant required permissions to the user. To use cross-account IAM role, create an IAM role and grant access to the role.
To configure access for Amazon Kinesis Streams as a source, perform the following tasks :
Grant consumer permissions that are part of the IAM policy to the AWS credentials that the IAM user specifies in the access key id.
Grant the following permissions to the user to fetch metadata:
kinesis:DescribeStream
kinesis:GetShardIterator
kinesis:GetRecords
To use cross-account IAM role, create an IAM role in an AWS account. IAM roles are used to provide secure access to AWS resources. The role is used to establish a trusted relationship between various AWS accounts. Additional restrictions are enforced using an external ID and the IAM role can only be assumed by using the external ID if the external ID is specified for a cross-account IAM role.