Kinesis permissions

stevebux · stevebux · commit 7340d6f752ae · 2026-02-16T13:02:06.000Z
diff --git a/infrastructure/terraform/components/api/module_lambda_update_letter_queue.tf b/infrastructure/terraform/components/api/module_lambda_update_letter_queue.tf
@@ -61,6 +61,11 @@ data "aws_iam_policy_document" "update_letter_queue_lambda" {
 
     actions = [
       "kinesis:GetRecords",
+      "kinesis:GetShardIterator",
+      "kinesis:DescribeStream",
+      "kinesis:DescribeStreamSummary",
+      "kinesis:ListShards",
+      "kinesis:ListStreams",
     ]
 
     resources = [
