Product logo
DocsBlogPricing

Permissions for @turbot/aws-msk

Taking a look at permissions and associated grant levels for each permission for MSK:

PermissionGrant LevelHelp
ec2:DescribeAvailabilityZonesMetadata
ec2:DescribeSecurityGroupsMetadata
ec2:DescribeSubnetsMetadata
ec2:DescribeVpcsMetadata
health:DescribeEventAggregatesMetadata
kafka:BatchAssociateScramSecretOperator
kafka:BatchDisassociateScramSecretOperator
kafka:CreateClusterAdmin
kafka:CreateClusterV2Admin
kafka:CreateConfigurationAdmin
kafka:CreateVpcConnectionAdmin
kafka:DeleteClusterAdmin
kafka:DeleteClusterPolicyAdmin
kafka:DeleteConfigurationAdmin
kafka:DeleteVpcConnectionAdmin
kafka:DescribeClusterMetadata
kafka:DescribeClusterOperationMetadata
kafka:DescribeClusterOperationV2Metadata
kafka:DescribeClusterV2Metadata
kafka:DescribeConfigurationMetadata
kafka:DescribeConfigurationRevisionMetadata
kafka:DescribeVpcConnectionMetadata
kafka:GetBootstrapBrokersMetadata
kafka:GetClusterPolicyMetadata
kafka:GetCompatibleKafkaVersionsMetadata
kafka:ListClientVpcConnectionsMetadata
kafka:ListClusterOperationsMetadata
kafka:ListClusterOperationsV2Metadata
kafka:ListClustersMetadata
kafka:ListClustersV2Metadata
kafka:ListConfigurationRevisionsMetadata
kafka:ListConfigurationsMetadata
kafka:ListKafkaVersionsMetadata
kafka:ListNodesMetadata
kafka:ListScramSecretsMetadata
kafka:ListTagsForResourceMetadata
kafka:ListVpcConnectionsMetadata
kafka:PutClusterPolicyAdmin
kafka:RebootBrokerAdmin
kafka:RejectClientVpcConnectionAdmin
kafka:TagResourceAdmin
kafka:UntagResourceAdmin
kafka:UpdateBrokerCountAdmin
kafka:UpdateBrokerStorageAdmin
kafka:UpdateBrokerTypeAdmin
kafka:UpdateClusterConfigurationAdmin
kafka:UpdateClusterKafkaVersionAdmin
kafka:UpdateConfigurationAdmin
kafka:UpdateConnectivityAdmin
kafka:UpdateMonitoringAdmin
kafka:UpdateSecurityAdmin
kafka:UpdateStorageAdmin
kms:DescribeKeyMetadata