fix(kinesis): read permissions for stream do not include kinesis:DescribeStreamConsumer

[watany-dev]

reopen 22727

Grant Read(Write) Permission Action

"kinesis:DescribeStreamConsumer"
It appears that the following actions had already been added

"kinesis:SubscribeToShard",
ref. https://docs.aws.amazon.com/streams/latest/dev/tutorial-stock-data-kplkcl2-iam.html

Fixes #22184

---

All Submissions:

• Have you followed the guidelines in our Contributing guide?

Adding new Unconventional Dependencies:

• This PR adds new unconventional dependencies following the process described here

New Features

• Have you added the new feature to an integration test?
  • Did you use yarn integ to deploy the infrastructure and generate the snapshot (i.e. yarn integ without --dry-run)?

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[gitpod-io]

[watany-dev]

The reason the build is failing is because Firehose's integ test depends on Kinesis.
I have attempted to resolve this, but am getting an obscure error and am having trouble parsing it.

Subprocess exited with error 1
  FAILED     integ.delivery-stream.source-stream-integ.delivery-stream.source-stream (undefined/us-east-1) 8.534s
      Integration test failed: Error: Command exited with status 1

Test Results: 

Tests:    1 failed, 1 total
Error: Some integration tests failed!
    at main (/workspace/aws-cdk/packages/@aws-cdk/integ-runner/lib/cli.js:105:23)
/workspace/aws-cdk/packages/@aws-cdk/core/lib/private/refs.js:146
            throw e;
            ^

Error: Resolution error: Resolution error: Resolution error: Resolution error: Context value '@aws-cdk/core:target-partitions' should be a list of strings, got: "@aws-cdk/core:target-partitions".

[TheRealAmazonKendra]

@Mergifyio update

[mergify]

update

✅ Branch has been successfully updated

[TheRealAmazonKendra]

This line is the issue

@aws-cdk/aws-kinesisfirehose:             [+]     "kinesis:DescribeStreamConsumer",

The permission needs to be added to the failing test. Re-run that test with --update-on-failed.

[watany-dev]

Hmmm, kinesis* has been taken care of, but event-target. I guess I still have to go through the full build integ

[watany-dev]

The integ test seems to have passed successfully

[mrgrain]

@Mergifyio update

[mergify]

update

✅ Branch has been successfully updated

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

[mrgrain]

Added pr-linter/exempt-integ-test since integ tests are updated and a change to a test case is not required here.

✅ Updated pull request passes all PRLinter validations. Dissmissing previous PRLinter review.

[mrgrain]

👍🏻

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: a86ee31
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).