Amazon Kinesis sink connector

Use the Amazon Kinesis Connector to send data from Decodable into Amazon Kinesis. If you are looking for information about how to get data from Amazon Kinesis into Decodable, see Amazon Kinesis source connector in the Connect to a data source chapter.


Delivery guarantee

At least once


Before you can get data from Amazon Kinesis, the following requirements must be met:

AWS permissions for getting data from Amazon Kinesis Streams

AWS IAM uses an ExternalId to grant third-parties like Decodable access to your AWS resources. In order for Decodable to connect to your Kinesis stream, you will need:

  • An IAM Role with two policies:

    • An AssumeRole Trust Policy allowing access from Decodable’s AWS account. Make sure that the ExternalId matches your unique Decodable account name and that the Principal is 671293015970. This is Decodable’s AWS Account ID. The following snippet is an example of a trust policy. You can replace <My_Decodable_Account> with the name of your unique Decodable account.

      • NOTE: Make sure you are supplying your unique Decodable account name to the Trust Policy. This is different from the account’s display name. Your unique Decodable account name will be all lowercase and contain no spaces.

          "Version": "2012-10-17",
          "Statement": [
              "Effect": "Allow",
              "Principal": {
                "AWS": "arn:aws:iam::671293015970:root"
              "Action": "sts:AssumeRole",
              "Condition": {
                "StringEquals": {
                  "sts:ExternalId": "<My_Decodable_Account>"
    • A Permissions Policy with the needed permissions on your stream. The following snippet is an example of a permissions policy that allows full access to your Kinesis stream. You can also restrict the permissions for specific Kinesis streams by specifying a Kinesis ARN instead of the wildcard *. You can also list out specific action permissions. For more information, see Controlling Access to Amazon Kinesis Data Streams Resources Using IAM.

        "Version": "2012-10-17",
        "Statement": [
            "Effect": "Allow",
            "Action": "kinesis:*",
            "Resource": "*"
  • The ARN of this Role. Decodable will ask you for the ARN of your IAM Role as part of connection creation.

Our servers will assume that role by using an ExternalId value matching your unique Decodable account name. We’ll use that to talk to your bucket.

The values of your ExternalId, Role ARN, or bucket names aren’t treated as a secret by Decodable or AWS. Anyone with permissions to view these values will be able to see them.


If you want to use the Decodable CLI or API to create the connection, you can refer to the Property Name column for information about what the underlying property names are. The connector name is kinesis.
  1. From the Connections page, select Amazon Kinesis and complete the following fields.

    UI Field Property Name Description

    Connection Type


    Select Source to use this connector to get data into Decodable.

    Stream Name


    The name of the stream that you want to receive data from.

    AWS Region


    The region that the stream is located in.

    IAM Role ARN


    The AWS ARN of the IAM Role that you configured as part of the prerequisites.

    Value Format


    The format of the data in the stream. Must be json.

  2. Select the stream that you’d like to connect to this connector. Then, select Next.

  3. Define the connection’s schema. Select New Schema to manually enter the fields and field types present or Import Schema if you want to paste the schema in the form of an Avro or JSON array.

    1. The stream’s schema must match the schema of the data that you plan on sending through this connection.

    2. For more information about creating a stream or defining the stream schema, see Create and manage Streams.

  4. Select Next when you are finished providing defining the connection’s schema.

  5. Give the newly created connection a Name and Description and select Save.