- Effect: Allow
    Action: 
    - s3:ListBucket
    Resource:
    - arn:aws:s3:::{{codeBucket}}
    - arn:aws:s3:::amazon-reviews-pds
  - Effect: Allow
    Action:
    - s3:PutObject
    - s3:GetObject
    Resource:
    - arn:aws:s3:::{{codeBucket}}/*
    - arn:aws:s3:::amazon-reviews-pds/parquet/*
  - Effect: Allow
    Action:
    - s3:DeleteObject
    Resource:
    - arn:aws:s3:::{{codeBucket}}/*
  - Effect: Allow
    Action:
    - kms:Encrypt
    - kms:Decrypt
    - kms:GenerateDataKey*
    - kms:DescribeKey
    Resource:
      - '*'  
  - Effect: Allow
    Action:    
    - logs:PutLogEvents
    - logs:CreateLogStream
    - logs:DescribeLogGroups
    - logs:DescribeLogStreams
    Resource:
    - arn:aws:logs:*:*:*
  - Effect: Allow
    Action:
    - kinesis:CreateStream
    - kinesis:PutRecord
    - kinesis:List*
    - kinesis:Get*
    - kinesis:DeleteStream
    Resource:
      - '*'