kafka:UpdateStorage

Write

kafka:UpdateStorage is a Write access-level action in the kafka service. Grants permission to update the EBS storage (size or provisioned throughput) associated with MSK brokers or set cluster storage mode to TIERED

Resource types

ARNs that kafka:UpdateStorage can be scoped to in an IAM policy.

arn:${Partition}:kafka:${Region}:${Account}:cluster/${ClusterName}/${Uuid}

cluster

Condition keys

Keys you can use in the Condition block of a policy that grants kafka:UpdateStorage.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows kafka:UpdateStorage. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKafkaUpdateStorage",
      "Effect": "Allow",
      "Action": "kafka:UpdateStorage",
      "Resource": "*"
    }
  ]
}

Related actions in kafka

kafka:BatchAssociateScramSecret Write kafka:BatchDisassociateScramSecret Write kafka:CreateCluster Write kafka:CreateClusterV2 Write kafka:CreateConfiguration Write kafka:CreateReplicator Write kafka:CreateTopic Write kafka:CreateVpcConnection Write kafka:DeleteCluster Write kafka:DeleteClusterPolicy Write kafka:DeleteConfiguration Write kafka:DeleteReplicator Write

View all kafka actions →