kafkaconnect:DescribeCustomPlugin

Read

kafkaconnect:DescribeCustomPlugin is a Read access-level action in the kafkaconnect service. Grants permission to describe an MSK Connect custom plugin

Resource types

ARNs that kafkaconnect:DescribeCustomPlugin can be scoped to in an IAM policy.

arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/${CustomPluginName}/${UUID}
custom plugin

Condition keys

Keys you can use in the Condition block of a policy that grants kafkaconnect:DescribeCustomPlugin.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows kafkaconnect:DescribeCustomPlugin. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKafkaconnectDescribeCustomPlugin",
      "Effect": "Allow",
      "Action": "kafkaconnect:DescribeCustomPlugin",
      "Resource": "*"
    }
  ]
}

Related actions in kafkaconnect

kafkaconnect:CreateConnector Write kafkaconnect:CreateCustomPlugin Write kafkaconnect:CreateWorkerConfiguration Write kafkaconnect:DeleteConnector Write kafkaconnect:DeleteCustomPlugin Write kafkaconnect:DeleteWorkerConfiguration Write kafkaconnect:DescribeConnector Read kafkaconnect:DescribeConnectorOperation Read kafkaconnect:DescribeWorkerConfiguration Read kafkaconnect:ListConnectorOperations Read kafkaconnect:ListConnectors Read kafkaconnect:ListCustomPlugins Read

View all kafkaconnect actions →