Merge pull request #3827 from ClickHouse/kk/fix-secure-kinesis

Add permissions for Kinesis SubscribeToShard and DescribeStreamConsumer actions

Author: Blargian

docs/integrations/data-ingestion/clickpipes/secure-kinesis.md

@@ -85,6 +85,16 @@ IAM policy (Please replace `{STREAM_NAME}` with your Kinesis stream name):
             ],
             "Effect": "Allow"
         },
+        {
+            "Action": [
+                "kinesis:SubscribeToShard",
+                "kinesis:DescribeStreamConsumer"
+            ],
+            "Resource": [
+                "arn:aws:kinesis:region:account-id:stream/{STREAM_NAME}/*"
+            ],
+            "Effect": "Allow"
+        },
         {
             "Action": [
                 "kinesis:ListStreams"