Permission denied encountered while consuming data from Kinesis.
This can happen if:
The provided aws_role_arn does not exist or does not have the
appropriate permissions attached.
The provided aws_role_arn is not set up properly for Identity
Federation using gcp_service_account.
The Pub/Sub SA is not granted the
iam.serviceAccounts.getOpenIdToken permission on
gcp_service_account.
PublishPermissionDenied
Permission denied encountered while publishing to the topic. This can
happen due to Pub/Sub SA has not been granted the appropriate publish
permissions
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-04 UTC."],[[["This document provides reference documentation for the `IngestionDataSourceSettings.Types.AwsKinesis.Types.State` enum within the Google Cloud Pub/Sub v1 API for .NET, detailing possible states for Kinesis data stream ingestion."],["The latest version documented is 3.23.0, with a history of versions going back to 2.3.0, allowing developers to check for documentation related to various versions."],["The enum `IngestionDataSourceSettings.Types.AwsKinesis.Types.State` includes six possible states: `Active`, `ConsumerNotFound`, `KinesisPermissionDenied`, `PublishPermissionDenied`, `StreamNotFound`, and `Unspecified`, each representing a different condition of the ingestion process."],["The `KinesisPermissionDenied` state indicates potential permission issues related to the `aws_role_arn` or the Pub/Sub service account, and guidance on troubleshooting these problems is provided."],["The `PublishPermissionDenied` state signifies permission problems when publishing to the topic, suggesting checking the Pub/Sub service account's publish permissions as outlined in the provided link."]]],[]]
