title: Kinesis input stream into Logstash dynamodb creds
body: <p>I m looking to get  logstash input from kinesis but getting dynamodb errors
  <a href="https://github.com/logstash-plugins/logstash-input-kinesis#authentication" rel="nofollow noreferrer">https://github.com/logstash-plugins/logstash-input-kinesis#authentication</a>
  auth is defined in  ~/.aws/credentials  and user has full dynamodb access</p>
  <p>logstash version 7.16.2 running inside docker container</p>
  <p>logstash  |     at java.lang.Thread.run(Thread.java:829) [?:?]
  logstash  | Caused by: com.amazonaws.services.dynamodbv2.model.AmazonDynamoDBException: User: arn:aws:sts::xxx:assumed-role/AmazonSSMRoleForInstancesQuickSetup/i-01xxxxxxx is not authorized to perform: dynamodb:DescribeTable on resource: arn:aws:dynamodb:us-west-1:xxxxxxxxxx:table/logstash-kinesis because no identity-based policy allows the dynamodb:DescribeTable action (Service: AmazonDynamoDBv2; Status Code: 400; Error Code: AccessDeniedException; Request ID: A814QENJD5FKI67BFCMQN9J7B7VV4KQNSO5AEMVJF66Q9ASUAAJG; Proxy: null)
  logstash  |     at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleErrorResponse(AmazonHttpClient.java:1819) ~[aws-java-sdk-core-1.11.1034.jar:?]</p>
  <p>===================================================</p>
  <pre><code>input {
  kinesis {
    kinesis_stream_name =&gt; &quot;logstash-kinesis&quot;
    application_name =&gt; &quot;logstash-kinesis&quot;
    region =&gt; &quot;us-west-2&quot;
    codec =&gt; cloudwatch_logs
  </code></pre>
  <p>}
  }</p>