Using the call analytics resource access role for the Amazon Chime SDK

The calling account must create the resource access role used by a media insights pipeline configuration. You can't use cross-account roles.

Depending on the features that you enable when you create a call analytics configuration, you must use additional resource policies. Expand the following sections to learn more.

Minimum required policy

The role requires the following policy, at a minimum:

JSON

You must also use the following trust policy:

JSON

KinesisDataStreamSink policy

If you use the KinesisDataStreamSink, add the following policy:

JSON

S3RecordingSink policy

If you use the S3RecordingSink, add the following policy:

JSON

Post Call Analytics policy

If you use the Post Call Analytics feature of the AmazonTranscribeCallAnalyticsProcessor, add the following policy:

JSON

VoiceEnhancementSinkConfiguration policy

If you use the VoiceEnhancementSinkConfiguration element, add the following policy:

JSON

VoiceAnalyticsProcessor policy

If you use the VoiceAnalyticsProcessor, add the policies for LambdaFunctionSink, SqsQueueSink, and SnsTopicSink depending on which sinks you have defined.

LambdaFunctionSink policy:

JSON

SqsQueueSink policy

JSON

SnsTopicSink policy:

JSON