To stream Amazon Connect data into a Kinesis stream encrypted with a customer managed KMS key, the key policy must allow the instance's service-linked role kms:GenerateDataKey, and AWS advises doing this before using the key to avoid missing data.

Checked 2026-10-02

To avoid missing data, update the permission of the KMS key before using a KMS key with Connect Customer streaming.
Vendor
Amazon Web Services
Product
Amazon Connect
Subsystem
data streaming
Deployment
multi-tenant
Region
not restricted
Release range
current as of 2026-10-02
Checked
2026-10-02

Sources

Cite this note

APA

WarmTransfer. (2026, October 2). Exporting contact center data to a data warehouse: source note ccaas-data-export-warehousing-aws-stream-kms-generatedatakey. WarmTransfer. https://warmtransfer.net/knowledge/claims/ccaas-data-export-warehousing-aws-stream-kms-generatedatakey

BibTeX

@misc{warmtransfer-claim-ccaas-data-export-warehousing-aws-stream-kms-generatedatakey,
  title  = {Exporting contact center data to a data warehouse: source note ccaas-data-export-warehousing-aws-stream-kms-generatedatakey},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/ccaas-data-export-warehousing-aws-stream-kms-generatedatakey},
  note   = {Source note ccaas-data-export-warehousing-aws-stream-kms-generatedatakey, checked 2026-10-02}
}

Read in context