From 87090051a6f4262f0381be5c8f83d985ff8e5533 Mon Sep 17 00:00:00 2001
From: tpanetti <Thomas.Panetti@clickhouse.com>
Date: Fri, 26 Jul 2024 10:06:16 -0700
Subject: [PATCH] Add blurb about enhanced fanout for kinesis and update
 permissions to reflect the new requirements

---
 docs/en/integrations/data-ingestion/clickpipes/kinesis.md   | 2 +-
 .../data-ingestion/clickpipes/secure-kinesis.md             | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/docs/en/integrations/data-ingestion/clickpipes/kinesis.md b/docs/en/integrations/data-ingestion/clickpipes/kinesis.md
index b41d2c7c7b2..4a5cc92e7f9 100644
--- a/docs/en/integrations/data-ingestion/clickpipes/kinesis.md
+++ b/docs/en/integrations/data-ingestion/clickpipes/kinesis.md
@@ -26,7 +26,7 @@ You have familiarized yourself with the [ClickPipes intro](./index.md) and setup
 
   ![Fill out connection details](./images/cp_step2_kinesis.png)
 
-5. Select Kinesis Stream and starting offset. The UI will display a sample document from the selected source (Kafka topic, etc).
+5. Select Kinesis Stream and starting offset. The UI will display a sample document from the selected source (Kafka topic, etc). You can also enable Enhanced Fan-out for Kinesis streams to improve the performance and stability of your ClickPipe (More information on Enhanced Fan-out can be found [here](https://aws.amazon.com/blogs/aws/kds-enhanced-fanout))
 
   ![Set data format and topic](./images/cp_step3_kinesis.png)
 
diff --git a/docs/en/integrations/data-ingestion/clickpipes/secure-kinesis.md b/docs/en/integrations/data-ingestion/clickpipes/secure-kinesis.md
index 04c0966f069..92595555a91 100644
--- a/docs/en/integrations/data-ingestion/clickpipes/secure-kinesis.md
+++ b/docs/en/integrations/data-ingestion/clickpipes/secure-kinesis.md
@@ -68,7 +68,11 @@ IAM policy (Please replace {STREAM_NAME} with your kinesis stream name):
                 "kinesis:DescribeStream",
                 "kinesis:GetShardIterator",
                 "kinesis:GetRecords",
-                "kinesis:ListShards"
+                "kinesis:ListShards",
+                "kinesis:SubscribeToShard",
+                "kinesis:DescribeStreamConsumer",
+                "kinesis:RegisterStreamConsumer",
+                "kinesis:DeregisterStreamConsumer"
             ],
             "Resource": [
                 "arn:aws:kinesis:region:account-id:stream/{STREAM_NAME}"