Your development team is planning on using the Kinesis Client Library (KCL) for its application. They have started developing and access the streams using their IAM user Access Keys, but the library keeps on throwing errors of not being able to perform functions pertinent to the streams.
Which of the following could be the underlying issue?

Answer options:

A.Ensure that the policy applied to the users has access to DynamoDB and CloudWatch.
B.Ensure that the policy applied to the users has access to SQS and CloudWatch.
C.Ensure that the access keys have access to AWS Kinesis.
D.Ensure that the access keys have access to CloudWatch.

Answer: A
Option A is CORRECT because If you are developing an application when using the Kinesis Client Library (KCL), your policy must include permissions for Amazon DynamoDB and Amazon CloudWatch. The KCL uses DynamoDB to track state information for the application and CloudWatch to send KCL metrics to CloudWatch on your behalf.
Option B is incorrect because KCL does not require access to SQS for the IAM user policy.
Options C is incorrect because you need to provide access to the IAM user policy and not the access keys themselves for your application to use KCL.
Options D is incorrect because you need to provide access to the IAM user policy and not the access key policy for AWS CloudWatch.
Reference:
https://docs.aws.amazon.com/streams/latest/dev/controlling-access.html