Overview

On June 19 2024 Amazon launched Data Kiosk as a self‑service portal that allows vendors to download analytics datasets on demand. The initial release note mistakenly indicated that every dataset required the Brand Analytics role, prompting many vendors to request unnecessary permissions. Amazon has now clarified the correct role mapping, meaning vendors must adjust their IAM assignments to keep their data pipelines functional and avoid access‑denied errors.

Key Points

• Original announcement error — The June 19 release claimed that the Brand Analytics role was mandatory for all Data Kiosk reports, leading dozens of vendors to submit blanket role requests that were later found to be excessive.
• Corrected role mapping — Only the Vendor Analytics and Sales and Traffic datasets are gated by the Brand Analytics role; the Economics dataset is governed by a separate Economics‑Access role.
• Unnecessary permissions — Vendors that added Brand Analytics solely to retrieve Economics data saw no access benefit and incurred longer compliance reviews.
• Missing role consequences — Vendors lacking Brand Analytics when requesting Vendor Analytics or Sales and Traffic reports encounter “insufficient permissions” messages, halting automated data pulls.
• Compliance hierarchy — The Brand Analytics role sits above the standard Vendor Analytics role, granting broader data visibility but also triggering a higher‑level security assessment.
• Alignment deadline — Amazon expects all vendors to update their role assignments by the end of Q3 2024; failure to do so may result in temporary service interruptions for affected datasets.

How Data Kiosk Role Requirements Work

1. Select the desired dataset — When a vendor clicks a report option—such as “Monthly Vendor Analytics”—the portal identifies the dataset type and flags the required permission set. For example, choosing the “Quarterly Sales and Traffic” file triggers a check for the Brand Analytics role.
2. Verify IAM roles — Data Kiosk queries the vendor’s IAM profile to confirm the presence of the appropriate role. If the profile includes Brand Analytics, access is granted; if the request is for the Economics dataset, the system looks for the Economics‑Access role instead. A vendor without the correct role receives an “insufficient permissions” alert.