Amazon Kinesis connection
Overview overview
The Kinesis Data Streams service by Amazon Web Services allows you to collect and process large streams of data records in real time.
You can create a real-time outbound connection to your Amazon Kinesis storage to stream data from Adobe Experience Platform.
- For more information about Amazon Kinesis, see the Amazon documentation.
- To connect to Amazon Kinesis programmatically, see the Streaming destinations API tutorial.
- To connect to Amazon Kinesis using the Platform user interface, see the sections below.
Use cases use-cases
By using streaming destinations such as Amazon Kinesis, you can easily feed high-value segmentation events and associated profile attributes into your systems of choice.
For example, a prospect downloaded a white-paper which qualifies them into a “high-propensity to convert” segment. By mapping the audience that the prospect falls in to the Amazon Kinesis destination, you would receive this event in Amazon Kinesis. There, you can employ a do-it-yourself approach and describe business logic on top of the event, as you think would work best with your enterprise IT systems.
Supported audiences supported-audiences
This section describes which types of audiences you can export to this destination.
Export type and frequency export-type-frequency
Refer to the table below for information about the destination export type and frequency.
IP address allowlist ip-address-allowlist
To meet customers’ security and compliance requirements, Experience Platform provides a list of static IPs that you can allowlist for the Amazon Kinesis destination. Refer to IP address allow list for streaming destinations for the complete list of IPs to allowlist.
Required Amazon Kinesis permissions required-kinesis-permission
To successfully connect and export data to your Amazon Kinesis streams, Experience Platform needs permissions for the following actions:
kinesis:ListStreams
kinesis:PutRecord
kinesis:PutRecords
These permissions are arranged through the Kinesis console and are checked by Platform once you configure your Kinesis destination in the Platform user interface.
The example below displays the minimum access rights required to successfully export data to a Kinesis destination.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"kinesis:ListStreams",
"kinesis:PutRecord",
"kinesis:PutRecords"
],
"Resource": [
"arn:aws:kinesis:us-east-2:901341027596:stream/*"
]
}
]
}
kinesis:ListStreams
kinesis:PutRecord
kinesis:PutRecords
For more information on controlling access for Kinesis data streams, read the following Kinesis document.
Connect to the destination connect
To connect to this destination, follow the steps described in the destination configuration tutorial. When connecting to this destination, you must provide the following information:
Authentication information authentication-information
Input the fields below and select Connect to destination:
- Amazon Web Services access key and secret key: In Amazon Web Services, generate an
access key - secret access key
pair to grant Platform access to your Amazon Kinesis account. Learn more in the Amazon Web Services documentation. - Region: Indicate which Amazon Web Services region to stream data to.
Fill in destination details destination-details
To configure details for the destination, fill in the required and optional fields below. An asterisk next to a field in the UI indicates that the field is required.
- Name: Provide a name for your connection to Amazon Kinesis
- Description: Provide a description for your connection to Amazon Kinesis.
- Stream: Provide the name of an existing data stream in your Amazon Kinesis account. Platform will export data to this stream.
- Include Segment Names: Toggle if you want the data export to include the names of the audiences you are exporting. For an example of a data export with this option selected, refer to the Exported data section further below.
- Include Segment Timestamps: Toggle if you want the data export to include the UNIX timestamp when the audiences were created and updated, as well as the UNIX timestamp when the audiences were mapped to the destination for activation. For an example of a data export with this option selected, refer to the Exported data section further below.
Enable alerts enable-alerts
You can enable alerts to receive notifications on the status of the dataflow to your destination. Select an alert from the list to subscribe to receive notifications on the status of your dataflow. For more information on alerts, see the guide on subscribing to destinations alerts using the UI.
When you are finished providing details for your destination connection, select Next.
Activate audiences to this destination activate
- To activate data, you need the View Destinations, Activate Destinations, View Profiles, and View Segments access control permissions. Read the access control overview or contact your product administrator to obtain the required permissions.
- Consent policy evaluation is currently not supported in exports to the Amazon Kinesis destination. Read more.
See Activate audience data to streaming profile export destinations for instructions on activating audiences to this destination.
Profile export behavior profile-export-behavior
Experience Platform optimizes the profile export behavior to your Amazon Kinesis destination, to only export data to your destination when relevant updates to a profile have occurred following audience qualification or other significant events. Profiles are exported to your destination in the following situations:
- The profile update was determined by a change in audience membership for at least one of the audiences mapped to the destination. For example, the profile has qualified for one of the audiences mapped to the destination or has exited one of the audiences mapped to the destination.
- The profile update was determined by a change in the identity map. For example, a profile who had already qualified for one of the audiences mapped to the destination has been added a new identity in the identity map attribute.
- The profile update was determined by a change in attributes for at least one of the attributes mapped to the destination. For example, one of the attributes mapped to the destination in the mapping step is added to a profile.
In all the cases described above, only the profiles where relevant updates have occurred are exported to your destination. For example, if an audience mapped to the destination flow has a hundred members, and five new profiles qualify for the segment, the export to your destination is incremental and only includes the five new profiles.
Note that the all the mapped attributes are exported for a profile, no matter where the changes lie. So, in the example above all the mapped attributes for those five new profiles will be exported even if the attributes themselves haven’t changed.
What determines a data export and what is included in the export what-determines-export-what-is-included
Regarding the data that is exported for a given profile, it is important to understand the two different concepts of what determines a data export to your Amazon Kinesis destination and which data is included in the export.
- Mapped attributes and audiences serve as the cue for a destination export. This means that if any mapped audiences change states (from
null
torealized
or fromrealized
toexiting
) or any mapped attributes are updated, a destination export would be kicked off. - Since identities cannot currently be mapped to Amazon Kinesis destinations, changes in any identity on a given profile also determine destination exports.
- A change for an attribute is defined as any update on the attribute, whether or not it is the same value. This means that an overwrite on an attribute is considered a change even if the value itself has not changed.
- The
segmentMembership
object includes the audience mapped in the activation dataflow, for which the status of the profile has changed following a qualification or audience exit event. Note that other unmapped audiences for which the profile qualified for can be part of the destination export, if these audiences belong to the same merge policy as the audience mapped in the activation dataflow. - All identities in the
identityMap
object are included as well (Experience Platform currently does not support identity mapping in the Amazon Kinesis destination). - Only the mapped attributes are included in the destination export.
For example, consider this dataflow to an Amazon Kinesis destination where three audiences are selected in the dataflow, and four attributes are mapped to the destination.
A profile export to the destination can be determined by a profile qualifying for or exiting one of the three mapped segments. However, in the data export, in the segmentMembership
object (see Exported Data section below), other unmapped audiences might appear, if that particular profile is a member of them and if these share the same merge policy as the audience that triggered the export. If a profile qualifies for the Customer with DeLorean Cars audience but is also a member of the Watched “Back to the Future” movie and Science fiction fans audiences, then these other two audiences will also be present in the segmentMembership
object of the data export, even though these are not mapped in the dataflow, if these share the same merge policy with the Customer with DeLorean Cars segment.
From a profile attributes point of view, any changes to the four attributes mapped above will determine a destination export and any of the four mapped attributes present on the profile will be present in the data export.
Historical data backfill historical-data-backfill
When you add a new audience to an existing destination, or when you create a new destination and map audiences to it, Experience Platform exports historical audience qualification data to the destination. Profiles which qualified for the audience before the audience was added to the destination are exported to the destination within approximately one hour.
Exported data exported-data
Your exported Experience Platform data lands in your Amazon Kinesis destination in JSON format. For example, the export below contains a profile that has qualified for a certain segment, is a member of another two segments, and exited another segment. The export also includes the profile attribute first name, last name, date of birth, and personal email address. The identities for this profile are ECID and email.
{
"person": {
"birthDate": "YYYY-MM-DD",
"name": {
"firstName": "John",
"lastName": "Doe"
}
},
"personalEmail": {
"address": "john.doe@acme.com"
},
"segmentMembership": {
"ups":{
"7841ba61-23c1-4bb3-a495-00d3g5fe1e93":{
"lastQualificationTime":"2022-01-11T21:24:39Z",
"status":"exited"
},
"59bd2fkd-3c48-4b18-bf56-4f5c5e6967ae":{
"lastQualificationTime":"2022-01-02T23:37:33Z",
"status":"realized"
},
"947c1c46-008d-40b0-92ec-3af86eaf41c1":{
"lastQualificationTime":"2021-08-25T23:37:33Z",
"status":"realized"
},
"5114d758-ce71-43ba-b53e-e2a91d67b67f":{
"lastQualificationTime":"2022-01-11T23:37:33Z",
"status":"realized"
}
}
},
"identityMap": {
"ecid": [
{
"id": "14575006536349286404619648085736425115"
},
{
"id": "66478888669296734530114754794777368480"
}
],
"email_lc_sha256": [
{
"id": "655332b5fa2aea4498bf7a290cff017cb4"
},
{
"id": "66baf76ef9de8b42df8903f00e0e3dc0b7"
}
]
}
}
Below are further examples of exported data, depending on the UI settings you select in the connect destination flow for the Include Segment Names and Include Segment Timestamps options:
segmentMembership
sectioncode language-json |
---|
|
segmentMembership
sectioncode language-json |
---|
|
Limits and retry policy limits-retry-policy
In 95 percent of the time, Experience Platform attempts to offer a throughput latency of less than 10 minutes for successfully sent messages with a rate of less than 10 thousand requests per second for each dataflow to an HTTP destination.
In case of failed requests to your HTTP API destination, Experience Platform stores the failed requests and retries twice to send the requests to your endpoint.