kinesis video streams webrtc 403 forbidden on presigned websocket wss url

Question

I'm using SigV4RequestSigner to presign a WebSocket url in aws lambda, using Amazon Kinesis Video Streams WebRTC SDK for JavaScript

In the client when attempting to call new SignalingClient() with a requestSigner that returns the presigned url from the server I'm getting the following error:

Error during WebSocket handshake: Unexpected response code: 403

What could be the reason?

Could this be a CORS issue?

Maybe the url is missing a token or a header?

Answer 1

Solved when adding the kinesisvideo:ConnectAsMaster permission to the lambda function which signs the url.