Can I access AWS DynamoDB streams for accounts?

Question

My company manages AWS using a multi-account system. I have a lambda function in account A and a DynamoDB table with the stream enabled in account B. I want stream events to fire my function.

When I run:

aws lambda create-event-source-mapping --event-source-arn arn: aws: dynamodb: us-east-1: 101010101: table / table / stream / 2016-08-09T23: 00: 46.852 - function name Lambda -qa --enabled packet size 10 --starting-position TRIM_HORIZON

I get the following error: An error (InvalidParameterValueException) occurred while calling the CreateEventSourceMapping operation: the role and source of the event must be in the same account as the cloud function

It looks like the Lambda function and DynamoDB thread should be in the same account. But can the DynamoDB stream in accountA be read from accountB using other means? Redirection, SNS, SQS, S3 or user application.

Answer 1

Unfortunately not.

From AWS docs:

"Attention!

You must create a DynamoDB table in the same region where you created the Lambda function. This tutorial refers to the United States region (Northern Virginia). In addition, both the table and the lambda functions must belong to the same AWS account .

(in italics)

Link: http://docs.aws.amazon.com/lambda/latest/dg/with-ddb-configure-ddb.html