Querying Dynamodb in a different AWS account - Serverless Framework

Question

I need to connect to the dynamoDB table in one AWS account from lambda of a different AWS account. Currently, I'm trying to connect to dynamodb through Serverless Offline. I'm able to connect to a table in my AWS account but get an error when trying to connect to dynamoDB table in another account.

Error: Request Not Found. (I have checked twice. The table does exist.)

The role I'm using in the serverlesss.yml has full admin privileges(including DynamoDB)

serverless.yml

provider:
  name: aws
  runtime: nodejs6.10
  role: "arn:aws:iam::******:role/abcRole"
  iamRoleStatements:
    - Effect: Allow
      Action: ["dynamodb:*"]
      Resource: "arn:aws:dynamodb:us-east-1:*:*"



db.js

let dynamodbOnlineOptions = {
    region: 'us-east-1'
};

let client = new AWS.DynamoDB.DocumentClient(dynamodbOnlineOptions);

I think I'm making some mistake with permissions, but I'm able to identify the problem. Please help.

Can you post the IAM role from the other account granting your lambda function access? — strongjz
– strongjz, Commented May 24, 2017 at 12:29
{ "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt*************", "Effect": "Allow", "Action": [ "dynamodb:*" ], "Resource": [ "arn:aws:dynamodb:us-east-1:**************:table/*" ] } ] } — rish08
– rish08, Commented May 24, 2017 at 12:45

strongjz · Accepted Answer · 2017-05-24 12:59:32Z

2

The way forward I think is to create a cross account role that has access to that table, then have your lambda function assume that role.

Create the cross account role in the account that has the Dynamodb table and give it access to that.

http://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html

Inside your lambda function have it assume that role and get temporary credentials to access that table.

http://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

answered May 24, 2017 at 12:59

strongjz

4,5311 gold badge21 silver badges28 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Querying Dynamodb in a different AWS account - Serverless Framework

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related