CODEWITHSUNDEEP
amazon-web-servicesamazon-dynamodbaws-sdkaws-api-gateway
daviddeath
daviddeath

Reputation: 2533

API Gateway DynamoDB cross account integration

I'm trying to do a direct integration with API Gateway to DynamoDB. If both are in the same accounts, this works just fine, I've had no problems with the integration.

If they're in separate accounts, I can't figure out how to signal to API Gateway that the dynamo table is in a different account.

This setup Works:

This setup does not:

In the docs they specify what a uri integration should look like: 

arn:aws:apigateway:{region}:{subdomain.service|service}:path|action/{service_api}

But I don't see where/if I can specify the account id of the existing table.

An arn of dynamo table usually looks something like this, arn:aws:dynamodb:region:account-id:table/table-name, so if I could supply an arn, this would should be plausible, but that doesn't seem to work. 

arn:aws:apigateway:us-east-1:dynamodb:action/Query

My questions are:

Upvotes: 0

Views: 345

Answers (1)

daviddeath
daviddeath

Reputation: 2533

I've learned that cross account integration with API Gateway is not possible as API Gateway cannot assume a cross account role. The solution was to create a lambda, which can assume the cross account role.

Upvotes: 2

Related Questions