CODEWITHSUNDEEP
amazon-web-servicesaws-lambdaamazon-sns
Biswa Bandhu Bhandary
Biswa Bandhu Bhandary

Reputation: 59

AWS account Id in SNS topic event

Is there any way to get AWS Account Id in an SNS topic event to the subscriber? Actually, in my case, I want multiple customer account can trigger their s3 putObject to the given sns topic arn which is from my account and I have a lambda method which is subscribed to that topic. Now I'm getting event payload in my lambda handler whenever a customer puts an object to s3 bucket. But as I said, there would be many customer so my lambda need to process that coming event is from which customer? So I need customer account Id available in the sns event payload, is it possible?

Upvotes: 0

Views: 690

Answers (2)

John Rotenstein
John Rotenstein

Reputation: 270334

It appears that your situation is:

  • Multiple AWS Accounts have Amazon S3 buckets with an Amazon S3 Event configured to trigger your AWS Lambda function
  • You want the ability to for the Lambda function to detect which account triggered the event

I don't think that this information is available. Here is a sample S3 Put event from the AWS Lambda "Test" console:

{
  "Records": [
    {
      "eventVersion": "2.0",
      "eventSource": "aws:s3",
      "awsRegion": "ap-southeast-2",
      "eventTime": "1970-01-01T00:00:00.000Z",
      "eventName": "ObjectCreated:Put",
      "userIdentity": {
        "principalId": "EXAMPLE"
      },
      "requestParameters": {
        "sourceIPAddress": "127.0.0.1"
      },
      "responseElements": {
        "x-amz-request-id": "EXAMPLE123456789",
        "x-amz-id-2": "EXAMPLE123/5678abcdefghijklambdaisawesome/mnopqrstuvwxyzABCDEFGH"
      },
      "s3": {
        "s3SchemaVersion": "1.0",
        "configurationId": "testConfigRule",
        "bucket": {
          "name": "example-bucket",
          "ownerIdentity": {
            "principalId": "EXAMPLE"
          },
          "arn": "arn:aws:s3:::example-bucket"
        },
        "object": {
          "key": "test/key",
          "size": 1024,
          "eTag": "0123456789abcdef0123456789abcdef",
          "sequencer": "0A1B2C3D4E5F678901"
        }
      }
    }
  ]
}

There does not appear to be a field containing the Account ID of the source bucket.

To confirm this, I triggered an event on an S3 bucket and logged the event. I could not find any reference to an AWS Account ID.

Upvotes: 0

Balu Vyamajala
Balu Vyamajala

Reputation: 10403

Schema that is received by subscriber already contains Arns of both subscriber and topic. Here is the schema. We can parse the accountId from it.

    `"TopicArn":"arn:aws:sns:us-east-2:123456789012:sns-lambda"`

"EventSubscriptionArn": "arn:aws:sns:us-east-2:123456789012:sns-lambda:21be56ed-a058-49f5-8c98-aedd2564c486"

Upvotes: 0

Related Questions