Invoke AWS Lambda functions from cross-account Amazon Kinesis Data Streams

This article discusses how to invoke AWS Lambda functions from cross-account Amazon Kinesis Data Streams using resource-based policies and the enhanced fan-out feature.

Specifically, the article covers:

• Solution overview: Deploying Kinesis Data Streams in Account 1 and Lambda as the consumer in Account 2 to receive data from the data stream.
• Prerequisites: Having two AWS accounts and the required permissions, along with the AWS CLI installed.
• Launching three CloudFormation templates: 1) Creating a Kinesis data stream and enhanced fan-out consumer in Account 1, 2) Creating a Lambda function and execution role in Account 2, 3) Creating a Lambda event source mapping in Account 2.
• Validating the solution: Sending sample messages to the data stream in Account 1 and verifying that the Lambda function in Account 2 receives the messages.
• Clean up: Deleting the CloudFormation stacks in both accounts to avoid additional costs.