aws-lambda - 如何创建由另一个账户中的kinesis触发的lambda函数？

Question

我正在尝试在 B 帐户中使用这样的 cloudformation 创建一个堆栈。

{
 "AWSTemplateFormatVersion": "2010-09-09",
 "Resources": {
"lambda": {
  "Type": "AWS::Lambda::Function",
  "Properties": {
    "Code": {
      "S3Bucket": "lambda-test-zwshao",
      "S3Key": "lambda_spike.zip"
    },
    "Description": "lambda spike function..",
    "Handler": "index.handler",
    "MemorySize": 128,
    "Role": "arn:aws:iam::A account:role/kinesis-read",
    "Runtime": "nodejs4.3",
    "Timeout": 20
  }
},
"eventSourceMapping": {
  "Type" : "AWS::Lambda::EventSourceMapping",
  "Properties": {
    "BatchSize" : 100,
    "Enabled" : true,
    "EventSourceArn" : "arn:aws:kinesis:ap-southeast-2:A account:stream/lambda-test",
    "FunctionName" : {"Ref": "lambda"},
    "StartingPosition" : "TRIM_HORIZON"
  }
  }
 }
}

A账户是账号。

错误为不允许跨账户传递角色。

Answer 1

我询问了AWS 技术支持中心。目前不支持此功能。