Cross-account data sources

[Vlaaaaaaad]

Hi,

I was looking to check if AppSync supports cross-account data sources, such as AppSync in one account using a DynamoDB table in another account.

As per, @dabit3's Tweet reply from April 1, 2020, this is not yet supported, but a workaround is available: using a custom Lambda GraphQL resolver.

Using Lambda resolvers for cross-account access is also showcased in the Develop serverless GraphQL architectures using AWS AppSync (MOB309-R1) from re:Invent 2019, with the slides posted here.

Creating this issue for 2 reasons:

• confirm cross-account support is not a thing. Took me a while to find that Tweet
• track community desire for this feature

[slikk66]

upvoting better cross account support. I would like to see:

• resource policy on appsync allowing other account query ability (like api gateway https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies-examples.html)
• ability to include dynamo datasource from another account (similar to how the lambda is handled but allows VTL compatibility)

[ckifer]

+1 - would like to be able to create an OpenSearch datasource cross-account

[sarojts]

+1 Mutli-Account setup to keep data and services layer separate, cross account support is inevitable requirement. Please have this feature released asap.

[sevacloud]

+1 I'm awaiting this feature to call a cross account Dynamo using AppSync. Many of our services run in separate accounts due to following security best practices as mentioned by @sarojts