[Question] S3-SQS input & deploy/config about elastic-serverless-forwarder HOT 2 CLOSED

hello @PeterPaulH

you can ask question about the forwarder in the forum, but it's no problem answering your question here :)

ElasticServerlessForwarderS3Buckets are requested so that the Cloudformation template can set the proper IAM policies only for the specific S3 Buckets the forwarder needs to access.

In general you don't need to manage specific IAM resources for the forwarder and everything will be taken care when deploying it from the Cloudformation template.

So, if you have an SQS queue, and you will add a new S3 bucket to send notification to that queue, the forwarder needs to be redeployed adding the new S3 bucket in the list of ElasticServerlessForwarderS3Buckets so that the lambda will have the proper permission for the new bucket.

At the contrary, if you manage your own IAM policies and have already added the proper permission for the new S3 bucket you don't need to redeploy the forwarder.
Beware anyway that's not the suggested and supported way of deploying and managing the forwarder, since it could end up in misconfiguration and improper permissions.

from elastic-serverless-forwarder.

Thanks for the answers.
This was exactly what I was hoping for ;-)

from elastic-serverless-forwarder.