Cross account access - can the plugin be configured to read from a kinesis stream in a different AWS account?

[rjl126]

And, use a dynamoDB table in a different account?

[nunofernandes]

Yes, that is possible. I have that running. All you need is that the logstash has permissions to assume a role on the other account that has the privileges to access the kinesis stream and the dynamodb table.

Then use something like:

        kinesis {
                application_name    => "logstash-dev"
                kinesis_stream_name => "logs-stream"
                codec               => "cloudwatch_logs"
                region              => "us-east-1"
                role_arn            => "arn:aws:iam::1234567890:role/role_with_access_to_stuff"
        }