Create an IAM role (instance profile) in Account A and set Account B as a trusted entity. Attach this role to the EC2 instances in Account A and add an inline policy to this role to access S3 data from Account B

Create an IAM role with S3 access in Account B and set Account A as a trusted entity. Create another role (instance profile) in Account A and attach it to the EC2 instances in Account A and add an inline policy to this role to assume the role from Account B

Copy the underlying AMI for the EC2 instances from Account A into Account B. Launch EC2 instances in Account B using this AMI and then access the PII data on Amazon S3 in Account B

Add a bucket policy to all the Amazon S3 buckets in Account B to allow access from EC2 instances in Account A

Amazon Elasticsearch Service (Amazon ES) with optionally backing up data to Amazon S3

Amazon ElastiCache with Amazon S3 as backup

Amazon Simple Storage Service (Amazon S3) as a direct Firehose destination

Amazon Redshift with Amazon S3

It represents a Lambda function definition

It represents an intrinsic function

Presence of Transform section indicates it is a CloudFormation Parameter

Presence of Transform section indicates it is a Serverless Application Model (SAM) template

Define an appspec.yml file in the codebuild/ directory

Define an appspec.yml file in the root directory

Define a buildspec.yml file in the codebuild/ directory

Define a buildspec.yml file in the root directory

Amazon Versioned S3 Bucket

AWS CodeCommit

AWS CodePipeline

AWS CodeBuild

Set up a separate SNS topic for each partner and subscribe each partner to the respective SNS topic. Modify the Lambda function to publish messages with specific attributes to the partner's SNS topic and apply the appropriate filter policy to the topic subscriptions

Set up a separate Lambda function for each partner. Set up an SNS topic and subscribe each partner to the SNS topic. Modify each partner's Lambda function to publish messages with specific attributes to the SNS topic and apply the appropriate filter policy to the topic subscriptions

Set up an SNS topic and subscribe each partner to the SNS topic. Modify the Lambda function to publish messages with specific attributes to the SNS topic and apply the appropriate filter policy to the topic subscriptions

Set up a separate SNS topic for each partner. Modify the Lambda function to publish messages for each partner to the partner's SNS topic

Leverage Cognito user pools to manage user accounts and set up an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Set up a Lambda function to store the images in Amazon S3 and save the image object's S3 key as part of the photo details in a DynamoDB table. Have the Lambda function retrieve previously uploaded images by querying DynamoDB for the S3 key

Use Cognito identity pools to manage user accounts and set up an Amazon Cognito identity pool authorizer in API Gateway to control access to the API. Set up a Lambda function to store the images in Amazon S3 and save the image object's S3 key as part of the photo details in a DynamoDB table. Have the Lambda function retrieve previously uploaded images by querying DynamoDB for the S3 key

Use Cognito identity pools to create an IAM user for each user of the application during the sign-up process. Leverage IAM authentication in API Gateway to control access to the API. Set up a Lambda function to store the images in Amazon S3 and save the image object's S3 key as part of the photo details in a DynamoDB table. Have the Lambda function retrieve previously uploaded images by querying DynamoDB for the S3 key

Leverage Cognito user pools to manage user accounts and set up an Amazon Cognito user pool authorizer in API Gateway to control access to the API. Set up a Lambda function to store the images as well as the image metadata in a DynamoDB table. Have the Lambda function retrieve previously uploaded images from DynamoDB

No need to make any special provisions as Lambda is automatically scalable because of its serverless nature

Configure Application Auto Scaling to manage Lambda reserved concurrency on a schedule

Configure Application Auto Scaling to manage Lambda provisioned concurrency on a schedule

Add an Application Load Balancer in front of the Lambda functions

Configure the application to fetch the variables and credentials from AWS Systems Manager Parameter Store by leveraging hierarchical unique paths in Parameter Store for each variable in each environment

Configure the application to fetch the variables from each of the deployed environments by defining the authentication information and API URL in the ECS task definition as unique names during the deployment process

Configure the application to fetch the variables from AWS KMS by storing the API URL and credentials as unique keys in KMS for each environment

Configure the application to fetch the variables from an encrypted file that is stored with the application by storing the API URL and credentials in unique files for each environment

ApplicationStart

AllowTraffic

AfterInstall

ValidateService