Adding a Lambda function into Kinesis Firehose via Terraform

Question

I have a firehose delivery stream storing data in S3. However, I want to add a lambda function to the delivery stream to parse data before storage.

Do I need an IAM policy in addition to kinesis policies for this purpose?

Answer 1

You need to add processing_configuration to your aws_kinesis_firehose_delivery_stream of type = "Lambda". Doing this you will need to also add RoleArn to IAM role that your firehose will use to invoke the function. The role must contain the following IAM policy:

        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "lambda:InvokeFunction",
                "lambda:GetFunctionConfiguration"
            ],
            "Resource": "<your-lambda-function-arn>"
        }