Posted On: Feb 14, 2023

Amazon Lambda now allows you to create or update your functions with container images stored in an Amazon ECR repository in a different Amazon Web Services account than that of your Lambda function. Previously, you could only access container images stored in an Amazon ECR repository in the same account as your Lambda functions. If you used a centralized account for your Amazon ECR repositories, you needed to copy your container images into an Amazon ECR repository in the same account as your Lambda function. You can now simplify this workflow by accessing the container image stored in an Amazon ECR repository in a different account. 

To access container images in an Amazon ECR repository in a different account, you can grant permissions to the Lambda resource and the Lambda service principal. To learn more about how to provide the required permissions for cross-account access, see Amazon Lambda documentation

This feature is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.