We are trying to call an AWS Lambda function from a Genesys Cloud Architect flow using the Data Action. We have the IAM role configured with the correct trust policy and permissions, but the call fails with a 403 error.
Here is the JSON payload we are sending:
{
"functionName": "my-lambda-function",
"invocationType": "RequestResponse",
"payload": {
"key": "value"
}
}
The error message in the response is:
"errorMessage": "User: arn:aws:sts::123456789012:assumed-role/MyRole/i-0123456789abcdef0 is not authorized to perform: lambda:InvokeFunction on resource: arn:aws:lambda:us-east-1:123456789012:function:my-lambda-function"
We have verified that the IAM role has the lambda:InvokeFunction permission. The Lambda function is in the same AWS account as the IAM role. The Genesys Cloud instance is in the us-east-1 region. The Lambda function is also in us-east-1. We have tried using the ARN of the Lambda function in the functionName field, but that did not help. We have also tried using the name of the Lambda function, but that did not help either. We are not sure what we are missing. Any help would be appreciated.