AWS IoT - Fleet Provisioning Template - Creating Pre Provisioning Hook in Seperate AWS Account

Question

Is it possible to specify a Pre Provisioning Hook in a seperate AWS account?

The lambda has the appropriate permissions to be invoked by the IoT account

this is the error I get when I deploy from  CDK....
```
TenantIotAccountStack | 0/9 | 11:42:30 am | UPDATE_FAILED        | AWS::IoT::ProvisioningTemplate | BasicFleetProvisioningTemplate Resource handler returned message: "Invalid request provided: Invalid arguments in the call (Service: Iot, Status Code: 400, Request ID: 6b920ce1-e0b6-4282-9f35-12a0c3473a1c)" (RequestToken: c47913fa-ba62-f59c-f06c-eaf9c901ba9e, HandlerErrorCode: InvalidRequest)
```

Answer

Hi,
Unfortunately, Lambda function from another account cannot be used as Pre Provisioning Hook. 
As specified in the IoT Document ```This Lambda function must exist in your account before you provision a device because it's called every time a device sends a request through RegisterThing.```.

https://docs.aws.amazon.com/iot/latest/developerguide/pre-provisioning-hook.html

AWS IoT - Fleet Provisioning Template - Creating Pre Provisioning Hook in Seperate AWS Account

Relevant content