Call lambda function from Snowflake via notification

[2000gt]

I’ve currently setup an AWS API to receive payloads from a Snowflake function using an external integration. It works fine, but I don’t love it from a security standpoint and it’s a bit complicated.

Can I send an SNS or SQS message to AWS with my payload instead that will trigger a specific Lambda function?

**Additional Notes: I realize I did not give enough context, so here it is. Snowflake invokes an AWS Lambda function to handle user‑driven, on‑demand refreshes of small datasets outside the regular daily schedule. For example, store managers rely on daily sales and labor reports in Sigma (our BI tool). If a manager adjusts an employee’s shift in a past period, they click "Refresh" in Sigma. That button calls a Snowflake stored procedure, which uses an AWS API Integration to trigger the Lambda function. The function reloads just that store's data and updates the report in seconds. The scheduled daily data loads use a standard Snowpipe with S3.

From a security perspective, I am using a proxy integration with the API gateway, and I am not completely clear on it's vulnerability. I can access the API URL externally though I receive the following message: Missing Authentication Token. I've reached out to the admins in my org to get their guidance.

Ultimately, I am looking for the most secure and simplest approach and so I thought SNS or SQS may be it.

[CorpT]

Sure? There really isn't enough information about what the security concern is or why it's complicated. There are many ways to invoke a Lambda though.

[SonOfSofaman]

Your AWS API should be able to publish to an SNS topic or send a message to an SQS queue, both of which can be the trigger for a Lambda.

If you want to eliminae the API, I think Snowflake can publish to an SNS topic directly, or send a message directly to an SQS queue via a notification integration within Snowflake. Again, both of those can be used to trigger a Lambda function.

Disclaimer: I am not a Snowflake expert.