'Sending data from kinesis firehose to lambda HTTP endpoint securily

i am trying to create realtime data ingestion to clickhouse hosted in ec2. For that my pipeline is

Eventbridge -> KinesisFirehose(destination http endpoint) -> lambda(function url) -> clickhouse HTTP endpoint.

Everything is working as expected in UAT. But the function url provided by lambda is public by default, which will ofcourse pose a security concern in prod. Is there any way to make firehose to lambda's http endpoint secure that the the lambda's http endpoint can only be invoked by firehose and the data cannot leave the aws account.

P.S : If there is any way to improve this pipeline, please post in the comments too. Will be helpfull.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source