oss_helpers is not accessible when running a Data Replay in the Panther Console. You see an error similar to:
User:arn:aws:sts::../panther-replay-detections-engineidentity not being authorized to perform
arn:aws:dynamodb:us-east-1:../panther-kv-storebecause no identity-based policy allows the
Data Replay does not have access to Lookup Tables like
panther-kv-store to prevent modifying production data from a replay.
Access to the
panther-kv-storeis blocked to prevent polluting production data
Lookup Tables are blocked to prevent modifying production data from a replay
See the Panther documentation for reference to the constraints listed above.