S3 の put event を sns に流そうとした時の Permissions error の解決方法

課題

Unable to validate the following destination configurations. Permissions on the destination topic do not allow S3 to publish notifications from this bucket. ( arn:aws:sns:ap-northeast-1:1234:sns_name)

などと出る

解決方法

下記のように SNS の Topic Policy を変更する。

"Condition": {
  "ArnLike": {
    "aws:SourceArn": "arn:aws:s3:*:*:HOGE_BUCKET"
  }
}

か

    {
      "Sid": "SendToSnsTopic",
      "Effect": "Allow",
      "Principal": {
        "Service": "s3.amazonaws.com"
      },
      "Action": "SNS:Publish",
      "Resource": "arn:aws:sns:REGION:AWS_ACCOUNT_ID:S3_BUCKET_NAME"
    }