search
LoginSignup
3

More than 3 years have passed since last update.

posted at

updated at

Organization

S3 の put event を sns に流そうとした時の Permissions error の解決方法

課題

Unable to validate the following destination configurations. Permissions on the destination topic do not allow S3 to publish notifications from this bucket. ( arn:aws:sns:ap-northeast-1:1234:sns_name)

などと出る

解決方法

下記のように SNS の Topic Policy を変更する。

"Condition": {
  "ArnLike": {
    "aws:SourceArn": "arn:aws:s3:*:*:HOGE_BUCKET"
  }
}

    {
      "Sid": "SendToSnsTopic",
      "Effect": "Allow",
      "Principal": {
        "Service": "s3.amazonaws.com"
      },
      "Action": "SNS:Publish",
      "Resource": "arn:aws:sns:REGION:AWS_ACCOUNT_ID:S3_BUCKET_NAME"
    }

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
What you can do with signing up
3