Durch die Nutzung von AWS re:Post stimmt du den AWS re:Post Nutzungsbedingungen

Problem with Giving SES Permission to Publish to Kinesis Data Firehose Delivery Stream

0

To view my email sending history in SES, I tried to create opensearch referring to https://aws.amazon.com/premiumsupport/knowledge-center/ses-email-sending-history/?nc1=h_ls . As for creating SES, however, that document does not introduce how to create IAM role to publish to Kinesis firehose delivery steam. How do I create that IAM role?

1 Antwort
0

Hi! Good question,

From the page you've linked as well, the SES section covers the following under Create an Amazon SES Configuration Set:

  • (Part of Step 7): For IAM role, select Let SES make a new role. Enter a name for the role, and then choose Create Role. (As you've mentioned, this is where the guidance stops).
  • The role will need 2 specific things: 1. The Trust Relationship configured to allow SES to use the role. 2. The Permissions for the Role to write to Firehose.
  • The Trust Relationship should look like the following (Note the Conditions for SourceAccount and SourceArn to limit the usage for your specific purpose):
 {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "ses.amazonaws.com"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "AWS:SourceAccount": "123456789012",
          "AWS:SourceArn": "arn:aws:ses:us-east-1:123456789012:configuration-set/configuration-set-name"
        }
      }
    }
  ]
}

And the policy with permissions (either Inline or Managed Policy) should look like the following:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Action": [
        "firehose:PutRecordBatch"
      ],
      "Resource": [
        "arn:aws:firehose:us-east-1:123456789012:deliverystream/delivery-stream-name"              
      ]
    }
  ]
}

Keep in mind you'll need to replace the region, account number, delivery-stream-name and configuration-set-name in your ARNs with what you're using.

For more information, check out: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/event-publishing-add-event-destination-firehose.html

beantwortet vor 3 Jahren

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen