Al usar AWS re:Post, aceptas las AWS re:Post Términos de uso

Problem with Giving SES Permission to Publish to Kinesis Data Firehose Delivery Stream

0

To view my email sending history in SES, I tried to create opensearch referring to https://aws.amazon.com/premiumsupport/knowledge-center/ses-email-sending-history/?nc1=h_ls . As for creating SES, however, that document does not introduce how to create IAM role to publish to Kinesis firehose delivery steam. How do I create that IAM role?

1 Respuesta
0

Hi! Good question,

From the page you've linked as well, the SES section covers the following under Create an Amazon SES Configuration Set:

  • (Part of Step 7): For IAM role, select Let SES make a new role. Enter a name for the role, and then choose Create Role. (As you've mentioned, this is where the guidance stops).
  • The role will need 2 specific things: 1. The Trust Relationship configured to allow SES to use the role. 2. The Permissions for the Role to write to Firehose.
  • The Trust Relationship should look like the following (Note the Conditions for SourceAccount and SourceArn to limit the usage for your specific purpose):
 {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "ses.amazonaws.com"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "AWS:SourceAccount": "123456789012",
          "AWS:SourceArn": "arn:aws:ses:us-east-1:123456789012:configuration-set/configuration-set-name"
        }
      }
    }
  ]
}

And the policy with permissions (either Inline or Managed Policy) should look like the following:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Action": [
        "firehose:PutRecordBatch"
      ],
      "Resource": [
        "arn:aws:firehose:us-east-1:123456789012:deliverystream/delivery-stream-name"              
      ]
    }
  ]
}

Keep in mind you'll need to replace the region, account number, delivery-stream-name and configuration-set-name in your ARNs with what you're using.

For more information, check out: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/event-publishing-add-event-destination-firehose.html

respondido hace 3 años

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas