Dispatch

All Sections

Configuring Amazon SNS targets

Content

    Configuration options

    Topic ARN

    The ARN of your topic, as shown in the SNS console

    Role ARN

    Your AWS IAM role that Dispatch will assume in order to publish messages to your topic

    You can find the configuration options common for all targets in the main configuration page.

    Allowing Dispatch to send messages to your topic

    Dispatch needs to assume a AWS IAM role that you provide in order to deliver messages to your SNS topics. This role needs the following permissions:

    sns:Publish

    In order to publish scheduled messages

    sns:GetTopicAttributes

    In order to verify that the topic exists

    This role also needs a trust policy that allows Dispatch to assume the role. When assuming your role, Dispatch will pass your MolnX Organization ID as the External ID. You can read more about External ID and how it ensures secure role delegation in the AWS documentation.

    You can find your MolnX Organization ID in the organization drop down when signed into the MolnX portal.

    The AWS Account Id used by Dispatch when assuming the role is 585672910417.

    Example role policy

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "AllowSNSActions",
    "Effect": "Allow",
    "Action": [
    "sns:Publish",
    "sns:GetTopicAttributes"
    ],
    "Resource": "arn:aws:sns:us-east-1:1122334455:my-topic
    Change to match the ARN of your SNS topic
    "
    }
    ]
    }

    Example trust policy

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "AllowMolnXAccess",
    "Effect": "Allow",
    "Principal": {
    "AWS": "arn:aws:iam::585672910417:root
    This is the AWS account that Dispatch will use to access your IAM role
    "
    },
    "Action": "sts:AssumeRole",
    "Condition": {
    "StringEquals": {
    "sts:ExternalId": "IA-O-aabbcc1122
    Change to match your MolnX organization ID
    "
    }
    }
    }
    ]
    }