I am trying to enable SMS message delivery logs in AWS SNS. But no matter what I do I get this error:
Couldn't set text messaging attributes. Error code: AuthorizationError
- Error message: You are not authorized to perform actions for the provided bucket
I have tried numerous IAM roles (including admin access role) and I am logged in as the root account owner.
What might I be missing? What can I try?
Thank you!
I found this specific documentation that solved it for me: https://docs.aws.amazon.com/sns/latest/dg/sms_stats_usage.html#example_bucket_policy
The key is that the bucket policy needs to list sns.amazonaws.com as the principal, and really only needs to allow these 3 actions to finish configuring SMS:
{ "Version": "2012-10-17", "Id": "Policy1653549854620", "Statement": [ { "Sid": "Stmt1653549853470", "Effect": "Allow", "Principal": { "Service": "sns.amazonaws.com" }, "Action": "s3:*", "Resource": "arn:aws:s3:::BUCKETNAME" } ] }