Pinpoint test message for OTP

0

I am trying to send test OTP messages from pinpoint console. It shows that the SMS for sent successfully but I did not receive it. I've completed the sender ID registration. Can anyone suggest any path for the same?

almond
質問済み 1年前418ビュー
3回答
0

Hi almond.

Have you tried the following troubleshooting steps?

I hope this helps.

profile pictureAWS
エキスパート
回答済み 1年前
  • Hi Jose,

    Greatly appreciate for all the points that were mentioned with regards to the concern I raised. I am able to send TEST Messages from my sender ID. But when I trying to integrate the send_otp_message API with Cloudshell as well as my code, I am receiving a similar error for both which is as follows :- arn:aws:sts:::assumed-role/Role-name/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1::apps/APP_ID/otp I have cross checked my permissions for the role and are in place. Can you suggest anything regarding that?

  • Hi almond. Could you share what your role looks like (the policies attached to it)? (Make sure you redact any sensitive information).

  • { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "mobileanalytics:", "mobiletargeting:" ], "Resource": [ "arn:aws:mobiletargeting:ap-south-1::apps//otp", "arn:aws:mobiletargeting:ap-south-1::apps//verify-otp" ], "Condition": { "IpAddress": { "aws:SourceIp": [] } } } ] }

0

Hi almond.

Try the following modifications:

{
    "Version": "2012-10-17",
    "Statement": [
      {
         "Sid": "VisualEditor0",
         "Effect": "Allow",
         "Action": [
              "mobileanalytics:*",
              "mobiletargeting:*"
          ],
          "Resource": [
              "arn:aws:mobiletargeting:ap-south-1::*"
          ],
          "Condition": {
             "IpAddress": {
                 "aws:SourceIp": []
             }
         }
     }
    ]
}

The changes are:

  • Allow all moblieanalitics and mobiletargeting actions.
  • Allow all mobiletargeting resources in the ap-south-1 region
  • You can alternatively try to set the resources to "*" to allow any resource.

This is more permissive than what you had before but it can help to achieve the result you want now. From there make sure to tighten the security until you get to a point where only the resources you need can do the required actions.

I hope this helps.

profile pictureAWS
エキスパート
回答済み 1年前
  • Hi Jose,

    Despite making the changes to the existing policy permissions and replacing them with the above mentioned changes that were suggested, I am still getting the following error :-

    AccessDeniedException: User: arn:aws:sts::----:assumed-role/send-otp-pinpoint-RR/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1:---:apps/----/otp

0

Almond, this looks to me like a permissions issue.

Please review the following article from the documentation to validate the required permissions for your use case.

I hope this helps.

profile pictureAWS
エキスパート
回答済み 10ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ