Pinpoint test message for OTP

0

I am trying to send test OTP messages from pinpoint console. It shows that the SMS for sent successfully but I did not receive it. I've completed the sender ID registration. Can anyone suggest any path for the same?

almond
asked 10 months ago399 views
3 Answers
0

Hi almond.

Have you tried the following troubleshooting steps?

I hope this helps.

profile pictureAWS
EXPERT
answered 10 months ago
  • Hi Jose,

    Greatly appreciate for all the points that were mentioned with regards to the concern I raised. I am able to send TEST Messages from my sender ID. But when I trying to integrate the send_otp_message API with Cloudshell as well as my code, I am receiving a similar error for both which is as follows :- arn:aws:sts:::assumed-role/Role-name/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1::apps/APP_ID/otp I have cross checked my permissions for the role and are in place. Can you suggest anything regarding that?

  • Hi almond. Could you share what your role looks like (the policies attached to it)? (Make sure you redact any sensitive information).

  • { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "mobileanalytics:", "mobiletargeting:" ], "Resource": [ "arn:aws:mobiletargeting:ap-south-1::apps//otp", "arn:aws:mobiletargeting:ap-south-1::apps//verify-otp" ], "Condition": { "IpAddress": { "aws:SourceIp": [] } } } ] }

0

Hi almond.

Try the following modifications:

{
    "Version": "2012-10-17",
    "Statement": [
      {
         "Sid": "VisualEditor0",
         "Effect": "Allow",
         "Action": [
              "mobileanalytics:*",
              "mobiletargeting:*"
          ],
          "Resource": [
              "arn:aws:mobiletargeting:ap-south-1::*"
          ],
          "Condition": {
             "IpAddress": {
                 "aws:SourceIp": []
             }
         }
     }
    ]
}

The changes are:

  • Allow all moblieanalitics and mobiletargeting actions.
  • Allow all mobiletargeting resources in the ap-south-1 region
  • You can alternatively try to set the resources to "*" to allow any resource.

This is more permissive than what you had before but it can help to achieve the result you want now. From there make sure to tighten the security until you get to a point where only the resources you need can do the required actions.

I hope this helps.

profile pictureAWS
EXPERT
answered 10 months ago
  • Hi Jose,

    Despite making the changes to the existing policy permissions and replacing them with the above mentioned changes that were suggested, I am still getting the following error :-

    AccessDeniedException: User: arn:aws:sts::----:assumed-role/send-otp-pinpoint-RR/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1:---:apps/----/otp

0

Almond, this looks to me like a permissions issue.

Please review the following article from the documentation to validate the required permissions for your use case.

I hope this helps.

profile pictureAWS
EXPERT
answered 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions