SNS SMS fails: No origination identity available to send to destination number — Sender ID is active

0

We are using Amazon SNS to send SMS messages in the EU (Ireland) region.

Our Sender ID is already registered and confirmed active by AWS Support.

Our account has exited SMS sandbox mode, and delivery status logging is working, but when we attempt to send messages with the Sender ID, we get this error:

"No origination identity available to send to destination number"

It appears that although the Sender ID is active, it is not linked as an origination identity in Amazon Pinpoint SMS and Voice V2, which SNS now uses after sandbox removal.

We don’t have access to the Pinpoint SMS V2 origination identity page in the console, and Support referred us to the documentation and forums.

How can we ensure our Sender ID is fully usable with SNS under the current Pinpoint V2 infrastructure?

Thank you!

1 Answer
0

The error you're encountering suggests that there might be an issue with the permissions or resource policy associated with your Sender ID. Even though your Sender ID is registered and confirmed active, it may not have the correct permissions to be used by Amazon SNS for sending SMS messages.

To resolve this issue, you need to update the resource policy for your Sender ID to grant the necessary permissions to SNS. Here's what you should do:

  1. Navigate to the AWS End User Messaging console.

  2. Go to the "Sender IDs" section.

  3. Select your active Sender ID.

  4. Update the resource policy for the Sender ID by adding a JSON policy that grants permissions to SNS (and Pinpoint if you plan to use it) to use this origination identity.

The policy should look similar to this:

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AllowSNSAndPinpoint", "Effect": "Allow", "Principal": { "Service": [ "sns.amazonaws.com", "pinpoint.amazonaws.com" ] }, "Action": [ "sms-voice:SendTextMessage", "sms-voice:SendVoiceMessage" ], "Resource": "arn:aws:sms-voice:eu-west-1:YOUR_ACCOUNT_ID:sender-id/YOUR_SENDER_ID/COUNTRY_CODE" } ] }

Make sure to replace YOUR_ACCOUNT_ID, YOUR_SENDER_ID, and COUNTRY_CODE with your specific details. The region (eu-west-1 in this example) should be set to the EU (Ireland) region you're using.

If you don't have access to the console to make these changes, you may need to use the AWS CLI or SDK to update the resource policy. You can use the PutResourcePolicy API call from the Pinpoint SMS and Voice V2 service to do this programmatically.

After updating the resource policy, try sending an SMS message again through SNS. This should resolve the "No origination identity available" error and allow you to use your Sender ID with SNS under the current Pinpoint V2 infrastructure.

If you continue to experience issues after updating the resource policy, it would be advisable to open a new support case with AWS, providing details of the steps you've taken and any error messages you receive.
Sources
"NO_ORIGINATION_IDENTITIES_FOUND" error when trying to send messages via SNS or Pinpoint even though the required origination identity is acquired in the account. | AWS re:Post
"The provided number does not exist or does not belong to the account." error when trying to send messages via SNS or Pinpoint even though the required origination identity is acquired in the account. | AWS re:Post
A Guide to the New Resource Policies for SMS Origination Identities in AWS | AWS Messaging & Targeting Blog

profile picture
answered 20 days ago
  • We are attempting to use it to send SMS messages through Amazon SNS, using the AWS.SNS.SMS.SenderID message attribute. However, we continue to receive the following error in CloudWatch logs: "providerResponse": "No origination identity available to send to destination number" we attempted to attach a resource policy to the Sender ID that includes Principal: { "Service": "sns.amazonaws.com" }, as suggested. However, this fails with: Validation Error Occurred - Reason="INVALID_PARAMETER" Fields="policy"

    We now understand that the Sender ID resource policy does not allow the Principal field, and that access by SNS or Pinpoint must be handled internally by AWS. Can you please confirm:

    Whether our sender id is registered as an origination identity in Amazon Pinpoint SMS and Voice V2

    If not, can it be registered or linked manually on your side to allow use with SNS?

    If any explicit resource policy is needed, what would the valid format be (given Principal is not allowed)?

    This Sender ID is critical for transactional messaging via SNS. We are using region eu-west-1.

    Thank you for your support.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions