Pinpoint test message for OTP

0

I am trying to send test OTP messages from pinpoint console. It shows that the SMS for sent successfully but I did not receive it. I've completed the sender ID registration. Can anyone suggest any path for the same?

almond
已提问 1 年前417 查看次数
3 回答
0

Hi almond.

Have you tried the following troubleshooting steps?

I hope this helps.

profile pictureAWS
专家
已回答 1 年前
  • Hi Jose,

    Greatly appreciate for all the points that were mentioned with regards to the concern I raised. I am able to send TEST Messages from my sender ID. But when I trying to integrate the send_otp_message API with Cloudshell as well as my code, I am receiving a similar error for both which is as follows :- arn:aws:sts:::assumed-role/Role-name/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1::apps/APP_ID/otp I have cross checked my permissions for the role and are in place. Can you suggest anything regarding that?

  • Hi almond. Could you share what your role looks like (the policies attached to it)? (Make sure you redact any sensitive information).

  • { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "mobileanalytics:", "mobiletargeting:" ], "Resource": [ "arn:aws:mobiletargeting:ap-south-1::apps//otp", "arn:aws:mobiletargeting:ap-south-1::apps//verify-otp" ], "Condition": { "IpAddress": { "aws:SourceIp": [] } } } ] }

0

Hi almond.

Try the following modifications:

{
    "Version": "2012-10-17",
    "Statement": [
      {
         "Sid": "VisualEditor0",
         "Effect": "Allow",
         "Action": [
              "mobileanalytics:*",
              "mobiletargeting:*"
          ],
          "Resource": [
              "arn:aws:mobiletargeting:ap-south-1::*"
          ],
          "Condition": {
             "IpAddress": {
                 "aws:SourceIp": []
             }
         }
     }
    ]
}

The changes are:

  • Allow all moblieanalitics and mobiletargeting actions.
  • Allow all mobiletargeting resources in the ap-south-1 region
  • You can alternatively try to set the resources to "*" to allow any resource.

This is more permissive than what you had before but it can help to achieve the result you want now. From there make sure to tighten the security until you get to a point where only the resources you need can do the required actions.

I hope this helps.

profile pictureAWS
专家
已回答 10 个月前
  • Hi Jose,

    Despite making the changes to the existing policy permissions and replacing them with the above mentioned changes that were suggested, I am still getting the following error :-

    AccessDeniedException: User: arn:aws:sts::----:assumed-role/send-otp-pinpoint-RR/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1:---:apps/----/otp

0

Almond, this looks to me like a permissions issue.

Please review the following article from the documentation to validate the required permissions for your use case.

I hope this helps.

profile pictureAWS
专家
已回答 10 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则