SNS HTTPS Subscription - Invalid parameter: Unreachable Endpoint

Question

I am trying to set up a subscription for email bounces towards my EDM software. When I manually create the subscription for HTTPS and enter the valid endpoint URL with https://, I receive an error stating the endpoint is unreachable.

I tested this from my local machine via `curl -X POST https://my.domain/edm/bounces.php -H "Content-Type:text/plain; charset=UTF-8" --data {"x":"y"} -v`
and get a `200 OK` message, meaning the POST actually worked.

My domain is hosted with Route53, my instance is on Lightsail, my IAM user has full SES and SNS access, there should be no problem getting this set up, yet the subscription setup does not work from the SNS Subscription GUI. Since it works from my terminal, I am thinking there may be some firewall issue involved, even though it should not be.

Any advice on how to go about this now?
Thanks

Answer

Can you confirm whether this HTTPs endpoint for which you are trying to create subscription for you SNS Topic is private endpoint or is accessible over outside internet.

Amazon SNS functioning is designed in such a way that if you're subscribing an HTTP endpoint that isn't publicly accessible to an SNS topic, then you receive the following error [1]:

"An error occurred (InvalidParameter) when calling the Subscribe operation: Invalid parameter: Unreachable Endpoint"

I would like to share that, currently SNS needs HTTP/S endpoints to be available on a public network before it can successfully subscribe them to the SNS Topic.  Private HTTP/S endpoints are not directly supported in the SNS currently.

One more thing to confirm, the security-group for your EDM SOFTWARE, does it allow inbound traffic from all IPv4 address for port 443.

[1] https://aws.amazon.com/premiumsupport/knowledge-center/sns-topic-https-endpoints-notification/

SNS HTTPS Subscription - Invalid parameter: Unreachable Endpoint

相關內容