Pinpoint test message for OTP

0

I am trying to send test OTP messages from pinpoint console. It shows that the SMS for sent successfully but I did not receive it. I've completed the sender ID registration. Can anyone suggest any path for the same?

almond
已提問 1 年前檢視次數 417 次
3 個答案
0

Hi almond.

Have you tried the following troubleshooting steps?

I hope this helps.

profile pictureAWS
專家
已回答 1 年前
  • Hi Jose,

    Greatly appreciate for all the points that were mentioned with regards to the concern I raised. I am able to send TEST Messages from my sender ID. But when I trying to integrate the send_otp_message API with Cloudshell as well as my code, I am receiving a similar error for both which is as follows :- arn:aws:sts:::assumed-role/Role-name/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1::apps/APP_ID/otp I have cross checked my permissions for the role and are in place. Can you suggest anything regarding that?

  • Hi almond. Could you share what your role looks like (the policies attached to it)? (Make sure you redact any sensitive information).

  • { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "mobileanalytics:", "mobiletargeting:" ], "Resource": [ "arn:aws:mobiletargeting:ap-south-1::apps//otp", "arn:aws:mobiletargeting:ap-south-1::apps//verify-otp" ], "Condition": { "IpAddress": { "aws:SourceIp": [] } } } ] }

0

Hi almond.

Try the following modifications:

{
    "Version": "2012-10-17",
    "Statement": [
      {
         "Sid": "VisualEditor0",
         "Effect": "Allow",
         "Action": [
              "mobileanalytics:*",
              "mobiletargeting:*"
          ],
          "Resource": [
              "arn:aws:mobiletargeting:ap-south-1::*"
          ],
          "Condition": {
             "IpAddress": {
                 "aws:SourceIp": []
             }
         }
     }
    ]
}

The changes are:

  • Allow all moblieanalitics and mobiletargeting actions.
  • Allow all mobiletargeting resources in the ap-south-1 region
  • You can alternatively try to set the resources to "*" to allow any resource.

This is more permissive than what you had before but it can help to achieve the result you want now. From there make sure to tighten the security until you get to a point where only the resources you need can do the required actions.

I hope this helps.

profile pictureAWS
專家
已回答 10 個月前
  • Hi Jose,

    Despite making the changes to the existing policy permissions and replacing them with the above mentioned changes that were suggested, I am still getting the following error :-

    AccessDeniedException: User: arn:aws:sts::----:assumed-role/send-otp-pinpoint-RR/TemporarySession is not authorized to perform: mobiletargeting:SendOTPMessage on resource: arn:aws:mobiletargeting:ap-south-1:---:apps/----/otp

0

Almond, this looks to me like a permissions issue.

Please review the following article from the documentation to validate the required permissions for your use case.

I hope this helps.

profile pictureAWS
專家
已回答 10 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南