connection timeout to SNS URL

Question

I am trying to allow my application to reach sns through a newly created interface sns vpc endpoint. The application has the same security groups as the sns vpc endpoint and is in the same subnet group specified when endpoint was created. We do not have specific NACL rules that would block the services IP yet when I try and use aws sns publish --region region --topic-arn sns arn --message "test" , we receive the endpoint timeout url. Is there something we may have missed?

Answer

Can you please create a separate Security Group for the SNS VPC end-point that allows HTTPS (443) inbound from the security group of the machine where your application is running? Also make sure that the VPC endpoint for SNS is in the correct region. As Chirag has mentioned, I would also make sure IAM permissions allow the role of the application to send SNS messages.

Answer

Hello,

Did you check the SG and allow the same in the SNS for the new application to access ? 
Are you using the correct IAM role for the application or Does that IAM role have access to SNS ?

Link- https://docs.aws.amazon.com/sns/latest/dg/sns-authentication-and-access-control.html -- [1]

You can use X-Ray with Amazon SNS to trace and analyze the messages that travel through your application.

connection timeout to SNS URL

相關內容