shimo

<p>CodepipelineからのSNSのアクセスポリシーでハマった</p>
<p>Edit notification rule画面のCreate target で作るものがかんたん。</p>
<p><img src="https://storage.googleapis.com/zenn-user-upload/7caaaf702735-20230327.png" loading="lazy" class="md-img"></p>
<p><code> "Service": "codestar-notifications.amazonaws.com"</code> にする</p>
<div class="code-block-container"><pre><code>  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "codestar-notifications.amazonaws.com"
      },
      "Action": "SNS:Publish",
      "Resource": "arn:aws:sns:REGION:ACCOUNT_ID:TOPIC_NAME"
    },
</code></pre></div><p>CodePipelineにすると間違い</p>
<div class="code-block-container"><pre><code>      "Principal": {
        "Service": "codepipeline.amazonaws.com"
      },
</code></pre></div><p>AWS: にすると間違い</p>
<div class="code-block-container"><pre><code>      "Principal": {
        "AWS": "*"
      },
</code></pre></div><p>SNSは小文字でもよいはず？</p>
<div class="code-block-container"><pre><code>    "Action": "sns:Publish",
</code></pre></div>

<p>Notification target statusの判定は、実行しないと変わらない。</p>
