Grant Amazon SNS permissions to a CodeDeploy service role - Amazon CodeDeploy
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Grant Amazon SNS permissions to a CodeDeploy service role

Before your triggers can generate notifications, the service role you use in your CodeDeploy operations must be granted permission to access the Amazon SNS resources.

To grant Amazon SNS permissions to a service role

  1. Sign in to the Amazon Web Services Management Console and open the IAM console at https://console.amazonaws.cn/iam/.

  2. In the IAM console, in the navigation pane, choose Roles.

  3. Choose the name of the service role you use in your Amazon CodeDeploy operations.

  4. On the Permissions tab, in the Inline Policies area, choose Create Role Policy.

    –or–

    If the Create Role Policy button is not available, expand the Inline Policies area, and then choose click here.

  5. On the Set Permissions page, choose Custom Policy, and then choose Select.

  6. On the Review Policy page, in the Policy Name field, enter a name to identify this policy, such as SNSPublish.

  7. Paste the following into the Policy Document field: 

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "sns:Publish",
            "Resource": "*"
        }
    ]
}

  8. Choose Apply Policy.