Subscribing the Firehose delivery stream to the Amazon SNS topic - Amazon Simple Notification Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Subscribing the Firehose delivery stream to the Amazon SNS topic

This page describes how to create the following for the message archiving and analytics example use case:

  • The Amazon Identity and Access Management (IAM) role that allows the Amazon SNS subscription to put records on the Amazon Data Firehose delivery stream

  • The Firehose delivery stream subscription to the SNS topic

To create the IAM role for the Amazon SNS subscription

  1. Open the Roles page of the IAM console.

  2. Choose Create role.

  3. For Select type of trusted entity, choose Amazon service.

  4. For Choose a use case, choose SNS. Then choose Next: Permissions.

  5. Choose Next: Tags.

  6. Choose Next: Review.

  7. On the Review page, for Role name, enter ticketUploadStreamSubscriptionRole. Then choose Create role.

  8. When the role is created, choose its name (ticketUploadStreamSubscriptionRole).

  9. On the role's Summary page, choose Add inline policy.

  10. On the Create policy page, choose the JSON tab, and then paste the following policy into the box:

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "firehose:DescribeDeliveryStream",
                "firehose:ListDeliveryStreams",
                "firehose:ListTagsForDeliveryStream",
                "firehose:PutRecord",
                "firehose:PutRecordBatch"
            ],
            "Resource": [
                "arn:aws-cn:firehose:us-east-1:123456789012:deliverystream/ticketUploadStream"
            ],
            "Effect": "Allow"
        }
    ]
}

    In this policy, replace the Amazon Web Services account number (123456789012) with your own, and change the Amazon Region (us-east-1) accordingly.

  11. Choose Review policy.

  12. On the Review policy page, for Name, enter FirehoseSnsPolicy. Then choose Create policy.

  13. On the role's Summary page, note the Role ARN for later.

For more information on creating IAM roles, see Creating a role to delegate permissions to an Amazon service in the IAM User Guide.

To subscribe the Firehose delivery stream to the SNS topic

  1. Open the Topics page of the Amazon SNS console.

  2. On the Subscriptions, tab, choose Create subscription.

  3. Under Details, for Protocol, choose Amazon Data Firehose.

  4. For Endpoint, enter the Amazon Resource Name (ARN) of the ticketUploadStream delivery stream that you created earlier. For example, enter arn:aws-cn:firehose:us-east-1:123456789012:deliverystream/ticketUploadStream.

  5. For Subscription role ARN, enter the ARN of the ticketUploadStreamSubscriptionRole IAM role that you created earlier. For example, enter arn:aws-cn:iam::123456789012:role/ticketUploadStreamSubscriptionRole.

  6. Select the Enable raw message delivery check box.

  7. Choose Create subscription.

You've created the IAM role and SNS topic subscription. To continue, see Testing and querying the configuration.