@@ -32,15 +32,15 @@ arn:aws:sns:us-east-1:123456789012:my-topic
3232
33332 . Create an AWS IAM role with publish permission to that topic. Sample IAM policy:
3434
35- ``` json title="IAM role policy (replace the ARN with your own topic ARN)"
35+ ``` json title="IAM role policy (replace <YOUR TOPIC ARN> with your topic ARN created above )"
3636{
3737 "Version" : " 2012-10-17" ,
3838 "Statement" : [
3939 {
4040 "Sid" : " OryNetworkEventStreamPublish" ,
4141 "Effect" : " Allow" ,
4242 "Action" : [" sns:Publish" ],
43- "Resource" : [" arn:aws:sns:us-east-1:123456789012:my-topic " ]
43+ "Resource" : [" <YOUR TOPIC ARN> " ]
4444 }
4545 ]
4646}
@@ -52,10 +52,9 @@ Record the ARN of the IAM role you created, for example:
5252arn:aws:iam::123456789012:role/ory-network-event-streamer
5353```
5454
55- 3 . Attach the following trust policy to the IAM role you created in step 2, replacing ` b21b757b-7d8e-4864-bb7b-800f5fad7aa6 ` with
56- your project ID:
55+ 3 . Attach the following trust policy to the IAM role you created in step 2, replacing ` <YOUR PROJECT UUID> ` with your project ID:
5756
58- ``` json title="Trust policy (replace b21b757b-7d8e-4864-bb7b-800f5fad7aa6 with your project ID )"
57+ ``` json title="Trust policy (replace <YOUR PROJECT UUID> )"
5958{
6059 "Version" : " 2012-10-17" ,
6160 "Statement" : [
@@ -67,7 +66,7 @@ arn:aws:iam::123456789012:role/ory-network-event-streamer
6766 "Action" : " sts:AssumeRole" ,
6867 "Condition" : {
6968 "StringEquals" : {
70- "sts:ExternalId" : " b21b757b-7d8e-4864-bb7b-800f5fad7aa6 "
69+ "sts:ExternalId" : " <YOUR PROJECT UUID> "
7170 }
7271 }
7372 }
@@ -81,10 +80,10 @@ This allows Ory Network to assume the role in your AWS account, and publish to y
8180
8281``` shell
8382ory create event-stream
84- --project " $project_id " \
83+ --project " $YOUR_PROJECT_ID " \
8584 --type sns \
86- --aws-sns-topic-arn " arn:aws:sns:us-east-1:123456789012:my-topic " \
87- --aws-iam-role-arn " arn:aws:iam::123456789012:role/ory-network-event-streamer "
85+ --aws-sns-topic-arn " $YOUR_TOPIC_ARN " \
86+ --aws-iam-role-arn " $YOUR_IAM_ROLE_ARN "
8887```
8988
90895 . You are now ready to receive events in your AWS SNS topic!
0 commit comments