@@ -32,15 +32,15 @@ arn:aws:sns:us-east-1:123456789012:my-topic
32
32
33
33
2 . Create an AWS IAM role with publish permission to that topic. Sample IAM policy:
34
34
35
- ``` json title="IAM role policy (replace the ARN with your own topic ARN)"
35
+ ``` json title="IAM role policy (replace <YOUR TOPIC ARN> with your topic ARN created above )"
36
36
{
37
37
"Version" : " 2012-10-17" ,
38
38
"Statement" : [
39
39
{
40
40
"Sid" : " OryNetworkEventStreamPublish" ,
41
41
"Effect" : " Allow" ,
42
42
"Action" : [" sns:Publish" ],
43
- "Resource" : [" arn:aws:sns:us-east-1:123456789012:my-topic " ]
43
+ "Resource" : [" <YOUR TOPIC ARN> " ]
44
44
}
45
45
]
46
46
}
@@ -52,10 +52,9 @@ Record the ARN of the IAM role you created, for example:
52
52
arn:aws:iam::123456789012:role/ory-network-event-streamer
53
53
```
54
54
55
- 3 . Attach the following trust policy to the IAM role you created in step 2, replacing ` b21b757b-7d8e-4864-bb7b-800f5fad7aa6 ` with
56
- your project ID:
55
+ 3 . Attach the following trust policy to the IAM role you created in step 2, replacing ` <YOUR PROJECT UUID> ` with your project ID:
57
56
58
- ``` json title="Trust policy (replace b21b757b-7d8e-4864-bb7b-800f5fad7aa6 with your project ID )"
57
+ ``` json title="Trust policy (replace <YOUR PROJECT UUID> )"
59
58
{
60
59
"Version" : " 2012-10-17" ,
61
60
"Statement" : [
@@ -67,7 +66,7 @@ arn:aws:iam::123456789012:role/ory-network-event-streamer
67
66
"Action" : " sts:AssumeRole" ,
68
67
"Condition" : {
69
68
"StringEquals" : {
70
- "sts:ExternalId" : " b21b757b-7d8e-4864-bb7b-800f5fad7aa6 "
69
+ "sts:ExternalId" : " <YOUR PROJECT UUID> "
71
70
}
72
71
}
73
72
}
@@ -81,10 +80,10 @@ This allows Ory Network to assume the role in your AWS account, and publish to y
81
80
82
81
``` shell
83
82
ory create event-stream
84
- --project " $project_id " \
83
+ --project " $YOUR_PROJECT_ID " \
85
84
--type sns \
86
- --aws-sns-topic-arn " arn:aws:sns:us-east-1:123456789012:my-topic " \
87
- --aws-iam-role-arn " arn:aws:iam::123456789012:role/ory-network-event-streamer "
85
+ --aws-sns-topic-arn " $YOUR_TOPIC_ARN " \
86
+ --aws-iam-role-arn " $YOUR_IAM_ROLE_ARN "
88
87
```
89
88
90
89
5 . You are now ready to receive events in your AWS SNS topic!
0 commit comments