IAM / messaging / sns

AWS SNS (IAM)

JSON →

AWSsnsmessaging

Amazon Simple Notification Service (SNS) coordinates message delivery between publishers and subscribers.

iamaws

docs ↗

Permissions

Actions in this service

sns:CreateTopic

sns:DeleteTopic

sns:ListTopics

sns:GetTopicAttributes

sns:TagResource

sns:UntagResource

sns:ListSubscriptions

sns:ListSubscriptionsByTopic

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "sns:CreateTopic", "sns:DeleteTopic", "sns:ListTopics", "sns:GetTopicAttributes", "sns:TagResource", "sns:UntagResource", "sns:ListSubscriptions", "sns:ListSubscriptionsByTopic" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid sns:* — grants full control including deletion of topics and subscriptions.

Avoid sns:Publish without conditions — can cause unexpected costs from message delivery.

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/sns/sns.json ↗