Search code examples
amazon-web-servicesamazon-s3cloudamazon-sqs

Unable to attach Amazon SQS to Amazon S3 event notification

I have 2 different buckets. One is able to attach Amazon SQS to event notification and the second doesn't.

SQS permissions is broad enough. It's smth with S3 bucket. But I can't figure it out.

There are no "Deny" clauses in bucket policy. There are several additional ACL though...

This is my Access Policy stored in SQS:

{
  "Version": "2008-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "s3.amazonaws.com"
      },
      "Action": "*",
      "Resource": "*"
    }
  ]
}

This is the error: enter image description here

Solution

  • I contacted AWS Support. There provided undocumented details:

    So, each time an S3 event is edited or saved, there will be validation of the current destinations since the PutBucketNotification will replace the existing notification configuration and not update it.

    So I had another legacy S3 event that didn't have correct permissions. I removed it, and everything is working right now. Thank you to all who tried to help :)