创建通知集成以向 Amazon SNS 主题发送通知¶

要向 Amazon SNS 主题发送通知，您必须为该主题创建通知集成。要这样做，请执行以下操作：

Create an Amazon SNS topic
Create the IAM policy that grants permission to publish to this topic.
Create the IAM role that you attach to this policy.
Create a notification integration.
Grant Snowflake access to the topic.

Note

Currently, this feature is limited to Snowflake accounts hosted on AWS.

创建 Amazon SNS 主题¶

在您的 AWS 账户中创建一个 SNS 主题来处理通知。记录 SNS 主题的 Amazon Resource Name (ARN)。

Note

仅支持标准 SNS 主题。请勿创建用于错误通知的 SNS FIFO （先进先出）主题。目前，发送到 FIFO 主题的错误通知会默默失败。

To reduce latency and avoid data egress charges for sending notifications across regions, we recommend creating the SNS topic in the same region as your Snowflake account.

For instructions, see the Creating an Amazon SNS topic (https://docs.aws.amazon.com/sns/latest/dg/sns-create-topic.html) in the SNS documentation.

创建 IAM 策略¶

创建 AWS Identity and Access Management (IAM) 策略，授予发布到 SNS 主题的权限。该策略规定了以下操作：

sns:publish: Publish to the SNS topic.

登录 AWS 管理控制台。
From the home dashboard, choose Identity & Access Management (IAM).
Choose Account settings from the left-hand navigation pane.
Expand the Security Token Service Regions list, find the AWS region corresponding to the region where your account is located, and choose Activate if the status is Inactive.
Choose Policies from the left-hand navigation pane.
Select Create Policy.
Select the JSON tab.
添加策略文档，规定可在 SNS 主题上采取的操作。

将以下文本复制并粘贴到策略编辑器中：

{
  "Version": "2012-10-17",
  "Statement": [
 {
   "Effect": "Allow",
   "Action": [
     "sns:Publish"
   ],
   "Resource": "<sns_topic_arn>"
 }
  ]
}

Replace sns_topic_arn with the ARN of the SNS topic that you created earlier.

Select Review policy.
Enter the policy name (e.g. snowflake_sns_topic) and an optional description, and select Create policy.

创建 AWS IAM 角色¶

创建 AWS IAM 角色，为其分配 SNS 主题的权限。

登录 AWS 管理控制台。
From the home dashboard, choose Identity & Access Management (IAM):
Choose Roles from the left-hand navigation pane.
Select Create role.
Select Another AWS account as the trusted entity type.
In the Account ID field, enter your own AWS account ID temporarily.
Select the Require external ID option. This option enables you to grant permissions on your Amazon account resources (i.e. SNS) to a third party (i.e. Snowflake).

For now, enter a dummy ID such as 0000. Later, you will modify the trust relationship and replace the dummy ID with the external ID for the Snowflake IAM user generated for your account. A condition in the trust policy for your IAM role allows your Snowflake users to assume the role using the notification integration object you will create later.
Select Next.
Locate the policy that you created earlier, and select this policy.
Select Next.
Enter a name and description for the role, and select Create role.
Record the Role ARN value located on the role summary page. You will specify this value in one or more later steps.