SNS alert and daily summary not being received "not authorized to perform: SNS:Publish on resource"

CPM Alert and daily summary are not being received through the AWS SNS system.

In CPM server logging you may see this message:

ERROR:  send_push_alert_inner(.\cpmserver\cpm\notifications.py:451)  Failed publishing alert: License will expire on XX-XX-XXXX, please contact N2WS to renew. Reason: BotoServerError: 403 Forbidden
{"Error":{"Code":"AuthorizationError","Message":"User: arn:aws:sts::XXXXXXXXXXXX:assumed-role/N2WS-CPM-Role/X-XXXXXXXXXXXXX is not authorized to perform: SNS:Publish on resource: arn:aws:sns:XX:XXXXXXXXXXXX:N2WS-Notifications","Type":"Sender"},"RequestId":"XXXX"}

The problem could be permissions within the AWS account itself or the topic policy in SNS.

Please first double check the AWS account has the following permissions:

"sns:CreateTopic",
"sns:GetTopicAttributes",
"sns:Publish",
"sns:SetTopicAttributes",
"sns:Subscribe"

Then check that the SNS topic policy allows permissions for "Everyone", or the specific user:

• Related Articles

• Daily Summary/Cleanup Log may alert of false Cleanup issues

  You may receive the following warning in Daily Summary or Cleanup Log: Warning - Cleanup did not mark any backups for deletion for policy DailyPolicy, because out of 3 completed backups, only 1 were marked as successful This warning may be triggered ...

• "Unprotected resources" report creation may be constantly reported in the Daily Summary

  Issue: In the Daily Summary email report, you may see this message repeating:   Info - The unprotected resources report creation is complete. Info - The unprotected resources report creation is complete. Info - The unprotected resources report ...

• "Cost Explorer Query Failure" alert in CPM 3.0

  After upgrading to CPM 3.0, you may see an Alert in the console which says "Cost Explorer Query Failure".  If you view the Alert, you will see an AccessDeniedException: The cause of this alert is due to the CPM role permissions not being updated with ...

• DR of an encrypted snapshot may fail with the “Not Authorized to use key” error

  Problem: DR copy may fail with errors like “Not authorized to perform” or “not authorized to use key” Example in CPM backup log: 10-24-18 10:11:04 - Error - Volume DR copy snapshot failed for region US East (N. Virginia), snapshot ...

• Instance recovery may fail with the error "You are not authorized to perform this operation"

  Instance recovery may fail with the error "You are not authorized to perform this operation" : ERROR: recover_ebs_based_instance(.\cpmserver\cpm\recovery.py:749) Run_instance failed. Exception: EC2ResponseError: 403 Forbidden <?xml version="1.0" ...