AWS Simple Notification Service Sink¶
The IntegrationSink
supports the Amazon Web Services (AWS) Simple Notification Service (SNS) service, through its aws.sns
property.
Amazon credentials¶
There are two options for authenticating to AWS.
Access key and secret¶
To use an IAM User access key and secret, create a Kubernetes Secret
in the namespace of the resource. The Secret
can be created like:
kubectl -n <namespace> create secret generic my-secret --from-literal=aws.accessKey=<accessKey> --from-literal=aws.secretKey=<secretKey>
IntegrationSink
.spec.aws.auth
section reference the Secret
like this:
auth:
secret:
ref:
name: "my-secret"
Pod Default Credentials¶
If you are using IAM Role for Service Accounts or Pod Identity, you can create a Kubernetes ServiceAccount
and associate it with an AWS IAM role. Then in the IntegrationSink
.spec.aws.auth
section specify the name of the ServiceAccount
. This will assign the ServiceAccount
to the Deployment
resource created for the IntegrationSink
.
auth:
serviceAccountName: "my-service-account"
AWS SNS Sink Example¶
Below is an IntegrationSink
to send data to AWS SNS:
apiVersion: sinks.knative.dev/v1alpha1
kind: IntegrationSink
metadata:
name: integration-sink-aws-sns
namespace: knative-samples
spec:
aws:
sns:
arn: "my-topic"
region: "eu-north-1"
auth:
secret:
ref:
name: "my-secret"
aws.sns
object we define the name of the topic (or arn) and its region. The credentials for the AWS service are referenced from the my-secret
Kubernetes Secret
More details about the Apache Camel Kamelet aws-sns-sink.