Create an IAM Policy

Since both the methods need an IAM policy, let's create one now.

1. Navigate to the AWS IAM Console.

2. Select Policies > Create Policy.

3. In the editor, enter the below JSON data.

   Policy JSON for SNS

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": "iam:GetUser",
               "Resource": "*"
           },
           {
               "Effect": "Allow",
               "Action": "sns:ListTopics",
               "Resource": "*"
           },
           {
               "Effect": "Allow",
               "Action": [
                   "sns:Subscribe",
                   "sns:Unsubscribe",
                   "sns:SetSubscriptionAttributes",
                   "sns:Publish"
   		"sns:GetSubscriptionAttributes",
   		sns:GetTopicAttributes",
   		"sns:ListSubscriptionsByTopic"
               ],
              "Resource": "arn:aws:sns:us-east-1:111117222221:reltio_workato_sns_topic"
           }
       ]
   }

   Policy JSON for SQS

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": "sqs:ListQueues",
               "Resource": "*"
           },
           {
               "Effect": "Allow",
               "Action": [
                   "sqs:ReceiveMessage",
                   "sqs:DeleteMessage",
                   "sqs:GetQueueAttributes",
                   "sqs:SendMessage"
               ],
               "Resource": "arn:aws:sqs:us-east-1:11111156789:reltio_workato_sqs_queue"
           }
       ]
   }

4. Enter the policy name and description.

5. Click Create policy.

   Note: In the Resource parameter, use your own resources for both the SNS and SQS policies.

IAM roles to authenticate

If you choose IAM roles for authentication, you must create an IAM role and then retrieve it.

To create an IAM role:

1. Navigate to the AWS IAM Console.

2. Select Roles > Create role.

3. In the Trusted entity type field, select AWS account.

4. Select Another AWS account, and enter the Workato AWS account ID.

5. Select the Require external ID checkbox.

6. Enter the Workato generated external ID. For more information, see the How to retrieve your Workato ID section below.

7. Click Next.

8. Select the policy you created, and click Next.

9. In the Role name field, enter the role name.

10. In the Description field, enter the role description.

11. Click Create role.

To retrieve the IAM role ARN:

1. Navigate to the AWS IAM Console.

2. Select Roles.

3. In the Search bar, search the IAM role with ARN that you plan to use for the connection.

4. Select the role from the list displayed.

5. Copy the IAM Role ARN. Use this role in the connection setup when you are creating an Amazon connection in Workat.

How to retrieve your Workato ID:

1. Log into your Workato account.

2. Open an existing project or create a new one.

3. In the project, create a connection.

4. Search for SNS, and from the list of results, select Amazon SNS.

5. In the Authentication type, select IAM Role auth.

6. In the Using IAM Role authorization section, you will see the workato ID.

Access keys to authenticate

If you choose Access keys for authentication, you must first create an AWS user and then retrieve user access key ID and secret access keys.

To create an AWS user:

1. Navigate to the AWS IAM Console.

2. Select User > Create User.

3. Enter a user name and click Next.

4. Select the Attach policies directly option.

5. Search and select the policy you created earlier.

6. Click Next.

7. Click Create User.

To retrieve user access key and secret access key:

1. Navigate to the AWS IAM Console.

2. Select User.

3. Search and select the user you created.

4. On the Summary page, select the Security Credentials tab.

5. Select Create Access Key to generate the Access key ID and Secret Access Key.

6. Select the application running outside AWS, and select Next.

7. In the Description tag value field, enter the reason for creating this access key, and where you plan to use it.

8. Click Create access key.

   Note: Encode special characters in the AWS Secret Access Key to use in the Reltio Console. For example, if your secret access key is IPMK2jmtIvfR+mc#QgEq/47Ig/OCN8BTo4rkVPva, the secreate access key with the encoded special characters will be IPMK2jmtIvfR%2Bmc%23QgEq%2F47Ig%2FOCN8BTo4rkVPva,. For more information, see the Encodings table with list of special characters in topic Message Streaming Provider.