Is it possible to publish SNS messages from global AWS account to SQS queues in china account

Question

We've have our SNS topics in Singapore region and from there we want to publish to SQS queues in AWS china Nginxia region.

We tried to allow access to queues and topics via their respective policy. But giving principal as below is not allowed for china account it seems(we're not sure)

principal:{"AWS":"1111111"}

Is there any specific changes need to be done for china. Can anyone help with this?

The China region is not connected to the 'global' AWS, so it wouldn't be able to verify the 'global' credentials. I suspect that you'll need to create an IAM User in the China region and use those credentials when calling SNS. You can simply create the SNS client using those credentials, but use the normal 'global' credentials for everything else. — John Rotenstein
I understand that but my SNS is in global account and SQS is in China region will the sqs policy and sns policy not be sufficient to provide access for a cross account subscription? — Prashanna

AWS PS AWS PS · Accepted Answer · 2021-09-05T10:24:09

China AWS account is completely separated Region and not connected to other AWS regions, they are even managed by third-party cloud companies.

You would never be able to see AWS china regions included from regions list

Is it possible to publish SNS messages from global AWS account to SQS queues in china account

1 Answers