Amazon Simple Notification Service
Developer Guide (API Version 2010-03-31)

Publishing to Amazon SNS Topics from Amazon Virtual Private Cloud

If you use Amazon Virtual Private Cloud (Amazon VPC) to host your AWS resources, you can establish a private connection between your VPC and Amazon SNS. With this connection, you can publish messages to your Amazon SNS topics without sending them through the public internet.

Amazon VPC is an AWS service that you can use to launch AWS resources in a virtual network that you define. With a VPC, you have control over your network settings, such the IP address range, subnets, route tables, and network gateways. To connect your VPC to Amazon SNS, you define an interface VPC endpoint. This type of endpoint enables you to connect your VPC to AWS services. The endpoint provides reliable, scalable connectivity to Amazon SNS without requiring an internet gateway, network address translation (NAT) instance, or VPN connection. For more information, see Interface VPC Endpoints in the Amazon VPC User Guide.

After you add an interface VPC endpoint, you can publish messages to your topics while keeping the network traffic within the AWS network.

Before You Begin

The following information is for users of Amazon VPC. For more information, and to get started with creating a VPC, see Getting Started With Amazon VPC in the Amazon VPC User Guide.

Creating an Amazon VPC Endpoint for Amazon SNS

To create an Amazon SNS endpoint in your VPC, see Creating an Interface Endpoint in the Amazon VPC User Guide. The Amazon VPC documentation helps you create and configure an endpoint by using the Amazon VPC console or the AWS CLI.

When you create your endpoint, specify that Amazon SNS is the service that you want your VPC to connect to. In the Amazon VPC console, the service names vary based on the chosen region. For example, if you chose US East (N. Virginia), the service name is

Testing the Connection Between Your VPC and Amazon SNS

After you create an endpoint for Amazon SNS, you can publish messages from your VPC to your Amazon SNS topics. To test this connection, do the following:

  1. Connect to an Amazon EC2 instance that resides in your VPC. For information about connecting, see Connect to Your Linux Instance or Connecting to Your Windows Instance in the Amazon EC2 documentation.

    For example, to connect to a Linux instance by using an SSH client, run the following command from a terminal:

    $ ssh -i ec2-key-pair.pem ec2-user@instance-hostname


    • ec2-key-pair.pem is the file that contains the key pair that Amazon EC2 provided when you created the instance.

    • instance-hostname is the public hostname of the instance. To get the hostname in the Amazon EC2 console: Choose Instances, select your instance, and find the value for Public DNS (IPv4).

  2. From your instance, use the Amazon SNS publish command with the AWS CLI. You can send a simple message to a topic with the following command:

    $ aws sns publish --region aws-region --topic-arn sns-topic-arn --message "Hello"


    • aws-region is the AWS Region that the topic is located in.

    • sns-topic-arn is the Amazon Resource Name (ARN) of the topic. To get the ARN from the Amazon SNS console: Choose Topics, find your topic, and find the value in the ARN column.

    If the message is successfully received by Amazon SNS, the terminal prints a message ID, like the following:

    { "MessageId": "6c96dfff-0fdf-5b37-88d7-8cba910a8b64" }