sns:ConfirmSubscription is a Write access-level action in the sns service. Grants permission to verify an endpoint owner's intent to receive messages by validating the token sent to the endpoint by an earlier Subscribe action
ARNs that sns:ConfirmSubscription can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants sns:ConfirmSubscription.
Filters access by tags associated with the resource
A minimal policy that allows sns:ConfirmSubscription. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSnsConfirmSubscription",
"Effect": "Allow",
"Action": "sns:ConfirmSubscription",
"Resource": "*"
}
]
}