本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
# Image Builder 中的 Amazon SNS 集成
Amazon Simple Notification Service (Amazon SNS) 是一项托管服务，提供从发布者向订阅者（也称为创建者和使用者）的异步消息传输。
您可以在基础设施配置中指定 SNS 主题。当您创建映像或运行管道时，Image Builder 可以向该主题发布有关您的映像状态的详细消息。当映像状态达到以下状态之一时，Image Builder 会发布一条消息：
+ `AVAILABLE`
+ `FAILED`
有关来自 Image Builder 的 SNS 消息示例，请参阅 [SNS 消息格式](#integ-sns-message)。如果您想要创建新的 SNS 主题，请参阅 *Amazon Simple Notification Service 开发人员指南*中的 [Amazon SNS 入门](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html)。
## 已加密的 SNS 主题
如果您的 SNS 主题已加密，则必须在 AWS KMS key 策略中授予 Image Builder 服务角色执行以下操作的权限：
+ `kms:Decrypt`
+ `kms:GenerateDataKey`
**注意**
如果 SNS 主题已加密，则加密此主题的密钥必须位于 Image Builder 服务运行的账户中。Image Builder 无法向使用其他账户密钥进行加密的 SNS 主题发送通知。
**KMS 密钥策略添加示例**
以下示例显示了您添加到 KMS 密钥策略的额外部分。将 Amazon 资源名称 (ARN) 用于您首次创建 Image Builder 映像时 Image Builder 在您的账户下创建的 IAM 服务相关角色。要了解有关 Image Builder 的服务相关角色的更多信息，请参阅 [使用 Image Builder 的 IAM 服务相关角色](image-builder-service-linked-role.md)。
```
{
"Statement": [{
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::123456789012:role/aws-service-role/imagebuilder.amazonaws.com/AWSServiceRoleForImageBuilder"
},
"Action": [
"kms:GenerateDataKey*",
"kms:Decrypt"
],
"Resource": "*"
}]
}
```
您可以使用以下其中一种方法来获取 ARN。
------
#### [ AWS 管理控制台 ]
要从中获取 Image Builder 在您的账户下创建的服务相关角色的 ARN AWS 管理控制台，请执行以下步骤：
1. 使用 [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/) 打开 IAM 控制台。
1. 在左侧导航窗格中，选择 **角色**。
1. 搜索 `ImageBuilder` 并从结果中选择以下**角色名称**：`AWSServiceRoleForImageBuilder`。此时将显示角色详情页面。
1. 要将 ARN 复制到剪贴板，请选择 ARN 名称旁边的图标。
------
#### [ AWS CLI ]
要从中获取 Image Builder 在您的账户下创建的服务相关角色的 ARN AWS CLI，请按如下方式使用 IAM [get-](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/get-role.html) role 命令。
```
aws iam get-role --role-name AWSServiceRoleForImageBuilder
```
**部分示例输出：**
```
{
"Role": {
"Path": "/aws-service-role/imagebuilder.amazonaws.com/",
"RoleName": "AWSServiceRoleForImageBuilder",
...
"Arn": "arn:aws:iam::123456789012:role/aws-service-role/imagebuilder.amazonaws.com/AWSServiceRoleForImageBuilder",
...
}
```
------
## SNS 消息格式
在 Image Builder 向您的 Amazon SNS 主题发布消息后，订阅该主题的其他服务可以对消息格式进行筛选并确定其是否符合进一步操作的标准。例如，成功消息可能会启动更新 AWS Systems Manager 参数存储或为输出 AMI 启动外部合规性测试工作流程的任务。
以下示例显示了 Image Builder 在管道构建运行至完成时发布的典型消息的 JSON 负载，并创建了一个 Linux 映像。
```
{
"versionlessArn": "arn:aws:imagebuilder:us-west-1:123456789012:image/example-linux-image",
"semver": 1237940039285380274899124227,
"arn": "arn:aws:imagebuilder:us-west-1:123456789012:image/example-linux-image/1.0.0/3",
"name": "example-linux-image",
"version": "1.0.0",
"type": "AMI",
"buildVersion": 3,
"state": {
"status": "AVAILABLE"
},
"platform": "Linux",
"imageRecipe": {
"arn": "arn:aws:imagebuilder:us-west-1:123456789012:image-recipe/example-linux-image/1.0.0",
"name": "amjule-barebones-linux",
"version": "1.0.0",
"components": [
{
"componentArn": "arn:aws:imagebuilder:us-west-1:123456789012:component/update-linux/1.0.2/1"
}
],
"platform": "Linux",
"parentImage": "arn:aws:imagebuilder:us-west-1:987654321098:image/amazon-linux-2-x86/2022.6.14/1",
"blockDeviceMappings": [
{
"deviceName": "/dev/xvda",
"ebs": {
"encrypted": false,
"deleteOnTermination": true,
"volumeSize": 8,
"volumeType": "gp2"
}
}
],
"dateCreated": "Feb 24, 2021 12:31:54 AM",
"tags": {
"internalId": "1a234567-8901-2345-bcd6-ef7890123456",
"resourceArn": "arn:aws:imagebuilder:us-west-1:123456789012:image-recipe/example-linux-image/1.0.0"
},
"workingDirectory": "/tmp",
"accountId": "462045008730"
},
"sourcePipelineArn": "arn:aws:imagebuilder:us-west-1:123456789012:image-pipeline/example-linux-pipeline",
"infrastructureConfiguration": {
"arn": "arn:aws:imagebuilder:us-west-1:123456789012:infrastructure-configuration/example-linux-infra-config-uswest1",
"name": "example-linux-infra-config-uswest1",
"instanceProfileName": "example-linux-ib-baseline-admin",
"tags": {
"internalId": "234abc56-d789-0123-a4e5-6b789d012c34",
"resourceArn": "arn:aws:imagebuilder:us-west-1:123456789012:infrastructure-configuration/example-linux-infra-config-uswest1"
},
"logging": {
"s3Logs": {
"s3BucketName": "amzn-s3-demo-bucket"
}
},
"keyPair": "example-linux-key-pair-uswest1",
"terminateInstanceOnFailure": true,
"snsTopicArn": "arn:aws:sns:us-west-1:123456789012:example-linux-ibnotices-uswest1",
"dateCreated": "Feb 24, 2021 12:31:55 AM",
"accountId": "123456789012"
},
"imageTestsConfigurationDocument": {
"imageTestsEnabled": true,
"timeoutMinutes": 720
},
"distributionConfiguration": {
"arn": "arn:aws:imagebuilder:us-west-1:123456789012:distribution-configuration/example-linux-distribution",
"name": "example-linux-distribution",
"dateCreated": "Feb 24, 2021 12:31:56 AM",
"distributions": [
{
"region": "us-west-1",
"amiDistributionConfiguration": {}
}
],
"tags": {
"internalId": "345abc67-8910-12d3-4ef5-67a8b90c12de",
"resourceArn": "arn:aws:imagebuilder:us-west-1:123456789012:distribution-configuration/example-linux-distribution"
},
"accountId": "123456789012"
},
"dateCreated": "Jul 28, 2022 1:13:45 AM",
"outputResources": {
"amis": [
{
"region": "us-west-1",
"image": "ami-01a23bc4def5a6789",
"name": "example-linux-image 2022-07-28T01-14-17.416Z",
"accountId": "123456789012"
}
]
},
"buildExecutionId": "ab0cd12e-34fa-5678-b901-2c3456d789e0",
"testExecutionId": "6a7b8901-cdef-234a-56b7-8cd89ef01234",
"distributionJobId": "1f234567-8abc-9d0e-1234-fa56b7c890de",
"integrationJobId": "432109b8-afe7-6dc5-4321-0ba98f7654e3",
"accountId": "123456789012",
"osVersion": "Amazon Linux 2",
"enhancedImageMetadataEnabled": true,
"buildType": "USER_INITIATED",
"tags": {
"internalId": "901e234f-a567-89bc-0123-d4e567f89a01",
"resourceArn": "arn:aws:imagebuilder:us-west-1:123456789012:image/example-linux-image/1.0.0/3"
}
}
```
以下示例显示了 Image Builder 为 Linux 映像的管道构建失败而发布的典型消息的 JSON 负载。
```
{
"versionlessArn": "arn:aws:imagebuilder:us-west-2:123456789012:image/my-example-image",
"semver": 1237940039285380274899124231,
"arn": "arn:aws:imagebuilder:us-west-2:123456789012:image/my-example-image/1.0.0/7",
"name": "My Example Image",
"version": "1.0.0",
"type": "AMI",
"buildVersion": 7,
"state": {
"status": "FAILED",
"reason": "Image Failure reason."
},
"platform": "Linux",
"imageRecipe": {
"arn": "arn:aws:imagebuilder:us-west-2:123456789012:image-recipe/my-example-image/1.0.0",
"name": "My Example Image",
"version": "1.0.0",
"description": "Testing Image recipe",
"components": [
{
"componentArn": "arn:aws:imagebuilder:us-west-2:123456789012:component/my-example-image-component/1.0.0/1"
}
],
"platform": "Linux",
"parentImage": "ami-0cd12345db678d90f",
"dateCreated": "Jun 21, 2022 11:36:14 PM",
"tags": {
"internalId": "1a234567-8901-2345-bcd6-ef7890123456",
"resourceArn": "arn:aws:imagebuilder:us-west-2:123456789012:image-recipe/my-example-image/1.0.0"
},
"accountId": "123456789012"
},
"sourcePipelineArn": "arn:aws:imagebuilder:us-west-2:123456789012:image-pipeline/my-example-image-pipeline",
"infrastructureConfiguration": {
"arn": "arn:aws:imagebuilder:us-west-2:123456789012:infrastructure-configuration/my-example-infra-config",
"name": "SNS topic Infra config",
"description": "An example that will retain instances of failed builds",
"instanceTypes": [
"t2.micro"
],
"instanceProfileName": "EC2InstanceProfileForImageBuilder",
"tags": {
"internalId": "234abc56-d789-0123-a4e5-6b789d012c34",
"resourceArn": "arn:aws:imagebuilder:us-west-2:123456789012:infrastructure-configuration/my-example-infra-config"
},
"terminateInstanceOnFailure": true,
"snsTopicArn": "arn:aws:sns:us-west-2:123456789012:example-pipeline-notification-topic",
"dateCreated": "Jul 5, 2022 7:31:53 PM",
"accountId": "123456789012"
},
"imageTestsConfigurationDocument": {
"imageTestsEnabled": true,
"timeoutMinutes": 720
},
"distributionConfiguration": {
"arn": "arn:aws:imagebuilder:us-west-2:123456789012:distribution-configuration/my-example-distribution-config",
"name": "New distribution config",
"dateCreated": "Dec 3, 2021 9:24:22 PM",
"distributions": [
{
"region": "us-west-2",
"amiDistributionConfiguration": {},
"fastLaunchConfigurations": [
{
"enabled": true,
"snapshotConfiguration": {
"targetResourceCount": 2
},
"maxParallelLaunches": 2,
"launchTemplate": {
"launchTemplateId": "lt-01234567890"
},
"accountId": "123456789012"
}
]
}
],
"tags": {
"internalId": "1fecd23a-4f56-7f89-01e2-345678abbe90",
"resourceArn": "arn:aws:imagebuilder:us-west-2:123456789012:distribution-configuration/my-example-distribution-config"
},
"accountId": "123456789012"
},
"dateCreated": "Jul 5, 2022 7:40:15 PM",
"outputResources": {
"amis": []
},
"accountId": "123456789012",
"enhancedImageMetadataEnabled": true,
"buildType": "SCHEDULED",
"tags": {
"internalId": "456c78b9-0e12-3f45-afb6-7e89b0f1a23b",
"resourceArn": "arn:aws:imagebuilder:us-west-2:123456789012:image/my-example-image/1.0.0/7"
}
}
```