Pinpoint pools

aws/common/cloudwatch_log.tf

@@ -44,8 +44,47 @@
   }
 }
 
+# TODO fix the count line after it's working. Right now we want these in dev for testing
+resource "aws_cloudwatch_log_group" "pinpoint_shortcode_deliveries" {
+  count             = var.cloudwatch_enabled ? 1 : 1
+  name              = "sns/${var.region}/${var.account_id}/PinPointShortcodeDirectPublishToPhoneNumber"
+  retention_in_days = var.sensitive_log_retention_period_days
+  tags = {
+    CostCenter = "notification-canada-ca-${var.env}"
+  }
+}
+
+resource "aws_cloudwatch_log_group" "pinpoint_shortcode_deliveries_failures" {
+  count             = var.cloudwatch_enabled ? 1 : 1
+  name              = "sns/${var.region}/${var.account_id}/PinPointShortcodeDirectPublishToPhoneNumber/Failure"
+  retention_in_days = var.sensitive_log_retention_period_days
+
+  tags = {
+    CostCenter = "notification-canada-ca-${var.env}"
+  }
+}
+
+resource "aws_cloudwatch_log_group" "pinpoint_longcode_deliveries" {
+  count             = var.cloudwatch_enabled ? 1 : 1
+  name              = "sns/${var.region}/${var.account_id}/PinPointLongcodeDirectPublishToPhoneNumber"
+  retention_in_days = var.sensitive_log_retention_period_days
+  tags = {
+    CostCenter = "notification-canada-ca-${var.env}"
+  }
+}
+
+resource "aws_cloudwatch_log_group" "pinpoint_longcode_deliveries_failures" {
+  count             = var.cloudwatch_enabled ? 1 : 1
+  name              = "sns/${var.region}/${var.account_id}/PinPointLongcodeDirectPublishToPhoneNumber/Failure"
+  retention_in_days = var.sensitive_log_retention_period_days
+
+  tags = {
+    CostCenter = "notification-canada-ca-${var.env}"
+  }
+}
+
 resource "aws_cloudwatch_log_group" "route53_resolver_query_log" {
-  count             = var.cloudwatch_enabled ? 1 : 0
+  count             = var.cloudwatch_enabled ? 1 : 1
   name              = "route53/${var.region}/${var.account_id}/DNS/logs"
   retention_in_days = var.log_retention_period_days
 

aws/common/iam.tf

@@ -189,3 +189,49 @@ data "aws_iam_policy_document" "firehose_waf_logs" {
 resource "aws_iam_service_linked_role" "spotInstances" {
   aws_service_name = "spot.amazonaws.com"
 }
+
+# Pinpoint IAM
+
+resource "aws_iam_role" "pinpoint_logs" {
+  name               = "PinpointLogs"
+  assume_role_policy = data.aws_iam_policy_document.pinpoint_assume.json
+}
+
+resource "aws_iam_policy" "pinpoint_logs" {
+  name   = "PinpointLogsPolicy"
+  path   = "/"
+  policy = data.aws_iam_policy_document.pinpoint_logs.json
+}
+
+resource "aws_iam_role_policy_attachment" "pinpoint_logs" {
+  role       = aws_iam_role.pinpoint_logs.name
+  policy_arn = aws_iam_policy.pinpoint_logs.arn
+}
+
+data "aws_iam_policy_document" "pinpoint_assume" {
+  statement {
+    actions = ["sts:AssumeRole"]
+    effect  = "Allow"
+    principals {
+      type        = "Service"
+      identifiers = ["sms-voice.amazonaws.com"]
+    }
+  }
+}
+
+data "aws_iam_policy_document" "pinpoint_logs" {
+  statement {
+    effect = "Allow"
+    actions = [
+      "logs:CreateLogStream",
+      "logs:DescribeLogStreams",
+      "logs:PutLogEvents"
+    ]
+    resources = [
+      aws_cloudwatch_log_group.pinpoint_shortcode_deliveries[0].arn,
+      aws_cloudwatch_log_group.pinpoint_shortcode_deliveries_failures[0].arn,
+      aws_cloudwatch_log_group.pinpoint_longcode_deliveries[0].arn,
+      aws_cloudwatch_log_group.pinpoint_longcode_deliveries_failures[0].arn
+    ]
+  }
+}

scripts/create_pinpoint_pools.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+# Create 2 numbers to use to create the pools
+
+number1=`aws pinpoint-sms-voice-v2 request-phone-number --iso-country-code CA --message-type TRANSACTIONAL --number-capabilities SMS --number-type LONG_CODE  | jq -r ".PhoneNumberId"`
+number2=`aws pinpoint-sms-voice-v2 request-phone-number --iso-country-code CA --message-type TRANSACTIONAL --number-capabilities SMS --number-type LONG_CODE  | jq -r ".PhoneNumberId"`
+
+# Create pools for the shortcode and longcodes
+
+aws pinpoint-sms-voice-v2 create-pool --origination-identity $number1 --iso-country-code CA --message-type TRANSACTIONAL --tags Key=Name,Value=shortcode-pool
+aws pinpoint-sms-voice-v2 create-pool --origination-identity $number2 --iso-country-code CA --message-type TRANSACTIONAL --tags Key=Name,Value=longcode-pool
+
+# Create configuration sets
+
+aws pinpoint-sms-voice-v2 create-configuration-set --configuration-set-name shortcode-configuration
+aws pinpoint-sms-voice-v2 create-configuration-set --configuration-set-name longcode-configuration
+
+# need to associate the configuration sets with CloudWatch log groups and / or SNS topics
+