The following steps can be used during troubleshooting calls to verify that the AWS configuration required for opportunity syncing is correctly set up.

➡️  1. Verify AWS Region

1. Log in to the AWS Console.
2. At the top-right corner, make sure the selected region is us-east-1 (N. Virginia). This is the region where the EventBridge rule must exist.

Fig. 1

➡️  2. Verify Partner Center and Marketplace Accounts

Confirm the following:

• Check if the Partner Center account is linked to the Marketplace account. (TBD)
• Verify that the Partner Center account and the Marketplace account are the same. (TBD)

➡️  3. Verify EventBridge Rule

1. In the AWS Console, search for Amazon EventBridge and open it.

   
   

   Fig. 2

    

2. Go to Event Buses.
    

3. Select the Default event bus.

   
   

   Fig. 3

   In the Default Event Bus, search for:

   LabraOppSyncAceAPIEventBridgeRule

   

   Fig. 4

   Once you open the rule, it should look similar to the example shown in the screenshot. The Rule Name should contain something like:

   LabraOppSyncAceAPIEventBridgeRule

   

Fig. 5

➡️  4. Verify Event Pattern

Inside the EventBridge rule:

• Verify the event pattern configuration.

• The Event Partner configuration does not necessarily have to be identical, but it is recommended that it looks similar to the example shown in the screenshots.

  

  Fig. 6

   

➡️  5. Verify EventBridge Target

• Within the Targets section of the rule there must be a target configured: labra-oppsync-event-bridge-topic-prd
• This is the SNS topic that receives the events.

Fig. 7

➡️  6. Verify SNS Topic Subscription

• Click on the SNS topic: labra-oppsync-event-bridge-topic-prd
• Then check the Subscriptions section.
• There must be at least one subscription with the status Confirmed

Fig. 8

Fig. 9

➡️  7. Verify IAM Permissions

1. Open IAM from the AWS Console.

2. Search for IAM in the AWS services.

   

   Fig. 10

3. Click Roles from the dashboard or from the left-side menu.

   
   

   Fig. 11

4. In the roles list, search for Oppsync.

   

   Fig. 12

    

5. You should see several roles. The important one is the OppSync-related role highlighted in Fig. 12.

    

➡️  8. Verify Role Permissions

1. Open the role and review the Permissions Policies section.

2. Check for one of the following:

   Option 1 (Preferred)

   

   Fig. 13

• A Customer Inline Policy attached to the role.
• The policy should be similar to the permissions described here: https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html

• It is recommended to review and confirm that the policy includes the required permissions.

  Option 2 (Alternative)

• If no Customer Inline Policy exists, then the role should have the AWS managed policy:

  AWSPartnerCentralFullAccess

  

  Fig. 14

• This policy also provides the necessary permissions.