Reading Time: 4 minutes
Salesforce and Amazon Web Services (AWS) are two of the most popular cloud computing platforms widely used across various industries. Integrating Salesforce with AWS can offer tremendous benefits in terms of scalability, functionality, and convenience. One such integration is between Salesforce Apex and AWS Simple Queue Service (SQS) which allows developers to send and receive messages to an AWS SQS queue from Salesforce Apex code.
To send a message to an SQS queue from a Salesforce Apex class, you first need to set up an AWS account and an SQS queue with appropriate permissions to allow Salesforce to access and send messages.
So let’s create a wrapper in Salesforce Apex to send messages to a given SQS queue.
Important: before creating your Apex class you will need a Custom Metadata Type value to store your AWS keys. In this example, it assumes you have your keys under “my was keys”. See the method loadAwsKeys()
public with sharing class SqsSender {
public class AwsException extends Exception {}
private static String access_key;
private static String secret_key;
private static String aws_region;
private static String aws_account_id;
private static String aws_queue_name;
private static String host {get;set;}
private static String endpoint {get;set;}
private static String request_parameters {get;set;}
private static final String aws_service = 'sqs';
private static final String content_type = 'application/x-www-form-urlencoded';
// Create a date for headers and the credential string
private static final Datetime now = Datetime.now();
private static final String amz_date = now.formatGmt('YMMdd') + 'T' + now.formatGmt('HHmmss') + 'Z';
private static final String date_stamp = now.formatGmt('YMMdd');
/**
* Load AWS credentials from Custom Metadata Types: https://help.salesforce.com/articleView?id=custommetadatatypes_about.htm&type=5
*/
private static void loadAwsKeys(){
my_aws_keys__mdt result = [SELECT aws_access_key__c, aws_secret_key__c, aws_region__c, aws_account_id__c, aws_queue_name__c
FROM my_aws_keys__mdt WHERE Label = 'keys' LIMIT 1];
access_key= result.aws_access_key__c;
secret_key= result.aws_secret_key__c;
aws_account_id= result.aws_account_id__c;
aws_region= result.aws_region__c;
aws_queue_name= result.aws_queue_name__c;
}
public static void SendMessageBatch(List<String> messageBodies) {
if (messageBodies == null || messageBodies.size() == 0) {
throw new AwsException('Body is mandatory');
}
SqsSender.aws_region = aws_region;
SqsSender.aws_queue_name = aws_queue_name;
SqsSender.aws_account_id = aws_account_id;
String message_body = '';
SqsSender.request_parameters = 'Action=SendMessageBatch';
for(Integer i = 0;i<messageBodies.size();i++){
SqsSender.request_parameters = SqsSender.request_parameters
+ '&SendMessageBatchRequestEntry.'+(i+1)+'.Id=msg_0'+(i+1)
+ '&SendMessageBatchRequestEntry.'+(i+1)+'.MessageBody='+EncodingUtil.urlEncode(messageBodies[i], 'UTF-8');
}
SqsSender.host = aws_service + '.' + aws_region + '.amazonaws.com';
SqsSender.endpoint = 'https://' + host + '/' + aws_account_id + '/' + aws_queue_name;
String canonical_request = SqsSender.createCanonicalRequest();
String string_to_sign = SqsSender.createTheStringToSign(canonical_request);
String signature = SqsSender.calculateTheSignature(string_to_sign);
String authorization_header = SqsSender.addSigningInfoToTheRequest(signature);
SqsSender.sendRequest(authorization_header, amz_date, request_parameters, endpoint);
}
public static void SendMessage(String messageBody, String messageGroupId, String messageDeduplicationId) {
if (messageBody == null) {
throw new AwsException('Body is mandatory');
}
loadAwsKeys();
System.debug('message body: '+messageBody);
System.debug('messageGroupId: '+messageGroupId);
System.debug('messageDeduplicationId: '+messageDeduplicationId);
System.debug('aws queue name: '+aws_queue_name);
SqsSender.aws_region = aws_region;
SqsSender.aws_queue_name = aws_queue_name;
SqsSender.aws_account_id = aws_account_id;
SqsSender.request_parameters = 'Action=SendMessage&MessageGroupId='+messageGroupId+'&MessageDeduplicationId='+messageDeduplicationId+'&MessageBody=' + messageBody;
SqsSender.host = aws_service + '.' + aws_region + '.amazonaws.com';
SqsSender.endpoint = 'https://' + host + '/' + aws_account_id + '/' + aws_queue_name;
System.debug('endpoint: '+SqsSender.endpoint);
String canonical_request = SqsSender.createCanonicalRequest();
String string_to_sign = SqsSender.createTheStringToSign(canonical_request);
String signature = SqsSender.calculateTheSignature(string_to_sign);
String authorization_header = SqsSender.addSigningInfoToTheRequest(signature);
SqsSender.sendRequest(authorization_header, amz_date, request_parameters, endpoint);
}
/**
* @param authorization_header
* @param amz_date
* @param request_parameters
* @param endpoint
*/
@future(Callout=true)
public static void sendRequest(String authorization_header, String amz_date, String request_parameters, String endpoint){
Http http = new Http();
HttpRequest request = new HttpRequest();
System.debug('endpoint: '+endpoint);
request.setEndpoint(endpoint);
request.setMethod('POST');
request.setHeader('Content-Type', 'application/x-www-form-urlencoded');
request.setHeader('Authorization', authorization_header);
request.setHeader('x-amz-date', amz_date);
System.debug('request_parameters: '+request_parameters);
// Set the body as a JSON object
request.setBody(request_parameters);
HttpResponse response = http.send(request);
// Parse the JSON response
if (response.getStatusCode() != 200) {
System.debug('The status code returned was not expected: ' +
response.getStatusCode() + ' ' + response.getStatus());
System.debug(response.getBody());
} else {
System.debug('message sent successfully to SQS');
System.debug(response.getBody());
}
}
// http://docs.aws.amazon.com/general/latest/gr/sigv4-create-canonical-request.html
private static String createCanonicalRequest() {
String host = aws_service + '.' + aws_region + '.amazonaws.com';
// Step 1 is to define the verb (GET, POST, etc.)
String method = 'POST';
// Step 2: Create canonical URI--the part of the URI from domain to query
String canonical_uri = '/' + aws_account_id + '/' + aws_queue_name;
// Step 3: Create the canonical query string. In this example, request
// parameters are passed in the body of the request and the query string is blank.
String canonical_querystring = EncodingUtil.urlEncode('', 'UTF-8');
// Step 4: Create the canonical headers. Header names must be trimmed
// and lowercase, and sorted in code point order from low to high.
// Note that there is a trailing n
String canonical_headers = 'content-type:' + content_type + 'n' + 'host:' + host + 'n' + 'x-amz-date:' + amz_date + 'n';
// Step 5: Create the list of signed headers. This lists the headers
// in the canonical_headers list, delimited with ";" and in alpha order.
String signed_headers = 'content-type;host;x-amz-date';
// Step 6: Create payload hash. In this example, the payload
// (body of the request) contains the request parameters.
String payload_hash = hashLibSha256(request_parameters);
// Step 7: Combine elements to create canonical request
String canonical_request =
method + 'n' +
canonical_uri + 'n' +
canonical_querystring + 'n' +
canonical_headers + 'n' +
signed_headers + 'n' +
payload_hash;
return canonical_request;
}
private static String createTheStringToSign(String canonical_request) {
// Match the algorithm to the hashing algorithm you use,
// either SHA-1 or SHA-256 (recommended)
String algorithm = 'AWS4-HMAC-SHA256';
String credential_scope = date_stamp + '/' + aws_region + '/' + aws_service + '/' + 'aws4_request';
String string_to_sign =
algorithm + 'n' +
amz_date + 'n' +
credential_scope + 'n' +
hashLibSha256(canonical_request);
return string_to_sign;
}
private static String calculateTheSignature(String string_to_sign) {
// Create the signing key using the function defined above.
Blob signing_key = getSignatureKey(secret_key, date_stamp, aws_region, aws_service);
// Sign the string_to_sign using the signing_key
String signature = EncodingUtil.convertToHex(Crypto.generateMac('HmacSHA256', Blob.valueof(string_to_sign), signing_key));
return signature;
}
private static String addSigningInfoToTheRequest(String signature) {
String credential_scope = date_stamp + '/' + aws_region + '/' + aws_service + '/' + 'aws4_request';
String signed_headers = 'content-type;host;x-amz-date';
String algorithm = 'AWS4-HMAC-SHA256';
// Put the signature information in a header named Authorization.
String authorization_header = algorithm + ' ' + 'Credential=' + access_key + '/' + credential_scope + ', ' + 'SignedHeaders=' + signed_headers + ', ' + 'Signature=' + signature;
return authorization_header;
}
private static Blob getSignatureKey(String key, String date_stamp, String region_name, String service_name) {
Blob kDate = sign(date_stamp, Blob.valueof('AWS4' + key));
Blob kRegion = sign(region_name, kDate);
Blob kService = sign(service_name, kRegion);
Blob kSigning = sign('aws4_request', kService);
return kSigning;
}
private static Blob sign(String data, Blob key) {
return Crypto.generateMac('HmacSHA256', Blob.valueOf(data), key);
}
private static String hashLibSha256(String message) {
return EncodingUtil.convertToHex(Crypto.generateDigest('SHA-256', Blob.valueOf(message)));
}
}
How to call it
SqsSender.SendMessage('{"entity":"user","data":{"id":"1", "name":"user from salesforce"}}', 'user', '1');
By following these simple steps, you can easily send a message to an AWS SQS queue from a Salesforce Apex class. This integration can be extremely useful when you need to decouple components of a large application and enable efficient message transfer between them. With Salesforce and AWS, sky’s the limit when it comes to innovation and collaboration.
Based on https://github.com/arthurimirzian/salesforce-aws-sqs/blob/master/Sqs.cls
