Skip to content

How to configure existing AWS Config rule to send to SNS ?

0

I am trying to modify an existing Config rule to send to an event that will eventually go to an SNS topic and perform the rest of the functions needed.

However, I am not able to find this on an existing AWS Config rule. I only see this on an already NEWLY created config rule.

My question is there any way to do this on an existing config rule in CDK? Or would I have to recreate the rule?

Also would like to know if it's possible to do it manually.

2 Answers
3

SNS notifications can be configured for AWS Config in general

Enter image description here

Enter image description here

Enter image description here

EXPERT
answered 2 years ago
EXPERT
reviewed a year ago
2
Accepted Answer

Hi, compliance status changes events are sent to Amazon EventBridge, so you can configure a rule in EventBridge and send the event to the SNS topic or other target service (i.e Lambda function) to handle the event.
https://repost.aws/knowledge-center/config-resource-non-compliant

You can also do this in the AWS Config rule with a "Remediation Action" of type AWS-PublishSNSNotification, and specifying in the parameters the Topic's ARN, the message, and the IAM role's ARN that is allowed to publish messages to the SNS topic (keep in mind that this role should have a trust relationship with the Systems Manager (ssm) service). In CDK you can configure it with CfnRemediationConfiguration construct. In the web console you can access the "Manage remediation" option either in the list of rules by selecting the rule and then using the "Actions" drop down, or within the rule using the same drop down.

Please see more in
https://docs.aws.amazon.com/systems-manager-automation-runbooks/latest/userguide/automation-aws-publishsnsnotification.html https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-remediationconfiguration.html

AWS
answered 2 years ago
EXPERT
reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.