Ensure AWS CloudFormation stacks are sending event notifications to an SNS topic

Error: AWS CloudFormation stack configured without SNS topic

Bridgecrew Policy ID: BC_AWS_LOGGING_25
Checkov Check ID: CKV_AWS_124
Severity: LOW

AWS CloudFormation stack configured without SNS topic

Description

Enabling event notifications for your AWS CloudFormation stacks can help you to monitor and track changes to your stacks. When event notifications are enabled, CloudFormation will send a message to an Amazon Simple Notification Service (SNS) topic each time a stack event occurs. By doing so, you will improve your visibility and automation processes (if desired).

Fix - Buildtime

Terraform

  • Resource: aws_cloudformation_stack
  • Argument: notification_arns
resource "aws_cloudformation_stack" "default" {
    name = "networking-stack"
    ...
 +  notification_arns = ["arn1", "arn2"]
  }