-
Notifications
You must be signed in to change notification settings - Fork 84
/
CloudWatchAutoAlarms-SNS.yaml
executable file
·73 lines (69 loc) · 2.38 KB
/
CloudWatchAutoAlarms-SNS.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
---
Description: SNS Topic for the notification configuration of alarms created by the amazon-cloudwatch-auto-alarms Lambda function
AWSTemplateFormatVersion: '2010-09-09'
Parameters:
OrganizationID:
Description: Provide cloudwatch publish rights from all accounts in the organization. Leave blank for single account, single region implementation.
Type: String
Default: ""
Conditions:
OrgEnabledAccess: !Not [!Equals ["", !Ref OrganizationID]]
Resources:
CloudWatchAutoAlarmsSNSTopic:
Type: AWS::SNS::Topic
Properties:
DisplayName: CloudWatchAutoAlarms SNS Notification Topic
TopicName: CloudWatchAutoAlarmsSNSTopic
CloudWatchAutoAlarmsSNSTopicPolicy:
Type: AWS::SNS::TopicPolicy
Properties:
Topics:
- !Ref CloudWatchAutoAlarmsSNSTopic
PolicyDocument:
Version: '2012-10-17'
Id: SSEAndSSLPolicy
Statement:
- Sid: Allow_Publish_Alarms
Effect: Allow
Principal:
Service:
- cloudwatch.amazonaws.com
Action: sns:Publish
Resource:
- !Join
- ':'
- - 'arn'
- !Ref AWS::Partition
- 'sns'
- !Ref AWS::Region
- !Ref AWS::AccountId
- !GetAtt CloudWatchAutoAlarmsSNSTopic.TopicName
- !If
- OrgEnabledAccess
- Sid: 'allow org to publish to sns topic'
Effect: Allow
Principal:
Service:
- cloudwatch.amazonaws.com
Action:
- sns:Publish
Resource:
- !Join
- ':'
- - 'arn'
- !Ref AWS::Partition
- 'sns'
- !Ref AWS::Region
- !Ref AWS::AccountId
- !GetAtt CloudWatchAutoAlarmsSNSTopic.TopicName
Condition:
ForAnyValue:StringLike:
aws:PrincipalOrgPaths:
- !Sub "${OrganizationID}/*"
- !Ref 'AWS::NoValue'
Outputs:
CloudWatchAutoAlarmsSNSTopicArn:
Value: !Ref CloudWatchAutoAlarmsSNSTopic
Description: "SNS topic for notifications for alarms created by the CloudWatchAutoAlarms lambda function"
Export:
Name: amazon-cloudwatch-auto-alarms-sns-topic-arn