Skip to content

readyfor/lambda-cloudwatch-slack

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

34 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

lambda-cloudwatch-slack

An AWS Lambda function for better Slack notifications. Check out the blog post.

BuildStatus NPM version

Overview

This function was originally derived from the AWS blueprint named cloudwatch-alarm-to-slack. The function in this repo improves on the default blueprint in several ways:

Better default formatting for CloudWatch notifications:

AWS Cloud Notification for Slack

Support for notifications from Elastic Beanstalk:

Elastic Beanstalk Slack Notifications

Support for notifications from Code Deploy:

AWS CodeDeploy Notifications

Basic support for notifications from ElastiCache:

AWS ElastiCache Notifications

Support for encrypted and unencrypted Slack webhook url:

Configuration

Clone this repository and open the Makefile in your editor, then follow the steps beow:

1. Configure AWS environment

Fill in the variables at the top of the Makefile. For example, your variables may look like this:

LAMBDA_FUNCTION_NAME=cloudwatch-to-slack
AWS_REGION=us-west-2
AWS_ROLE=arn:aws:iam::123456789123:role/lambda_exec_role
AWS_PROFILE=myprofile

2. Configure AWS Lambda script

Next, open config.js. there are several mandatory and optional configuration options. We've tried to choose a good set of defaults:

a. mandatory configuration

A hook URL and a slackChannel are required configurations. The slackChannel is the name of the Slack room to send the messages. To get the value for the URL, you'll need to set up a Slack hook, as described below.

To configure a proper Slack webhook URL, either the kmsEncyptedHookUrl or unencryptedHookUrl needs to be filled out. kmsEncyptedHookUrl uses the AWS KMS encryption service. See the documentation below for more details (unencrypted hook url & encrypted hook url)

b. optional configuration

All other configuration options are "optional". Some customize the look and text in the Slack notification; slackUsername and orgIcon will enhance the messages appearance.

3. Setup Slack hook

Follow these steps to configure the webhook in Slack:

  1. Navigate to https://.slack.com/services/new and search for and select "Incoming WebHooks".

  2. Choose the default channel where messages will be sent and click "Add Incoming WebHooks Integration".

  3. Copy the webhook URL from the setup instructions and use it in the next section.

  4. Click 'Save Settings' at the bottom of the Slack integration page.

Unencrypted hook URL

If you don't want or need to encrypt your hook URL, you can use the unencryptedHookUrl. If this variable is specified, the kmsEncyptedHookUrl is ignored.

Encrypted hook URL

Follow these steps to encrypt your Slack hook URL for use in this function:

  1. Create a KMS key - http://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html.

  2. Encrypt the event collector token using the AWS CLI. $ aws kms encrypt --key-id alias/ --plaintext "<SLACK_HOOK_URL>"

    Note: You must exclude the protocol from the URL (e.g. "hooks.slack.com/services/abc123").

  3. Copy the base-64 encoded, encrypted key (CiphertextBlob) to the ENCRYPTED_HOOK_URL variable.

  4. Give your function's role permission for the kms:Decrypt action. Example:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Stmt1443036478000",
            "Effect": "Allow",
            "Action": [
                "kms:Decrypt"
            ],
            "Resource": [
                "<your KMS key ARN>"
            ]
        }
    ]
}

Tests

With the variables filled in, you can test the function:

npm install
make test

License

MIT License

Releases

No releases published

Packages

No packages published

Languages

  • JavaScript 92.1%
  • Makefile 7.9%