AWS CloudFormation stack configured without SNS topic misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_124
Category - Subcategory	Monitoring - Alerting And Notifications
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

Enabling event notifications for your AWS CloudFormation stacks can help you to monitor and track changes to your stacks. When event notifications are enabled, CloudFormation will send a message to an Amazon Simple Notification Service (SNS) topic each time a stack event occurs. By doing so, you will improve your visibility and automation processes (if desired).

How to Fix

Resource: aws_cloudformation_stack

• Arguments: notification_arns [source,go]

---

resource "aws_cloudformation_stack" "default" { name = "networking-stack" ...

• notification_arns = ["arn1", "arn2"] }

---