skills.rest
mreferre
mreferreCOMMUNITY
Explore all skills by this author →
Website𝕏@mreferreGitHub

setting-up-cloudwatch-alarm-notifications

Configure encrypted SNS topics and subscriptions for CloudWatch alarm notifications.

Updated May 12, 2026
Search Tags:#encryption#cloudwatch#sns#webhook alerts#topic policy#alarm notifications#email subscription
One-click install
npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill setting-up-cloudwatch-alarm-notifications-mreferre
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: setting-up-cloudwatch-alarm-notifications
Source: https://github.com/mreferre/aws-agent-toolkit-skills/tree/main/.kiro/skills/setting-up-cloudwatch-alarm-notifications
Command: npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill setting-up-cloudwatch-alarm-notifications-mreferre

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

CloudWatch alarms often fail to notify the right people or systems when they trigger because notification actions, SNS topics, and subscriptions are not configured securely and correctly.

Core Features & Use Cases

  • Encrypted SNS notification topics: Creates an SNS topic and enables encryption at rest using the AWS managed SNS KMS key (alias/aws/sns) to protect notification data.
  • Correct access via topic policy: Configures an SNS topic policy that allows the CloudWatch service principal to publish alarm messages.
  • Multi-channel delivery subscriptions: Sets up SNS subscriptions for email, SMS, and webhook endpoints (including guidance for confirmation and validation).
  • Alarm integration: Links the CloudWatch alarm to the SNS topic by updating AlarmActions (and optionally OKActions) while preserving existing alarm settings.
  • Use case: When an EC2/ALB/metric-based alarm crosses a threshold, teams receive timely alerts via email/SMS/webhooks with encryption and CloudWatch publishing permissions.

Quick Start

Ask your assistant to set up CloudWatch alarm notifications for alarm_name using notification_type and notification_endpoint in aws_region and to connect the alarm to an encrypted SNS topic using the required topic policy.

Frequently Asked Questions about setting-up-cloudwatch-alarm-notifications

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up CloudWatch alarm notifications using an encrypted SNS topic?▼

You can configure CloudWatch alarm notifications by creating an SNS topic encrypted with the AWS managed KMS key, applying a topic policy granting CloudWatch publishing permissions, adding subscriptions, and linking the AlarmActions to the SNS TopicArn.

Why are my CloudWatch alarms failing to send notifications to my SNS topic?▼

CloudWatch alarms fail to deliver SNS notifications when the topic lacks a policy allowing the CloudWatch service principal to publish. Configuring correct topic policy permissions and verifying alarm state transitions resolves the delivery failure.

Can I send webhook alerts from CloudWatch alarms through SNS?▼

Yes, you can deliver webhook alerts by adding webhook endpoints as SNS subscriptions. The setup includes subscription confirmation and validation guidance to ensure alarm-triggered messages reach your webhook endpoint.

How do I configure CloudWatch alarms to send notifications when the alarm returns to OK state?▼

You configure OK-state notifications by linking the OKActions parameter of your CloudWatch alarm to the SNS TopicArn. This preserves existing alarm settings while adding optional recovery alerts alongside the primary AlarmActions.

Does SNS topic encryption at rest work with CloudWatch alarm notifications?▼

Yes, SNS topic encryption at rest works with CloudWatch alarms by using the AWS managed SNS KMS key (alias/aws/sns). This protects notification data while maintaining correct CloudWatch-to-SNS publishing via the configured topic policy.

Related Skills

Explore More Software Engineering Skills→
Nir-BhayNir-Bhay
19

cloudwatch-alarm-creator

Configure AWS CloudWatch alarms for EC2, ALB, RDS, and custom metrics.

Community
Intermediate
awsaws
2.3k

setting-up-cloudwatch-alarm-notifications

Configure CloudWatch alarm notifications with encrypted SNS topics and subscribed endpoints.

Official
Advanced
AndreKuraitAndreKurait

setting-up-cloudwatch-alarm-notifications

Automate CloudWatch alarm notifications via encrypted SNS topics with subscriptions.

Community
Advanced
northseadlnorthseadl

eventbridge

Create custom event buses, rules, and targets on AWS EventBridge.

Community
Advanced