sns

Design and validate AWS SNS pub/sub configurations for event-driven messaging.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill sns-aurainfosec
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sns
Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/sns
Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill sns-aurainfosec

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you design, operate, and validate AWS SNS pub/sub messaging so your applications can reliably route events to the right subscribers with correct policies, delivery behavior, and security posture.

Core Features & Use Cases

  • Topic and subscription management: Create topics (Standard/FIFO), add subscriptions for multiple protocols (Lambda, SQS, HTTP/HTTPS, Email, SMS, mobile push), and manage confirmations.
  • Message publishing and routing: Publish messages with attributes for filtering, including FIFO requirements like message group and deduplication.
  • Security and exposure checks: Evaluate whether external actors can interact with a topic using an authorization-first malformed request probe and policy-based fallbacks.
  • Reliability patterns: Apply best practices like using SQS for durability, configuring DLQ redrive policies, and setting delivery/retry behavior.

Quick Start

Send the question: "For an AWS audit, evaluate whether this SNS topic can be interacted with from outside the account and summarize the delivery and filtering configuration needed for safe pub/sub."

Frequently Asked Questions about sns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure AWS SNS message filtering to route specific events to subscribers?

AWS SNS message filtering routes events by attaching attributes to published messages and defining filter policies on subscriptions, ensuring subscribers only receive messages matching their configured attribute criteria.

How do I set up an SNS dead-letter queue to handle failed message deliveries?

Configure SNS delivery reliability by attaching a dead-letter queue redrive policy to subscriptions, capturing failed messages for retry analysis. Using SQS subscriptions provides additional durability for event-driven messaging.

How do I check if an SNS topic policy allows external access from outside my AWS account?

Evaluate SNS topic security by performing an authorization-first malformed request probe against external accessibility, supplemented by policy-based fallbacks to validate if external actors can interact with the topic.

What's the best way to publish messages to an SNS FIFO topic?

Publishing to an SNS FIFO topic requires setting a message group ID for ordering and a deduplication ID to prevent duplicate messages, ensuring strict message delivery sequencing for subscribed endpoints.

Can I use AWS SNS to send notifications to multiple protocols like Lambda and SQS?

AWS SNS supports subscribing multiple protocols to a single topic, including Lambda, SQS, HTTP/HTTPS, Email, SMS, and mobile push, allowing you to fan out event-driven notifications across diverse endpoints simultaneously.