AWS::SNS::Topic - DeliveryStatusLogging (new property)

[pbsinclair42]

Quick Sample Summary:

1. Scope of request -> New attribute for an existing resource. AWS::SNS::Topic does not currently support configuring the delivery status logging settings, though configuring these settings is currently supported by the AWS SDKs.
2. Expected behavior -> In Create, allow setting delivery status logging settings. In Update, allow changing delivery status logging settings, which shouldn't require replacement.
3. Links to existing API doc -> Docs describe how this is done in the SDK here: https://docs.aws.amazon.com/sns/latest/dg/sns-topic-attributes.html , while the API docs themselves do not currently describe this functionality: https://docs.aws.amazon.com/sns/latest/api/API_SetTopicAttributes.html
4. Category tag -> Other (Application Integration)

[yangmarc]

Hello @pbsinclair42, we are currently working migrating all existing SNS resource to self-service. Once we have successfully onboard to self-service, we should be able to address this request. The estimated timeline for migrating to self-service is in Q1.

[yangmarc]

SNS Resources are now live in Github. https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns. You can fork it and contribute. We are starting to migrate SNS Resources to self-service

[ngamradt-turner]

@yangmarc, is there an update on this missing feature?

[iainelder]

@yangmarc , does this issue need to be migrated to the new repo?

I don't see one there and I didn't want to make a duplicate.

[ngamradt-turner]

What is the status of this ticket? @iainelder, what is the other repo that you mentioned?

[iainelder]

@ngamradt-turner I was referring to @yangmarc 's linked repo: https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-sns

[yangmarc]

@ngamradt-turner @iainelder feel free to contribute to the cfn sns repo. This property can be easily implemented in self service. However, it wont be published to public until official approval by aws cfn team. For now, you can implement and use it for your own benefit.

[iainelder]

@yangmarc , thanks for the opportunity to collaborate.

Now I'm not working with SNS resources so I have no immediate need for the feature. I'd be interested to review someone else's implementation if they get to it first.

My question was more one of housekeeping; now that there is a repo for SNS resources, can we move this issue there?

[yangmarc]

@iainelder Feel free to open an issue in the SNS resource repo while keeping this issue here in the CFN coverage. This way, it can be seen by both the engineers on SNS team and CFN team. Thanks

[egut]

As this now is part of SecurityHub https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-sns-2 it would be awesome if this get fixed SOON.

[otaviofff]

As of December 2023, SNS supports the configuration of delivery status logging via CloudFormation. Here's the announcement: https://aws.amazon.com/about-aws/whats-new/2023/12/amazon-sns-configuring-delivery-status-logging-aws-cloudformation/

In your template, simply set the DeliveryStatusLogging property, as follows

"Resources": {
    "MySNSTopic" : {
        "Type" : "AWS::SNS::Topic",
        "Properties" : {
            "TopicName" : "TestTopic",
            "DisplayName" : "TEST",
            "SignatureVersion" : "2",
            "DeliveryStatusLogging" : [{
                "Protocol": "sqs",
                "SuccessFeedbackSampleRate": "45",
                "SuccessFeedbackRoleArn": "arn:aws:iam::123456789012:role/SNSSuccessFeedback_test1",
                "FailureFeedbackRoleArn": "arn:aws:iam::123456789012:role/SNSFailureFeedback_test2"
            }]
        }
    }
}