terraform-aws-cloudtrail-to-slack icon indicating copy to clipboard operation
terraform-aws-cloudtrail-to-slack copied to clipboard

Published 20 hours ago • verified publisher icon fivexl

Spamming Notification Medium

Open parth995 opened this issue 2 years ago • 1 comments

Hey, I guess while applying terraform code, there are multiple events for same resource in cloudtrail. Hence same bunch of messages get spammed/bombarded in notification channels like a noise. Would any workaround be suggested for the same please ? Thanks

parth995 avatar Oct 07 '22 04:10 parth995

Hi @parth995! What kind of messages are those? If they are "access denied" type, then the best way is to tune up your access to include necessary permissions. If not, can you share an example?

Andrey9kin avatar Oct 11 '22 08:10 Andrey9kin

The current best thinking - have a dynamodb with configurable TTL and store messages there (only ones that match the filter), use principal structure hash and action as a composite key, and store raw event, and ts of the slack message. if we get a new event that will match the composite key then use slack ts to send message as a reply in the thread instead of standalone message

Andrey9kin avatar Jun 09 '23 09:06 Andrey9kin

5854bcc

EreminAnton avatar Jun 29 '23 08:06 EreminAnton