SumoLogic / sumologic-aws-lambda

A collection of lambda functions to collect data from Cloudwatch, Kinesis, VPC Flow logs, S3, security-hub and AWS Inspector
Other
152 stars 134 forks source link

cloudwatchlogs-with-dlq: support optional kms key for encrypting sns topics #202

Open bobziuchkovski opened 3 months ago

bobziuchkovski commented 3 months ago

Currently the SNS topics created by these templates are unencrypted. This PR adds optional encryption for the topics when a KMS key id is specified. This id can be the literal id, or something like alias/aws/sns. This is a non-breaking change. Existing CloudFormation stacks that are updated with this template will produce no changes unless the SNSTopicKMSKey parameter is explicitly specified.