aws-samples / aws-security-reference-architecture-examples

Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Other
965 stars 235 forks source link

[FEATURE] Possibility to deactivate creation of SNS Topics for every Service #221

Closed janahockenberger closed 1 week ago

janahockenberger commented 3 months ago

Community Note

Describe the solution you'd like

Currently for every Security Service a separate SNS Topic is created automatically. Please add the possibility f.e. with setting a parameter to deactivate the creation of the SNS Topics if it's not necessary. In our case we don't need them and want to reduce the overload of unused resources.

Also if I got it right the SNS topics are created in the org account. Wouldn't it make more sense to create them in the Account where the specific feature is enabled? F.e. to create the SNS Topic for Inspector in the audit account to have the possibility of getting notified for the events of all accounts?

mlfulleraws commented 1 week ago

Thank you for reporting the issues, we have tested the issue and could not replicate. The SNS topic for deployment is not an optional component.