01
Run create-topic command (OSX/Linux/UNIX) to create a new AWS SNS topic for sending notifications streamed from Amazon Config service enabled in the selected region:
aws sns create-topic
--region us-east-1
--name NewConfigSNSTopic
02
The command output should return the newly created SNS topic ARN:
{
"TopicArn": "arn:aws:sns:us-east-1:123456789012:NewConfigSNSTopic"
}
03
Run subscribe command (OSX/Linux/UNIX) to subscribe to the SNS topic created at the previous step using email as subscription protocol:
aws sns subscribe
--region us-east-1
--topic-arn arn:aws:sns:us-east-1:123456789012:NewConfigSNSTopic
--protocol email
--notification-endpoint config-status@cloudconformity.com
04
The command output should return the subscription status:
{
"SubscriptionArn": "pending confirmation"
}
05
Run confirm-subscription command (OSX/Linux/UNIX) to confirm the subscription by validating the token sent to the notification endpoint (in this case your email address) specified at the previous step (the command does not produce an output):
aws sns confirm-subscription
--region us-east-1
--topic-arn arn:aws:sns:us-east-1:123456789012:NewConfigSNSTopic
--token 2071392f37fb687f5d51e6e241d7700ae02f7124d8268910b858cb4db727ceeb2474bb937929d3bdd7ce5d0cce19325d036bca58d3c217426bcafa9c501a2cace93b83f1dd3797627467553dc438a8c974119496fc3eff026eaa5d14472ded6f9a5c43aec62d83ef5f49109da730566
06
Now run describe-delivery-channels command (OSX/Linux/UNIX) to return the delivery channel configuration details for the AWS Config service enabled in the selected region:
aws configservice describe-delivery-channels
--region us-east-1
07
The command output should return the delivery channel details requested:
{
"DeliveryChannels": [
{
"snsTopicARN": "arn:aws:sns:us-east-1:123456789012:ConfigSNSTopic",
"name": "default",
"s3BucketName": "config-bucket-123456789012"
}
]
}
08
Before you update the AWS Config delivery channel, you must create a JSON document where you need to define the necessary configuration attributes. Based on the delivery channel attributes returned at the previous step, create a JSON file named new-delivery-channel.json and paste the following JSON data (replace the attributes values with your own values):
{
"name": "default",
"s3BucketName": "config-bucket-123456789012",
"snsTopicARN": "arn:aws:sns:us-east-1:123456789012:ConfigSNSTopic",
"configSnapshotDeliveryProperties": {
"deliveryFrequency": "Twelve_Hours"
}
}
09
Run put-delivery-channel command (OSX/Linux/UNIX) using the attributes defined at the previous step (new-delivery-channel.json) to update the delivery channel of the Amazon Config service with the missing SNS topic, available in the selected region (the command does not produce an output):
aws configservice put-delivery-channel
--region us-east-1
--delivery-channel file://new-delivery-channel.json
10
Change the AWS region by updating the --region command parameter value and repeat steps no. 1 – 9 to perform the entire process for other regions.
Operational
and 
|