Well Architected SNS Topic. Assumes SNS Topic master key already exists, if not it will throw an error. In order to create master key, just create a test topic in that account then delete it.

Default Configuration

Encryption: KMS Managed Removal Policy: Retain in Production

Default Alarms

  1. Number Of Notifications Failed Alarm
    • Risk Level: High
    • Well Architected Pillar: Reliability
  2. Number Of Notifications Failed To Redrive To Dlq Alarm
    • Risk Level: Low
    • Well Architected Pillar: Reliability, Operational Excellence

Note that the default alarm uses the WaAlarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.


Default Usage

new WaTopic(this, "LogicalId", {});

Custom Configuration

new WaTopic(this, "LogicalId", {
masterKey: customerMasterKey


It addresses the following compliance requirements

  1. Enable server side encryption
    • Risk Level: High
    • Compliance: PCI, HIPAA, GDPR, APRA, NIST4
    • Well Architected Pillar: Security
  2. Configure alarms for production only
    • Risk Level: Low
    • Compliance: NA
    • Well Architected Pillar: Cost Optimization


  • Topic
    • WaTopic


  • Parameters

    Returns WaTopic


alarms: Alarms = ...

All the default alarms configured for the Well Architected CloudFront Distribution. You can add more alarms or delete default alarms from this Alarms object


  • Returns void

  • Returns void

  • Returns void

  • Parameters

    Returns undefined | IKey

Generated using TypeDoc