Class WaTopic

Well Architected SNS Topic. Assumes SNS Topic master key already exists, if not it will throw an error. In order to create master key, just create a test topic in that account then delete it.

Default Configuration

Encryption: KMS Managed Removal Policy: Retain in Production

Default Alarms

1. Number Of Notifications Failed Alarm

   • Risk Level: High
   • Well Architected Pillar: Reliability

2. Number Of Notifications Failed To Redrive To Dlq Alarm

   • Risk Level: Low
   • Well Architected Pillar: Reliability, Operational Excellence

Note that the default alarm uses the WaAlarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.

Examples

Default Usage

new WaTopic(this, "LogicalId", {});

Custom Configuration

new WaTopic(this, "LogicalId", {
   masterKey: customerMasterKey
});

Compliance

It addresses the following compliance requirements

1. Enable server side encryption

   • Risk Level: High
   • Compliance: PCI, HIPAA, GDPR, APRA, NIST4
   • Well Architected Pillar: Security

2. Configure alarms for production only

   • Risk Level: Low
   • Compliance: NA
   • Well Architected Pillar: Cost Optimization