Support Center > Search Results > SecureKnowledge Details
Configure CloudGuard Dome9 SNS Events Integration Technical Level
Solution

Configure CloudGuard Dome9 SNS Events Integration

This how-to article explains how to connect your CloudGuard Dome9 events feed into an AWS SNS (Simple Notification Service) topic under your control. This will send CloudGuard Dome9 system messages to an SNS feed. You can also configure CloudGuard Dome9 to send Posture Management or Intelligence findings to an SNS feed.

An intro post can be found here.

To set this up, you need to have access to both AWS console and CloudGuard Dome9 portal.

  1. Sign in to the AWS console and navigate to the SNS. Select Topics in the left navigation pane.

  2. Click Create topic.

  3. Enter a name and description for the topic (for example, Dome9-SNS).

  4. Scroll down to the Access Policy section and expand it.

  5. In the Define who can publish messages to the topic section, select Only the specified AWS accounts. Add the AWS account number. This number appears during your onboarding procedure (Assets > Environments > Add New > AWS Environment), when you prepare the policy. For example, in US Datacenter, the AWS account number is 634729597623.

  6. Click Create topic.


  7. Copy the ARN for the SNS.

  8. Sign in to the CloudGuard Dome9 portal and go to Settings > Integrations > SNS.

  9. Click ENABLE.

  10. In the window that opens, enter the SNS topic ARN (from step 7, above) and then click SAVE.

How to create an SNS Subscription

After you create an SNS topic, you must add subscriptions in order to integrate the information to any required endpoints. See here for details how to set up subscriptions for AWS SNS Topics.

 

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment