> Source: [sk151732](https://support.checkpoint.com/results/sk/sk151732)

# sk151732 - Configure an AWS SNS for CloudGuard Dome9 Notifications

| Property | Value |
|----------|-------|
| Solution ID | sk151732 |
| Date Created | 2019-04-16 |
| Last Modified | 2019-06-13 |
| Technical Level | General |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |

## Solution

You can configure CloudGuard Dome9 to send Compliance and Log.ic alerts to an AWS SNS. With this, you can leverage the relability, security, and flexibility of SNS to get notifications of events in your cloud environments to the right individuals.

You configure this as a [Notification Policy](https://helpcenter.dome9.com/hc/en-us/articles/360003963094-Continuous-Compliance#Set_up_a_Notification_Policy), that can be used for [Continuous Compliance](https://helpcenter.dome9.com/hc/en-us/search/click?data=BAh7CjoHaWRsKwjWiOjRUwA6CXR5cGVJIgxhcnRpY2xlBjoGRVQ6CHVybEkiOi9oYy9lbi11cy9hcnRpY2xlcy8zNjAwMDM5NjMwOTQtQ29udGludW91cy1Db21wbGlhbmNlBjsHVDoOc2VhcmNoX2lkSSIpNTdkMWQ4ZTMtZTA4OS00NTcyLTk5ZjQtMWZlZjQxZTdiZjk1BjsHRjoJcmFua2kG--04f9e432e307dd4faf6afc887d7438755fea7373) or [Log.ic](https://helpcenter.dome9.com/hc/en-us/articles/360004087693-Magellan)alerts, and then associate it with a Compliance Policy or a Log.ic Query. Once this is in place, every finding for the compiance policy or query will be sent as an SNS message (including a message when the issue is resolved).

Configure an SNS for notifications
----------------------------------

This procedure configures a Dome9 Notification Policy that sends findings to an SNS. Each finding is sent as a separate message.

1. Navigate to the **Notifications** tab in the **Compliance \& Governance** or **Log.ic**menus.
2. Click **ADD NOTIFICATION**.
3. Enter a name and description for the notification policy.
4. In the **Immediate Notification** section, select *SNS notification for each new finding as soon as it is discovered.*
5. Enter the ARN for the SNS (see [here](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html) for details how to create an SNS in AWS).
   * **JSON - Full entity** - includes details of the finding, and full attributes (as maintained in Dome9) for the entity in the finding, in JSON format
   * **JSON - Basic entity** - includes details of the finding, and a few attributes for the entity (such as the entity id), in JSON format
   * **Plain text** - like the Basic entity, but in plain text format.
6. Optionally, click **Send Test Message**to test the connection.
7. Click **SAVE**.

<!-- -->

Use the Notification Policy with a Continuous Compliance policy
---------------------------------------------------------------

1. Navigate to the **Policies** tab in the **Compliance \& Governance**menu.
2. Click **ADD POLICY**.
3. Enter a name and description for the policy.
4. Select the cloud platform on which the policy will apply (it does not have be AWS), and then click **NEXT**.
5. Select the accounts on which the policy will apply (can be more than one), and then click **NEXT**.
6. Select the rulesets to apply to the selected accounts, as part of the policy (can be more than one), and then click **NEXT**.
7. Select the Notification Policy created above and, optionally, other policies, and then click **SAVE**.

Once this policy is set up, it will be applied continuously to the selected accounts. Any findings will be sent as messages to the SNS.

Use the Notification Policy with a Log.ic policy
------------------------------------------------

1. Navigate to the **Policies** tab in the **Log.ic**menu.
2. Click **ADD POLICY**.
3. Select the AWS accounts on which the policy will apply (can be more than one), and then click **NEXT**.
4. Select the rulesets to apply to the selected accounts, as part of the policy (can be more than one), and then click **NEXT**.
5. Select the Notification Policy created above and, optionally, other policies, and then click **SAVE**.

Once this policy is set up, it will be applied to the selected AWS accounts. Any findings will be sent as messages to the SNS.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content