Configuring Amazon SNS as an alert destination in your Panther Console
Destinations are integrations that receive alerts from rules, policies, system health notifications, and rule errors. Panther supports configuring Amazon Simple Notification Service (SNS) as the destination where you will receive alerts.
How to set up Amazon SNS alert destinations in Panther
The SNS Destination requires a Topic ARN. When an alert is forwarded to an SNS Destination, it publishes a JSON string to that topic.
In the AWS SNS console, create a new Topic or navigate to the topic you wish to add as a destination. We will be editing its permissions so Panther can publish messages to it:
After selecting the SNS topic, click Edit then scroll down and expand the "Access policy" section:
After expanding the "Access policy" section, add the following statement to the Statement block. Be sure to replace the Resource field with the ARN of your own SNS Topic, and the Principal field with the AWS account ID where Panther is deployed.