在 cloudformation 中从 SNS 主题触发 lambda

如何解决在 cloudformation 中从 SNS 主题触发 lambda

我找不到让这个 SNS 主题在这个 cloudformation 脚本中触发我的 lambda 的方法，堆栈成功创建，lambda 被添加为 SNS 主题的订阅者，但我不知道如何从脚本中添加 SNS 主题作为 lambda 的触发器，当警报向主题发送事件时，根本不会触发 lambda

  Resources:
    TriggerTopic:
      Type: AWS::SNS::Topic
      Properties:
        TopicName: TRIGGER_TOPIC
        Subscription:
          - Protocol: lambda
            Endpoint: !GetAtt TriggerLambda.Arn
  
    TriggerLambda:
      Type: AWS::Lambda::Function
      Properties:
        Code:
          S3Bucket: !Ref LambdaS3Bucket
          S3Key: !Ref LambdaS3Key
        Handler: !Ref LambdaHandler
        Runtime: java8
        Description: Trigger lambda
        MemorySize: 512
        Timeout: 30
        Role: !GetAtt LambdaRole.Arn
  
    LambdaRole:
      Type: AWS::IAM::Role
      Properties:
        AssumeRolePolicyDocument:
          Version: 2012-10-17
          Statement:
            - Action:
                - sts:AssumeRole
              Effect: Allow
              Principal:
                Service:
                  - lambda.amazonaws.com
        ManagedPolicyArns:
          - 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
          - 'arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole'
          - 'arn:aws:iam::aws:policy/AWSXraywriteonlyAccess'
          - 'arn:aws:iam::aws:policy/AWSLambdaReadOnlyAccess'
          - 'arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess'

解决方法

看看这个问题： Triggering a lambda from SNS using cloud-formation?

您需要允许 SNS 使用 AWS::Lambda::Permission 触发 lambda