Introduction:

This tutorial will show how to send email notifications when a new resource is created in an AWS region.

Prerequisites:

AWS Account with access to config,

cloud trial,

event bridge and

lambda access

Steps:

Step 1: Enable AWS CloudTrail

Choose the region of your choice.

To change the region, click on the highlighted menu below and choose the region of your choice.

Now go to the CloudTrial Dashboard and click on Create trial.

On the Create trial page, give the Trail name.

In the Storage location, choose the Create new S3 bucket.

In the CloudWatch Logs, choose Enabled and give the Role name by selecting New in the IAM Role option.

Then proceed to create the trial. (Proceed to Create trial)

Step 2: Enable AWS Config

Now go to the Config Console, and choose the Get started option on the Set up AWS Config dashboard.

In the General settings section, the Resource types to record option is for configuring which resources the AWS config should record.

For recording all supported resources, choose Record all resources supported in this region.

For recording specific resources, choose Record specific resource types.

In the Resource category, choose AWS resources, and in the Resource type drop-down menu, choose the resources which you want to record.

In the AWS Config role, choose the Use an existing AWS Config service-linked role option.

In the Delivery method, choose the Create a bucket option and give the S3 bucket name of your choice or leave the default name.

We are going to skip the next step for choosing Rules, and on the next Review, click the Confirm button.

Step 3: Create an AWS Lambda

Now create a lambda function to send an email if it is invoked.

Step 4: Create an EventBridge rule

Go to the Amazon EventBridge Console, and click on the Create rule button in the Create a new rule dialog.

In the Define rule detail section, give the name and description and click on the next button.

In the Build event pattern, choose the AWS events or EventBridge partner events option in the Event source.

Next, skip the Sample event dialog.

In the Event pattern dialog, choose the Custom patterns (JSON editor) and enter the following JSON data below.

{
  "source": [
    "aws.config"
  ],
  "detail-type": [
    "Config Configuration Item Change"
  ],
  "detail": {
    "messageType": [
      "ConfigurationItemChangeNotification"
    ],
    "configurationItem": {
      "configurationItemStatus": [
        "ResourceDiscovered"
      ]
    }
  }
}

Then proceed to the next page.

In the Select target(s) section, choose the AWS service.

In the Select a target drop-down menu, choose the Lambda function option, and in the newly appeared Function, choose the lambda function you created in step 3.

Then proceed to the next steps and in the Review and create step click on the Create rule button.

Send an Email when a New AWS Resource is created