Description
Ensure the tenancy has at least one Notifications topic with at least one active (confirmed) subscription, such as an email address, PagerDuty, Slack, or a function. Event rules and alarms send their alerts to topics, so a topic with active subscribers is needed for alerts to reach anyone.
Rationale
Event rules and monitoring alarms can only notify people through a topic. If there is no topic, or its subscriptions were never confirmed, security alerts are created but never delivered. Keeping at least one topic with active subscriptions makes sure important alerts reach the right team.
Impact
Security alerts and event notifications are delivered
Supports all event rule checks in this document
Subscribers receive alert messages
Default Value
By default, no notification topics or subscriptions exist.
Pre-Requisites
Permission to manage ons-topics and ons-subscriptions
An email address or other endpoint for the security team
Test Plan
Sign in to the OCI Console at https://cloud.oracle.com.
Open the navigation menu, select Developer Services, and under Application Integration select Notifications.
Verify that at least one topic exists (check the root and other compartments).
Open the topic and verify that at least one subscription has the state Active.
If no topic has an active subscription, follow the implementation steps.
Implementation Steps
Sign in to the OCI Console at https://cloud.oracle.com.
Open the navigation menu, select Developer Services, and under Application Integration select Notifications.
Select Create topic, enter a name (for example, security-alerts), and select Create.
Open the topic, select Create subscription, choose a protocol such as Email, enter the address, and select Create.
Confirm the subscription from the email that is sent, and check that its state changes to Active.
Backout Plan
Sign in to the OCI Console at https://cloud.oracle.com.
Open the topic, delete the subscription, and delete the topic if it is no longer needed.
Reference