Source type

AWS SNS Source Configuration

AWS SNS sources receive HTTP/S topic notifications, verify SNS RSA signatures, and can answer subscription confirmations.

AWS_SNSPOST, PUT, PATCH, DELETEOptional Topic ARNContent and data
Amazon SNS HTTP/S subscriber documentationAll source types
AWS SNS sends webhook traffic to a FastHook source, FastHook validates the provider contract, records the request, and routes accepted events through connections to destinations.AWS SNSProviderPOST, PUT, PATCH, DELETESetup + eventsFastHookSource URLAWS_SNSProvider credentialsubscriptionVerify before queue401 on auth failure405 on wrong methodAcceptedRequestverified: trueConnections route the accepted request to destinationsFilters, transformations, retries, replay, and destination signatures stay downstream from source verification.Provider setupValidate firstConfirm subscription

AWS SNS configuration

Create a AWS SNS source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Optional Topic ARN, Optional certificate/public key through API values for provider signature. FastHook uses these settings to validate each AWS SNS delivery before it enters the routing workflow.

Source Type

AWS_SNS

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

Optional Topic ARN, Optional certificate/public key through API

AWS SNS source config
{
  "type": "AWS_SNS",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "AWS_SNS",
      "topic_arn": "optional-topic-arn"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

Subscription confirmation before notifications

  1. AWS SNS sends a SubscriptionConfirmation message before normal Notification messages.
  2. FastHook verifies the SNS message signature and can auto-confirm the subscription when configured.
  3. After confirmation, SNS sends signed Notification messages to the same Source URL.

AWS SNS request contract

FastHook builds the canonical SNS string and verifies the RSA PKCS#1 signature using the SNS certificate or configured public key.

POSTPUTPATCHDELETE

Special response: Subscription confirmation payloads can be confirmed automatically when API config enables it.

AWS SNS headers

Preserve Signature, SigningCertURL, SignatureVersion, SubscribeURL when sending AWS SNS test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

Signature

SNS message signature field in the JSON body.

SigningCertURL

SNS certificate URL used to fetch the public key when not configured inline.

SignatureVersion

Selects SHA-1 or SHA-256 RSA verification.

SubscribeURL

Used for subscription confirmation when auto-confirm is enabled by API config.

AWS SNS setup

  1. Subscribe the FastHook Source URL as an HTTP/S endpoint for the SNS topic.
  2. Optionally configure Topic ARN so FastHook rejects messages from unexpected topics.
  3. Use the API for advanced options such as inline certificate or auto-confirm subscription.

Continue with AWS SNS