What's new?

• Record only Guardrails infrastructure topics, subscriptions, and topic policies in the CMDB. AWS > SNS > Topic > CMDB, AWS > SNS > Subscription > CMDB and AWS > SNS > Topic Policy > CMDB now offer a new value, "Enforce: Enabled for Guardrails infrastructure only". When set, Guardrails records only the SNS topics that make up its own infrastructure (the Event Handlers) — and their subscriptions and topic policies — and stops tracking every other SNS resource in the account. The default ("Enforce: Enabled", record everything) is unchanged, so nothing changes unless you opt in.
• Fewer SNS events forwarded when scoped. When AWS > SNS > Topic > CMDB is set to the new value, the mod also narrows the EventBridge pattern it contributes to the Guardrails Event Handlers, so AWS stops forwarding events for non-Guardrails topics and their subscriptions at the source instead of Guardrails discarding them after delivery.

Policy Types

Added

• AWS > SNS > Topic Policy > Regions