AWS User Notifications + Amazon Q Developer in chat applications を使ってSlackにイベント通知する際のハマりポイントをまとめた

AWSTemplateFormatVersion: '2010-09-09'

Parameters:
  SlackWorkspaceId:
    Type: String
    Default: {Slack ワークスペースID}
    Description: SlackワークスペースのワークスペースID

  SlackChannelId:
    Type: String
    Default: {Slack チャンネルID}
    Description: 通知先のSlackチャンネルID

Resources:
  # Chatbot用のIAMロール
  ChatbotRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: ChatbotRole
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: chatbot.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/ReadOnlyAccess

  # Chatbotの設定
  ChatbotSlackConfiguration:
    Type: AWS::Chatbot::SlackChannelConfiguration
    Properties:
      ConfigurationName: health-event-notifications
      IamRoleArn: !GetAtt ChatbotRole.Arn
      SlackChannelId: !Ref SlackChannelId
      SlackWorkspaceId: !Ref SlackWorkspaceId
      GuardrailPolicies:
        - arn:aws:iam::aws:policy/ReadOnlyAccess

  # User Notificationsの設定

  # ハブ設定(必須)
  NotificationHub:
    Type: AWS::Notifications::NotificationHub
    Properties:
      Region: us-east-1

  # 構成設定
  NotificationConfiguration:
    Type: AWS::Notifications::NotificationConfiguration
    Properties:
      Name: HealthEventNotifyToSlack
      Description: Health Event Notify
      AggregationDuration: SHORT

  # EventBridgeRule作成
  NotificationEventRule:
    Type: AWS::Notifications::EventRule
    Properties:
      NotificationConfigurationArn: !Ref NotificationConfiguration
      Source: "aws.s3"
      EventType: "Object Created"
      EventPattern: |
        {
          "detail": {
            "bucket": {
              "name": ["{S3バケット名}"]
            }
          }
        }
      Regions: 
        - ap-northeast-1

  # 通知先設定
  NotificationChannelAssociation:
    Type: AWS::Notifications::ChannelAssociation
    Properties:
      Arn: !Ref ChatbotSlackConfiguration
      NotificationConfigurationArn: !Ref NotificationConfiguration

Outputs:
  ChatbotConfigurationArn:
    Value: !Ref ChatbotSlackConfiguration
  NotificationConfigurationArn:
    Value: !Ref NotificationConfiguration

NotificationEventRule:
    Type: AWS::Notifications::EventRule
    Properties:
      NotificationConfigurationArn: !Ref NotificationConfiguration
      Source: "aws.iam"
      EventType: "AWS API Call via CloudTrail"
      EventPattern: |
        {
          "detail": {
            "eventSource": "iam.amazonaws.com",
            "eventName": "CreateUser"
          }
        }
      Regions: 
        - us-east-1