AWS Lambda function to Slack Channel hookup

snsToSlack.js

var https = require('https');
var util = require('util');

exports.handler = function(event, context) {
    console.log(JSON.stringify(event, null, 2));
    console.log('From SNS:', event.Records[0].Sns.Message);

    var postData = {
        "channel": "#aws-sns",
        "username": "AWS SNS via Lamda :: DevQa Cloud",
        "text": "*" + event.Records[0].Sns.Subject + "*",
        "icon_emoji": ":aws:"
    };

    var message = event.Records[0].Sns.Message;
    var severity = "good";

    var dangerMessages = [
        " but with errors",
        " to RED",
        "During an aborted deployment",
        "Failed to deploy application",
        "Failed to deploy configuration",
        "has a dependent object",
        "is not authorized to perform",
        "Pending to Degraded",
        "Stack deletion failed",
        "Unsuccessful command execution",
        "You do not have permission",
        "Your quota allows for 0 more running instance"];

    var warningMessages = [
        " aborted operation.",
        " to YELLOW",
        "Adding instance ",
        "Degraded to Info",
        "Deleting SNS topic",
        "is currently running under desired capacity",
        "Ok to Info",
        "Ok to Warning",
        "Pending Initialization",
        "Removed instance ",
        "Rollback of environment"        
        ];
    
    for(var dangerMessagesItem in dangerMessages) {
        if (message.indexOf(dangerMessages[dangerMessagesItem]) != -1) {
            severity = "danger";
            break;
        }
    }
    
    // Only check for warning messages if necessary
    if (severity == "good") {
        for(var warningMessagesItem in warningMessages) {
            if (message.indexOf(warningMessages[warningMessagesItem]) != -1) {
                severity = "warning";
                break;
            }
        }        
    }

    postData.attachments = [
        {
            "color": severity, 
            "text": message
        }
    ];

    var options = {
        method: 'POST',
        hostname: 'hooks.slack.com',
        port: 443,
        path: '/services/your-slack-webhook-url-info-goes-here'
    };

    var req = https.request(options, function(res) {
      res.setEncoding('utf8');
      res.on('data', function (chunk) {
        context.done(null);
      });
    });
    
    req.on('error', function(e) {
      console.log('problem with request: ' + e.message);
    });    

    req.write(util.format("%j", postData));
    req.end();
};

@makaivelli When I use your toText function the json is formatted but not all is showed. Would you be able to help with modifying it to show the full formatted json? Is there a way to select which json keys are shown and specify the title in slack message?

I'm trying to get alerts in Slack when someone login to AWS.

The JSON looks like this:

{
    "version": "x",
    "id": "x",
    "detail-type": "x",
    "source": "x",
    "account": "x",
    "time": "x",
    "region": "x",
    "resources": [],
    "detail": {
        "eventVersion": "x",
        "userIdentity": {
            "type": "x",
            "principalId": "x",
            "arn": "x",
            "accountId": "x",
            "userName": "x"
        },
        "eventTime": "x",
        "eventSource": "x",
        "eventName": "x",
        "awsRegion": "x",
        "sourceIPAddress": "x",
        "userAgent": "x",
        "requestParameters": null,
        "responseElements": {
            "ConsoleLogin": "x"
        },
        "additionalEventData": {
            "LoginTo": "x",
            "MobileVersion": "x",
            "MFAUsed": "x"
        },
        "eventID": "x",
        "eventType": "x"
    }
}

After this is parsed by toText function I only get this in Slack:

null

version: x
id: x
detail-type: x
source: x
account: x
time: x
region: x
resources:
detail: [object Object]

My knowledge of nodejs is very limited as I mostly deal with infrastructure.