AWS Backup Plan: Add support to SNS notifications

This issue was originally opened by @caiohasouza as hashicorp/terraform#21375. It was migrated here as a result of the provider split. The original body of the issue is below.

---

Current Terraform Version

v0.11.13

Use-cases

When configure a backup plan it's possible create a SNS notificaiton to be notified when some events happen (BACKUP_JOB_STARTED, BACKUP_JOB_COMPLETED, RESTORE_JOB_STARTED, RESTORE_JOB_COMPLETED, RECOVERY_POINT_MODIFIED). The new aws_backup_plan feature doesn't have this option, i guess that feature is similary to "autoscaling_notification" (https://www.terraform.io/docs/providers/aws/r/autoscaling_notification.html).

Attempted Solutions

I don't found the feature.

Proposal

I don't know.

References

https://docs.aws.amazon.com/aws-backup/latest/devguide/sns-notifications.html

[dannyleesmith]

Looks like it's supported in the SDK with functions like https://docs.aws.amazon.com/sdk-for-go/api/service/backup/#Backup.PutBackupVaultNotifications and the equivalent CloudFormation resources (now it supports Backup) allows this functionality at vault creation.

[SN71]

Support for this would be really nice. I moved all the backups from the resource specific solutions to AWS Backup, but now I'm blind regarding the success of the backups. I don't know, why Amazon not created an event in CloudWatch and one could filter it and send it to SNS like other services are doing :(

[dannyleesmith]

@SN71 this issue is about Terraform not having allowed you to send SNS notifications when there's activity in the vault. When this was first raised there were a handful of things you could have notifications for but they were mostly completion, change, etc., with no real detail. There was also no aws.backup filtering in CloudWatch of the CloudTrail logs.

Both of those things have recently changed.

A week or so ago an old SNS topic I had configured to received aws.backup CloudTrail events from CloudWatch started firing, and this AWS Announcement was made: https://aws.amazon.com/about-aws/whats-new/2019/10/aws-backup-enhances-sns-notifications-to-filter-on-job-status/

You will find a link on the announcement that takes you to: https://docs.aws.amazon.com/aws-backup/latest/devguide/sns-notifications.html#aws-backup-sns-apis

Whilst you cannot currently implement that within the Terraform AWS provider, you should still be able to get the functionality you need.

Hope that helps!

-- Danny

[ewbankkit]

It looks like this should be implemented as a new aws_backup_vault_notification resource.

[oh-diego-sanchez]

Is there any plan to implement this in the near future?

[ericrichtert]

It looks like this should be implemented as a new aws_backup_vault_notification resource.

That would be nice!

[bushong1]

Still looking for this.

[sicklydove]

We could really do with this as well

[VMGlobantGNBSudameris]

Hello!

Any status/plans for aws backup sns notifications & copy to region?

[dannyleesmith]

Hello!

Any status/plans for aws backup sns notifications & copy to region?

Hey @VMGlobantGNBSudameris, I have an issue open for the region copy here: #11589

[jdrowne]

Reiterating we have a real life need for this feature.