
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
@makerx/cloudwatch-error-alarms
Advanced tools
CDK and lambda wrapper to send error alarms to Slack. This project inclues:
npm install @makerx/cloudwatch-error-alarms --save
In your CDK stack, create the lambda with CloudWatchErrorAlarmLambda and subscribe it to the log group for error level messages.
import { CloudWatchErrorAlarmLambda } from '@makerx/cloudwatch-error-alarms'
import * as destinations from 'aws-cdk-lib/aws-logs-destinations'
import { FilterPattern } from 'aws-cdk-lib/aws-logs'
// My lambda to monitor
const lambda = new lambda.Function(...)
// Set up error lambda to post to Slack
const errorsLambda = new CloudWatchErrorAlarmLambda(this, `${id}-cloud-watch-error-alarms`, {
erroringFunctionName: lambda.functionName,
functionName: `${id}-cloud-watch-error-alarms`, // The cloud watch error alarm lambda function name
slackWebhookUrl: `${slackWebhookUrl}`, // Slack webhook https://slack.com/intl/en-au/help/articles/115005265063-Incoming-webhooks-for-Slack
errorFilterRegexes: [
// Regex to ignore error messages
],
})
// Allow cloud watch to trigger the alarm lambda on error
lambda.logGroup.addSubscriptionFilter(`${id}-cloud-watch-error-alarms-subscription`, {
destination: new destinations.LambdaDestination(errorsLambda),
filterPattern: FilterPattern.stringValue('$.level', '=', 'error'),
})
index.ts
is the entry point of the packaage
infrastructure.ts
contains AWS CDK to configure the error alarm lambda
lambda folder
Standalone package that has everything needed for the AWS lambda:
package.jsonAt the root level, npm run build does:
./buildtsc for index.ts and infrastructure.ts into ./build
The build folder in the content of the NPM package.FAQs
AWS CDK lambda wrapper to send error alarms to Slack
We found that @makerx/cloudwatch-error-alarms demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.