Overview

Pub/Sub Type
The services have to subscribe a certain SNS topics and all the subscribers will get the notifications.

Security

Transit Encryption is enabled by default.
Can be encrypted on the fly for HTTP API
Can be encrypted at rest using KMS keys
Client side encryption is also available if the client want

Can use IAM policies to regulate the SNS API

Access policies

• Cross account access to SNS queues.
• Useful for other services (S3) to write an SNS topic

FIFO

Order by message group ID.
Deduplication or content based deduplication.

Message Filtering

JSON policy used to filter messages sent to SNS topic's subscription.
If a subscription doesn't have a filter policy it will receive every messages.