AWS SNS Subscriptions: missing match_suffixes argument

[wdesouza]

Describe the feature

I've been working with AWS SNS Filter Policy and CDK for Python. I noticed that there are no parameter to set suffixes, only prefixes. Is there any way to pass policy as dict?

Use Case

Code snippet

# topic - sns.Topic
# fn - _lambda.Function

filter_policy = {
    "key": sns.SubscriptionFilter.string_filter(
        match_suffixes=[".fastq", ".fastq.gz"] # param doesn't exist
    )
}
topic.add_subscription(
    subscriptions.LambdaSubscription(fn, filter_policy=filter_policy)
)

Proposed Solution

Maybe to include match_suffixes in future releases; or a way to pass filter policy as dict.
I am using CfnSubscription as workaround.

filter_policy = {"key": [{"suffix": ".fastq"}, {"suffix": ".fastq.gz"}]}
sns.CfnSubscription(
    self,
    "SubscriptionExample",
    topic_arn=topic.topic_arn,
    filter_policy=filter_policy,
    protocol="lambda",
    endpoint=fn.function_arn,
)

# I don't know how to use fn.grant_invoke on topic
lambda_.CfnPermission(
    self,
    "LambdaPermission",
    action="lambda:InvokeFunction",
    function_name=fn.function_arn,
    principal="sns.amazonaws.com",
    source_arn=topic.topic_arn,
)

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.122.0 (build 7e77e02)

Environment details (OS name and version, etc.)

macOS, Python 3.12.1

[msambol]

I'll take this.

[pahud]

According to this, yes we do not have matchSuffixes at this moment.

aws-cdk/packages/aws-cdk-lib/aws-sns/lib/subscription-filter.ts

Lines 4 to 38 in 20ad55e

	export interface StringConditions {
	/**
	* Match one or more values.
	*
	* @deprecated use `allowlist`
	* @default - None
	*/
	readonly whitelist?: string[];
	/**
	* Match any value that doesn't include any of the specified values.
	* @deprecated use `denylist`
	* @default - None
	*/
	readonly blacklist?: string[];
	/**
	* Match one or more values.
	* @default - None
	*/
	readonly allowlist?: string[];
	/**
	* Match any value that doesn't include any of the specified values.
	* @default - None
	*/
	readonly denylist?: string[];
	/**
	* Matches values that begins with the specified prefixes.
	*
	* @default - None
	*/
	readonly matchPrefixes?: string[];
	}

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.