aws-sns-webhooks

name	aws-sns-webhooks
description	Receive and verify AWS SNS (Amazon Simple Notification Service) webhooks over HTTP/HTTPS. Use when setting up an SNS HTTP subscription endpoint, confirming a subscription (SubscriptionConfirmation / SubscribeURL), verifying SNS message signatures (SigningCertURL, SignatureVersion 1 SHA1 / 2 SHA256), or handling Notification and UnsubscribeConfirmation messages.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

AWS SNS Webhooks

When to Use This Skill

• How do I receive AWS SNS messages at an HTTP/HTTPS endpoint?
• How do I confirm an SNS subscription (SubscriptionConfirmation / SubscribeURL)?
• How do I verify an SNS message signature?
• Why is my SNS signature verification failing?
• How do I handle SNS Notification and UnsubscribeConfirmation messages?

How SNS Delivery Differs From HMAC Webhooks

SNS is not a Standard Webhooks / shared-secret HMAC provider. Instead:

• SNS POSTs a JSON envelope with Content-Type: text/plain. The x-amz-sns-message-type header tells you the type without parsing the body: SubscriptionConfirmation, Notification, or UnsubscribeConfirmation.
• Authenticity is proven with an (not the raw body, and not an HMAC). You fetch AWS's from and RSA-verify the base64 .