Create lambda resource base policy to allow CloudWatch Alarm invoke a lambda function

cloudwatch-alarm

# Create lambda resource base policy to allow CloudWatch Alarm invoke lambda function
aws lambda add-permission \
--function-name <your-lambda-function-name> \
--statement-id AlarmAction \
--action lambda:invokefunction \
--principal sns.amazonaws.com \
--source-arn arn:aws:sns:<your-aws-region>:<your-aws-account-id>:<your-sns-topic-name>


# Force CloudWatch Alarm become IN ALARM state
aws cloudwatch set-alarm-state --alarm-name "<alarm-name>" --state-reason "<some-description>" --state-value ALARM --region <region>