CloudWatch alert when a new deploy is made AWS

Question

There are some issues in a company I'm working for. Basically the dev team is pushing new deploys to the API Gateway before consulting with the security guy.

This leads to the security person noticing a new endpoint on the application was released when security issues start to arise.

I was wondering if there's any simple way of creating an alert that pops up on AWS CloudWatch when a new deploy is created. If I recall corectly, these are called "alarms".

I have looked a bit into alarms but they seem to be based on metrics and I was not able to find a metric that shows a new endpoint being created on deploy.

This is certainly not the best approach to the problem, but It should work for now until the deploy process is changed.

Answer 1

I was thinking you could come up with a script that runs aws cloudformation list-stacks and check whether the output has more number of stacks than last time. But this method will only work for new stacks, not for stack modifications.