Skip to main content

Understanding the Event Monitoring & Notification API

Event Monitoring & Notification API is a shared service that delivers real-time monitoring, alerting, and automated response capabilities across Zscaler products, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Data Protection. This API enables partners and customers to automate the delivery of critical metrics and gain deeper visibility into the performance and efficacy of Zscaler solutions. It allows customers to monitor and receive alerts across multiple platforms from a centralized location, and supports multiple notification channels, including email, webhook, and Amazon Simple Notification Service (SNS).

Amazon SNS allows publishers to communicate with subscribers asynchronously by sending messages to a topic, which serves as a logical access point and communication channel. To learn more, refer to the Amazon documentation. The Amazon SNS channel supported by the Event Monitoring & Notification API is designed for organizations that already use Amazon Web Services (AWS) as an integration hub and want the Event Monitoring & Notification API to integrate directly with their existing messaging and automation workflows.

You can configure the Event Monitoring & Notification API to deliver notifications to Amazon SNS topics in your AWS account. When events reach your topics, you can use AWS’s native publish–subscribe messaging infrastructure to fan out Zscaler alerts and events to downstream systems such as Amazon SQS, AWS Lambda, HTTP/HTTPS endpoints, mobile push services, email pipelines, and third‑party incident management tools.

Key Capabilities

The Event Monitoring & Notification API allows you to:

  • Service catalog: Browse available sources, source types, and source events using Hypermedia as the Engine of Application State (HATEOAS) links.
  • Subscription management: Subscribe to specific events to receive alerts and notifications when matching events occur.
  • Multi-tenant: Leverage tenant isolation, scoped access, and per-product tenant mapping for supported Zscaler products (e.g., ZIA and ZPA).

The Amazon SNS notification channel supported by this API offers the following additional key capabilities:

  • Cross‑account publishing: Zscaler publishes messages to your SNS topic from a Zscaler‑managed AWS account using an assumed Identity and Access Management (IAM) role associated with your AWS account.
  • Customer‑managed permissions: You control who can publish to your SNS topic via an SNS topic policy (and, if applicable, an IAM role trust and permissions policy). Zscaler provides the Amazon Resource Name (ARN) for the role and required actions; you can decide how narrowly to scope access.
  • Verification before use: A dedicated sns:verify endpoint tests publish access to your SNS topic before you create a live subscription. This reduces misconfiguration and avoids silent delivery failures later.
  • Region support: The SNS channel supports any AWS commercial region where SNS is available. You can specify the region explicitly, or the Event Monitoring & Notification API can infer it from the topic ARN.

To learn more about Amazon resources and workflows, refer to the Amazon documentation.

To learn more about using this API, see Working with the Event Monitoring & Notification API and Event Monitoring & Notification API Codes.