Webhooks

Webhooks allow CloudThinker to push events to your external systems in real-time, enabling automation, integration, and custom workflows.

How webhooks work

Configure

Create a webhook endpoint with your target URL and select events to subscribe to

Trigger

When subscribed events occur, CloudThinker prepares a webhook payload

Deliver

CloudThinker sends an HTTP POST request to your endpoint with the event data

Process

Your system receives and processes the webhook, returning a success response

Creating webhooks

From the console

Navigate to Settings > Webhooks
Click Create Webhook
Configure the webhook:
- Name: Descriptive identifier
- URL: Your endpoint URL (must be HTTPS)
- Events: Select events to subscribe to
- Secret: Optional signing secret for verification
Save and test

Webhook configuration

Field	Description	Required
Name	Friendly name for identification	Yes
URL	HTTPS endpoint to receive events	Yes
Events	Event types to subscribe to	Yes
Secret	Shared secret for payload signing	Recommended
Headers	Custom headers to include	No
Active	Enable/disable the webhook	Yes

Event types

Subscribe to events across CloudThinker:

Recommendation events

Event	Trigger
`recommendation.created`	New recommendation generated
`recommendation.updated`	Recommendation status changed
`recommendation.implemented`	Recommendation marked complete
`recommendation.comment`	Comment added to recommendation

Incident events

Event	Trigger
`incident.created`	New incident created
`incident.updated`	Incident details changed
`incident.resolved`	Incident marked resolved
`incident.comment`	Comment added to incident

Security events

Event	Trigger
`finding.created`	New security finding detected
`finding.resolved`	Security finding resolved
`compliance.changed`	Compliance status changed

Task events

Event	Trigger
`task.started`	Scheduled task began execution
`task.completed`	Task finished successfully
`task.failed`	Task encountered an error

Agent events

Event	Trigger
`conversation.completed`	Agent conversation finished
`approval.requested`	Agent requests approval for action
`approval.granted`	User approved agent action

Resource events

Event	Trigger
`resource.discovered`	New cloud resource found
`resource.changed`	Resource configuration changed
`resource.deleted`	Resource no longer exists

Webhook payload

Each webhook includes a standardized payload:

{
  "id": "evt_abc123",
  "type": "recommendation.created",
  "timestamp": "2024-01-15T10:30:00Z",
  "workspace_id": "ws_xyz789",
  "data": {
    "id": "rec_def456",
    "title": "Right-size EC2 instance i-0abc123",
    "potential_savings": 150.00,
    "effort": "low",
    "risk": "low",
    "status": "pending"
  }
}

Payload fields

Field	Description
`id`	Unique event identifier
`type`	Event type (e.g., `recommendation.created`)
`timestamp`	ISO 8601 timestamp
`workspace_id`	Workspace where event occurred
`data`	Event-specific payload

Security

Signature verification

When you configure a webhook secret, CloudThinker signs each payload:

X-CloudThinker-Signature: sha256=<signature>

Verify the signature in your endpoint:

import hmac
import hashlib

def verify_signature(payload, signature, secret):
    expected = hmac.new(
        secret.encode(),
        payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(f"sha256={expected}", signature)

IP allowlisting

CloudThinker webhooks originate from known IP ranges. Contact support for the current IP list to configure firewall rules.

HTTPS only

Webhook URLs must use HTTPS. Self-signed certificates are not supported in production.

Retry logic

CloudThinker retries failed webhook deliveries:

Retry schedule

Attempt	Delay
1	Immediate
2	1 minute
3	5 minutes
4	30 minutes
5	2 hours
6	8 hours

Success criteria

A delivery is successful when your endpoint returns:

HTTP 2xx status code
Response within 30 seconds

Failure handling

After all retries fail:

Event is marked as failed
Notification sent (if configured)
Event available in webhook logs

Webhook management

Testing webhooks

Test webhook delivery before going live:

Select a webhook in settings
Click Send Test Event
Choose an event type
Review delivery status and payload

Viewing logs

Monitor webhook activity:

Navigate to Settings > Webhooks > Logs
View delivery attempts
See request/response details
Filter by status, event type, date

Pausing webhooks

Temporarily disable a webhook:

Select the webhook
Toggle Active to off
Events during pause are not queued

Webhook templates

Use templates for common integrations:

Slack

Post events to Slack channels:

{
  "url": "https://hooks.slack.com/services/...",
  "events": ["recommendation.created", "incident.created"],
  "transform": {
    "text": "New {{type}}: {{data.title}}"
  }
}

Jira

Create Jira tickets from CloudThinker events:

{
  "url": "https://your-org.atlassian.net/...",
  "events": ["recommendation.created"],
  "headers": {
    "Authorization": "Basic <base64_credentials>"
  }
}

PagerDuty

Trigger PagerDuty incidents:

{
  "url": "https://events.pagerduty.com/v2/enqueue",
  "events": ["incident.created"],
  "headers": {
    "Content-Type": "application/json"
  }
}

Best practices

Always Verify Signatures

Use webhook secrets and verify signatures to ensure requests originate from CloudThinker.

Respond Quickly

Return a 2xx response immediately, then process the event asynchronously. Long processing delays cause timeouts.

Handle Duplicates

Webhook deliveries may occasionally duplicate. Use the event id to deduplicate on your end.

Monitor Failures

Set up alerts for webhook failures. Investigate and fix issues promptly to avoid missing events.

Use Specific Subscriptions

Only subscribe to events you need. Reduces noise and processing overhead.

Integration examples

GitHub Actions

Trigger workflows from CloudThinker events:

# .github/workflows/cloudthinker.yml
on:
  repository_dispatch:
    types: [recommendation-created]

jobs:
  process:
    runs-on: ubuntu-latest
    steps:
      - name: Process recommendation
        run: |
          echo "New recommendation: ${{ github.event.client_payload.title }}"

AWS Lambda

Process webhooks with serverless functions:

def lambda_handler(event, context):
    body = json.loads(event['body'])

    if body['type'] == 'recommendation.created':
        # Process new recommendation
        process_recommendation(body['data'])

    return {'statusCode': 200}

Incident webhooks

Inbound webhooks from PagerDuty, Datadog, Prometheus, and more to auto-trigger RCA

Tasks & Scheduling

Schedule recurring operations and create event-driven workflows

Notifications

Configure alert routing for recommendations, incidents, and security findings

Autonomous Agents

Let agents act automatically on webhook events without manual review

APIs & Tooling

Deployment

How webhooks work

Creating webhooks

From the console

Webhook configuration

Event types

Recommendation events

Incident events

Security events

Task events

Agent events

Resource events

Webhook payload

Payload fields

Security

Signature verification

IP allowlisting

HTTPS only

Retry logic

Retry schedule

Success criteria

Failure handling

Webhook management

Testing webhooks

Viewing logs

Pausing webhooks

Webhook templates

Slack

Jira

PagerDuty

Best practices

Integration examples

GitHub Actions

AWS Lambda

Incident webhooks

Tasks & Scheduling

Notifications

Autonomous Agents

​How webhooks work

​Creating webhooks

​From the console

​Webhook configuration

​Event types

​Recommendation events

​Incident events

​Security events

​Task events

​Agent events

​Resource events

​Webhook payload

​Payload fields

​Security

​Signature verification

​IP allowlisting

​HTTPS only

​Retry logic

​Retry schedule

​Success criteria

​Failure handling

​Webhook management

​Testing webhooks

​Viewing logs

​Pausing webhooks

​Webhook templates

​Slack

​Jira

​PagerDuty

​Best practices

​Integration examples

​GitHub Actions

​AWS Lambda

​Related

Incident webhooks

Tasks & Scheduling

Notifications

Autonomous Agents

How webhooks work

Creating webhooks

From the console

Webhook configuration

Event types

Recommendation events

Incident events

Security events

Task events

Agent events

Resource events

Webhook payload

Payload fields

Security

Signature verification

IP allowlisting

HTTPS only

Retry logic

Retry schedule

Success criteria

Failure handling

Webhook management

Testing webhooks

Viewing logs

Pausing webhooks

Webhook templates

Slack

Jira

PagerDuty

Best practices

Integration examples

GitHub Actions

AWS Lambda

Related