aws-sns-subscription-audit — find the SNS topics that accept a publish and deliver nothing

An SNS topic is where alerting goes to die quietly. Publish to a topic with zero subscriptions and the API returns 200 with a MessageId while the message is dropped; a subscription stuck in PendingConfirmation appears in the console and delivers nothing. This reads every topic, subscription and attribute set once and reports the paths that cannot deliver.