Use public hostname, not private ipv4 address. (AWS does not allow you to use those for SNS.)
Add healthcheck to routes
Open access to HTTP so that SNS topics can publish