Amazon EventBridge (events)

2026-09-24

14 new actions, 3 new resources, 7 new conditions | 7 updated actions

Additions

    Actions
  • CreateEventSource
    • Description:  Grants permission to create an event source that forwards events to an event bus
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: Yes

      Name: event-sourcev2

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

      events:source
  • CreateSubscriber
    • Description:  Grants permission to create a subscriber
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: Yes

      Name: subscriber

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

      events:ContentFilterPresent

      events:Metadata/${MetadataKey}

      events:Metadata/${MetadataKey}/Matcher
  • DeleteEventSource
    • Description:  Grants permission to delete an event source
    • Access:  Write
    • Resources: 

      Name: event-sourcev2

      Required: Yes

  • DeleteResourcePolicy
    • Description:  Grants permission to delete a resource policy attached to an event bus
    • Access:  Permissions management
    • Resources: 

      Name: event-busv2

      Required: Yes

    • Conditions: 

      events:PolicyName
  • DeleteSubscriber
    • Description:  Grants permission to delete a subscriber
    • Access:  Write
    • Resources: 

      Name: subscriber

      Required: Yes

  • DescribeSubscriber
    • Description:  Grants permission to retrieve details about a subscriber
    • Access:  Read
    • Resources: 

      Name: subscriber

      Required: Yes

  • GetResourcePolicy
    • Description:  Grants permission to retrieve the resource policy attached to an event bus
    • Access:  Read
    • Resources: 

      Name: event-busv2

      Required: Yes

    • Conditions: 

      events:PolicyName
  • ListResourcePolicies
    • Description:  Grants permission to list the resource policies attached to an event bus
    • Access:  List
    • Resources: 

      Name: event-busv2

      Required: Yes

  • ListSubscribers
    • Description:  Grants permission to retrieve a list of subscribers
    • Access:  List
  • PutRawEvents
    • Description:  Grants permission to publish raw-format events with custom content types, metadata, binary payloads, and FIFO ordering to Amazon EventBridge
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: Yes

    • Conditions: 

      events:Metadata/${MetadataKey}

      events:SystemMetadata/AwsDetailType

      events:SystemMetadata/AwsSource

      events:SystemMetadata/ContentType

      events:eventBusInvocation
  • PutResourcePolicy
    • Description:  Grants permission to attach a resource policy to an event bus
    • Access:  Permissions management
    • Resources: 

      Name: event-busv2

      Required: Yes

    • Conditions: 

      events:PolicyName
  • RevokeResource
    • Description:  Grants permission to revoke a subscriber or an event source on an event bus
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: Yes

  • UpdateEventSource
    • Description:  Grants permission to update an event source
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: No

      Name: event-sourcev2

      Required: Yes

    • Conditions: 

      events:source
  • UpdateSubscriber
    • Description:  Grants permission to update a subscriber
    • Access:  Write
    • Resources: 

      Name: event-busv2

      Required: No

      Name: subscriber

      Required: Yes

    • Conditions: 

      events:ContentFilterPresent

      events:Metadata/${MetadataKey}

      events:Metadata/${MetadataKey}/Matcher
    Resources
  • event-busv2
    • Arn:  arn:${Partition}:events:${Region}:${Account}:event-busv2/${EventBusName}/${OpaqueId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • event-sourcev2
    • Arn:  arn:${Partition}:events:${Region}:${Account}:event-sourcev2/${SourceType}/${EventSourceName}/${OpaqueId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • subscriber
    • Arn:  arn:${Partition}:events:${Region}:${Account}:subscriber/${SubscriberName}/${OpaqueId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
    Conditions
  • events:ContentFilterPresent
    • Description:  Filters access by whether a subscriber declares a payload-scope content filter to CreateSubscriber and UpdateSubscriber actions
    • Type:  Bool
  • events:Metadata/${MetadataKey}
    • Description:  Filters access by a metadata key-value pair on the published event to PutRawEvents actions, or by the exact-match values declared for that key in a subscriber's metadata filter to CreateSubscriber and UpdateSubscriber actions
    • Type:  ArrayOfString
  • events:Metadata/${MetadataKey}/Matcher
    • Description:  Filters access by the match type declared for a metadata key in a subscriber's filter to CreateSubscriber and UpdateSubscriber actions
    • Type:  String
  • events:PolicyName
    • Description:  Filters access by the name of the resource policy specified in the request to resource policy actions
    • Type:  String
  • events:SystemMetadata/AwsDetailType
    • Description:  Filters access by the detail type recorded in the system metadata of an event forwarded onto an event bus to PutEvents and PutRawEvents actions
    • Type:  String
  • events:SystemMetadata/AwsSource
    • Description:  Filters access by the source recorded in the system metadata of an event forwarded onto an event bus to PutEvents and PutRawEvents actions
    • Type:  String
  • events:SystemMetadata/ContentType
    • Description:  Filters access by the content type declared on an event for PutRawEvents and for forwarded events authorized as PutEvents
    • Type:  String

Updates