AWS solutions documentation change
Summary
Added documentation for SQS target properties, DLQ configuration, and KMS encryption for Event Rule DLQs.
Security assessment
The changes document security-related configurations (DLQ policies, KMS encryption) but do not address a specific security incident.
Diff
diff --git a/solutions/latest/constructs/aws-eventbridge-sqs.md b/solutions/latest/constructs/aws-eventbridge-sqs.md index 330e4f307..86c35649a 100644 --- a//solutions/latest/constructs/aws-eventbridge-sqs.md +++ b//solutions/latest/constructs/aws-eventbridge-sqs.md @@ -120,0 +121,3 @@ eventRuleProps | [`events.RuleProps`](https://docs.aws.amazon.com/cdk/api/v2/d +targetProps? | [`eventtargets.SqsQueueProps`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_events_targets.SqsQueueProps.html) | Optional user provided properties to define the SQS target on the Event Rule. If you specify a deadLetterQueue for the rule here, you are responsible for adding a resource policy to the queue allowing events.amazonaws.com permission to SendMessage, GetQueueUrl and GetQueueAttributes. You cannot send a DLQ in this property and set deployEventRuleDlq to true. Default is undefined and all system defaults are used. +eventRuleDlqKeyProps | [kms.KeyProps](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_kms.KeyProps.html) | Optional properties to define the key created to protect the ruleDlq. Only valid if deployRuleDlq is set to true. Defaults to CloudFormation defaults. +deployEventRuleDlq? | boolean | Whether to deploy a DLQ for the Event Rule. If set to `true`, this DLQ will receive any messages that can’t be delivered to the target SQS queue. Defaults to `false`. @@ -136,0 +140,2 @@ eventsRule | [`events.Rule`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-c +eventRuleDlq? | [sqs.Queue](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_sqs.Queue.html) | If the client sets deployEventRuleDlq to "true", then this value will contain the DLQ set up for the rule. +eventRuleDlqKey | [kms.IKey](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_kms.IKey.html) | The key created to encrypt the eventRuleDlq.