AWS eventbridge documentation change

Service: eventbridge · 2025-06-07 · Documentation low

File: eventbridge/latest/ref/events-ref-access-analyzer.md

Summary

Removed CloudTrail delivery method documentation for IAM Access Analyzer events, now stating events are sent directly to EventBridge.

Security assessment

Documentation update reflecting changes in event delivery mechanism. No evidence of security vulnerability being addressed - appears to be a service implementation change.

Diff

diff --git a/eventbridge/latest/ref/events-ref-access-analyzer.md b/eventbridge/latest/ref/events-ref-access-analyzer.md
index ffcf07981..fcbe8969c 100644
--- a//eventbridge/latest/ref/events-ref-access-analyzer.md
+++ b//eventbridge/latest/ref/events-ref-access-analyzer.md
@@ -5 +5 @@
-Service eventsEvents via CloudTrail
+Service events
@@ -9 +9 @@ Service eventsEvents via CloudTrail
-IAM Access Analyzer sends service events directly to EventBridge, as well as via AWS CloudTrail.
+IAM Access Analyzer sends service events directly to EventBridge.
@@ -20,0 +21,2 @@ IAM Access Analyzer sends the following events directly to EventBridge:
+  * Internal Access Finding
+
@@ -48,34 +49,0 @@ For more information, see [Creating event patterns](https://docs.aws.amazon.com/
-## IAM Access Analyzer events delivered via AWS CloudTrail
-
-AWS CloudTrail sends events originating from IAM Access Analyzer to EventBridge. AWS services deliver events to CloudTrail on a [best effort](./event-delivery-level.html) basis. For more information, see [AWS service events delivered via AWS CloudTrail](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event-cloudtrail.html) in the _Amazon EventBridge User Guide_.
-
-To match events from this service delivered by AWS CloudTrail, create an event pattern that matches against the following event attributes:
-
-  * `source`: aws.access-analyzer
-
-  * `eventSource`: access-analyzer.amazonaws.com
-
-
-
-    
-    
-    {
-      "source": ["aws.access-analyzer"],
-      "detail-type": ["AWS API Call via CloudTrail"],
-      "detail": {
-        "eventSource": ["access-analyzer.amazonaws.com"]
-      }
-    }
-
-To match against a specific API calls from this service, include an `eventName` attribute specifying an array of API calls to match:
-    
-    
-    {
-      "source": ["aws.access-analyzer"],
-      "detail-type": ["AWS API Call via CloudTrail"],
-      "detail": {
-        "eventSource": ["access-analyzer.amazonaws.com"],
-        "eventName": ["api-action-name"]
-      }
-    }
-