AWS eventbridge documentation change
Summary
Added detailed documentation about Security Incident Response service events including direct EventBridge integration, event types, and example patterns.
Security assessment
Documents security incident tracking capabilities but does not address vulnerabilities. Enhances visibility of security-related events without fixing issues.
Diff
diff --git a/eventbridge/latest/ref/events-ref-security-ir.md b/eventbridge/latest/ref/events-ref-security-ir.md index c51b424aa..49fdb56f5 100644 --- a//eventbridge/latest/ref/events-ref-security-ir.md +++ b//eventbridge/latest/ref/events-ref-security-ir.md @@ -5 +5 @@ -Events via CloudTrail +Service eventsEvents via CloudTrail @@ -9 +9,50 @@ Events via CloudTrail -Security Incident Response sends service events to EventBridge via AWS CloudTrail. +Security Incident Response sends service events directly to EventBridge, as well as via AWS CloudTrail. + +## Security Incident Response service events + +Security Incident Response sends the following events directly to EventBridge: + + * Case Created + + * Case Updated + + * Case Comment Added + + * Case Comment Updated + + * Case Closed + + * Membership Created + + * Membership Updated + + * Membership Cancelled + + * Membership Terminated + + + + +_Delivery type_ : [ Durable ](./event-delivery-level.html) + +To match against all events from this service, create an event pattern that matches against the following event attribute: + + * `source`: aws.security-ir + + + + + + { + "source": ["aws.security-ir"] + } + +To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example: + + + { + "source": ["aws.security-ir"], + "detail-type": ["Case Created"] + } + +For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_.