AWS eventbridge documentation change

Service: eventbridge · 2025-08-22 · Documentation low

File: eventbridge/latest/ref/events-ref-access-analyzer.md

Summary

Added documentation for CloudTrail integration with IAM Access Analyzer events

Security assessment

Documents monitoring of security-related API calls through CloudTrail, enhancing security visibility but not addressing a specific vulnerability.

Diff

diff --git a/eventbridge/latest/ref/events-ref-access-analyzer.md b/eventbridge/latest/ref/events-ref-access-analyzer.md
index fcbe8969c..7fb6b37a3 100644
--- a//eventbridge/latest/ref/events-ref-access-analyzer.md
+++ b//eventbridge/latest/ref/events-ref-access-analyzer.md
@@ -5 +5 @@
-Service events
+Service eventsEvents via CloudTrail
@@ -9 +9 @@ Service events
-IAM Access Analyzer sends service events directly to EventBridge.
+IAM Access Analyzer sends service events directly to EventBridge, as well as via AWS CloudTrail.
@@ -49,0 +50,34 @@ For more information, see [Creating event patterns](https://docs.aws.amazon.com/
+## IAM Access Analyzer events delivered via AWS CloudTrail
+
+AWS CloudTrail sends events originating from IAM Access Analyzer to EventBridge. AWS services deliver events to CloudTrail on a [best effort](./event-delivery-level.html) basis. For more information, see [AWS service events delivered via AWS CloudTrail](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event-cloudtrail.html) in the _Amazon EventBridge User Guide_.
+
+To match events from this service delivered by AWS CloudTrail, create an event pattern that matches against the following event attributes:
+
+  * `source`: aws.access-analyzer
+
+  * `eventSource`: access-analyzer.amazonaws.com
+
+
+
+    
+    
+    {
+      "source": ["aws.access-analyzer"],
+      "detail-type": ["AWS API Call via CloudTrail"],
+      "detail": {
+        "eventSource": ["access-analyzer.amazonaws.com"]
+      }
+    }
+
+To match against a specific API calls from this service, include an `eventName` attribute specifying an array of API calls to match:
+    
+    
+    {
+      "source": ["aws.access-analyzer"],
+      "detail-type": ["AWS API Call via CloudTrail"],
+      "detail": {
+        "eventSource": ["access-analyzer.amazonaws.com"],
+        "eventName": ["api-action-name"]
+      }
+    }
+