AWS eventbridge documentation change
Summary
Added documentation for CloudTrail integration with Amazon Connect events
Security assessment
Enhances documentation about monitoring API calls via CloudTrail for security auditing purposes, but doesn't address a specific vulnerability.
Diff
diff --git a/eventbridge/latest/ref/events-ref-connect.md b/eventbridge/latest/ref/events-ref-connect.md index 25e8cbef0..34b12b82c 100644 --- a//eventbridge/latest/ref/events-ref-connect.md +++ b//eventbridge/latest/ref/events-ref-connect.md @@ -5 +5 @@ -Service events +Service eventsEvents via CloudTrail @@ -9 +9 @@ Service events -Amazon Connect sends service events directly to EventBridge. +Amazon Connect sends service events directly to EventBridge, as well as via AWS CloudTrail. @@ -71,0 +72,34 @@ For more information, see [Creating event patterns](https://docs.aws.amazon.com/ +## Amazon Connect events delivered via AWS CloudTrail + +AWS CloudTrail sends events originating from Amazon Connect to EventBridge. AWS services deliver events to CloudTrail on a [best effort](./event-delivery-level.html) basis. For more information, see [AWS service events delivered via AWS CloudTrail](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event-cloudtrail.html) in the _Amazon EventBridge User Guide_. + +To match events from this service delivered by AWS CloudTrail, create an event pattern that matches against the following event attributes: + + * `source`: aws.connect + + * `eventSource`: connect.amazonaws.com + + + + + + { + "source": ["aws.connect"], + "detail-type": ["AWS API Call via CloudTrail"], + "detail": { + "eventSource": ["connect.amazonaws.com"] + } + } + +To match against a specific API calls from this service, include an `eventName` attribute specifying an array of API calls to match: + + + { + "source": ["aws.connect"], + "detail-type": ["AWS API Call via CloudTrail"], + "detail": { + "eventSource": ["connect.amazonaws.com"], + "eventName": ["api-action-name"] + } + } +