AWS eventbridge documentation change

Service: eventbridge · 2025-08-22 · Documentation low

File: eventbridge/latest/ref/events-ref-eks.md

Summary

Added CloudTrail integration documentation for EKS events including API call tracking

Security assessment

Documents CloudTrail event delivery for audit purposes but doesn't introduce new security features or address vulnerabilities. CloudTrail integration is standard operational visibility.

Diff

diff --git a/eventbridge/latest/ref/events-ref-eks.md b/eventbridge/latest/ref/events-ref-eks.md
index 11e8e8456..52a395744 100644
--- a//eventbridge/latest/ref/events-ref-eks.md
+++ b//eventbridge/latest/ref/events-ref-eks.md
@@ -5 +5 @@
-Service events
+Service eventsEvents via CloudTrail
@@ -9 +9 @@ Service events
-Amazon EKS sends service events directly to EventBridge.
+Amazon EKS sends service events directly to EventBridge, as well as via AWS CloudTrail.
@@ -59,0 +60,34 @@ For more information, see [Creating event patterns](https://docs.aws.amazon.com/
+## Amazon EKS events delivered via AWS CloudTrail
+
+AWS CloudTrail sends events originating from Amazon EKS to EventBridge. AWS services deliver events to CloudTrail on a [best effort](./event-delivery-level.html) basis. For more information, see [AWS service events delivered via AWS CloudTrail](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-service-event-cloudtrail.html) in the _Amazon EventBridge User Guide_.
+
+To match events from this service delivered by AWS CloudTrail, create an event pattern that matches against the following event attributes:
+
+  * `source`: aws.eks
+
+  * `eventSource`: eks.amazonaws.com
+
+
+
+    
+    
+    {
+      "source": ["aws.eks"],
+      "detail-type": ["AWS API Call via CloudTrail"],
+      "detail": {
+        "eventSource": ["eks.amazonaws.com"]
+      }
+    }
+
+To match against a specific API calls from this service, include an `eventName` attribute specifying an array of API calls to match:
+    
+    
+    {
+      "source": ["aws.eks"],
+      "detail-type": ["AWS API Call via CloudTrail"],
+      "detail": {
+        "eventSource": ["eks.amazonaws.com"],
+        "eventName": ["api-action-name"]
+      }
+    }
+