AWS eventbridge medium security documentation change

Service: eventbridge · 2026-01-31 · Security-related medium

File: eventbridge/latest/userguide/eb-api-destination-create.md

Summary

Added requirement to ensure connections reach AUTHORIZED state before API destination creation

Security assessment

Enforces security posture by preventing API destination usage with unauthorized connections. Evidence: Mandating AUTHORIZED state implies security validation prerequisite.

Diff

diff --git a/eventbridge/latest/userguide/eb-api-destination-create.md b/eventbridge/latest/userguide/eb-api-destination-create.md
index 7b979eb29..44621932d 100644
--- a//eventbridge/latest/userguide/eb-api-destination-create.md
+++ b//eventbridge/latest/userguide/eb-api-destination-create.md
@@ -22,0 +23,4 @@ The name must be unique to your account in the current Region. You can use up to
+###### Important
+
+When creating a new API destination for your connection, ensure that the connection reaches the AUTHORIZED state before creating the API destination.
+