AWS eventbridge documentation change
Summary
Updated Network Firewall event delivery documentation to include direct EventBridge integration and new firewall configuration change events
Security assessment
Added documentation for firewall configuration change monitoring events which help track security posture changes. While security-relevant for auditing, there's no evidence this addresses a specific vulnerability.
Diff
diff --git a/eventbridge/latest/ref/events-ref-network-firewall.md b/eventbridge/latest/ref/events-ref-network-firewall.md index 0baf96d31..5fc5f786d 100644 --- a//eventbridge/latest/ref/events-ref-network-firewall.md +++ b//eventbridge/latest/ref/events-ref-network-firewall.md @@ -5 +5 @@ -Events via CloudTrail +Service eventsEvents via CloudTrail @@ -9 +9,38 @@ Events via CloudTrail -Network Firewall sends service events to EventBridge via AWS CloudTrail. +Network Firewall sends service events directly to EventBridge, as well as via AWS CloudTrail. + +## Network Firewall service events + +Network Firewall sends the following events directly to EventBridge: + + * Firewall Configuration Changed + + * Firewall Attachment Status Changed + + * Firewall Transit Gateway Attachment Status Changed + + + + +_Delivery type_ : [ Durable ](./event-delivery-level.html) + +To match against all events from this service, create an event pattern that matches against the following event attribute: + + * `source`: aws.network-firewall + + + + + + { + "source": ["aws.network-firewall"] + } + +To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example: + + + { + "source": ["aws.network-firewall"], + "detail-type": ["Firewall Configuration Changed"] + } + +For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_.