AWS Security ChangesHomeSearch

AWS solutions documentation change

Service: solutions · 2026-02-28 · Documentation low

File: solutions/latest/innovation-sandbox-on-aws/event-schemas-reference.md

Summary

Added documentation for Blueprint Deployment Events including three new event types (Request/Succeeded/Failed) with schema definitions and failure scenarios

Security assessment

The changes add operational documentation about deployment workflows and error handling, but there is no evidence of addressing security vulnerabilities or describing security controls. While deployment failures could indirectly relate to security configurations, the documentation focuses on workflow tracking rather than security features.

Diff

diff --git a/solutions/latest/innovation-sandbox-on-aws/event-schemas-reference.md b/solutions/latest/innovation-sandbox-on-aws/event-schemas-reference.md
index dbc9402ed..a4334b777 100644
--- a//solutions/latest/innovation-sandbox-on-aws/event-schemas-reference.md
+++ b//solutions/latest/innovation-sandbox-on-aws/event-schemas-reference.md
@@ -5 +5 @@
-Event structureEvent categoriesLease lifecycle eventsLease monitoring eventsAccount management eventsCost reporting eventsSchema evolution
+Event structureEvent categoriesLease lifecycle eventsLease monitoring eventsAccount management eventsCost reporting eventsBlueprint deployment eventsSchema evolution
@@ -42,0 +43,2 @@ Events are organized into the following categories:
+  * **Blueprint Deployment Events** \- Blueprint deployment requests, successes, and failures
+
@@ -331,0 +334 @@ Published when an account cleanup process completes successfully.
+        "reason": "LEASE_TERMINATION",
@@ -351,0 +355 @@ Published when an account cleanup process fails.
+        "reason": "LEASE_TERMINATION",
@@ -431,0 +436,93 @@ Published when cost report generation fails.
+## Blueprint deployment events
+
+### BlueprintDeploymentRequest
+
+Published when a lease with an attached blueprint is approved, triggering the blueprint deployment workflow.
+
+**Detail Type:** `BlueprintDeploymentRequest`
+
+**Schema:**
+    
+    
+    {
+      "detail-type": "BlueprintDeploymentRequest",
+      "detail": {
+        "blueprintId": "550e8400-e29b-41d4-a716-446655440000",
+        "blueprintName": "Development Environment",
+        "leaseId": "650e8400-e29b-41d4-a716-446655440000",
+        "userEmail": "[email protected]",
+        "accountId": "123456789012",
+        "stackSetId": "arn:aws:cloudformation:us-east-1:123456789012:stackset/dev-env-stackset:abc123",
+        "regions": ["us-east-1", "us-west-2"],
+        "regionConcurrencyType": "SEQUENTIAL",
+        "deploymentTimeoutMinutes": 30,
+        "maxConcurrentPercentage": 100,
+        "failureTolerancePercentage": 0,
+        "concurrencyMode": "STRICT_FAILURE_TOLERANCE"
+      }
+    }
+
+**Note:** `maxConcurrentPercentage`, `failureTolerancePercentage`, and `concurrencyMode` are optional fields.
+
+### BlueprintDeploymentSucceeded
+
+Published when a blueprint deployment completes successfully and the user can access the account with pre-configured resources.
+
+**Detail Type:** `BlueprintDeploymentSucceeded`
+
+**Schema:**
+    
+    
+    {
+      "detail-type": "BlueprintDeploymentSucceeded",
+      "detail": {
+        "leaseId": {
+          "uuid": "650e8400-e29b-41d4-a716-446655440000",
+          "userEmail": "[email protected]"
+        },
+        "blueprintId": "550e8400-e29b-41d4-a716-446655440000",
+        "accountId": "123456789012",
+        "operationId": "abc123-def456-ghi789",
+        "duration": 15
+      }
+    }
+
+### BlueprintDeploymentFailed
+
+Published when a blueprint deployment fails due to validation errors, deployment failures, or timeouts. The lease transitions to `ProvisioningFailed` status and the account is sent to cleanup.
+
+**Detail Type:** `BlueprintDeploymentFailed`
+
+**Schema:**
+    
+    
+    {
+      "detail-type": "BlueprintDeploymentFailed",
+      "detail": {
+        "leaseId": {
+          "uuid": "650e8400-e29b-41d4-a716-446655440000",
+          "userEmail": "[email protected]"
+        },
+        "blueprintId": "550e8400-e29b-41d4-a716-446655440000",
+        "accountId": "123456789012",
+        "operationId": "abc123-def456-ghi789",
+        "errorType": "DEPLOYMENT_TIMEOUT",
+        "errorMessage": "StackSet deployment failed: Resource creation timeout"
+      }
+    }
+
+**Note:** `operationId` is optional and may not be present for validation failures that occur before deployment starts.
+
+**Common failure reasons:**
+
+  * StackSet validation failures (not found, wrong permission model, inactive status)
+
+  * CloudFormation deployment errors (resource creation failures, insufficient permissions)
+
+  * Deployment timeout exceeded (default: 30 minutes, configurable per blueprint)
+
+  * Lambda function errors (crashes, timeouts, throttling)
+
+
+
+