AWS eventbridge medium security documentation change
Summary
Removed direct EventBridge event delivery documentation and now states Network Firewall events are only delivered via CloudTrail
Security assessment
This change significantly alters the event delivery mechanism by removing direct EventBridge events and requiring CloudTrail. This has security implications as CloudTrail provides additional security features like audit logging, integrity validation, and encryption. The removal of direct events could indicate previous security concerns with that delivery method.
Diff
diff --git a/eventbridge/latest/ref/events-ref-network-firewall.md b/eventbridge/latest/ref/events-ref-network-firewall.md index 47e0aee2a..e5af123e5 100644 --- a//eventbridge/latest/ref/events-ref-network-firewall.md +++ b//eventbridge/latest/ref/events-ref-network-firewall.md @@ -7 +7 @@ -Service eventsEvents via CloudTrail +Events via CloudTrail @@ -11,38 +11 @@ Service eventsEvents via CloudTrail -Network Firewall sends service events directly to EventBridge, as well as via AWS CloudTrail. - -## Network Firewall service events - -Network Firewall sends the following events directly to EventBridge: - - * Firewall Configuration Changed - - * Firewall Attachment Status Changed - - * Firewall Transit Gateway Attachment Status Changed - - - - -_Delivery type_ : [ Durable ](./event-delivery-level.html) - -To match against all events from this service, create an event pattern that matches against the following event attribute: - - * `source`: aws.network-firewall - - - - - - { - "source": ["aws.network-firewall"] - } - -To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example: - - - { - "source": ["aws.network-firewall"], - "detail-type": ["Firewall Configuration Changed"] - } - -For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_. +Network Firewall sends service events to EventBridge via AWS CloudTrail.