AWS Security ChangesHomeSearch

AWS eventbridge documentation change

Service: eventbridge · 2026-04-28 · Documentation medium

File: eventbridge/latest/ref/events-ref-network-firewall.md

Summary

Added documentation for direct Network Firewall service events in EventBridge

Security assessment

Introduces monitoring capabilities for firewall configuration/attachment changes, enhancing security visibility. No specific vulnerability is addressed.

Diff

diff --git a/eventbridge/latest/ref/events-ref-network-firewall.md b/eventbridge/latest/ref/events-ref-network-firewall.md
index e5af123e5..47e0aee2a 100644
--- a//eventbridge/latest/ref/events-ref-network-firewall.md
+++ b//eventbridge/latest/ref/events-ref-network-firewall.md
@@ -7 +7 @@
-Events via CloudTrail
+Service eventsEvents via CloudTrail
@@ -11 +11,38 @@ Events via CloudTrail
-Network Firewall sends service events to EventBridge via AWS CloudTrail.
+Network Firewall sends service events directly to EventBridge, as well as via AWS CloudTrail.
+
+## Network Firewall service events
+
+Network Firewall sends the following events directly to EventBridge: 
+
+  * Firewall Configuration Changed
+
+  * Firewall Attachment Status Changed
+
+  * Firewall Transit Gateway Attachment Status Changed
+
+
+
+
+_Delivery type_ : [ Durable ](./event-delivery-level.html)
+
+To match against all events from this service, create an event pattern that matches against the following event attribute:
+
+  * `source`: aws.network-firewall
+
+
+
+    
+    
+    {
+      "source": ["aws.network-firewall"]
+    }
+
+To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example:
+    
+    
+    {
+      "source": ["aws.network-firewall"],
+      "detail-type": ["Firewall Configuration Changed"]
+    }
+
+For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_.