AWS eventbridge documentation change
Summary
Added documentation for direct Network Firewall service events in EventBridge
Security assessment
Introduces monitoring capabilities for firewall configuration/attachment changes, enhancing security visibility. No specific vulnerability is addressed.
Diff
diff --git a/eventbridge/latest/ref/events-ref-network-firewall.md b/eventbridge/latest/ref/events-ref-network-firewall.md index e5af123e5..47e0aee2a 100644 --- a//eventbridge/latest/ref/events-ref-network-firewall.md +++ b//eventbridge/latest/ref/events-ref-network-firewall.md @@ -7 +7 @@ -Events via CloudTrail +Service eventsEvents via CloudTrail @@ -11 +11,38 @@ Events via CloudTrail -Network Firewall sends service events to EventBridge via AWS CloudTrail. +Network Firewall sends service events directly to EventBridge, as well as via AWS CloudTrail. + +## Network Firewall service events + +Network Firewall sends the following events directly to EventBridge: + + * Firewall Configuration Changed + + * Firewall Attachment Status Changed + + * Firewall Transit Gateway Attachment Status Changed + + + + +_Delivery type_ : [ Durable ](./event-delivery-level.html) + +To match against all events from this service, create an event pattern that matches against the following event attribute: + + * `source`: aws.network-firewall + + + + + + { + "source": ["aws.network-firewall"] + } + +To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example: + + + { + "source": ["aws.network-firewall"], + "detail-type": ["Firewall Configuration Changed"] + } + +For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_.