EventBridge
Prefix events, 74 actions · Domain Application Integration
35 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review. 22 are service-linked role policies, shown with permission data only.
User access (7)
- AmazonEventBridgeFullAccessAdmin
- AmazonEventBridgeReadOnlyAccessReader
- AmazonEventBridgeSchemasFullAccessAdmin
- AmazonS3FilesFullAccessAdmin
- AWSLambdaFullAccessHigh privilegeAdmin
- CloudWatchEventsFullAccessAdmin
- CloudWatchEventsReadOnlyAccessReader
Operator and limited (5)
Service roles (1)
Service-linked roles (22)
- AmazonCodeGuruReviewerServiceRolePolicyOperator
- AmazonConnectCampaignsServiceLinkedRolePolicyOperator
- AmazonDevOpsGuruServiceRolePolicyOperator
- AmazonEKSConnectorServiceRolePolicyOperator
- AmazonEventBridgeSchemasServiceRolePolicyOperator
- AmazonFISServiceRolePolicyOperator
- AmazonInspector2AmiScanServiceRolePolicyOperator
- AmazonODBServiceRolePolicyOperator
- AppRunnerServiceRolePolicyOperator
- AWSBedrockAgentCoreRuntimeInstancesServiceRolePolicyOperator
- AWSCodeStarNotificationsServiceRolePolicyOperator
- AWSControlTowerAccountServiceRolePolicyOperator
- AWSEC2SqlHaServiceRolePolicyOperator
- AWSHealth_EventProcessorServiceRolePolicyOperator
- AWSManagedServices_EventsServiceRolePolicyOperator
- AWSMigrationHubOrchestratorServiceRolePolicyOperator
- AWSSecurityIncidentResponseTriageServiceRolePolicyOperator
- AWSSSMForSAPServiceLinkedRolePolicyOperator
- AWSUserNotificationsServiceLinkedRolePolicyOperator
- AWSVPCFlowLogsServiceRolePolicyOperator
- CloudTrailEventContextOperator
- EC2FastLaunchServiceRolePolicyOperator
Also grants EventBridge actions (65)
- AdministratorAccess
- AdministratorAccess-Amplify
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonECS_FullAccess
- AmazonECSServiceRolePolicy
- AmazonEKSServiceRolePolicy
- AmazonInspector2ServiceRolePolicy
- AmazonInspectorFullAccess
- AmazonInspectorReadOnlyAccess
- AmazonRDSCustomInstanceProfileRolePolicy
- AmazonRDSCustomPreviewServiceRolePolicy
- AmazonRDSCustomServiceRolePolicy
- AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
- AmazonSageMakerCanvasDataPrepFullAccess
- AmazonSageMakerServiceCatalogProductsLambdaServiceRolePolicy
- AmazonSecurityLakeAdministrator
- AmazonSSMServiceRolePolicy
- AssuranceServiceRolePolicy
- AutoScalingServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerAdministratorAccess
- AWSAuditManagerServiceRolePolicy
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSCODAPermissionsBoundary
- AWSCodeBuildAdminAccess
- AWSCodeBuildDeveloperAccess
- AWSCodeBuildReadOnlyAccess
- AWSCodeCommitFullAccess
- AWSCodeCommitPowerUser
- AWSCodeCommitReadOnly
- AWSCodePipeline_FullAccess
- AWSCodeStarServiceRole
- AWSConfigServiceRolePolicy
- AWSEntityResolutionConsoleFullAccess
- AWSFinOpsAgentServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSServiceRoleForImageBuilder
- AWSSupportServiceRolePolicy
- AWSThinkboxDeadlineResourceTrackerAccessPolicy
- AWSThinkboxDeadlineResourceTrackerAdminPolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- EC2ImageBuilderExecutionPolicy
- FinOpsAgentAgentPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioProjectProvisioningRolePolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityAudit
- SecurityLakeResourceManagementServiceRolePolicy
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
activateeventsource allowvendedlogdeliveryforresource cancelreplay createapidestination createarchive createconnection createendpoint createeventbus createeventsource createpartnereventsource createsubscriber deactivateeventsource deauthorizeconnection deleteapidestination deletearchive deleteconnection deleteendpoint deleteeventbus deleteeventsource deletepartnereventsource deleteresourcepolicy deleterule deletesubscriber describeapidestination describearchive describeconnection describeendpoint describeeventbus describeeventsource describepartnereventsource describereplay describerule describesubscriber disablerule enablerule getresourcepolicy invokeapidestination listapidestinations listarchives listconnections listendpoints listeventbuses listeventsources listpartnereventsourceaccounts listpartnereventsources listreplays listresourcepolicies listrulenamesbytarget listrules listsubscribers listtagsforresource listtargetsbyrule putevents putpartnerevents putpermission putrawevents putresourcepolicy putrule puttargets removepermission removetargets retrieveconnectioncredentials revokeresource startreplay tagresource testeventpattern untagresource updateapidestination updatearchive updateconnection updateendpoint updateeventbus updateeventsource updatesubscriber
Actions (74)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| events:ActivateEventSource | Write | 10 | 2 |
| events:AllowVendedLogDeliveryForResource | Write | 10 | 1 |
| events:CancelReplay | Write | 10 | 1 |
| events:CreateApiDestination | Write | 10 | 2 |
| events:CreateArchive | Write | 10 | 1 |
| events:CreateConnection | Write | 10 | 2 |
| events:CreateEndpoint | Write | 10 | 1 |
| events:CreateEventBus | Write | 10 | 2 |
| events:CreateEventSource | Write | 10 | 1 |
| events:CreatePartnerEventSource | Write | 10 | 1 |
| events:CreateSubscriber | Write | 10 | 1 |
| events:DeactivateEventSource | Write | 10 | 1 |
| events:DeauthorizeConnection | Write | 10 | 1 |
| events:DeleteApiDestination | Write | 10 | 2 |
| events:DeleteArchive | Write | 10 | 1 |
| events:DeleteConnection | Write | 10 | 2 |
| events:DeleteEndpoint | Write | 10 | 1 |
| events:DeleteEventBus | Write | 10 | 1 |
| events:DeleteEventSource | Write | 10 | 1 |
| events:DeletePartnerEventSource | Write | 10 | 1 |
| events:DeleteResourcePolicy | Permissions management | 10 | 1 |
| events:DeleteRule | Write | 12 | 50 |
| events:DeleteSubscriber | Write | 10 | 1 |
| events:DescribeApiDestination | Read | 24 | 3 |
| events:DescribeArchive | Read | 24 | 3 |
| events:DescribeConnection | Read | 24 | 3 |
| events:DescribeEndpoint | Read | 24 | 3 |
| events:DescribeEventBus | Read | 24 | 4 |
| events:DescribeEventSource | Read | 21 | 2 |
| events:DescribePartnerEventSource | Read | 19 | 1 |
| events:DescribeReplay | Read | 21 | 1 |
| events:DescribeRule | Read | 40 | 43 |
| events:DescribeSubscriber | Read | 18 | 1 |
| events:DisableRule | Write | 11 | 20 |
| events:EnableRule | Write | 11 | 19 |
| events:GetResourcePolicy | Read | 11 | 1 |
| events:InvokeApiDestination | Write | 10 | 1 |
| events:ListApiDestinations | List | 25 | 4 |
| events:ListArchives | List | 25 | 3 |
| events:ListConnections | List | 26 | 4 |
| events:ListEndpoints | List | 25 | 3 |
| events:ListEventBuses | List | 26 | 3 |
| events:ListEventSources | List | 23 | 1 |
| events:ListPartnerEventSourceAccounts | List | 20 | 1 |
| events:ListPartnerEventSources | List | 20 | 1 |
| events:ListReplays | List | 22 | 1 |
| events:ListResourcePolicies | List | 19 | 1 |
| events:ListRuleNamesByTarget | List | 30 | 2 |
| events:ListRules | List | 31 | 6 |
| events:ListSubscribers | List | 19 | 1 |
| events:ListTagsForResource | List | 26 | 3 |
| events:ListTargetsByRule | List | 34 | 30 |
| events:PutEvents | Write | 10 | 3 |
| events:PutPartnerEvents | Write | 10 | 1 |
| events:PutPermission | Permissions management | 10 | 1 |
| events:PutRawEvents | Write | 10 | 1 |
| events:PutResourcePolicy | Permissions management | 10 | 1 |
| events:PutRule | Write | 13 | 58 |
| events:PutTargets | Write | 13 | 57 |
| events:RemovePermission | Permissions management | 10 | 1 |
| events:RemoveTargets | Write | 12 | 50 |
| events:RetrieveConnectionCredentials | Write | 10 | 1 |
| events:RevokeResource | Write | 10 | 1 |
| events:StartReplay | Write | 10 | 1 |
| events:TagResource | Tagging | 12 | 6 |
| events:TestEventPattern | Read | 17 | 1 |
| events:UntagResource | Tagging | 11 | 1 |
| events:UpdateApiDestination | Write | 10 | 2 |
| events:UpdateArchive | Write | 10 | 1 |
| events:UpdateConnection | Write | 10 | 2 |
| events:UpdateEndpoint | Write | 10 | 1 |
| events:UpdateEventBus | Write | 10 | 1 |
| events:UpdateEventSource | Write | 10 | 1 |
| events:UpdateSubscriber | Write | 10 | 1 |