Merge pull request #50 from draios/pasa/eb/add-s3-events

feat(eventbridge): add detail-type for s3 events (SSPROD-35888)
draios · Feb 7, 2024 · 45fc068 · 45fc068
2 parents a5d43e6 + 17e8b71
commit 45fc068
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 1 deletion.
diff --git a/modules/services/event-bridge/main.tf b/modules/services/event-bridge/main.tf
@@ -39,7 +39,17 @@ resource "aws_cloudwatch_event_rule" "sysdig" {
   "detail-type": [
     "AWS API Call via CloudTrail",
     "AWS Console Sign In via CloudTrail",
-    "AWS Service Event via CloudTrail"
+    "AWS Service Event via CloudTrail",
+    "Object Access Tier Changed",
+    "Object ACL Updated",
+    "Object Created",
+    "Object Deleted",
+    "Object Restore Completed",
+    "Object Restore Expired",
+    "Object Restore Initiated",
+    "Object Storage Class Changed",
+    "Object Tags Added",
+    "Object Tags Deleted"
   ]
 }
 EOF

diff --git a/modules/services/event-bridge/organizational.tf b/modules/services/event-bridge/organizational.tf
@@ -43,6 +43,16 @@ Resources:
           - 'AWS API Call via CloudTrail'
           - 'AWS Console Sign In via CloudTrail'
           - 'AWS Service Event via CloudTrail'
+          - 'Object Access Tier Changed'
+          - 'Object ACL Updated'
+          - 'Object Created'
+          - 'Object Deleted'
+          - 'Object Restore Completed'
+          - 'Object Restore Expired'
+          - 'Object Restore Initiated'
+          - 'Object Storage Class Changed'
+          - 'Object Tags Added'
+          - 'Object Tags Deleted'
       State: ${var.rule_state}
       Targets:
         - Id: ${var.name}
@@ -73,6 +83,16 @@ Resources:
           - 'AWS API Call via CloudTrail'
           - 'AWS Console Sign In via CloudTrail'
           - 'AWS Service Event via CloudTrail'
+          - 'Object Access Tier Changed'
+          - 'Object ACL Updated'
+          - 'Object Created'
+          - 'Object Deleted'
+          - 'Object Restore Completed'
+          - 'Object Restore Expired'
+          - 'Object Restore Initiated'
+          - 'Object Storage Class Changed'
+          - 'Object Tags Added'
+          - 'Object Tags Deleted'
       State: ${var.rule_state}
       Targets:
         - Id: ${var.name}