Amazon CloudWatch Events - AWS Documentation

1 Amazon CloudWatch EventsUser GuideAmazon CloudWatch Events User GuideAmazon CloudWatch Events : User GuideCopyright 2019 Amazon Web Services, Inc. and/or its affiliates. All rights 's trademarks and trade dress may not be used in connection with any product or service that is not Amazon 's, in any mannerthat is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon . All other trademarks notowned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored CloudWatch Events User GuideTable of ContentsWhat is Amazon CloudWatch Events ? .. 1 Concepts .. 1 Related AWS Services .. 2 Setting Up .. 3 Sign Up for Amazon Web Services (AWS) .. 3 Sign in to the Amazon CloudWatch Console .. 3 Account Credentials .. 3 Set Up the Command Line Interface.

2 4 Regional Endpoints .. 4 Getting Started .. 5 Creating a Rule That Triggers on an Event .. 5 Creating a Rule That Triggers on an AWS API Call via CloudTrail .. 6 Creating a Rule That Triggers on a Schedule .. 7 Deleting or Disabling a Rule.. 7 Tutorials .. 9 Tutorial: Relay Events to Amazon EC2 Run Command .. 9 Tutorial: Log EC2 Instance States .. 11 Step 1: Create an AWS Lambda Function .. 11 Step 2: Create a Rule .. 11 Step 3: Test the Rule .. 12 Tutorial: Log Auto Scaling Group States .. 13 Step 1: Create an AWS Lambda Function .. 13 Step 2: Create a Rule .. 13 Step 3: Test the Rule .. 14 Tutorial: Log S3 Object Level Operations .. 15 Step 1: Configure Your AWS CloudTrail Trail .. 15 Step 2: Create an AWS Lambda Function .. 15 Step 3: Create a Rule.

3 16 Step 4: Test the Rule .. 17 Tutorial: Use Input Transformer to Customize What is Passed to the Event Target .. 17 Create a Rule .. 18 Tutorial: Log AWS API Calls .. 19 Prerequisite .. 19 Step 1: Create an AWS Lambda Function .. 19 Step 2: Create a Rule .. 20 Step 3: Test the Rule .. 20 Tutorial: Schedule Automated EBS Snapshots .. 21 Step 1: Create a Rule .. 21 Step 2: Test the Rule .. 21 Tutorial: Schedule Lambda Functions .. 22 Step 1: Create an AWS Lambda Function .. 22 Step 2: Create a Rule .. 22 Step 3: Verify the Rule .. 24 Tutorial: Set Systems Manager Automation as a Target .. 24 Tutorial: Relay Events to a Kinesis Stream.. 25 Prerequisite .. 25 Step 1: Create an Amazon Kinesis Stream.. 25 Step 2: Create a Rule .. 25 Step 3: Test the Rule.

4 26 Step 4: Verify That the Event is Relayed .. 26 Tutorial: Run an Amazon ECS Task When a File is Uploaded to an Amazon S3 Bucket .. 27 Tutorial: Schedule Automated Builds Using AWS CodeBuild .. 28 Schedule Expressions for Rules .. 29 Cron Expressions .. 29iiiAmazon CloudWatch Events User GuideRate Expressions .. 31 Event Patterns .. 33 Event Patterns .. 34 Matching Null Values and Empty Strings In Event Patterns .. 35 Arrays In Event Patterns .. 36 Events From Supported Services .. 37 AWS Batch Events .. 37 Amazon CloudWatch Events Scheduled Events .. 38 AWS CodeBuild Events .. 38 AWS CodeCommit Events .. 38 AWS CodeDeploy Events .. 39 AWS CodePipeline Events .. 40 Amazon EBS Events .. 42 Amazon EC2 Auto Scaling Events .. 42 Amazon EC2 Spot Instance Interruption Events .

5 42 Amazon EC2 State Change Events .. 42 Amazon ECS Events .. 42 Amazon EMR Events .. 42 Amazon GameLift Event .. 44 AWS Glue Events .. 51 Amazon GuardDuty Events .. 56 AWS Health Events .. 56 AWS KMS Events .. 58 Amazon Macie Events .. 59 AWS Management Console Sign-in Events .. 64 AWS OpsWorks Stacks Events .. 64 Amazon SageMaker Events .. 67 AWS Server Migration Service Events .. 70 AWS Systems Manager Events .. 71 AWS Systems Manager Configuration Compliance Events .. 73 AWS Systems Manager Maintenance Windows Events .. 75 AWS Systems Manager Parameter Store Events .. 77 Tag Change Events on AWS Resources .. 78 AWS Trusted Advisor Events .. 79 Amazon WorkSpaces Events .. 81 Events for Services Not Listed .. 81 Sending and Receiving Events Between AWS Accounts.

6 84 Enabling Your AWS Account to Receive Events from Other AWS Accounts .. 84 Sending Events to Another AWS Account .. 85 Writing Rules that Match Events from Another AWS Account .. 87 Migrate a Sender-Receiver Relationship to Use AWS Organizations .. 89 Adding Events with PutEvents .. 91 Handling Failures When Using PutEvents .. 91 Sending Events Using the AWS CLI .. 92 Calculating PutEvents Event Entry Sizes .. 93 Using CloudWatch Events with Interface VPC Endpoints .. 95 Availability .. 95 Create a VPC Endpoint for CloudWatch Events .. 95 Monitoring Usage with CloudWatch Metrics .. 97 CloudWatch Events Metrics .. 97 Dimensions for CloudWatch Events Metrics .. 97 Managed Rules.. 99 Authentication and Access Control .. 100 Authentication.. 100 Access Control .. 101 Overview of Managing Access.

7 101 Resources and Operations .. 102ivAmazon CloudWatch Events User GuideUnderstanding Resource Ownership .. 103 Managing Access to Resources .. 103 Specifying Policy Elements: Actions, Effects, and Principals .. 104 Specifying Conditions in a Policy .. 105 Using Identity-Based Policies (IAM Policies) .. 105 Permissions Required to Use the CloudWatch Console .. 105 AWS Managed (Predefined) Policies for CloudWatch Events .. 107 Permissions Required for CloudWatch Events to Access Certain Targets .. 108 Customer Managed Policy Examples .. 109 Using Resource-Based Policies .. 112 AWS Lambda Permissions .. 112 Amazon SNS Permissions .. 113 Amazon SQS Permissions .. 114 CloudWatch Events Permissions Reference .. 115 Using Conditions.. 117 Example 1: Limit Access to a Specific Source.

8 119 Example 2: Define Multiple Sources That Can Be Used in an Event Pattern Individually .. 120 Example 3: Define a Source and a DetailType That Can Be Used in an Event Pattern .. 121 Example 4: Ensure That the Source Is Defined in the Event Pattern .. 122 Example 5: Define a List of Allowed Sources in an Event Pattern with Multiple Sources .. 123 Example 6: Ensure That AWS CloudTrail Events for API Calls from a Certain PrincipalId AreConsumed.. 124 Example 7: Limiting Access to Targets .. 125 Logging API Calls.. 126 CloudWatch Events Information in CloudTrail .. 126 Example: CloudWatch Events Log File Entries .. 127 Service Limits .. 129 Troubleshooting .. 131My rule was triggered but my Lambda function was not invoked .. 131I have just created/modified a rule but it did not match a test event .. 132My rule did not self-trigger at the time specified in the ScheduleExpression.

9 133My rule did not trigger at the time that I expected .. 133My rule matches IAM API calls but my rule was not triggered .. 133My rule is not working because the IAM role associated with the rule is ignored when the rule istriggered .. 133I created a rule with an EventPattern that is supposed to match a resource, but I don't see any eventsthat match the rule.. 134My event's delivery to the target experienced a delay .. 134 Some Events were never delivered to my target .. 134My rule was triggered more than once in response to one event. What guarantee does CloudWatchEvents offer for triggering rules or delivering Events to the targets? .. 134 Preventing Infinite Loops .. 135My Events are not delivered to the target Amazon SQS queue .. 135My rule is being triggered but I don't see any messages published into my Amazon SNS topic.

10 135My Amazon SNS topic still has permissions for CloudWatch Events even after I deleted the ruleassociated with the Amazon SNS topic .. 137 Which IAM condition keys can I use with CloudWatch Events .. 137 How can I tell when CloudWatch Events rules are broken .. 137 Document History .. 138 AWS Glossary .. 140vAmazon CloudWatch Events User GuideConceptsWhat is Amazon CloudWatch Events ? Amazon CloudWatch Events delivers a near real-time stream of system Events that describe changes inAmazon Web Services (AWS) resources. Using simple rules that you can quickly set up, you can matchevents and route them to one or more target functions or streams. CloudWatch Events becomes aware ofoperational changes as they occur. CloudWatch Events responds to these operational changes and takescorrective action as necessary, by sending messages to respond to the environment, activating functions,making changes, and capturing state can also use CloudWatch Events to schedule automated actions that self-trigger at certain timesusing cron or rate expressions.