Policy: AWS > Turbot > Event Handlers > Events > Rules > Custom Event Patterns > @turbot/aws-s3

The CloudWatch Events event pattern used by the AWS S3 module to specify which events to forward to the Guardrails Event Handlers.

Targets

This policy targets the following resource types:

AWS > Region

Primary Policy

This policy is used with the following primary policy:

AWS > Turbot > Event Handlers > Events > Rules > Custom Event Patterns

Policy Specification

Schema Type	`array`
Default	- type: title: S3 name: s3 value: source: - aws.s3 detail-type: - AWS API Call via CloudTrail detail: eventName: - CreateBucket - DeleteAccountPublicAccessBlock - DeleteBucket - DeleteBucketCors - DeleteBucketEncryption - DeleteBucketIntelligentTieringConfiguration - DeleteBucketLifecycle - DeleteBucketPolicy - DeleteBucketReplication - DeleteBucketTagging - DeleteBucketWebsite - DeletePublicAccessBlock - DeleteReplicationConfiguration - PutAccelerateConfiguration - PutAccountPublicAccessBlock - PutAnalyticsConfiguration - PutBucketAcl - PutBucketCors - PutBucketEncryption - PutBucketIntelligentTieringConfiguration - PutBucketLifecycle - PutBucketLogging - PutBucketNotification - PutBucketObjectLockConfiguration - PutBucketPolicy - PutBucketPublicAccessBlock - PutBucketReplication - PutBucketRequestPayment - PutBucketTagging - PutBucketVersioning - PutBucketWebsite - PutInventoryConfiguration - PutMetricsConfiguration - PutPublicAccessBlock - TagResource - UntagResource

Schema Type

array

Default

- type:
    title: S3
    name: s3
  value:
    source:
      - aws.s3
    detail-type:
      - AWS API Call via CloudTrail
    detail:
      eventName:
        - CreateBucket
        - DeleteAccountPublicAccessBlock
        - DeleteBucket
        - DeleteBucketCors
        - DeleteBucketEncryption
        - DeleteBucketIntelligentTieringConfiguration
        - DeleteBucketLifecycle
        - DeleteBucketPolicy
        - DeleteBucketReplication
        - DeleteBucketTagging
        - DeleteBucketWebsite
        - DeletePublicAccessBlock
        - DeleteReplicationConfiguration
        - PutAccelerateConfiguration
        - PutAccountPublicAccessBlock
        - PutAnalyticsConfiguration
        - PutBucketAcl
        - PutBucketCors
        - PutBucketEncryption
        - PutBucketIntelligentTieringConfiguration
        - PutBucketLifecycle
        - PutBucketLogging
        - PutBucketNotification
        - PutBucketObjectLockConfiguration
        - PutBucketPolicy
        - PutBucketPublicAccessBlock
        - PutBucketReplication
        - PutBucketRequestPayment
        - PutBucketTagging
        - PutBucketVersioning
        - PutBucketWebsite
        - PutInventoryConfiguration
        - PutMetricsConfiguration
        - PutPublicAccessBlock
        - TagResource
        - UntagResource

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/configured

Policy Type URI

tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns

GraphQL

query policyType(id: "tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-s3#/policy/types/s3CustomEventPatterns"