Policy Packs

guardrails-samples

The Guardrails Event Handlers are responsible for conveying events from AWS CloudTrail back to Guardrails for processing. This is a requirement for Guardrails to process and respond in real-time.

Enable Global Event Handlers for AWS Accounts

main

aws_turbot_event_handlers_global

Configure the Guardrails AWS Event Handlers [Global] stack. This stack configures the Eventbridge and SNS resources required for Guardrails real-time event routing.&#92;n&#92;n**Notes**:&#92;n- The AWS Event Handler control ignores the `Turbot &gt; Change Window` policy.&#92;n- For proper management of AWS Event Handlers [Global], the `aws`, `aws-iam`, `aws-kms`, `aws-events` and `aws-sns` mods *must* be installed. Additional information can be found in the [required mods section](https://turbot.com/guardrails/docs/integrations/aws/event-handlers#guardrails-mods-required-for-event-handling) of the AWS Event Handler docs.&#92;n

eventHandlersGlobal

AWS > Turbot > Event Handlers [Global]

aws_turbot_event_handlers_global_primary_region

The primary region for the `AWS &gt; Turbot &gt; Event Handlers [Global]` stack. All EventBridge and SNS resources required for real-time event routing will be deployed in this region.&#92;n

eventHandlersGlobalPrimaryRegion

AWS > Turbot > Event Handlers [Global] > Primary Region

turbot_policy_setting.aws_turbot_event_handlers_global

turbot_policy_setting.aws_turbot_event_handlers_global_primary_region

Policy	Setting	Note
AWS > Turbot > Event Handlers [Global]	Check: Configured
AWS > Turbot > Event Handlers [Global] > Primary Region	us-east-1

Policy Settings