AWS::EventsV2::ResourcePolicyResource type definition for AWS::EventsV2::ResourcePolicy, the resource policy of an Amazon EventBridge event bus. This manages only the resource policy named "default", which the bus owner writes. It does not manage the policy named "AWS_RAM", which AWS Resource Access Manager owns on behalf of the bus owner. If the bus already has a default policy, creating this resource fails. Deleting this resource removes all permissions granted by it. An explicit Deny in this policy takes precedence over an Allow in the "AWS_RAM" policy, so deleting this resource can widen access. Set DeletionPolicy: Retain if the policy carries a Deny that you rely on. Required permissions: events:PutResourcePolicy, events:GetResourcePolicy, and events:DeleteResourcePolicy. Listing resources of this type also requires events:ListEventBuses and events:ListResourcePolicies.
2 configurable properties. 2 required. Click a row to see details.
| Property | Type | Flags |
|---|---|---|
EventBusArn | string | RequiredCreate-only |
PolicyDocument | object | Required |
Values returned after the resource is created. Access these with Fn::GetAtt.
| Attribute | Type | Description |
|---|---|---|
RevisionId | string | The revision identifier the service assigned to the stored policy. The identifier changes on every successful write. |
A minimal template with required properties and common optional ones.
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::EventsV2::ResourcePolicy
Resources:
MyResource:
Type: AWS::EventsV2::ResourcePolicy
Properties:
EventBusArn: "arn:aws:service:region:account:resource"
PolicyDocument: {}Permissions CloudFormation needs in your IAM role to manage this resource.
events:GetResourcePolicyevents:PutResourcePolicyevents:GetResourcePolicyevents:PutResourcePolicyevents:GetResourcePolicyevents:DeleteResourcePolicyevents:GetResourcePolicyevents:ListEventBusesevents:ListResourcePoliciesOur bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterEventBusArnThese properties cannot be changed after the resource is created. Updating them triggers a replacement.
EventBusArn