EventBridge

9 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

ECSScheduledTask # GA

ECSScheduledTask is the Schema for managing ECS scheduled tasks via EventBridge rules.

kubectl get ecsscheduledtasks · example on GitHub

Example

# ECSScheduledTask — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#ecsscheduledtask
apiVersion: aws.konfig.io/v1alpha1
kind: ECSScheduledTask
metadata:
  name: example-ecsscheduledtask
  namespace: default
spec:
  description: Managed by konfig-konector
  eventBusName: example-ecsscheduledtask
  providerRef:
    name: example-ecsscheduledtask
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  ruleName: example-ecsscheduledtask
  scheduleExpression: example
  tags:
    environment: dev
    team: platform
  target:
    clusterArn: arn:aws:iam::123456789012:role/example-role
    launchType: FARGATE
    networkConfiguration:
      assignPublicIp: ENABLED
      securityGroups:
      - example
      subnets:
      - example
    platformVersion: '1.0'
    taskCount: 2
    taskDefinitionArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`description`	string	—	Description is an optional description for the rule.
`eventBusName`	string	—	EventBusName is the event bus name or ARN (defaults to default bus).
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roleArn`	string	yes	RoleARN is the IAM role ARN used to invoke the ECS task.
`ruleName`	string	yes	RuleName is the name for the EventBridge rule.
`scheduleExpression`	string	yes	ScheduleExpression is the schedule expression (e.g., "rate(5 minutes)" or "cron(0 12 * * ? *)").
`tags`	map<string>	—	Tags are metadata tags for the EventBridge rule.
`target`	object	yes	Target is the ECS task target configuration.
`target.clusterArn`	string	yes	ClusterARN is the ARN of the ECS cluster.
`target.launchType`	enum	—	LaunchType is the launch type to use (FARGATE or EC2). Allowed: `FARGATE, EC2, EXTERNAL`
`target.networkConfiguration`	object	—	NetworkConfiguration is the network configuration for the task.
`target.networkConfiguration.assignPublicIp`	enum	—	AssignPublicIP determines whether to assign a public IP. Allowed: `ENABLED, DISABLED`
`target.networkConfiguration.securityGroups`	array<string>	—	SecurityGroups are the security group IDs for the task.
`target.networkConfiguration.subnets`	array<string>	yes	Subnets are the subnet IDs for the task.
`target.platformVersion`	string	—	PlatformVersion is the Fargate platform version (e.g., "LATEST").
`target.taskCount`	integer	—	TaskCount is the number of tasks to run (defaults to 1).
`target.taskDefinitionArn`	string	yes	TaskDefinitionARN is the ARN of the ECS task definition.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.
`ruleArn`	string	—	RuleARN is the ARN of the EventBridge rule.
`targetId`	string	—	TargetID is the ID of the EventBridge rule target.

EventBridgeApiDestination # CLOUD CONTROL · AWS::Events::ApiDestination

EventBridgeApiDestination manages AWS::Events::ApiDestination through the AWS Cloud Control API.

kubectl get eventbridgeapidestinations · example on GitHub

Example

# EventBridgeApiDestination — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbridgeapidestination
apiVersion: aws.konfig.io/v1alpha1
kind: EventBridgeApiDestination
metadata:
  name: example-eventbridgeapidestination
  namespace: default
spec:
  connectionArn: arn:aws:iam::123456789012:role/example-role
  description: Managed by konfig-konector
  httpMethod: GET
  invocationEndpoint: example
  invocationRateLimitPerSecond: 1
  name: example-eventbridgeapidestination
  providerRef:
    name: example-eventbridgeapidestination
    region: us-east-1

Spec

Field	Type	Required	Description
`connectionArn`	string	yes	The arn of the connection.
`description`	string	—
`httpMethod`	enum	yes	Allowed: `GET, HEAD, POST, OPTIONS, PUT, DELETE, PATCH`
`invocationEndpoint`	string	yes	Url endpoint to invoke.
`invocationRateLimitPerSecond`	integer	—
`name`	string	—	Name of the apiDestination.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`arn`	string	—	The arn of the api destination.
`arnForPolicy`	string	—	The arn of the api destination to be used in IAM policies.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EventBridgeArchive # CLOUD CONTROL · AWS::Events::Archive

EventBridgeArchive manages AWS::Events::Archive through the AWS Cloud Control API.

kubectl get eventbridgearchives · example on GitHub

Example

# EventBridgeArchive — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbridgearchive
apiVersion: aws.konfig.io/v1alpha1
kind: EventBridgeArchive
metadata:
  name: example-eventbridgearchive
  namespace: default
spec:
  archiveName: example-eventbridgearchive
  description: Managed by konfig-konector
  kmsKeyIdentifier: example
  providerRef:
    name: example-eventbridgearchive
    region: us-east-1
  retentionDays: 7
  sourceArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`archiveName`	string	—	Create-only in AWS: changing it requires replacing the resource.
`description`	string	—
`eventPattern`	object	—
`kmsKeyIdentifier`	string	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`retentionDays`	integer	—
`sourceArn`	string	yes	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EventBridgeConnection # CLOUD CONTROL · AWS::Events::Connection

EventBridgeConnection manages AWS::Events::Connection through the AWS Cloud Control API.

kubectl get eventbridgeconnections · example on GitHub

Example

# EventBridgeConnection — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbridgeconnection
apiVersion: aws.konfig.io/v1alpha1
kind: EventBridgeConnection
metadata:
  name: example-eventbridgeconnection
  namespace: default
spec:
  authParameters:
    apiKeyAuthParameters:
      apiKeyName: example-eventbridgeconnection
      apiKeyValue: example
    basicAuthParameters:
      password: example
      username: example-eventbridgeconnection
    connectivityParameters:
      resourceParameters:
        resourceAssociationArn: arn:aws:iam::123456789012:role/example-role
        resourceConfigurationArn: arn:aws:iam::123456789012:role/example-role
    invocationHttpParameters:
      bodyParameters:
      - isValueSecret: false
        key: example
        value: example
      headerParameters:
      - isValueSecret: false
        key: example
        value: example
      queryStringParameters:
      - isValueSecret: false
        key: example
        value: example
    oAuthParameters:
      authorizationEndpoint: example
      clientParameters:
        clientID: example-id
        clientSecret: example
      httpMethod: GET
      oAuthHttpParameters:
        bodyParameters:
        - isValueSecret: false
          key: example
          value: example
        headerParameters:
        - isValueSecret: false
          key: example
          value: example
        queryStringParameters:
        - isValueSecret: false
          key: example
          value: example
  authorizationType: API_KEY
  description: Managed by konfig-konector
  invocationConnectivityParameters:
    resourceParameters:
      resourceAssociationArn: arn:aws:iam::123456789012:role/example-role
      resourceConfigurationArn: arn:aws:iam::123456789012:role/example-role
  kmsKeyIdentifier: example
  name: example-eventbridgeconnection
  providerRef:
    name: example-eventbridgeconnection
    region: us-east-1

Spec

Field	Type	Required	Description
`authParameters`	object	—	EventBridgeConnectionAuthParameters is a nested property type of AWS::Events::Connection.
`authParameters.apiKeyAuthParameters`	object	—	EventBridgeConnectionApiKeyAuthParameters is a nested property type of AWS::Events::Connection.
`authParameters.apiKeyAuthParameters.apiKeyName`	string	yes
`authParameters.apiKeyAuthParameters.apiKeyValue`	string	yes
`authParameters.basicAuthParameters`	object	—	EventBridgeConnectionBasicAuthParameters is a nested property type of AWS::Events::Connection.
`authParameters.basicAuthParameters.password`	string	yes
`authParameters.basicAuthParameters.username`	string	yes
`authParameters.connectivityParameters`	object	—	EventBridgeConnectionConnectivityParameters is a nested property type of AWS::Events::Connection.
`authParameters.connectivityParameters.resourceParameters`	object	yes	EventBridgeConnectionResourceParameters is a nested property type of AWS::Events::Connection.
`authParameters.connectivityParameters.resourceParameters.resourceAssociationArn`	string	—
`authParameters.connectivityParameters.resourceParameters.resourceConfigurationArn`	string	yes
`authParameters.invocationHttpParameters`	object	—	EventBridgeConnectionConnectionHttpParameters is a nested property type of AWS::Events::Connection.
`authParameters.invocationHttpParameters.bodyParameters`	array<object>	—
`authParameters.invocationHttpParameters.bodyParameters[].isValueSecret`	boolean	—
`authParameters.invocationHttpParameters.bodyParameters[].key`	string	yes
`authParameters.invocationHttpParameters.bodyParameters[].value`	string	yes
`authParameters.invocationHttpParameters.headerParameters`	array<object>	—
`authParameters.invocationHttpParameters.headerParameters[].isValueSecret`	boolean	—
`authParameters.invocationHttpParameters.headerParameters[].key`	string	yes
`authParameters.invocationHttpParameters.headerParameters[].value`	string	yes
`authParameters.invocationHttpParameters.queryStringParameters`	array<object>	—
`authParameters.invocationHttpParameters.queryStringParameters[].isValueSecret`	boolean	—
`authParameters.invocationHttpParameters.queryStringParameters[].key`	string	yes
`authParameters.invocationHttpParameters.queryStringParameters[].value`	string	yes
`authParameters.oAuthParameters`	object	—	EventBridgeConnectionOAuthParameters is a nested property type of AWS::Events::Connection.
`authParameters.oAuthParameters.authorizationEndpoint`	string	yes
`authParameters.oAuthParameters.clientParameters`	object	yes	EventBridgeConnectionClientParameters is a nested property type of AWS::Events::Connection.
`authParameters.oAuthParameters.clientParameters.clientID`	string	yes
`authParameters.oAuthParameters.clientParameters.clientSecret`	string	yes
`authParameters.oAuthParameters.httpMethod`	enum	yes	Allowed: `GET, POST, PUT`
`authParameters.oAuthParameters.oAuthHttpParameters`	object	—	EventBridgeConnectionConnectionHttpParameters is a nested property type of AWS::Events::Connection.
`authParameters.oAuthParameters.oAuthHttpParameters.bodyParameters`	array<object>	—
`authParameters.oAuthParameters.oAuthHttpParameters.bodyParameters[].isValueSecret`	boolean	—
`authParameters.oAuthParameters.oAuthHttpParameters.bodyParameters[].key`	string	yes
`authParameters.oAuthParameters.oAuthHttpParameters.bodyParameters[].value`	string	yes
`authParameters.oAuthParameters.oAuthHttpParameters.headerParameters`	array<object>	—
`authParameters.oAuthParameters.oAuthHttpParameters.headerParameters[].isValueSecret`	boolean	—
`authParameters.oAuthParameters.oAuthHttpParameters.headerParameters[].key`	string	yes
`authParameters.oAuthParameters.oAuthHttpParameters.headerParameters[].value`	string	yes
`authParameters.oAuthParameters.oAuthHttpParameters.queryStringParameters`	array<object>	—
`authParameters.oAuthParameters.oAuthHttpParameters.queryStringParameters[].isValueSecret`	boolean	—
`authParameters.oAuthParameters.oAuthHttpParameters.queryStringParameters[].key`	string	yes
`authParameters.oAuthParameters.oAuthHttpParameters.queryStringParameters[].value`	string	yes
`authorizationType`	enum	—	Allowed: `API_KEY, BASIC, OAUTH_CLIENT_CREDENTIALS`
`description`	string	—	Description of the connection.
`invocationConnectivityParameters`	object	—	The private resource the HTTP request will be sent to.
`invocationConnectivityParameters.resourceParameters`	object	yes	EventBridgeConnectionResourceParameters is a nested property type of AWS::Events::Connection.
`invocationConnectivityParameters.resourceParameters.resourceAssociationArn`	string	—
`invocationConnectivityParameters.resourceParameters.resourceConfigurationArn`	string	yes
`kmsKeyIdentifier`	string	—
`name`	string	—	Name of the connection.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`arn`	string	—	The arn of the connection resource.
`arnForPolicy`	string	—	The arn of the connection resource to be used in IAM policies.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`secretArn`	string	—	The arn of the secrets manager secret created in the customer account.

EventBridgeEndpoint # CLOUD CONTROL · AWS::Events::Endpoint

EventBridgeEndpoint manages AWS::Events::Endpoint through the AWS Cloud Control API.

kubectl get eventbridgeendpoints · example on GitHub

Example

# EventBridgeEndpoint — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbridgeendpoint
apiVersion: aws.konfig.io/v1alpha1
kind: EventBridgeEndpoint
metadata:
  name: example-eventbridgeendpoint
  namespace: default
spec:
  description: Managed by konfig-konector
  eventBuses:
  - eventBusArn: arn:aws:iam::123456789012:role/example-role
  name: example-eventbridgeendpoint
  providerRef:
    name: example-eventbridgeendpoint
    region: us-east-1
  replicationConfig:
    state: ENABLED
  roleArn: arn:aws:iam::123456789012:role/example-role
  routingConfig:
    failoverConfig:
      primary:
        healthCheck: example
      secondary:
        route: example-x

Spec

Field	Type	Required	Description
`description`	string	—
`eventBuses`	array<object>	yes
`eventBuses[].eventBusArn`	string	yes
`name`	string	—	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`replicationConfig`	object	—	EventBridgeEndpointReplicationConfig is a nested property type of AWS::Events::Endpoint.
`replicationConfig.state`	enum	yes	Allowed: `ENABLED, DISABLED`
`roleArn`	string	—
`routingConfig`	object	yes	EventBridgeEndpointRoutingConfig is a nested property type of AWS::Events::Endpoint.
`routingConfig.failoverConfig`	object	yes	EventBridgeEndpointFailoverConfig is a nested property type of AWS::Events::Endpoint.
`routingConfig.failoverConfig.primary`	object	yes	EventBridgeEndpointPrimary is a nested property type of AWS::Events::Endpoint.
`routingConfig.failoverConfig.primary.healthCheck`	string	yes
`routingConfig.failoverConfig.secondary`	object	yes	EventBridgeEndpointSecondary is a nested property type of AWS::Events::Endpoint.
`routingConfig.failoverConfig.secondary.route`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`endpointId`	string	—	Read-only: reported by AWS after creation.
`endpointUrl`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`state`	enum	—	Read-only: reported by AWS after creation. Allowed: `ACTIVE, CREATING, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED`
`stateReason`	string	—	Read-only: reported by AWS after creation.

EventBridgeEventBusPolicy # CLOUD CONTROL · AWS::Events::EventBusPolicy

EventBridgeEventBusPolicy manages AWS::Events::EventBusPolicy through the AWS Cloud Control API.

kubectl get eventbridgeeventbuspolicies · example on GitHub

Example

# EventBridgeEventBusPolicy — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbridgeeventbuspolicy
apiVersion: aws.konfig.io/v1alpha1
kind: EventBridgeEventBusPolicy
metadata:
  name: example-eventbridgeeventbuspolicy
  namespace: default
spec:
  action: example
  condition:
    key: example
    type: example
    value: example
  eventBusName: example-eventbridgeeventbuspolicy
  principal: example
  providerRef:
    name: example-eventbridgeeventbuspolicy
    region: us-east-1
  statementId: example-id

Spec

Field	Type	Required	Description
`action`	string	—	The action that you are enabling the other account to perform.
`condition`	object	—	EventBridgeEventBusPolicyCondition is a nested property type of AWS::Events::EventBusPolicy.
`condition.key`	string	—	Specifies the value for the key.
`condition.type`	string	—	Specifies the type of condition.
`condition.value`	string	—	Specifies the key for the condition.
`eventBusName`	string	—	The name of the event bus associated with the rule.
`principal`	string	—	The 12-digit AWS account ID that you are permitting to put events to your default event bus.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`statement`	object	—	A JSON string that describes the permission policy statement.
`statementId`	string	yes	An identifier string for the external account that you are granting permissions to Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

EventBus # GA

EventBus is the Schema for managing EventBridge Event Buses.

kubectl get eventbuses · example on GitHub

Example

# EventBus — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventbus
apiVersion: aws.konfig.io/v1alpha1
kind: EventBus
metadata:
  name: example-eventbus
  namespace: default
spec:
  eventBusName: example-eventbus
  providerRef:
    name: example-eventbus
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`eventBusName`	string	yes	EventBusName is the name of the event bus.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the event bus.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

EventRule # GA

EventRule is the Schema for managing EventBridge Rules.

kubectl get eventrules · example on GitHub

Example

# EventRule — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventrule
apiVersion: aws.konfig.io/v1alpha1
kind: EventRule
metadata:
  name: example-eventrule
  namespace: default
spec:
  description: Managed by konfig-konector
  eventBusRef:
    eventBusName: example-eventrule
    name: example-eventrule
  eventPattern: example
  providerRef:
    name: example-eventrule
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  ruleName: example-eventrule
  scheduleExpression: example
  state: ENABLED
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`description`	string	—	Description is a human-readable description.
`eventBusRef`	object	—	EventBusRef references the event bus.
`eventBusRef.eventBusName`	string	—	EventBusName is a direct AWS event bus name or ARN.
`eventBusRef.name`	string	—	Name of an EventBus CR in the same namespace.
`eventPattern`	string	—	EventPattern is the JSON event pattern.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roleArn`	string	—	RoleARN is the IAM role ARN for the rule to invoke targets.
`ruleName`	string	yes	RuleName is the name of the rule.
`scheduleExpression`	string	—	ScheduleExpression is a cron or rate schedule expression.
`state`	enum	—	State enables or disables the rule. Allowed: `ENABLED, DISABLED`
`tags`	map<string>	—	Tags are AWS resource tags to apply.

Status

Field	Type	Required	Description
`arn`	string	—	ARN is the ARN of the rule.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

EventTarget # GA

EventTarget is the Schema for managing EventBridge Targets.

kubectl get eventtargets · example on GitHub

Example

# EventTarget — EventBridge
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/eventbridge.html#eventtarget
apiVersion: aws.konfig.io/v1alpha1
kind: EventTarget
metadata:
  name: example-eventtarget
  namespace: default
spec:
  eventBusRef:
    eventBusName: example-eventtarget
    name: example-eventtarget
  eventRuleRef:
    name: example-eventtarget
    ruleName: example-eventtarget
  providerRef:
    name: example-eventtarget
    region: us-east-1
  targets:
  - arn: arn:aws:iam::123456789012:role/example-role
    id: example-id
    input: example
    inputPath: example
    roleArn: arn:aws:iam::123456789012:role/example-role

Spec

Field	Type	Required	Description
`eventBusRef`	object	—	EventBusRef identifies the event bus of the rule.
`eventBusRef.eventBusName`	string	—	EventBusName is a direct AWS event bus name or ARN.
`eventBusRef.name`	string	—	Name of an EventBus CR in the same namespace.
`eventRuleRef`	object	yes	EventRuleRef references the event rule.
`eventRuleRef.name`	string	—	Name of an EventRule CR in the same namespace.
`eventRuleRef.ruleName`	string	—	RuleName is a direct AWS EventBridge rule name.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`targets`	array<object>	yes	Targets are the targets to add to the rule.
`targets[].arn`	string	yes	ARN is the ARN of the target resource.
`targets[].id`	string	yes	ID is the unique identifier for the target.
`targets[].input`	string	—	Input is a literal JSON string to pass to the target.
`targets[].inputPath`	string	—	InputPath is a JSONPath expression applied to the event.
`targets[].roleArn`	string	—	RoleARN is the IAM role ARN to use for invoking this target.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.