events:CreateEventSource

Write

events:CreateEventSource is a Write access-level action in the events service. Grants permission to create an event source that forwards events to an event bus

Resource types

ARNs that events:CreateEventSource can be scoped to in an IAM policy.

arn:${Partition}:events:${Region}:${Account}:event-busv2/${EventBusName}/${OpaqueId} required
event-busv2
arn:${Partition}:events:${Region}:${Account}:event-sourcev2/${SourceType}/${EventSourceName}/${OpaqueId} required
event-sourcev2

Condition keys

Keys you can use in the Condition block of a policy that grants events:CreateEventSource.

aws:RequestTag/${TagKey} String

Filters access by the allowed set of values for each of the tags to event bus and rule actions

aws:TagKeys ArrayOfString

Filters access by the tags in the request to event bus and rule actions

events:source ArrayOfString

Filters access by the AWS service or AWS partner event source that generated the event to PutEvents and PutRule actions, or by the configured source of an event source to the CreateEventSource and UpdateEventSource actions. Matches the literal string of the source field of the event

aws:ResourceTag/${TagKey} String

Filters access by tag-value associated with the resource to event bus and rule actions

Example IAM policy

A minimal policy that allows events:CreateEventSource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEventsCreateEventSource",
      "Effect": "Allow",
      "Action": "events:CreateEventSource",
      "Resource": "*"
    }
  ]
}

Related actions in events

View all events actions →