events:CreateSubscriber is a Write access-level action in the events service. Grants permission to create a subscriber
ARNs that events:CreateSubscriber can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants events:CreateSubscriber.
Filters access by the allowed set of values for each of the tags to event bus and rule actions
Filters access by the tags in the request to event bus and rule actions
Filters access by whether a subscriber declares a payload-scope content filter to CreateSubscriber and UpdateSubscriber actions
Filters access by a metadata key-value pair on the published event to PutRawEvents actions, or by the exact-match values declared for that key in a subscriber's metadata filter to CreateSubscriber and UpdateSubscriber actions
Filters access by the match type declared for a metadata key in a subscriber's filter to CreateSubscriber and UpdateSubscriber actions
Filters access by tag-value associated with the resource to event bus and rule actions
A minimal policy that allows events:CreateSubscriber. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEventsCreateSubscriber",
"Effect": "Allow",
"Action": "events:CreateSubscriber",
"Resource": "*"
}
]
}