events:PutRawEvents

Write

events:PutRawEvents is a Write access-level action in the events service. Grants permission to publish raw-format events with custom content types, metadata, binary payloads, and FIFO ordering to Amazon EventBridge

Resource types

ARNs that events:PutRawEvents can be scoped to in an IAM policy.

arn:${Partition}:events:${Region}:${Account}:event-busv2/${EventBusName}/${OpaqueId} required
event-busv2

Condition keys

Keys you can use in the Condition block of a policy that grants events:PutRawEvents.

events:Metadata/${MetadataKey} ArrayOfString

Filters access by a metadata key-value pair on the published event to PutRawEvents actions, or by the exact-match values declared for that key in a subscriber's metadata filter to CreateSubscriber and UpdateSubscriber actions

events:SystemMetadata/AwsDetailType String

Filters access by the detail type recorded in the system metadata of an event forwarded onto an event bus to PutEvents and PutRawEvents actions

events:SystemMetadata/AwsSource String

Filters access by the source recorded in the system metadata of an event forwarded onto an event bus to PutEvents and PutRawEvents actions

events:SystemMetadata/ContentType String

Filters access by the content type declared on an event for PutRawEvents and for forwarded events authorized as PutEvents

events:eventBusInvocation String

Filters access to PutEvents and PutRawEvents by whether an event was forwarded from an event bus rather than published through a direct API call

aws:ResourceTag/${TagKey} String

Filters access by tag-value associated with the resource to event bus and rule actions

Example IAM policy

A minimal policy that allows events:PutRawEvents. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEventsPutRawEvents",
      "Effect": "Allow",
      "Action": "events:PutRawEvents",
      "Resource": "*"
    }
  ]
}

Related actions in events

View all events actions →