CloudFormation EventBusPolicy:相对id“event/bus_name”对ARN无效

Question

根据这位医生的说法，我试着：

  ebMailPolicy:
    Type: AWS::Events::EventBusPolicy
    Properties:
      EventBusName: !Ref ebMail
      StatementId: AllowForOrg
      Statement:
        Effect: Allow
        Action: events:PutEvents
        Condition:
          StringEquals:
            "aws:PrincipalOrgID": !Ref OrgId
        Principal: "*"

错误是：

The relative-id "event-bus/bus_name" is invalid for ARN "arn:aws:events:eu-central-1:acc_id:event-bus/bus_name"

我做错了什么？

Answer 1

医生错了。正确版本：

  ebMailPolicy:
    Type: AWS::Events::EventBusPolicy
    Properties:
      EventBusName: !Ref ebMail
      StatementId: CrossAccSendEvents
      Action: events:PutEvents
      Principal: "*"
      Condition:
        Type: StringEquals
        Key: aws:PrincipalOrgID
        Value: !Ref OrgId

Answer 2

AWS文档没有显式地声明它，但这正是我们所要做的。

EventBusPolicy:
    Type: AWS::Events::EventBusPolicy
    DependsOn: CustomEventBridgeBus
    Properties:
      StatementId: "AllowSameAWSAccount"
      EventBusName: !Ref CustomEventBridgeBus
      Statement:
        Effect: "Allow"
        Principal:
          AWS: !ImportValue IntanceRoleArn
        Action: "events:PutEvents"
        Resource: !GetAtt CustomEventBridgeBus.Arn