diff --git a/templates_cspm_eventbridge/FullInstall.yaml b/templates_cspm_eventbridge/FullInstall.yaml index 0c4763e..ac3febd 100644 --- a/templates_cspm_eventbridge/FullInstall.yaml +++ b/templates_cspm_eventbridge/FullInstall.yaml @@ -97,6 +97,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Ref EventBusARN + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} EventBridgeRule: Type: AWS::Events::Rule Properties: diff --git a/templates_cspm_eventbridge/OrgFullInstall.yaml b/templates_cspm_eventbridge/OrgFullInstall.yaml index 483ff63..7484f0d 100644 --- a/templates_cspm_eventbridge/OrgFullInstall.yaml +++ b/templates_cspm_eventbridge/OrgFullInstall.yaml @@ -142,6 +142,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Sub ${EventBusARN} + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} RolesStackSet: Type: AWS::CloudFormation::StackSet Properties: @@ -231,6 +237,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Sub ${EventBusARN} + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} EBRuleStackSet: Type: AWS::CloudFormation::StackSet Properties: diff --git a/templates_eventbridge/EventBridge.yaml b/templates_eventbridge/EventBridge.yaml index 1e552ab..9c0367b 100644 --- a/templates_eventbridge/EventBridge.yaml +++ b/templates_eventbridge/EventBridge.yaml @@ -72,6 +72,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Ref EventBusARN + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} EventBridgeRule: Type: AWS::Events::Rule Properties: diff --git a/templates_eventbridge/OrgEventBridge.yaml b/templates_eventbridge/OrgEventBridge.yaml index 98e543f..5cc5376 100644 --- a/templates_eventbridge/OrgEventBridge.yaml +++ b/templates_eventbridge/OrgEventBridge.yaml @@ -142,6 +142,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Sub ${EventBusARN} + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} MgmtAccEBRuleStackSet: Type: AWS::CloudFormation::StackSet Metadata: @@ -275,6 +281,12 @@ Resources: - Effect: Allow Action: 'events:PutEvents' Resource: !Sub ${EventBusARN} + - Effect: Allow + Action: + - "events:DescribeRule" + - "events:ListTargetsByRule" + Resource: + - !Sub arn:aws:events:*:*:rule/${EventBridgeRoleName} EBRuleStackSet: Type: AWS::CloudFormation::StackSet Properties: