Skip to content

Why does my EventBridge rule for IAM events trigger only in the us-east-1 Region?

2 minute read
0

I want to know why my Amazon EventBridge rule that receives events from global services doesn't work in AWS Regions outside the us-east-1 Region.

Resolution

Note: AWS global services, such as AWS Identity and Asset Management (IAM) and Amazon Route 53, are available only in the us-east-1 Region. The default event bus for the us-east-1 Region receives all events that the global services generate.

Recreate the EventBridge rule and the targets in the us-east-1 Region

Complete the following steps:

  1. Delete the EventBridge resources in the us-east-2 Region.
  2. Recreate the same rule, pattern, and targets in the us-east-1 Region.
    Important: If your targets are located outside the us-east-1 Region, then complete the steps in the following section.

For more information, see Deleting an event bus in Amazon EventBridge and Disabling or deleting a rule in Amazon EventBridge.

Route events from the us-east-1 Region to the us-east-2 Region event bus

Set up EventBridge resources in the us-east-2 Region with cross-Region routing capabilities. Then, you can route the events from the us-east-1 Region to an event bus in the us-east-2 Region. This allows events that originate in the us-east-1 Region to invoke targets in the us-east-2 Region.

Complete the following steps:

  1. Open the EventBridge console in the us-east-1 Region.
  2. Choose Rules. Make sure that you create the rule in the us-east-1 Region under the default event bus.
  3. Choose Create rule. Then, enter the pattern that's under Custom pattern in the us-east-2 Region.
  4. For Target types, choose EventBridge event bus. Then, select Event bus in a different account or Region.
  5. For Event bus, enter the ARN of the default event bus in the us-east-2 Region.
  6. Keep the default option Create a new role for this specific resource. This creates the necessary IAM permissions that allow the rule to put events on the target bus.
  7. Choose Next, and then choose Update rule.

Note: Don't delete the EventBridge rule in the us-east-2 Region because the rules must coexist in both Regions.

In your new configuration, all events from the us-east-1 Region are routed to the event bus in the us-east-2 Region. An event invokes your existing rule in the us-east-2 Region. Then, the event invokes your targets in the same Region.

AWS OFFICIALUpdated 9 months ago