Event sources of an event bus in AWS EventBridge

Question

There's an event bus and rules created by someone who left the company. From the rules I cannot identify the event sources that emit the events to that event bus. But from the CloudWatch metrics, I can see there're still invocations to the rules. How can I identify the event sources? Thanks.

Didier_Durand · Answer

Hi,

Content of an event will provide you this information:

```
{
  "version": "0",
  "id": "6a7e8feb-b491-4cf7-a9f1-bf3703467718",
  "detail-type": "EC2 Instance State-change Notification",
  "source": "aws.ec2",
  "account": "111122223333",
  "time": "2017-12-22T18:43:48Z",
  "region": "us-west-1",
  "resources": [
    "arn:aws:ec2:us-west-1:123456789012:instance/i-1234567890abcdef0"
  ],
  "detail": {
    "instance-id": "i-1234567890abcdef0",
    "state": "terminated"
  }
}
```

So, the field `source` will allow you to identify the originator of the even: ec2 in example above.

So, find a way to display such events (via a Lambda, etc.) and you will obtain the source.

Best,

Didier

Event sources of an event bus in AWS EventBridge

Relevant content