在使用输入转换器（Input Transformer）进行去重以及添加类别和严重性值时，无法从EventBridge创建新的OpsItems

【以下的问题经过翻译处理】 我可以使用具有以下事件模式的 EventBridge 规则为 EC2、SecurityGroup 或 VPC 配置更改生成新的 OpsItem。

{ "source": "aws.config", "detail-type": "Config Configuration Item Change", "detail": { "messageType": "ConfigurationItemChangeNotification", "configurationItem": { "resourceType": "AWS::EC2::Instance", "AWS::EC2::SecurityGroup", "AWS::EC2::VPC" } } }

当使用匹配事件作为输入时，规则和目标运行得很好，但我注意到使用 AWS 向导启动一个 EC2 至少会创建三个 OpsItems，每个资源类型一个。因此，我想实现重复数据删除字符串，尽可能将生成的 OpsItem 数量减少到一个，我还想为新的 OpsItem 附加类别和严重性。我试图按照 AWS 文档的建议使用输入转换器，但即使是最简单的输入转换器，在应用时也会阻止生成任何新的 OpsItem。在测试时，我还确保之前的所有 OpsItems 都已解决。有谁能告诉我，在使用这种输入转换器配置时，是什么原因阻止了任何新 OpsItems 的创建？

这是我当前配置的内容。

输入路径：

  "awsAccountId": "$.detail.configurationItem.awsAccountId",
  "awsRegion": "$.detail.configurationItem.awsRegion",
  "configurationItemCaptureTime": "$.detail.configurationItem.configurationItemCaptureTime",
  "detail-type": "$.detail-type",
  "messageType": "$.detail.messageType",
  "notificationCreationTime": "$.detail.notificationCreationTime",
  "region": "$.region",
  "resourceId": "$.detail.configurationItem.resourceId",
  "resourceType": "$.detail.configurationItem.resourceType",
  "resources": "$.resources",
  "source": "$.source",
  "time": "$.time"
}

输入模板：

{
  "awsAccountId": "<awsAccountId>",
  "awsRegion": "<awsRegion>",
  "configurationItemCaptureTime": "<configurationItemCaptureTime>",
  "resourceId": "<resourceId>",
  "resourceType": "<resourceType>",
  "title": "Template under ConfigDrift-EC2-Dedup4",
  "description": "Configuration Drift Detected.",
  "category": "Security",
  "severity": "3",
  "origination": "EventBridge Rule - ConfigDrift-EC2-Dedup",
  "detail-type": "<detail-type>",
  "source": "<source>",
  "time": "<time>",
  "region": "<region>",
  "resources": "<resources>",
  "messageType": "<messageType>",
  "notificationCreationTime": "<notificationCreationTime>",
  "operationalData": {
    "/aws/dedup": {
      "type": "SearchableString",
      "value": "{"dedupString":"ConfigurationItemChangeNotification"}"
    }
  }
}

这些配置涵盖了输入路径和输入模板，用于设置OpsItems的属性，包括类别（category）和严重性（severity）等信息。如果你的OpsItems在应用这些配置后仍然无法生成，请检查AWS X-Ray和AWS CloudWatch Logs等日志，以查看是否有任何有用的错误或日志消息，以帮助进一步调试问题。

以下是使用AWS提供的示例事件"Config Configuration Item Change"时的输出示例：

  "awsAccountId": "123456789012",
  "awsRegion": "us-east-1",
  "configurationItemCaptureTime": "2022-03-16T01:10:50.837Z",
  "resourceId": "fs-01f0d526165b57f95",
  "resourceType": "AWS::EFS::FileSystem",
  "title": "Template under ConfigDrift-EC2-Dedup4",
  "description": "Configuration Drift Detected.",
  "category": "Security",
  "severity": "3",
  "origination": "EventBridge Rule - ConfigDrift-EC2-Dedup",
  "detail-type": "Config Configuration Item Change",
  "source": "aws.config",
  "time": "2022-03-16T01:10:51Z",
  "region": "us-east-1",
  "resources": "arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/fs-01f0d526165b57f95",
  "messageType": "ConfigurationItemChangeNotification",
  "notificationCreationTime": "2022-03-16T01:10:51.976Z",
  "operationalData": {
    "/aws/dedup": {
      "type": "SearchableString",
      "value": "{"dedupString":"ConfigurationItemChangeNotification"}"
    }
  }
}