aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Allow use of available IAM condition keys within "AWS::Events::EventBusPolicy" Conditions
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::Events::EventBusPolicy
### Resource name
_No response_
### Description
This is a request to allow use of available the IAM condition keys within "AWS::Events::EventBusPolicy" property "Condition" when creating EventBridge resources with CloudFormation.
Currently, AWS::Events::EventBusPolicy "Condition"[1] property is very limited in that it will only allow users to specify the "aws:PrincipalOrgID"[2] key for condition evaluation. We would like to use the condition to check for Organizational Unit ID instead. Checking the EventBridge Docs, several conditional keys/values are supported[3].
References:
[1]https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-events-eventbuspolicy.html#cfn-events-eventbuspolicy-condition
[2]https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalorgid
[3]https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-perms.html
### Other Details
_No response_
Contributor guide
Research direction
Start by reviewing the AWS::Events::EventBusPolicy Condition documentation and the linked IAM and EventBridge condition-key references. No repository file, test, or implementation entry point is identified in the issue; done would mean the resource accepts the requested supported IAM condition keys, including an Organizational Unit ID condition.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100