A company uses an organization in AWS Organizations to manage its AWS accounts. The company's automation account contains a CI/CD pipeline that creates and configures new AWS accounts.
The company has a group of internal service teams that provide services to accounts in the organization. The service teams operate out of a set of services accounts. The service teams want to receive an AWS CloudTrail event in their services accounts when the CreateAccount API call creates a new account.
How should the company share this CloudTrail event with the service accounts?
Comprehensive and Detailed Explanation From Exact Extract of DevOps Engineer documents only:
Use cross-account EventBridge by configuring a rule in the source (automation) account to send events to the target accounts' default event buses, and grant permissions on the target default event buses to accept events from the source account. This is the standard cross-account event routing model.
Currently there are no comments in this discussion, be the first to comment!