Creates EventBridge rules that alert on a resource's CloudTrail events, notifying an
SNS topic (and optionally a customer-supplied remediation Lambda). Service-agnostic:
the sources, identity fields, and event names are all props.
No raw event-pattern passthrough is offered on purpose - a hand-written pattern that
matches nothing deploys cleanly and never fires, which reads as covered.
Creates EventBridge rules that alert on a resource's CloudTrail events, notifying an SNS topic (and optionally a customer-supplied remediation Lambda). Service-agnostic: the sources, identity fields, and event names are all props.
No raw event-pattern passthrough is offered on purpose - a hand-written pattern that matches nothing deploys cleanly and never fires, which reads as covered.
Prerequisite: a CloudTrail trail logging the matched events - see CLOUDTRAIL_API_CALL_DETAIL_TYPE.