Optional ReadonlyarnIAM principal ARN for cross-account event publishing access. Mutually exclusive with service.
Use cases: Cross-account event bus access; Specific IAM role/user event publishing
AWS: IAM principal ARN for EventBridge resource policy
Validation: Optional; must be valid IAM principal ARN; mutually exclusive with service
Optional ReadonlyserviceAWS service principal name for service-based event publishing access (e.g. some-service.amazonaws.com). Mutually exclusive with arn.
Use cases: AWS service event integration; Service-to-bus event routing
AWS: AWS service principal for EventBridge resource policy
Validation: Optional; must be valid AWS service principal; mutually exclusive with arn
Principal authorized to publish events to a custom EventBridge event bus. Specify exactly one of arn or service — not both.
Use cases: Cross-account event publishing via ARN; AWS service integration via service principal
AWS: EventBridge event bus resource policy principal
Validation: Exactly one of arn or service must be specified