# AWS EventBridge

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Faws%2Faws-eventbridge.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Faws%2Faws-eventbridge.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

AWS EventBridge provides a serverless event bus service that enables you to collect and route data from your applications and services to any target destination. By integrating EventBridge with Coralogix, you can stream real-time application data for comprehensive monitoring and analysis.

## Requirements[​](#requirements "Direct link to Requirements")

* AWS account

* Amazon EventBridge event bus created

## Create an API destination to Coralogix[​](#create-an-api-destination-to-coralogix "Direct link to Create an API destination to Coralogix")

1

<!-- -->

.

Go to **EventBridge** > **API destinations**, and create a new API destination.

[![](https://lh5.googleusercontent.com/N9XdwNyw6ZkzvZfJuxM9KefIu_S440U1vNZb_qTwHV-lUQMTiyp8gqvrRs8-EmI-tt9CedV_FcutSAJJ9hTqVRjncevAUywl9SkdgS1oEoW83UMdAB2z6jMA925F--TtY6DjfIagQRgEwuhMv5kvA0I)](https://lh5.googleusercontent.com/N9XdwNyw6ZkzvZfJuxM9KefIu_S440U1vNZb_qTwHV-lUQMTiyp8gqvrRs8-EmI-tt9CedV_FcutSAJJ9hTqVRjncevAUywl9SkdgS1oEoW83UMdAB2z6jMA925F--TtY6DjfIagQRgEwuhMv5kvA0I)

For the **API destination endpoint**, select the <!-- -->https\://ingress./aws/event-bridge<!-- --> endpoint that corresponds to your Coralogix [domain](https://docs-docusaurus.kinsta.page/user-guides/account-management/account-settings/coralogix-domain/.md) using the domain selector at the top of the page.

Create a new connection:

[![GuardDuty connection configuration](/assets/images/guardduty_connection_configuration-45beb464d7f2fac7678dca2bb840ce04.webp)](https://docs-docusaurus.kinsta.page/assets/images/guardduty_connection_configuration-45beb464d7f2fac7678dca2bb840ce04.webp)

4

<!-- -->

.

Optionally, specify the application and subsystem name.

Select **Invocation Http Parameters** and add 2 parameters as shown in the screenshot below. The values can be anything you would like to identify the logs with.

[![Invocation HTTP parameters](/assets/images/invocation_http_parameters-c6d7493beded2f22b9095cd06d482aef.webp)](https://docs-docusaurus.kinsta.page/assets/images/invocation_http_parameters-c6d7493beded2f22b9095cd06d482aef.webp)

5

<!-- -->

.

To send your data to Coralogix, create your unique [**Coralogix Send-Your-Data API key**](https://docs-docusaurus.kinsta.page/user-guides/account-management/api-keys/send-your-data-api-key/.md) and fill the values as detailed below.

| Setting            | Value                                 |
| ------------------ | ------------------------------------- |
| Authorization type | API Key                               |
| API Key Name       | `x-amz-event-bridge-access-key`       |
| API Key Value      | Your Coralogix Send-Your-Data API key |

## Create an EventBridge Rule[​](#create-an-eventbridge-rule "Direct link to Create an EventBridge Rule")

1

<!-- -->

.

Create a rule to route the events to the API destination. On the **Buses** section, select **Rules**.

2

<!-- -->

.

Select **Create rule**

3

<!-- -->

.

Give the rule a name, select the correct **event bus**, and select **Next**.

4

<!-- -->

.

For **Event pattern** (source), scroll down and select the desired source. "GuardDuty Findings", for example.

[![Event pattern](/assets/images/event_pattern-0615b555011d4e605c12a7cb6f5ee017.webp)](https://docs-docusaurus.kinsta.page/assets/images/event_pattern-0615b555011d4e605c12a7cb6f5ee017.webp)

5

<!-- -->

.

Select EventBridge API destination as the target.

[![](https://lh5.googleusercontent.com/exUnJIwoVEecY5eMXCidn_f8QFO_3VSguyXg1RN9UfrcWc9j0wG61b1H3VEgz8LyjnXb3vveQ2b-mHf1MkOnqvdOx8RQHR2Z0pBeE695dssHnZSNeDKWPtXYm8cP52G2b3GiQXB7f9M9OLf2Y8w_emM)](https://lh5.googleusercontent.com/exUnJIwoVEecY5eMXCidn_f8QFO_3VSguyXg1RN9UfrcWc9j0wG61b1H3VEgz8LyjnXb3vveQ2b-mHf1MkOnqvdOx8RQHR2Z0pBeE695dssHnZSNeDKWPtXYm8cP52G2b3GiQXB7f9M9OLf2Y8w_emM)

Every event that goes to the selected event bus will be sent to Coralogix.

## CloudFormation[​](#cloudformation "Direct link to CloudFormation")

You can automate the EventBridge setup using the [AWS EventBridge CloudFormation template](https://docs-docusaurus.kinsta.page/external/cloudformation-coralogix-aws/aws-integrations/eventbridge).

| Parameter           | Description                                                  | Required |
| ------------------- | ------------------------------------------------------------ | -------- |
| `ApplicationName`   | Coralogix application name                                   | ✓        |
| `SubsystemName`     | Coralogix subsystem name                                     | ✓        |
| `EventbridgeStream` | AWS EventBridge delivery stream name                         | ✓        |
| `RoleName`          | IAM role name for EventBridge                                | ✓        |
| `PrivateKey`        | Coralogix Send-Your-Data API key                             | ✓        |
| `CoralogixRegion`   | Coralogix account region (EU1, EU2, AP1, AP2, AP3, US1, US2) | ✓        |
| `CustomUrl`         | Custom Coralogix endpoint URL                                |          |

## Terraform Module Setup[​](#terraform-module-setup "Direct link to Terraform Module Setup")

Using **Coralogix Terraform modules**, you can install and manage the EventBridge integration as modules in your infrastructure code. Modules are available on [GitHub](https://github.com/coralogix/terraform-coralogix-aws/) and the [Terraform Registry](https://registry.terraform.io/modules/coralogix/aws/coralogix/latest). For the full module reference, see [AWS EventBridge Terraform Module](https://docs-docusaurus.kinsta.page/external/terraform-coralogix-aws/modules/eventbridge).

**Requirements**

| Provider  | Version |
| --------- | ------- |
| terraform | >= 1.9  |
| aws       | >= 6.0  |

```
module "eventbridge_coralogix" {

  source             = "coralogix/aws/coralogix//modules/eventbridge"

  eventbridge_stream = var.coralogix_eventbridge_stream_name

  role_name          = var.eventbridge_role_name

  private_key        = var.coralogix_privatekey

  coralogix_region   = var.coralogix_region

  application_name   = var.application_name

}
```

| Variable             | Description                                                  | Required |
| -------------------- | ------------------------------------------------------------ | -------- |
| `eventbridge_stream` | AWS EventBridge delivery stream name                         | ✓        |
| `role_name`          | IAM role name for EventBridge                                | ✓        |
| `private_key`        | Coralogix Send-Your-Data API key                             | ✓        |
| `coralogix_region`   | Coralogix region (EU1, EU2, AP1, AP2, AP3, US1, US2, Custom) | ✓        |
| `application_name`   | Coralogix application name                                   | ✓        |
| `sources`            | EventBridge event sources to match                           |          |
| `policy_name`        | IAM policy name                                              |          |
| `custom_url`         | Custom Coralogix endpoint                                    |          |
| `detail_type`        | EventBridge detail type filter                               |          |

## Notes[​](#notes "Direct link to Notes")

A "resources" key is present in the AWS EventBridge and [Cloudtrail](https://docs-docusaurus.kinsta.page/external/coralogix-aws-shipper) integrations. If you are integrating both EventBridge and CloudTrail logs, create a parsing rule to rename the mentioned field to avoid mapping conflicts.

## Additional resources[​](#additional-resources "Direct link to Additional resources")

|                     |                                                                                                 |
| ------------------- | ----------------------------------------------------------------------------------------------- |
| Coralogix Endpoints | [Coralogix Endpoints](https://docs-docusaurus.kinsta.page/integrations/coralogix-endpoints/.md) |