Amazon EventBridge 的動作、資源和條件索引鍵

Amazon EventBridge （服務字首：events) 提供下列服務特定的操作、資源、動作和條件索引鍵，可用於 IAM 許可政策。

參考資料：

• 了解如何設定此服務。

• 檢視可供此服務使用的 API 操作清單。

• 了解如何使用 IAM 許可政策來保護此服務及其資源。

• 檢視此服務的程式設計服務授權參考。

Amazon EventBridge 定義的 API 操作

下表將 API 操作映射至其授權的 IAM 動作。只會列出具有指定 API 和動作靜態值的條件金鑰；如需每個動作支援的完整條件金鑰集，請參閱動作表格。

作業	SDK 用戶端	IAM 動作	條件鍵	可能的值 (s)	存取層級
CreateEventBus	eventbridgev2	events:CreateEventBus			寫入
		events:TagResource			標記、寫入
CreateEventSource	eventbridgev2	events:CreateEventSource			寫入
		events:TagResource			標記、寫入
CreateSubscriber	eventbridgev2	events:CreateSubscriber			寫入
		events:TagResource			標記、寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
DeleteEventBus	eventbridgev2	events:DeleteEventBus			寫入
DeleteEventSource	eventbridgev2	events:DeleteEventSource			寫入
DeleteResourcePolicy	eventbridgev2	events:DeleteResourcePolicy			許可管理、寫入
DeleteSubscriber	eventbridgev2	events:DeleteSubscriber			寫入
DescribeEventBus	eventbridgev2	events:DescribeEventBus			讀取
DescribeEventSource	eventbridgev2	events:DescribeEventSource			讀取
DescribeSubscriber	eventbridgev2	events:DescribeSubscriber			讀取
GetResourcePolicy	eventbridgev2	events:GetResourcePolicy			讀取
ListEventBuses	eventbridgev2	events:ListEventBuses			清單
ListEventSources	eventbridgev2	events:ListEventSources			清單
ListResourcePolicies	eventbridgev2	events:ListResourcePolicies			清單
ListSubscribers	eventbridgev2	events:ListSubscribers			清單
ListTagsForResource	eventbridgev2	events:ListTagsForResource			清單
PutEvents	eventbridgev2	events:PutEvents			寫入
PutRawEvents	eventbridgev2	events:PutRawEvents			寫入
PutResourcePolicy	eventbridgev2	events:PutResourcePolicy			許可管理、寫入
RevokeResource	eventbridgev2	events:RevokeResource			寫入
TagResource	eventbridgev2	events:TagResource			標記、寫入
UntagResource	eventbridgev2	events:UntagResource			標記、寫入
UpdateEventBus	eventbridgev2	events:UpdateEventBus			寫入
UpdateEventSource	eventbridgev2	events:UpdateEventSource			寫入
UpdateSubscriber	eventbridgev2	events:UpdateSubscriber			寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
ActivateEventSource	events	events:ActivateEventSource			寫入
CancelReplay	events	events:CancelReplay			寫入
CreateApiDestination	events	events:CreateApiDestination			寫入
CreateArchive	events	events:CreateArchive			寫入
CreateConnection	events	events:CreateConnection			寫入
CreateEndpoint	events	events:CreateEndpoint			寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
CreateEventBus	events	events:CreateEventBus			寫入
		events:TagResource			標記、寫入
CreatePartnerEventSource	events	events:CreatePartnerEventSource			寫入
DeactivateEventSource	events	events:DeactivateEventSource			寫入
DeauthorizeConnection	events	events:DeauthorizeConnection			寫入
DeleteApiDestination	events	events:DeleteApiDestination			寫入
DeleteArchive	events	events:DeleteArchive			寫入
DeleteConnection	events	events:DeleteConnection			寫入
DeleteEndpoint	events	events:DeleteEndpoint			寫入
DeleteEventBus	events	events:DeleteEventBus			寫入
DeletePartnerEventSource	events	events:DeletePartnerEventSource			寫入
DeleteRule	events	events:DeleteRule			寫入
DescribeApiDestination	events	events:DescribeApiDestination			讀取
DescribeArchive	events	events:DescribeArchive			讀取
DescribeConnection	events	events:DescribeConnection			讀取
DescribeEndpoint	events	events:DescribeEndpoint			讀取
DescribeEventBus	events	events:DescribeEventBus			讀取
DescribeEventSource	events	events:DescribeEventSource			讀取
DescribePartnerEventSource	events	events:DescribePartnerEventSource			讀取
DescribeReplay	events	events:DescribeReplay			讀取
DescribeRule	events	events:DescribeRule			讀取
DisableRule	events	events:DisableRule			寫入
EnableRule	events	events:EnableRule			寫入
ListApiDestinations	events	events:ListApiDestinations			清單
ListArchives	events	events:ListArchives			清單
ListConnections	events	events:ListConnections			清單
ListEndpoints	events	events:ListEndpoints			清單
ListEventBuses	events	events:ListEventBuses			清單
ListEventSources	events	events:ListEventSources			清單
ListPartnerEventSourceAccounts	events	events:ListPartnerEventSourceAccounts			清單
ListPartnerEventSources	events	events:ListPartnerEventSources			清單
ListReplays	events	events:ListReplays			清單
ListRuleNamesByTarget	events	events:ListRuleNamesByTarget			清單
ListRules	events	events:ListRules			清單
ListTagsForResource	events	events:ListTagsForResource			清單
ListTargetsByRule	events	events:ListTargetsByRule			清單
PutEvents	events	events:PutEvents			寫入
PutPartnerEvents	events	events:PutPartnerEvents			寫入
PutPermission	events	events:PutPermission			許可管理、寫入
PutRule	events	events:PutRule			寫入
		events:TagResource			標記、寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
PutTargets	events	events:PutTargets			寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
RemovePermission	events	events:RemovePermission			許可管理、寫入
RemoveTargets	events	events:RemoveTargets			寫入
StartReplay	events	events:StartReplay			寫入
TagResource	events	events:TagResource			標記、寫入
TestEventPattern	events	events:TestEventPattern			讀取
UntagResource	events	events:UntagResource			標記、寫入
UpdateApiDestination	events	events:UpdateApiDestination			寫入
UpdateArchive	events	events:UpdateArchive			寫入
UpdateConnection	events	events:UpdateConnection			寫入
UpdateEndpoint	events	events:UpdateEndpoint			寫入
		iam:PassRole	iam:PassedToService	events.amazonaws.com	寫入
UpdateEventBus	events	events:UpdateEventBus			寫入

Amazon EventBridge 定義的動作

您可在 IAM 政策陳述式的 Action 元素中指定以下動作。對於每個動作，資料表會列出該動作支援的資源類型和條件索引鍵。使用政策來授予在 AWS中執行操作的許可。在政策中使用動作時，通常會允許或拒絕存取相同名稱的 API 操作或 CLI 命令。不過，在某些情況下，單一動作可控制對多個操作的存取。或者，某些操作需要多種不同的動作。

動作	描述	資源類型 (*必填項目)	條件索引鍵	存取層級
ActivateEventSource	准許啟用合作夥伴事件來源	event-source*		寫入
CancelReplay	准許取消重新執行	replay*		寫入
CreateApiDestination	准許建立新的 API 目標	api-destination*		寫入
		connection*
CreateArchive	准許建立新的封存	alias		寫入
		archive*
		event-bus*	aws:ResourceTag/${TagKey}
		key
CreateConnection	准許建立新的連線	connection*		寫入
CreateEndpoint	准許建立端點	endpoint*	events:EventBusArn	寫入
CreateEventBus	准許建立事件匯流排	event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	寫入
		event-busv2	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys
CreateEventSource	准許建立事件來源，將事件轉送至事件匯流排	event-busv2*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:source	寫入
		event-sourcev2*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:source
CreatePartnerEventSource	准許建立合作夥伴事件來源	event-source*		寫入
CreateSubscriber	准許建立訂閱用戶	event-busv2*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:ContentFilterPresent events:Metadata/${MetadataKey} events:Metadata/${MetadataKey}/Matcher	寫入
		subscriber*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:ContentFilterPresent events:Metadata/${MetadataKey} events:Metadata/${MetadataKey}/Matcher
DeactivateEventSource	准許停用事件來源	event-source*		寫入
DeauthorizeConnection	准許取消授權連線，刪除其存放的授權機密	connection*		寫入
DeleteApiDestination	准許刪除 API 目標	api-destination*		寫入
DeleteArchive	准許刪除封存	archive*		寫入
DeleteConnection	准許刪除連線	connection*		寫入
DeleteEndpoint	准許刪除端點	endpoint*		寫入
DeleteEventBus	准許刪除事件匯流排	event-bus	aws:ResourceTag/${TagKey}	寫入
		event-busv2	aws:ResourceTag/${TagKey}
DeleteEventSource	准許刪除事件來源	event-sourcev2*	aws:ResourceTag/${TagKey}	寫入
DeletePartnerEventSource	准許刪除合作夥伴事件來源	event-source*		寫入
DeleteResourcePolicy	准許刪除連接至事件匯流排的資源政策	event-busv2*	aws:ResourceTag/${TagKey} events:PolicyName	許可管理、寫入
DeleteRule	准許刪除規則	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy	寫入
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy
DeleteSubscriber	准許刪除訂閱者	subscriber*	aws:ResourceTag/${TagKey}	寫入
DescribeApiDestination	准許擷取關於 API 目標的詳細資訊	api-destination*		讀取
		connection*
DescribeArchive	准許擷取封存詳細資訊	archive*		讀取
DescribeConnection	准許擷取關於連線的詳細資訊	connection*		讀取
DescribeEndpoint	准許擷取端點的詳細資訊	endpoint*		讀取
DescribeEventBus	准許擷取事件匯流排詳細資訊	event-bus	aws:ResourceTag/${TagKey}	讀取
		event-busv2	aws:ResourceTag/${TagKey}
DescribeEventSource	准許擷取事件來源詳細資訊	event-source		讀取
		event-sourcev2	aws:ResourceTag/${TagKey}
DescribePartnerEventSource	准許擷取合作夥伴事件來源詳細資訊	event-source*		讀取
DescribeReplay	准許擷取重新執行詳細資訊	replay*		讀取
DescribeRule	准許擷取規則詳細資訊	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount	讀取
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount
DescribeSubscriber	准許擷取訂閱者的詳細資訊	subscriber*	aws:ResourceTag/${TagKey}	讀取
DisableRule	准許停用規則	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy	寫入
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy
EnableRule	准許啟用規則	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy	寫入
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy
GetResourcePolicy	准許擷取連接至事件匯流排的資源政策	event-busv2*	aws:ResourceTag/${TagKey} events:PolicyName	讀取
ListApiDestinations	准許擷取 API 目標的清單			列出
ListArchives	准許擷取封存清單			列出
ListConnections	准許擷取連線清單			清單
ListEndpoints	准許擷取端點清單			清單
ListEventBuses	准許擷取帳戶中的事件匯流排清單			清單
ListEventSources	准許擷取與此帳戶共用的事件來源清單			清單
ListPartnerEventSourceAccounts	准許擷取與事件來源相關聯的 AWS 帳戶 IDs 清單	event-source*		清單
ListPartnerEventSources	准許擷取合作夥伴事件來源清單			列出
ListReplays	准許擷取重新執行清單			清單
ListResourcePolicies	准許列出連接到事件匯流排的資源政策	event-busv2*	aws:ResourceTag/${TagKey}	清單
ListRuleNamesByTarget	准許擷取與某個目標相關聯的規則名稱清單			列出
ListRules	准許擷取帳戶中 Amazon EventBridge 規則清單			清單
ListSubscribers	准許擷取訂閱者清單			清單
ListTagsForResource	准許擷取與某個 Amazon EventBridge 資源相關聯的標籤清單	event-bus	aws:ResourceTag/${TagKey} events:creatorAccount	列出
		event-busv2	aws:ResourceTag/${TagKey} events:creatorAccount
		event-sourcev2	aws:ResourceTag/${TagKey} events:creatorAccount
		rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount
		subscriber	aws:ResourceTag/${TagKey} events:creatorAccount
ListTargetsByRule	准許擷取為規則定義的目標清單	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount	列出
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount
PutEvents	准許將自訂事件傳送到 Amazon EventBridge	event-bus	aws:ResourceTag/${TagKey} events:detail-type events:eventBusInvocation events:source events:SystemMetadata/AwsDetailType events:SystemMetadata/AwsSource events:SystemMetadata/ContentType	寫入
		event-busv2	aws:ResourceTag/${TagKey} events:detail-type events:eventBusInvocation events:source events:SystemMetadata/AwsDetailType events:SystemMetadata/AwsSource events:SystemMetadata/ContentType
PutPartnerEvents	准許將自訂事件傳送到 Amazon EventBridge			寫入
PutPermission	准許使用 PutPermission 動作將許可授予另一個 AWS 帳戶 ，以將事件放入您的預設事件匯流排			許可管理、寫入
PutRawEvents	准許將具有自訂內容類型、中繼資料、二進位承載和 FIFO 排序的原始格式事件發佈至 Amazon EventBridge	event-busv2*	aws:ResourceTag/${TagKey} events:eventBusInvocation events:Metadata/${MetadataKey} events:SystemMetadata/AwsDetailType events:SystemMetadata/AwsSource events:SystemMetadata/ContentType	寫入
PutResourcePolicy	准許將資源政策連接至事件匯流排	event-busv2*	aws:ResourceTag/${TagKey} events:PolicyName	許可管理、寫入
PutRule	准許建立或更新規則	rule-on-custom-event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount events:detail-type events:detail.eventTypeCode events:detail.service events:detail.userIdentity.principalId events:ManagedBy events:source	寫入
		rule-on-default-event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount events:detail-type events:detail.eventTypeCode events:detail.service events:detail.userIdentity.principalId events:ManagedBy events:source
PutTargets	准許將目標新增至規則	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy events:TargetArn	寫入
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy events:TargetArn
RemovePermission	准許撤銷另一個 的許可 AWS 帳戶 ，將事件放入您的預設事件匯流排			許可管理、寫入
RemoveTargets	准許從規則移除目標	rule-on-custom-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy	寫入
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} events:creatorAccount events:ManagedBy
RevokeResource	准許撤銷事件匯流排上的訂閱者或事件來源	event-busv2*	aws:ResourceTag/${TagKey}	寫入
StartReplay	准許啟動重新執行封存	archive*		寫入
		event-bus*	aws:ResourceTag/${TagKey}
		replay*
TagResource	准許將標籤新增至 Amazon EventBridge 資源	event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount	標記、寫入
		event-busv2	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		event-sourcev2	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		rule-on-custom-event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		rule-on-default-event-bus	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		subscriber	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
TestEventPattern	准許測試某個事件模式是否符合提供的事件			讀取
UntagResource	准許將標籤從 Amazon EventBridge 資源中移除	event-bus	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount	標記、寫入
		event-busv2	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		event-sourcev2	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		rule-on-custom-event-bus	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		rule-on-default-event-bus	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
		subscriber	aws:ResourceTag/${TagKey} aws:TagKeys events:creatorAccount
UpdateApiDestination	准許更新 API 目標	api-destination*		寫入
UpdateArchive	准許更新封存	alias		寫入
		archive*
		key
UpdateConnection	准許更新連線	connection*		寫入
UpdateEndpoint	准許更新端點	endpoint*	events:EventBusArn	寫入
UpdateEventBus	准許更新事件匯流排	event-bus	aws:ResourceTag/${TagKey}	寫入
		event-busv2	aws:ResourceTag/${TagKey}
UpdateEventSource	准許更新事件來源	event-busv2	aws:ResourceTag/${TagKey} events:source	寫入
		event-sourcev2*	aws:ResourceTag/${TagKey} events:source
UpdateSubscriber	准許更新訂閱者	event-busv2	aws:ResourceTag/${TagKey} events:ContentFilterPresent events:Metadata/${MetadataKey} events:Metadata/${MetadataKey}/Matcher	寫入
		subscriber*	aws:ResourceTag/${TagKey} events:ContentFilterPresent events:Metadata/${MetadataKey} events:Metadata/${MetadataKey}/Matcher

Amazon EventBridge 的僅限許可動作

下列動作是由 Amazon EventBridge 定義，但無法透過任何 API 操作直接叫用。它們只能在 IAM 政策陳述式中使用，以授予或拒絕許可。

動作	描述	資源類型 (*必填項目)	條件索引鍵	存取層級
AllowVendedLogDeliveryForResource	准許設定 EventBridge 的付費日誌交付	event-bus	aws:ResourceTag/${TagKey}	寫入
		subscriber	aws:ResourceTag/${TagKey}
InvokeApiDestination	准許叫用 API 目標	api-destination*		寫入
RetrieveConnectionCredentials	准許從連線擷取憑證	connection*		寫入

Amazon EventBridge 定義的資源類型

此服務會定義下列資源類型，並可用在 IAM 許可政策陳述式的 Resource 元素中。

資源類型	ARN	條件索引鍵
alias	arn:${Partition}:kms:${Region}:${Account}:alias/${Alias}
api-destination	arn:${Partition}:events:${Region}:${Account}:api-destination/${ApiDestinationName}
archive	arn:${Partition}:events:${Region}:${Account}:archive/${ArchiveName}
connection	arn:${Partition}:events:${Region}:${Account}:connection/${ConnectionName}
create-snapshot	arn:${Partition}:events:${Region}:${Account}:target/create-snapshot
endpoint	arn:${Partition}:events:${Region}:${Account}:endpoint/${EndpointName}
event-bus	arn:${Partition}:events:${Region}:${Account}:event-bus/${EventBusName}	aws:ResourceTag/${TagKey}
event-busv2	arn:${Partition}:events:${Region}:${Account}:event-busv2/${EventBusName}/${OpaqueId}	aws:ResourceTag/${TagKey}
event-source	arn:${Partition}:events:${Region}::event-source/${EventSourceName}
event-sourcev2	arn:${Partition}:events:${Region}:${Account}:event-sourcev2/${SourceType}/${EventSourceName}/${OpaqueId}	aws:ResourceTag/${TagKey}
key	arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}
reboot-instance	arn:${Partition}:events:${Region}:${Account}:target/reboot-instance
replay	arn:${Partition}:events:${Region}:${Account}:replay/${ReplayName}
rule-on-custom-event-bus	arn:${Partition}:events:${Region}:${Account}:rule/${EventBusName}/${RuleName}	aws:ResourceTag/${TagKey}
rule-on-default-event-bus	arn:${Partition}:events:${Region}:${Account}:rule/${RuleName}	aws:ResourceTag/${TagKey}
stop-instance	arn:${Partition}:events:${Region}:${Account}:target/stop-instance
subscriber	arn:${Partition}:events:${Region}:${Account}:subscriber/${SubscriberName}/${OpaqueId}	aws:ResourceTag/${TagKey}
terminate-instance	arn:${Partition}:events:${Region}:${Account}:target/terminate-instance

Amazon EventBridge 的條件索引鍵

Amazon EventBridge 定義下列可在 IAM 政策的 Condition 元素中使用的條件索引鍵。

條件索引鍵	描述	Type
aws:RequestTag/${TagKey}	依每個標籤允許的值集，篩選對事件匯流排和規則動作的存取權	String
aws:ResourceTag/${TagKey}	依與資源相關聯的標籤值，篩選對事件匯流排和規則動作的存取權	String
aws:TagKeys	依請求中的標籤，篩選對事件匯流排和規則動作的存取權	ArrayOfString
events:ContentFilterPresent	依訂閱者是否向 CreateSubscriber 和 UpdateSubscriber 動作宣告承載範圍內容篩選條件來篩選存取權	Bool
events:EventBusArn	依可與端點建立關聯的事件匯流排 ARN，篩選 CreateEndpoint 和 UpdateEndpoint 動作的存取權	ArrayOfARN
events:ManagedBy	依 AWS 服務篩選存取權。如果規則是由 AWS 服務代表您建立，則值為建立規則之服務的委託人名稱	String
events:Metadata/${MetadataKey}	依已發佈事件的中繼資料索引鍵/值對篩選對對 PutRawEvents 動作的存取權，或依訂閱者中繼資料篩選條件中該索引鍵宣告的完全相符值篩選為 CreateSubscriber 和 UpdateSubscriber 動作	ArrayOfString
events:Metadata/${MetadataKey}/Matcher	依訂閱者篩選條件中中繼資料金鑰宣告的相符類型，篩選 CreateSubscriber 和 UpdateSubscriber 動作的存取權	String
events:PolicyName	依對資源政策動作的請求中指定的資源政策名稱篩選存取權	String
events:SystemMetadata/AwsDetailType	依轉送至事件匯流排之事件的系統中繼資料中記錄的詳細資訊類型篩選存取權至 PutEvents 和 PutRawEvents 動作	String
events:SystemMetadata/AwsSource	依系統中繼資料中記錄的來源篩選存取權，該來源會將事件轉送至事件匯流排至 PutEvents 和 PutRawEvents 動作	String
events:SystemMetadata/ContentType	依 PutRawEvents 的事件和授權為 PutEvents 的轉送事件上宣告的內容類型篩選存取權	String
events:TargetArn	依可放入 PutTargets 動作規則的目標 ARN，篩選存取權。TargetARN 不包含 DeadLetterConfigArn	ArrayOfARN
events:creatorAccount	依建立規則的帳戶，篩選對規則動作的存取權	String
events:detail-type	依事件詳細資訊類型的常值字串，篩選對 PutEvents 和 PutRule 動作的存取權	ArrayOfString
events:detail.eventTypeCode	依事件 detail.eventTypeCode 欄位的常值字串，篩選對 PutRule 動作的存取權	String
events:detail.service	依事件 detail.service 欄位的常值字串，篩選對 PutRule 動作的存取權	String
events:detail.userIdentity.principalId	依事件 detail.useridentity.principalid 欄位的常值字串，篩選對 PutRule 動作的存取權	String
events:eventBusInvocation	根據事件是否從事件匯流排轉送而非透過直接 API 呼叫發佈，篩選對 PutEvents 和 PutRawEvents 的存取	String
events:source	依產生事件至 PutEvents 和 PutRule 動作 AWS 的服務或 AWS 合作夥伴事件來源，或依事件來源設定至 CreateEventSource 和 UpdateEventSource 動作的來源來篩選存取權。符合事件來源欄位的常值字串。	ArrayOfString