Tendrl

Docs / Strand / connectors/aws-eventbridge

AWS EventBridge

Direction: Write Only | Type: aws.eventbridge

Amazon EventBridge connector for sending events to an event bus. This is a forward-only connector for event-driven architectures.

Required Permissions

The IAM user or role must have the following permissions:

Operation Required IAM Permissions
put_events events:PutEvents
Tip: Scope permissions to specific event bus ARNs to follow the principle of least privilege.

Operations

Operation Direction Description
put_events Write Send events to an EventBridge event bus

Connector Configuration

Field Required Default Description
Authentication Type No api_key api_key for explicit credentials, role to use the host's IAM role / default credential chain
Region Yes - AWS region code (e.g., us-east-1)
Endpoint URL No - Custom endpoint for a self-managed target or an AWS VPC endpoint. Leave empty for AWS.
Access Key ID Conditional - AWS access key (encrypted). Required when Authentication Type is api_key
Secret Access Key Conditional - AWS secret key (encrypted). Required when Authentication Type is api_key
Role ARN Conditional - Your IAM role ARN for cross-account access via STS AssumeRole. Required when Authentication Type is role. The role must trust the Tendrl AWS account.
External ID No - External ID for STS AssumeRole (encrypted). Recommended with role auth to prevent confused-deputy attacks.
Event Bus Name No default Default event bus name (can be overridden at node level)
Role-Based Authentication

With role authentication you do not store static access keys; Strand authenticates using the host's default credential chain (EC2 instance profile, ECS task role, or environment credentials). You must still provide a Role ARN when creating the connector (the role should trust the Tendrl AWS account); an optional External ID hardens the trust policy.

Node Configuration

Field Required Default Description
Event Bus Name No default Event bus name
Source No strand Event source identifier
Detail Type No Workflow Event Event detail type

Output

json

{
  "success": true,
  "status": "sent",
  "data": {
    "event_id": "abc-123",
    "event_bus": "default"
  },
  "service": "aws.eventbridge",
  "operation": "put_events"
}

Example

Connector Setup:

json

{
  "region": "us-east-1",
  "access_key_id": "AKIAIOSFODNN7EXAMPLE",
  "secret_access_key": "wJalrXUtnFEMI/K7MDENG...",
  "event_bus_name": "my-app-bus"
}

Connector Setup (role-based):

json

{
  "auth_type": "role",
  "region": "us-east-1",
  "role_arn": "arn:aws:iam::123456789012:role/strand-access",
  "event_bus_name": "my-app-bus"
}

Node Configuration:

← Back to Strand docs