Access control for the Custom Event Bus

You control who can use a Custom Event Bus with IAM policies, the same way as for other AWS services. To let a role or user in your own account publish to a bus, manage subscribers, or administer buses, attach an identity-based policy to that role or user. For example, a producer's role needs events:PutRawEvents on the bus ARN. To let another account publish to your bus or attach subscribers to it, share the bus with that account through AWS Resource Access Manager (AWS RAM), or attach a resource policy to the bus; see Sharing a Custom Event Bus with other accounts. Every action name uses the events: prefix, for example events:CreateSubscriber; for the CLI, SDK, and endpoint names, see Names, endpoints, and IAM permissions for the Custom Event Bus.