events:UpdateSubscriber

Write

events:UpdateSubscriber is a Write access-level action in the events service. Grants permission to update a subscriber

Resource types

ARNs that events:UpdateSubscriber can be scoped to in an IAM policy.

arn:${Partition}:events:${Region}:${Account}:event-busv2/${EventBusName}/${OpaqueId}
event-busv2
arn:${Partition}:events:${Region}:${Account}:subscriber/${SubscriberName}/${OpaqueId} required
subscriber

Condition keys

Keys you can use in the Condition block of a policy that grants events:UpdateSubscriber.

events:ContentFilterPresent Bool

Filters access by whether a subscriber declares a payload-scope content filter to CreateSubscriber and UpdateSubscriber actions

events:Metadata/${MetadataKey} ArrayOfString

Filters access by a metadata key-value pair on the published event to PutRawEvents actions, or by the exact-match values declared for that key in a subscriber's metadata filter to CreateSubscriber and UpdateSubscriber actions

events:Metadata/${MetadataKey}/Matcher String

Filters access by the match type declared for a metadata key in a subscriber's filter to CreateSubscriber and UpdateSubscriber actions

aws:ResourceTag/${TagKey} String

Filters access by tag-value associated with the resource to event bus and rule actions

Example IAM policy

A minimal policy that allows events:UpdateSubscriber. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEventsUpdateSubscriber",
      "Effect": "Allow",
      "Action": "events:UpdateSubscriber",
      "Resource": "*"
    }
  ]
}

Related actions in events

View all events actions →