EventBridge CloudTrail Data Events and S3 Notification SAM YAML

template.yaml

  NotificationFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: handlers/
      Handler: notification.handleS3Notification
      Runtime: nodejs12.x
      Policies:
        - Version: '2012-10-17'
          Statement:
            - Effect: Allow
              Action:
                - s3:GetObject
              Resource:
                - arn:aws:s3:::s3-trigger-compare/uploads/*
      Events:
        NotificationEvent:
          Type: S3
          Properties:
            Bucket: !Ref TriggerBucket
            Events: s3:ObjectCreated:*
            Filter:
              S3Key:
                Rules:
                  - Name: prefix
                    Value: 'uploads/'

  EventBridgeFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: handlers/
      Handler: event-bridge.handleEvent
      Runtime: nodejs12.x
      Policies:
        - Version: '2012-10-17'
          Statement:
            - Effect: Allow
              Action:
                - s3:GetObject
              Resource:
                - arn:aws:s3:::s3-trigger-compare/uploads/*
      Events:
        EventBridgeEvent:
          Type: EventBridgeRule
          Properties:
            Pattern:
              source:
                - aws.s3
              detail-type:
                - AWS API Call via CloudTrail
              detail:
                eventSource:
                  - s3.amazonaws.com
                eventName:
                  - CopyObject
                  - PutObject
                  - CompleteMultipartUpload
                  - RestoreObject
                requestParameters:
                  bucketName:
                    - !Ref TriggerBucket
                  key:
                    - prefix: 'uploads/'