是的,AWS EventBridge 规则可以将目标定位到另一个帐户中的 Kinesis Firehose Delivery Stream。需要使用目标的 ARN(Amazon 资源名称)以及允许源账户向该资源 ARN 发布事件的所谓“跨账户权限”来完成此操作。
以下是设置 AWS EventBridge 规则以将目标定位到另一个账户中的 Kinesis Firehose Delivery Stream 的示例代码:
{
"source": ["myapp.mydata"],
"detail-type": ["My Data Event"],
"detail": {
"key1": "value1",
"key2": "value2"
},
"region": "us-west-2", // the region where the destination is located
"resources": [ "arn:aws:events:us-west-2:123456789012:rule/myrule" ],
"targets": [
{
"Arn": "arn:aws:firehose:us-west-2:444455556666:deliverystream/mydeliverystream",
"RoleArn": "arn:aws:iam::123456789012:role/myrole", // the IAM role to assume to access the destination
"InputTransformer": {
"InputPathsMap": {
"detail-key1": "$.detail.key1",
"detail-key2": "$.detail.key2"
},
"InputTemplate": "{\"Message\": \"Data sent to Kinesis Firehose delivery stream\"}"
},
"Id": "mytarget"
}
]
}
在这个示例中,“Arn”字段是指定另一个账户中的 Kinesis Firehose Delivery Stream 的 ARN,而“RoleArn”则指定允许源账户访问该资源的 IAM 角色的 ARN。
确保在源和目标账户之间设置了适当的跨账户权限,以便源账户可以向目标账户发布事件。若要进行