Configuring cross-account events using Amazon CloudWatch

If you have a multi-account environment, you can send events from one account to another account using the AWS CloudWatch event bus feature. This is a great way to consolidate the collation of events using a single account.

At a high level, the following steps need to be carried out:

1. On the receiver account, add permissions to the default event bus, allowing access from another account or from your AWS organization.
2. On the sender account, add a rule that points to the receiver account default event bus as the target of the rule.
3. Associate a role that has permissions to send events to the receiver's event bus.
4. Configure a rule in the receiver's account to match the events pattern of the rule generated in the sender account.

Let's take a look at how to configure this. For this demonstration, you need to have access to two AWS accounts within the same AWS organization. For more information on configuring AWS organizations...