Turning on group lifecycle events in Resource Groups

To receive notifications about lifecycle changes to your resource groups, you can on group lifecycle events. Resource Groups then provides information about your groups' changes to Amazon EventBridge. In EventBridge, you can evaluate and act on the changes using rules you define in the EventBridge service.

When you initially turn on group lifecycle events in an Amazon Web Services account, Resource Groups creates a service-linked role named AWSServiceRoleForResourceGroups. This managed role has permission to use a Resource Groups managed EventBridge rule. The rule monitors the tags attached to your resources and the Amazon CloudFormation stacks in your account for any changes. Resource Groups then publishes those changes to the default event bus in Amazon EventBridge. The service also creates an EventBridge managed rule named Managed.ResourceGroups.TagChangeEvents. This rule captures the details of tag changes of your resources. This lets Resource Groups generate membership events to send to EventBridge for your custom rules to process. Your EventBridge rules can then respond to events by sending notifications to the rules' configured targets.

After you complete these steps, rules that look for these events should start receiving them in a few minutes.

You can turn on group lifecycle events by using either the Amazon Web Services Management Console or by using a command from the Amazon CLI or one of the SDK APIs.