Connecting to Amazon S3 source actions that use EventBridge and Amazon CloudTrail
The instructions in this section provide the steps for creating the S3 source action that uses Amazon CloudTrail resources that you must create and manage. To use the S3 source action with EventBridge that does not require additional Amazon CloudTrail resources, use the CLI instructions at Migrate polling pipelines with an S3 source enabled for events.
Important
This procedure provides the steps for creating the S3 source action that uses Amazon CloudTrail resources that you must create and manage. The procedure to create this action without Amazon CloudTrail resources is not available in the console. To use the CLI, see Migrate polling pipelines with an S3 source enabled for events.
To add an Amazon S3 source action in CodePipeline, you choose either to:
-
Use the CodePipeline console Create pipeline wizard (Create a custom pipeline (console)) or Edit action page to choose the S3 provider option. The console creates an EventBridge rule and a CloudTrail trail that starts your pipeline when the source changes.
-
Use the Amazon CLI to add the action configuration for the
S3
action and create additional resources as follows:-
Use the
S3
example action configuration in Amazon S3 source action reference to create your action as shown in Create a pipeline (CLI). -
The change detection method defaults to starting the pipeline by polling the source. You should disable periodic checks and create the change detection rule and trail manually. Use one of the following methods: Create an EventBridge rule for an Amazon S3 source (console), Create an EventBridge rule for an Amazon S3 source (CLI), or Create an EventBridge rule for an Amazon S3 source (Amazon CloudFormation template) .
-
Amazon CloudTrail is a service that logs and filters events on your Amazon S3 source bucket. The trail sends the filtered source changes to the EventBridge rule. The EventBridge rule detects the source change and then starts your pipeline.
Requirements:
-
If you are not creating a trail, use an existing Amazon CloudTrail trail for logging events in your Amazon S3 source bucket and sending filtered events to the EventBridge rule.
-
Create or use an existing S3 bucket where Amazon CloudTrail can store its log files. Amazon CloudTrail must have the permissions required to deliver log files to an Amazon S3 bucket. The bucket cannot be configured as a Requester Pays bucket. When you create an Amazon S3 bucket as part of creating or updating a trail in the console, Amazon CloudTrail attaches the required permissions to a bucket for you. For more information, see Amazon S3 Bucket Policy for CloudTrail.