Live:CloudOps Webinars & Hands-on Workshops ·Register ↗
मुख्य कंटेंट तक स्किप करें

JITNA के साथ EventBridge इंटीग्रेशन

Just-in-time node access (JITNA) का उपयोग करते समय, जब manual approval की आवश्यकता वाले session access request बनाए जाते हैं तो EventBridge को तीन प्रकार के इवेंट भेजे जाते हैं:

  1. Requester Access Request Status Update
  2. Approver Access Request Status Update
  3. JITNA Access Request Failed
जानकारी

आपकी auto-approval policy के आधार पर स्वचालित रूप से अनुमोदित access requests के लिए इवेंट नहीं भेजे जाते हैं।

उदाहरण इवेंट विवरण​

Requester access request इवेंट​

नीचे Requester Access Request Status Update इवेंट के लिए इवेंट विवरण का एक उदाहरण है।

{
    "version": "0",
    "id": "6cfc3d6d-fd93-29e2-e96c-909a080ce519",
    "detail-type": "Requester Access Request Status Update",
    "source": "aws.ssm",
    "account": "123456789012",
    "time": "2025-04-10T20:19:32Z",
    "region": "us-east-2",
    "resources": ["arn:aws:ssm:us-east-2:123456789012:automation-execution/0aa5a695-4685-449f-90cc-49d24139dbe9"],
    "detail": {
        "ExecutionId": "0aa5a695-4685-449f-90cc-49d24139dbe9",
        "OpsItemId": "oi-f57e817742bd",
        "StartTime": "Apr 10, 2025, 8:19:30 PM",
        "TargetResourceArn": "arn:aws:ec2:us-east-2:123456789012:instance/i-0b3952fba006f5f0d",
        "Title": "Access Request - 2025-04-10 20:19 UTC",
        "Requester": "e1fbc510-8081-70c2-448f-123456789012",
        "AccessRequestStatus": "PendingApproval"
    }
}

Approver access request इवेंट​

नीचे Approver Access Request Status Update इवेंट के लिए इवेंट विवरण का एक उदाहरण है।

{
    "version": "0",
    "id": "5d6ee943-9c8f-62aa-ee19-84391b0dc60a",
    "detail-type": "Approver Access Request Status Update",
    "source": "aws.ssm",
    "account": "123456789012",
    "time": "2025-04-10T20:19:30Z",
    "region": "us-east-2",
    "resources": ["arn:aws:ssm:us-east-2:123456789012:automation-execution/0aa5a695-4685-449f-90cc-49d24139dbe9"],
    "detail": {
        "ExecutionId": "0aa5a695-4685-449f-90cc-49d24139dbe9",
        "OpsItemId": "oi-f57e817742bd",
        "StartTime": "Apr 10, 2025, 8:19:29 PM",
        "Requester": "e1fbc510-8081-70c2-448f-123456789012",
        "Title": "Access Request - 2025-04-10 20:19 UTC",
        "TargetResourceArn": "arn:aws:ec2:us-east-2:123456789012:instance/i-0b3952fba006f5f0d",
        "AccessRequestApprovalLevelStatus": "PendingApproval",
        "StepName": "ManualApproval",
        "RequestReason": "Requesting access to node - production",
        "Approvers": ["816b5550-f031-70c9-4d41-123456789012", "d1db5560-10e1-7090-5614-123456789012"]
    }
}

JITNA Access Request Failed​

{
    "version": "0",
    "id": "aa09fe20-2b39-c973-42a0-edfa7eb85200",
    "detail-type": "JITNA Access Request Failed",
    "source": "aws.ssm",
    "account": "123456789012",
    "time": "2025-04-11T14:14:02Z",
    "region": "us-east-2",
    "resources": ["arn:aws:ssm:us-east-2:123456789012:opsitem/oi-fdac6036584a"],
    "detail": {
        "ApplicablePolicies": ["Approval-Policy-Production-Nodes", "prod"],
        "TargetResourceArn": "arn:aws:ec2:us-east-2:123456789012:instance/i-05d8934df93bb43db",
        "OpsItemId": "oi-fdac6036584a",
        "CreatedDate": "Fri Apr 11 14:13:58 UTC 2025",
        "Requester": "e1fbc510-8081-70c2-448f-123456789012"
    }
}

उदाहरण OpsItem विवरण​

Just-in-time node access requests एक Systems Manager OpsItem resource के रूप में संग्रहीत किए जाते हैं। नीचे एक OpsItem के विवरण का एक उदाहरण है जो एक session access request के लिए है जिसे auto-approval policy द्वारा स्वचालित रूप से अनुमोदित किया गया था।

{
    "OpsItem": {
        "CreatedBy": "arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_jitna-operator_434098e0f9f1965d/bob@example.com",
        "OpsItemType": "/aws/accessrequest",
        "CreatedTime": "2025-05-02T14:57:14.118000+00:00",
        "Description": "OpsItem created for AccessRequest J8eDlHbgoAMEebw=.",
        "LastModifiedBy": "arn:aws:sts::123456789012:assumed-role/AWSServiceRoleForSystemsManagerJustInTimeAccess/JustInTimeAccessService",
        "LastModifiedTime": "2025-05-02T14:57:16.160000+00:00",
        "Notifications": [],
        "RelatedOpsItems": [],
        "Status": "Approved",
        "OpsItemId": "oi-a71f4d891d72",
        "Version": "1746197836160",
        "Title": "Access Request - 2025-05-02 14:57 UTC",
        "Source": "aws.ssm",
        "OperationalData": {
            "/aws/accessrequest/approvaldetails": {
                "Value": "Requesting access to node",
                "Type": "SearchableString"
            },
            "/aws/accessrequest/context": {
                "Value": "{\"targets\":{\"instanceId\":\"arn:aws:ec2:us-east-2:123456789012:instance/i-02999bd501754105a\"},\"accessTokenRole\":\"SSM-JustInTimeAccessTokenRole\"}",
                "Type": "SearchableString"
            },
            "/aws/accessrequest/accessduration": {
                "Value": "PT3600S",
                "Type": "SearchableString"
            },
            "/aws/accessrequest/endtime": {
                "Value": "2025-05-02 15:57:16 UTC",
                "Type": "SearchableString"
            },
            "/aws/accessrequest": {
                "Value": "{\"requester\":{\"isReplica\":\"false\",\"sourceOpsItemId\":\"oi-a71f4d891d72\",\"sourceAccountId\":\"\",\"id\":\"\",\"sourceRegion\":\"\",\"arn\":\"arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_jitna-operator_434098e0f9f1965d/bob@example.com\"},\"approvalPolicy\":\"SSM-JustInTimeAccessAutoApprovalPolicy\",\"approvalPolicyVersion\":\"1\",\"automationExecutionId\":\"\"}",
                "Type": "SearchableString"
            },
            "/aws/accessrequest/starttime": {
                "Value": "2025-05-02 14:57:16 UTC",
                "Type": "SearchableString"
            }
        },
        "OpsItemArn": "arn:aws:ssm:us-east-2:123456789012:opsitem/oi-a71f4d891d72"
    }
}

EventBridge rule patterns​

{
  "source": ["aws.ssm"],
  "detail-type": ["Requester Access Request Status Update"]
}