EventRule 默认匹配 EventBridge EventBus 被自定义 EventBus 忽略

Question

我有一个 Cloudformation 模板，它实现了 Lambda 函数的 CI/CD 过程（底部）

本质上是 -

观看 Github 回购
在创建新 git 标签时提取源代码
启动一个运行单元测试的 CodeBuild 进程，压缩源代码（测试成功时）并将存档推送到 S3
启用 CodeBuild 通知
实施 CloudWatch EventRule 以模式匹配原始 CodeBuild 通知、格式化并将它们推送到 SNS
将 Lambda 函数绑定到 SNS，它通过 webhook 将通知推送到 Slack

这在默认的 EventBridge EventBus 上运行良好，但如果我切换到自定义 EventBus，模式匹配似乎会失败。

（请参阅堆栈中的资源 EventBus 和 EventRule；它当前设置为使用自定义 EventBus，并且失败/忽略新的 git 标记；如果您注释掉对属性 EventBusName 的引用在 EventBus 中，它默认使用默认的 EventBus 并且可以工作）

在这种情况下，为什么自定义 EventBus 的行为与默认 EventBus 不同？

---
AWSTemplateFormatVersion: '2010-09-09'
Parameters:
  AppName:
    Type: String
  RepoOwner:
    Type: String
  RepoName:
    Type: String
  RepoBranch:
    Type: String
    Default: master
  RepoAuth:
    Type: String
    Default: master
  WebhookUrl:
    Type: String
  WebhookLambda:
    Type: String
  CodeBuildBuildSpec:
    Type: String
  CodeBuildType:
    Type: String
    Default: LINUX_CONTAINER
  CodeBuildComputeType:
    Type: String
    Default: BUILD_GENERAL1_SMALL
  CodeBuildImage:
    Type: String
    Default: aws/codebuild/standard:4.0
  LambdaHandler:
    Type: String
    Default: "index.handler"
  LambdaMemory:
    Type: Number
    Default: 128
  LambdaTimeout:
    Type: Number
    Default: 30
  LambdaRuntime:
    Type: String
    Default: python3.8
Resources:
  ArtifactsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName:
        Fn::Sub:
          - ${app_name}-lambda-artifacts
          - app_name:
              Ref: AppName
  CodeBuildProject:
    Properties:
      Environment:
        ComputeType:
          Ref: CodeBuildComputeType
        Image:
          Ref: CodeBuildImage
        Type:
          Ref: CodeBuildType
      Name:
        Fn::Sub:
          - ${app_name}-lambda-ci
          - app_name:
              Ref: AppName
      ServiceRole:
        Fn::GetAtt:
          - CodeBuildRole
          - Arn
      Source:
        Auth:
          Resource:
            Ref: RepoAuth
          Type: OAUTH
        Location:
          Fn::Sub:
            - "https://github.com/${repo_owner}/${repo_name}.git"
            - repo_owner:
                Ref: RepoOwner
              repo_name:
                Ref: RepoName
        Type: GITHUB
        BuildSpec:
          Fn::Sub:
            - "${build_spec}"
            - build_spec:
                Ref: CodeBuildBuildSpec
      Artifacts:
        Type: NO_ARTIFACTS
      SourceVersion:
        Ref: RepoBranch
      Triggers:
        Webhook: true
        FilterGroups:
          - - Type: EVENT
              Pattern: PUSH
              ExcludeMatchedPattern: false
            - Type: HEAD_REF
              Pattern: "refs/tags/.*"
              ExcludeMatchedPattern: false
    Type: AWS::CodeBuild::Project
  CodeBuildRole:
    Properties:
      AssumeRolePolicyDocument:
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service: codebuild.amazonaws.com
        Version: '2012-10-17'
      Policies:
        - PolicyDocument:
            Statement:
              - Action:
                  - codebuild:*
                  - events:*
                  - s3:PutObject
                  - logs:CreateLogGroup
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Effect: Allow
                Resource: '*'
            Version: '2012-10-17'
          PolicyName: code-build-role-policy
    Type: AWS::IAM::Role
  WebhookFunction:
    Properties:
      FunctionName:
        Fn::Sub:
          - ${app_name}-lambda-webhook
          - app_name:
              Ref: AppName
      Code:
        ZipFile:
          Ref: WebhookLambda
      Environment:
        Variables:
          WEBHOOK_URL:
            Ref: WebhookUrl
      Handler:
        Ref: LambdaHandler
      MemorySize:
        Ref: LambdaMemory
      Role:
        Fn::GetAtt:
          - WebhookFunctionRole
          - Arn
      Runtime:
        Ref: LambdaRuntime
      Timeout:
        Ref: LambdaTimeout
    Type: AWS::Lambda::Function
  WebhookFunctionRole:
    Properties:
      AssumeRolePolicyDocument:
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service: lambda.amazonaws.com
        Version: '2012-10-17'
      Policies:
        - PolicyDocument:
            Statement:
              - Action:
                  - logs:CreateLogGroup
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Effect: Allow
                Resource: '*'
            Version: '2012-10-17'
          PolicyName: webhook-role-policy
    Type: AWS::IAM::Role
  WebhookFunctionPermission:
    Properties:
      Action: "lambda:InvokeFunction"
      FunctionName:
        Ref: WebhookFunction
      Principal: "sns.amazonaws.com"
      SourceArn:
        Ref: WebhookTopic
    Type: AWS::Lambda::Permission
  WebhookTopic:
    Properties:
      Subscription:
        - Protocol: lambda
          Endpoint:
            Fn::GetAtt:
              - WebhookFunction
              - Arn
    Type: AWS::SNS::Topic
  WebhookTopicPolicy:
    Properties:
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: "events.amazonaws.com"
            Action:
              - "sns:Publish"
            Resource:
              Ref: WebhookTopic
      Topics:
        - Ref: WebhookTopic
    Type: AWS::SNS::TopicPolicy
  EventBus:
    Type: AWS::Events::EventBus
    Properties:
      Name:
        Fn::Sub:
          - ${app_name}-bus
          - app_name:
              Ref: AppName
  EventRule:
    Type: AWS::Events::Rule
    Properties:
      EventBusName:  # CURRENTLY USING CUSTOM EVENT BUS (PATTERN MATCHING FAILS); REMOVE THIS PROPERTY TO SWITCH TO DEFAULT EVENT BUS (PATTERN MATCHING WORKS)
        Ref: EventBus
      EventPattern:
        source:
          - "aws.codebuild"
        detail-type:
          - "CodeBuild Build Phase Change"
        detail:
          completed-phase:
            - SUBMITTED
            - PROVISIONING
            - DOWNLOAD_SOURCE
            - INSTALL
            - PRE_BUILD
            - BUILD
            - POST_BUILD
            - UPLOAD_ARTIFACTS
            - FINALIZING
          completed-phase-status:
            - TIMED_OUT
            - STOPPED
            - FAILED
            - SUCCEEDED
            - FAULT
            - CLIENT_ERROR
          project-name:
            - Ref: CodeBuildProject
      State: ENABLED
      Targets:
        - Arn:
            Ref: WebhookTopic
          Id:
            Fn::Sub:
              - "${project_name}-codebuild-notifications"
              - project_name:
                  Ref: CodeBuildProject
          InputTransformer:
            InputPathsMap:
              build-id: "$.detail.build-id"
              project-name: "$.detail.project-name"
              completed-phase: "$.detail.completed-phase"
              completed-phase-status: "$.detail.completed-phase-status"
            InputTemplate: |
              "{'build-id': '<build-id>', 'project-name': '<project-name>', 'completed-phase': '<completed-phase>', 'completed-phase-status': '<completed-phase-status>'}"

Answer 1

“自定义事件总线服务于从您的自定义应用程序和服务接收事件的用例。不幸的是，AWS 服务无法将事件推送到自定义事件总线。” （AWS 支持）

EventRule 默认匹配 EventBridge EventBus 被自定义 EventBus 忽略

EventRule matched by default EventBridge EventBus ignored by custom EventBus

amazon-cloudwatch

aws-event-bridge