Eventbridge Custom Event Bus Should Have Attached Policy Policy

1# Converted from HashiCorp PCI DSS Sentinel example: eventbridge-custom-event-bus-should-have-attached-policy.sentinel
2# Conversion quality: Limited
3
4locals {
5    all_event_bus_policies = core::getresources("aws_cloudwatch_event_bus_policy", {})
6    event_bus_policy_map = {
7        for policy in local.all_event_bus_policies :
8        policy.event_bus_name => true
9    }
10}
11
12resource_policy "aws_cloudwatch_event_bus" "require_attached_policy" {
13    locals {
14        bus_name = core::try(attrs.name, "")
15        has_attached_policy = core::try(local.event_bus_policy_map[local.bus_name], false)
16    }
17
18    enforce {
19        condition = local.has_attached_policy
20        error_message = "EventBridge buses must have a matching aws_cloudwatch_event_bus_policy resource"
21    }
22}