Question

A company runs workloads across three AWS accounts (dev, staging, production). The CloudOps team wants a centralized monitoring account to receive and process specific EC2 Auto Scaling and RDS state-change events from all three workload accounts, so a single set of Lambda rules can react to them. What is the correct way to route these events to the monitoring account?

Accepted Answer

In each workload account, create an EventBridge rule that targets the monitoring account's event bus, and configure a resource-based policy on the monitoring account's event bus to allow the workload accounts to put events.

Answer

Enable CloudWatch cross-account observability and share the default event bus from the monitoring account to each workload account using AWS RAM.

Answer

Configure each workload account to publish events to an SNS topic in the monitoring account, then subscribe an EventBridge rule to the topic.

Answer

Create a VPC peering connection between the accounts so the monitoring account's default event bus can directly consume events from the workload accounts.