This page provides a reference for AWS EventBridge actions available in the workflow automation actions catalog. Use these actions to emit events, manage rule state, and run archive, replay, and partner event source operations.
Prerequisites
Before using AWS actions in workflow automation, ensure you have:
- An AWS account with appropriate permissions.
- AWS credentials configured (IAM user credentials, IAM role ARN, or session credentials).
- The necessary IAM permissions for EventBridge. At minimum, the IAM role or user needs
events:*on the target resources.
See Set up AWS credentials for information on how to create IAM users and IAM roles, and set up static and session AWS credentials for integration with workflow automation AWS actions.
Send a single event to an event bus
The action identifier is aws.eventBridge.putEvent.
Sends a single custom event to an AWS EventBridge event bus so it can be matched against rules. This is a single-entry convenience wrapper — use aws.eventBridge.putEvents to send multiple events in one call.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region of the target event bus. |
|
| String | Required. The source of the event. |
|
| String | Required. Free-form string (maximum 128 characters) that describes the type of event detail. |
|
| String | Required. A valid serialized JSON string. Maximum size is 256 KB. |
|
| String | Optional. Name or ARN of the event bus to receive the event. Omit to use the default event bus. |
|
| List | Optional. AWS resources, identified by ARN, that the event primarily concerns. |
|
| String | Optional. An X-Ray trace header ( |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Send multiple events to an event bus
The action identifier is aws.eventBridge.putEvents.
Sends multiple custom events to Amazon EventBridge in a single call. Maximum 10 events per request.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region of the target event bus. |
|
| List | Required. List of events to send. Each entry must include |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Enable an EventBridge rule
The action identifier is aws.eventBridge.enableRule.
Enables a disabled EventBridge rule. If the rule does not exist, the operation fails.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the rule is located. |
|
| String | Required. Name of the rule to enable. |
|
| String | Optional. Name or ARN of the event bus associated with the rule. Omit for the default event bus. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Disable an EventBridge rule
The action identifier is aws.eventBridge.disableRule.
Disables an active EventBridge rule. A disabled rule won't match any events and won't self-trigger if it has a schedule expression.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the rule is located. |
|
| String | Required. Name of the rule to disable. |
|
| String | Optional. Name or ARN of the event bus associated with the rule. Omit for the default event bus. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Create an archive
The action identifier is aws.eventBridge.createArchive.
Creates an archive to store events from an event bus for later replay.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the archive will be created. |
|
| String | Required. Name for the archive. |
|
| String | Required. ARN of the event bus that sends events to the archive. |
|
| String | Optional. Description for the archive. |
|
| String | Optional. Event pattern to filter which events are stored in the archive. |
|
| Integer | Optional. Number of days to retain events. Set to |
|
| String | Optional. KMS key ID, ARN, or alias for encrypting the archive. Omit to use the AWS-managed default key. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Describe an archive
The action identifier is aws.eventBridge.describeArchive.
Retrieves details about an archive, including its state, event count, and retention settings.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the archive is located. |
|
| String | Required. Name of the archive to describe. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Update an archive
The action identifier is aws.eventBridge.updateArchive.
Updates the description, event pattern, retention period, or KMS key of an existing archive.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the archive is located. |
|
| String | Required. Name of the archive to update. |
|
| String | Optional. Updated description for the archive. |
|
| String | Optional. Updated event pattern to filter events stored in the archive. |
|
| Integer | Optional. Updated number of days to retain events. Set to |
|
| String | Optional. Updated KMS key for encrypting the archive. Set to an empty string to revert to the AWS-managed default key. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Delete an archive
The action identifier is aws.eventBridge.deleteArchive.
Deletes an existing archive and all events stored in it.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the archive is located. |
|
| String | Required. Name of the archive to delete. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
List archives
The action identifier is aws.eventBridge.listArchives.
Lists archives, optionally filtered by name prefix, event source ARN, or state. Use limit and nextToken to paginate large result sets — Workflow Automation enforces a 100 KB output size limit.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region to list archives from. |
|
| String | Optional. Filter archives by name prefix. |
|
| String | Optional. Filter archives by the ARN of the associated event bus. |
|
| String | Optional. Filter by archive state. Valid values: |
|
| String | Optional. Pagination token from a previous response to retrieve the next page of results. | |
| Integer | Optional. Maximum number of results to return (maximum 100). |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Start a replay
The action identifier is aws.eventBridge.startReplay.
Starts replaying archived events from a specified time range to one or more event buses.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the archive and destination bus are located. |
|
| String | Required. Name of the replay to start. |
|
| String | Required. ARN of the archive to replay events from. |
|
| String | Required. Start of the time range to replay, in ISO 8601 format. |
|
| String | Required. End of the time range to replay, in ISO 8601 format. |
|
| Map | Required. Destination for replayed events. Must include |
|
| String | Optional. Description for the replay. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Describe a replay
The action identifier is aws.eventBridge.describeReplay.
Retrieves details and progress of a specific replay, including its state, event time range, and timing.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the replay is located. |
|
| String | Required. Name of the replay to describe. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Cancel a replay
The action identifier is aws.eventBridge.cancelReplay.
Cancels an in-progress replay.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the replay is located. |
|
| String | Required. Name of the replay to cancel. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
List replays
The action identifier is aws.eventBridge.listReplays.
Lists replays, optionally filtered by name prefix, state, or source archive ARN. Use limit and nextToken to paginate large result sets — Workflow Automation enforces a 100 KB output size limit.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region to list replays from. |
|
| String | Optional. Filter replays by name prefix. |
|
| String | Optional. Filter by replay state. Valid values: |
|
| String | Optional. Filter replays by the ARN of the source archive. |
|
| String | Optional. Pagination token from a previous response to retrieve the next page of results. | |
| Integer | Optional. Maximum number of results to return (maximum 100). |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Activate a partner event source
The action identifier is aws.eventBridge.activateEventSource.
Activates a partner event source that has been deactivated. Partner event source actions apply to SaaS partner event sources only.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the partner event source is located. |
|
| String | Required. Name of the partner event source to activate. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Deactivate a partner event source
The action identifier is aws.eventBridge.deactivateEventSource.
Deactivates a partner event source. Partner event source actions apply to SaaS partner event sources only.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the partner event source is located. |
|
| String | Required. Name of the partner event source to deactivate. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
Describe a partner event source
The action identifier is aws.eventBridge.describeEventSource.
Retrieves details of a specific partner event source, including its state and expiration time. Partner event source actions apply to SaaS partner event sources only.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region where the partner event source is located. |
|
| String | Required. Name of the partner event source to describe. |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |
List partner event sources
The action identifier is aws.eventBridge.listEventSources.
Lists partner event sources, optionally filtered by name prefix. Partner event source actions apply to SaaS partner event sources only. Use limit and nextToken to paginate large result sets — Workflow Automation enforces a 100 KB output size limit.
The following table describes the input fields for this action.
Input | Type | Description | Example |
|---|---|---|---|
| String | Optional. IAM role ARN to assume for AWS API calls. |
|
| String | Optional. AWS access key ID. Pass as a secret. |
|
| String | Optional. AWS secret access key. Pass as a secret. |
|
| String | Optional. Temporary session token for STS authentication. Pass as a secret. |
|
| String | Required. AWS region to list partner event sources from. |
|
| String | Optional. Filter results to event sources with names starting with this prefix. |
|
| String | Optional. Pagination token from a previous response to retrieve the next page of results. | |
| Integer | Optional. Maximum number of results to return (maximum 100). |
|
| List | Optional. JQ selectors to extract specific fields from the action output. |
|
The following table describes the output fields for this action.
Output | Type | Example |
|---|---|---|
| Object |
|
| Boolean |
|
| String | Error message on failure. |