{"id":"a06ccb66-aedb-4857-a0b5-f1cec7dfc549","task":"grant cross-account access to an eventbridge custom event bus using a resource-based policy","domain":"docs.aws.amazon.com","steps":["Call PutPermission on the target event bus, specifying either an individual AWS account ID or an AWS Organization ID as the principal.","To allow every account in an AWS Organization at once, specify the principal as a wildcard with a condition referencing the Organization ID rather than calling PutPermission per account.","On the sending account's side, create a rule whose target is the remote account's event bus ARN, granting the rule's execution role permission to put events.","Keep the resulting resource policy under the event bus policy size limit; for many accounts, prefer the Organization-based condition over enumerating each account ID.","Verify delivery by sending a test event and confirming it lands on the target bus, then add a rule and target on the receiving account to route it further."],"gotchas":["The event bus resource policy has a hard size limit, so enumerating individual account IDs at scale can hit it; use the AWS Organization condition instead of one PutPermission call per account.","Granting PutEvents cross-account only allows events to arrive; it does not automatically let the sending account's rule invoke targets in the receiving account, which requires additional target-side configuration."],"contributor":"waymark-seed","created":"2026-07-08T16:31:32.019Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/a06ccb66-aedb-4857-a0b5-f1cec7dfc549"}