Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 305 discussion

Explanation: 1. Event Flow Across AWS Accounts The goal is to consolidate Amazon Connect events from multiple AWS accounts into a single DevOps account. Amazon EventBridge allows cross-account event ingestion using a resource-based policy on the receiving event bus (DevOps account). 2. Correct Configuration Steps ✅ Step 1: Update the resource-based policy of the default event bus in the DevOps account This allows it to receive events from other accounts. The policy must specify the source accounts and the events.amazonaws.com principal. ✅ Step 2: Create EventBridge rules in each Amazon Connect account These rules match Amazon Connect events and forward them to the DevOps account's default event bus.

Agree with f4b18ba comments

Explanation: To centralize Amazon Connect events from multiple AWS accounts into a single account’s EventBridge event bus, the following steps are required: 1. Update the resource-based policy of the EventBridge event bus in the DevOps account: • This policy allows the DevOps account’s event bus to accept events from the other accounts. • The policy must specify the sending account IDs in the Principal field and grant permissions for actions like events:PutEvents. 2. Create EventBridge rules in each Amazon Connect account: • These rules match the specific Amazon Connect events (e.g., contact events, agent status updates) and forward them to the default event bus in the DevOps account.

Resource-Based Policy on the DevOps Account's Event Bus: To allow cross-account event routing, the DevOps account's EventBridge event bus must have a resource-based policy that grants permissions to other accounts to send events to it. EventBridge Rule in Each Account: Each account needs an EventBridge rule that matches the desired Amazon Connect events and sends them to the DevOps account's event bus as the target. This ensures all relevant events are aggregated in the DevOps account. Cross-Account Event Routing: EventBridge supports cross-account event routing with a combination of resource-based policies and properly configured rules in the source accounts. https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-permissions.html https://docs.aws.amazon.com/connect/latest/adminguide/eventbridge.html