What Does EventBridge Mean?
On This Page
What do you want to do?
Quick Definition
EventBridge is a tool that helps different parts of your applications talk to each other by sending and receiving events. It takes events from sources like your own apps or AWS services and delivers them to targets like AWS Lambda or Step Functions. You can set rules to filter and route events exactly where they need to go. It also supports event buses for other AWS accounts, making it easy to build event-driven architectures.
Common Commands & Configuration
aws events put-rule --name "MyRule" --event-pattern "{\"source\":[\"aws.ec2\"],\"detail-type\":[\"EC2 Instance State-change Notification\"]}" --role-arn "arn:aws:iam::123456789012:role/MyEventBridgeRole"Creates an EventBridge rule that matches EC2 instance state-change events. You specify the event pattern inline using escaped JSON. Used to route EC2 state changes to a target like a Lambda function.
Tests your ability to construct event patterns with JSON syntax. Common in scenario questions where you need to filter events by source and detail-type. The role-arn is required for the rule to invoke targets.
aws events put-targets --rule "MyRule" --targets "Id"="1","Arn"="arn:aws:lambda:us-east-1:123456789012:function:MyFunction"Attaches a Lambda function as a target to the rule named MyRule. Used after creating a rule to define where matching events should be sent.
Exams test that targets are attached separately from rule creation. Remember that each target requires a unique Id within the rule. Lambda is a common target for event-driven processing.
aws events put-events --entries "Source"="my.app","DetailType"="UserSignUp","Detail"="{\"email\":\"user@example.com\"}","EventBusName"="MyCustomBus" --profile productionSends a custom event to a custom event bus named MyCustomBus. The Detail field is JSON. Used to integrate your application with EventBridge.
Tests understanding of custom events and custom event buses. The Source and DetailType fields must match rule patterns. Often used in developer associate exam questions about custom application integration.
aws events create-archive --archive-name "MyArchive" --event-source-arn "arn:aws:events:us-east-1:123456789012:event-bus/default" --retention-days 7Creates an archive that stores all events from the default event bus for 7 days. Enables replay of events later using the start-replay command.
Archives and replays are tested in SAA and developer exams for disaster recovery and reprocessing scenarios. Retention can be up to 14 days. The event-source-arn must be the event bus ARN.
aws events start-replay --replay-name "MyReplay" --event-source-arn "arn:aws:events:us-east-1:123456789012:archive/MyArchive" --destination "Arn"="arn:aws:events:us-east-1:123456789012:event-bus/default" --event-start-time "2023-01-01T00:00:00Z" --event-end-time "2023-01-02T00:00:00Z"Replays events from an archive to the default event bus during a specific time window. Used to reprocess events after a failure or for testing.
Exams test that you must specify both event-start-time and event-end-time. The destination is always an event bus ARN, not a target. This is a common gotcha question.
aws events put-rule --name "CronRule" --schedule-expression "cron(0 8 * * ? *)" --state ENABLEDCreates a scheduled rule that triggers every day at 8:00 AM UTC using a cron expression. Used for periodic tasks like daily batch processing.
Schedule expressions in EventBridge use the same cron syntax as CloudWatch Events. The SAA exam tests the difference between rate expressions (e.g., rate(1 day)) and cron expressions. Note the ? in the day-of-week field.
aws events put-permission --action "events:PutEvents" --principal "123456789012" --statement-id "AllowAccount" --event-bus-name "MyBus"Grants another AWS account (123456789012) permission to send events to your custom event bus named MyBus. Uses a resource-based policy.
Cross-account event sending requires resource policies on the event bus, not IAM roles. This is a key distinction tested in sysops and SAA exams. The principal is the 12-digit account ID.
aws events enable-rule --name "MyRule"Enables a disabled rule. Used when you have temporarily stopped event processing and want to resume.
Rules can be enabled or disabled. The exam may test that disabled rules do not evaluate events, but the rule configuration remains intact. Useful for maintenance scenarios.
EventBridge appears directly in 7exam-style practice questions in Courseiva's question bank — one of the most-tested concepts on SAA-C03. Practise them →
Must Know for Exams
AWS certifications, especially the Solutions Architect Associate, Developer Associate, and SysOps Administrator, frequently test EventBridge in the context of building decoupled, event-driven architectures. The AWS Cloud Practitioner exam covers it at a conceptual level, testing whether you understand what EventBridge does and how it differs from SQS and SNS. For the Solutions Architect Associate (SAA-C03), you can expect scenario-based questions that ask you to recommend the right service to integrate various AWS services with minimal latency and without polling. EventBridge is often the best answer when the requirement mentions event-driven, near real-time, or filtering events before routing.
The Developer Associate exam (DVA-C02) digs deeper into implementation details, such as how to define event patterns, how to use input transformers, and how to configure event buses for custom applications. You may be asked to write a simple rule pattern in JSON format or to identify the correct combination of source and detail-type to match a given event. The SysOps Administrator exam (SOA-C02) focuses on operational aspects: how to monitor EventBridge using CloudWatch metrics, how to set up dead-letter queues, and how to audit rule changes with CloudTrail. You could be asked to troubleshoot a scenario where events are not being delivered, requiring you to check IAM permissions, rule patterns, or target configurations.
In all these exams, EventBridge questions often present a scenario where a company is using Lambda to poll an S3 bucket for new files, which is inefficient and costly. The correct solution is to replace polling with an EventBridge rule that triggers on S3 PutObject events. Another common question type involves choosing between EventBridge and SNS for routing events to multiple downstream systems. The key distinction is that EventBridge supports filtering, transformation, and routing to multiple targets per rule, while SNS is simpler and better for fan-out with no filtering.
Exam objectives that explicitly mention EventBridge include: "Design event-driven architectures" (SAA), "Develop event-based integrations" (DVA), and "Manage event-driven workflows" (SOA). Knowing the default event bus versus custom versus partner event bus differences is also a frequent testing point. Questions about cross-account event sharing will test your understanding of resource-based policies on event buses. Overall, EventBridge is considered a primary service for the AWS Solutions Architect and Developer Associate exams, and also_useful for SysOps and Cloud Practitioner. Mastery of EventBridge often differentiates a pass from a high score.
Simple Meaning
Imagine you live in a busy apartment building with a central mail room. Every time a package arrives, the mail room sorts it and delivers it to the right apartment based on the address label. Amazon EventBridge works like that mail room, but for messages called events. An event can be anything like a new file uploaded to S3, a server health check failing, or a user signing up on your website. EventBridge receives these events from many sources, applies rules you define (like filtering only for sign-ups from new users), and routes them to the right destination, such as a Lambda function that sends a welcome email.
In a traditional system, you would have to write code for each connection between services, making it hard to scale or change. EventBridge removes that burden by offering a central hub. You don’t need to manage servers or queues; it automatically scales to handle millions of events per second. EventBridge also supports events from SaaS partners like Zendesk or Shopify, and even from your own custom applications using custom event buses. The key insight is that EventBridge decouples event producers from event consumers, you can add new destinations without changing the source code. This makes your system more modular, resilient, and easier to evolve over time.
Think of it like a smart notification board at work. Anyone can post a note (event) on the board, and then everyone checks the board to see if there is something relevant to them. But EventBridge is smarter because it can read the note, apply your rules (like only showing notes about security), and then deliver a copy directly to the right person’s desk. This saves everyone from having to read every single note. That is exactly what EventBridge does for your cloud applications.
Full Technical Definition
Amazon EventBridge is a fully managed, serverless event bus service that enables event-driven architectures on AWS. It ingests events from AWS services, custom applications, and SaaS partners, then filters, transforms, and routes them to one or more targets based on user-defined rules. Events are represented as JSON objects adhering to a standard schema, which includes metadata such as source, detail-type, account, region, time, and the actual payload in the detail field. EventBridge supports three types of event buses: the default event bus that receives events from AWS services within the same account, custom event buses for custom applications, and partner event buses for third-party integrations through the AWS Partner Network.
EventBridge uses rules to match incoming events against event patterns. Event patterns are JSON structures that can include exact match conditions, prefix matching, numeric comparisons, and existence checks. When an event matches a rule, EventBridge can optionally invoke a target, which can be over 20 AWS services including Lambda functions, Step Functions state machines, SQS queues, SNS topics, Kinesis streams, and API Gateway endpoints. Rule evaluation is near real-time, typically within seconds. EventBridge also supports input transformers, which allow you to modify the event payload before sending it to the target, enabling you to extract only needed fields or add static values.
EventBridge provides a schema registry that stores event schemas and allows code generation for TypeScript, Python, Java, and other languages, reducing the effort to write correct event consumers. It integrates with AWS CloudTrail for auditing rule changes and can archive events with a configurable retention policy (up to 365 days) for replay purposes. This is critical for debugging or reprocessing failed events. EventBridge also offers cross-account event buses, where you can send events from one account to another, enabling centralized event management in multi-account architectures. The service scales automatically, handling hundreds of thousands of events per second without any capacity planning. Pricing is based on the number of events ingested and delivered, with a free tier of 100 million events per month.
Under the hood, EventBridge uses a distributed stream processing engine similar to Kinesis but abstracted away from the user. Events are durably stored across multiple Availability Zones. Delivery is at least once, meaning the same event might be delivered multiple times, so your targets should be idempotent. The service does not guarantee ordering, so for strict ordering needs you should use Kinesis or SQS FIFO queues. EventBridge also supports dead-letter queues (DLQ) per target, capturing events that fail to be delivered after retries, with SQS as the DLQ destination. This is a vital production feature for ensuring no event is ever silently lost.
Real-Life Example
Think about a large airport. Planes (events) arrive from all over the world (different sources like AWS services, custom apps, or SaaS partners). The airport has a central control tower (EventBridge). When a plane lands, its details are transmitted to the control tower, including the flight number, airline, arrival gate, and status. The control tower does not simply broadcast every detail to everyone in the airport; instead, it uses a set of rules. For example, a rule might say: if the flight is from United Airlines and needs gate A12, then alert the ground crew at gate A12. Another rule might say: if the flight is arriving from an international destination, notify customs and baggage handlers at terminal 3. The control tower (EventBridge) automatically reads the plane’s data, matches it against all rules, and routes the correct message to each target (ground crew, customs, baggage system).
Before EventBridge existed, you would have had to build a custom point-to-point communication system between each airline and each airport service. That means every time a new airline (source) joined, you would have needed to write new code to connect it to every service. With EventBridge, the airline simply sends one type of message to the control tower, and the control tower handles all routing. This is exactly how EventBridge decouples your services. If you later add a new target (like a new digital display for passengers), you just create a new rule in EventBridge without changing the airline’s (source’s) code.
The analogy extends to cross-account event buses. Imagine separate airports (AWS accounts) that share some flight data. EventBridge allows one airport to send event data to another airport’s control tower, enabling coordinated operations across the entire region. This real-life example shows how EventBridge reduces complexity, increases flexibility, and enables systems to grow without breaking existing connections.
Why This Term Matters
In modern cloud architectures, monolithic applications are being replaced by microservices and serverless components. These small, independent services need to communicate in a loosely coupled way to remain scalable and resilient. EventBridge provides the backbone for this communication pattern, known as event-driven architecture. Without EventBridge, you would need to build custom message queues, webhooks, or polling mechanisms. Each would require dedicated infrastructure, maintenance, and monitoring. EventBridge eliminates this operational overhead because it is fully managed.
For IT professionals, understanding EventBridge is essential because it appears in solutions for real-time data processing, application integration, and workflow automation. For example, an e-commerce platform might use EventBridge to trigger order validation, payment processing, inventory updates, and shipping notifications as a sequence of events. If any step fails, EventBridge can route the failure event to a DLQ for analysis. This makes debugging much easier compared to a tightly coupled pipeline.
Security is another reason EventBridge matters. EventBridge integrates with AWS Identity and Access Management (IAM) to control which sources can send events to which buses and which rules can invoke which targets. Cross-account event buses also require resource-based policies, enabling auditable and secure event sharing between teams or organizations. This is critical for enterprises with multiple AWS accounts.
Finally, EventBridge reduces costs by reducing the amount of custom code you need to write and maintain. Instead of building and scaling your own event routing infrastructure, you pay only for what you use. For IT professionals preparing for AWS certifications, EventBridge is a core service that appears in architecture design questions, especially those related to loose coupling and decoupling services. Knowing how to choose between EventBridge, SQS, and SNS is a distinguishing skill that demonstrates a deep understanding of AWS integration patterns.
How It Appears in Exam Questions
EventBridge appears in exam questions in three main patterns: scenario-based, configuration-based, and troubleshooting-based. In scenario-based questions, you are given a description of a company’s workload and asked to select the best service to integrate two or more components. For example, a company wants to automatically resize an image whenever a new image is uploaded to an S3 bucket. The question will offer options like S3 Event Notifications, SQS, SNS, and EventBridge. The correct answer is EventBridge if the requirement includes filtering (e.g., only .jpg files over 1 MB) or routing to multiple targets (e.g., resize function and a logging function). If only one simple action is needed, S3 Event Notifications might be sufficient, but the exam often favors EventBridge for its greater control.
Configuration-based questions will present a snippet of JSON or a console screenshot and ask you to identify a mistake. For instance, an event pattern might have an incorrect source field. The event pattern should be something like {"source": ["aws.s3"], "detail-type": ["Object Created"]}. If the exam candidate confuses source with detail-type, they will choose the wrong option. Another common trick is to ask about input transformers: you might be given an input path and input template, and asked what the transformed event will look like. This tests your understanding of how to extract and reshape data.
Troubleshooting questions will describe a situation where events are not reaching the target. The cause could be an incorrect IAM role on the target (Lambda function), a rule pattern that does not match incoming events, or a target that is in a different region (EventBridge is regional, so cross-region delivery requires a custom setup). Another frequent issue is that the dead-letter queue is not configured, so events are silently dropped. You will be asked to identify the most likely reason and choose a fix, such as adding a DLQ or verifying the rule pattern.
There are also cost-related questions. For example, a company is paying high costs for Lambda invocations triggered by every S3 event, but they only need to process a subset. The solution is to add filtering in the EventBridge rule to avoid unnecessary invocations. This type of question tests your ability to optimize cost using EventBridge’s built-in filtering capabilities. Overall, EventBridge questions require you to understand both the broad architectural role and the specific configuration details, so you must practice both concepts and hands-on exercises.
Practise EventBridge Questions
Test your understanding with exam-style practice questions.
Example Scenario
A company runs an online photo-sharing website. Users upload photos to an S3 bucket called my-photos-bucket. The company wants to perform three actions every time a new photo is uploaded: generate a thumbnail using a Lambda function, log the upload details to a DynamoDB table using another Lambda function, and send a notification to a moderation queue (SQS) if the photo is larger than 10 MB.
Without EventBridge, the company would have to configure S3 Event Notifications directly to each of these three targets, but S3 Event Notifications can only send to one destination per event type. They would need to build a custom fan-out mechanism, likely by sending every event to an SNS topic and then subscribing each target. However, SNS cannot filter events, so the Lambda functions would receive all events and have to discard ones they do not need, wasting compute time.
With EventBridge, the company creates a custom event bus or uses the default event bus. They first ensure that S3 delivers Object Created events to the default event bus (which happens automatically for the same account). Then they create three rules on that bus: Rule 1 matches all Object Created events with detail-type “Object Created” and routes them to a Lambda function for thumbnail generation. Rule 2 matches the same events but routes to a second Lambda that writes metadata to DynamoDB. Rule 3 matches only Object Created events where the detail.size field is greater than 10,000,000 bytes and routes them to an SQS queue for manual moderation.
This solution is efficient because each Lambda function receives only the events it needs. The thumbnail Lambda does not waste resources on photos larger than 10 MB because it simply processes everything. The moderation queue only receives large photos. The DynamoDB logger receives all events. If the company later decides to also log file names to CloudWatch, they simply add another rule without changing the existing ones. This scenario demonstrates how EventBridge provides flexible, filtered, multi-target routing with minimal configuration and zero code changes in the sources. The exam would ask, “Which service should the company use to achieve this with the least operational overhead?” The answer is EventBridge.
Common Mistakes
Believing EventBridge is only for AWS service events.
EventBridge also supports custom applications using custom event buses and SaaS partner integrations. Restricting it to AWS services misses a major part of its capability.
Remember that EventBridge has three types of event buses: default (AWS services), custom (your apps), and partner (third-party SaaS).
Thinking EventBridge guarantees event ordering.
EventBridge delivers events on a best-effort basis and does not guarantee order. For strict ordering, you need a FIFO queue.
Use SQS FIFO or Kinesis Data Streams when the sequence of events matters. EventBridge is for near real-time, unordered event routing.
Forgetting to configure a dead-letter queue for critical events.
Without a DLQ, events that fail delivery (e.g., missing target, permission errors) are silently dropped. This can cause data loss and hard-to-detect failures.
Always attach an SQS dead-letter queue to each target. This captures failed events for manual or automated reprocessing.
Confusing EventBridge event patterns with IAM policies.
Event patterns are JSON structures that match on event content, not IAM statements. Learners often write IAM-like conditions in event patterns, which do not work.
An event pattern matches on fields like source, detail-type, and detail. Use exact matches, prefixes, or numeric ranges. Do not use IAM syntax like “Condition” blocks.
Assuming EventBridge can directly invoke on-premise services.
EventBridge targets are limited to AWS services and HTTP endpoints (via API Gateway). For on-premise, you need a Lambda function or an EC2 instance as an intermediary.
If you must reach an on-premise system, route the event to a Lambda function that makes an HTTP call. Do not try to set an on-premise URL directly as a target.
Exam Trap — Don't Get Fooled
{"trap":"A question describes a company using EventBridge to route events to multiple Lambda functions. One Lambda function fails, and events for that function are lost. The candidate is asked to prevent data loss.
Many choose to add CloudWatch alarms, but the correct answer is to configure a dead-letter queue.","why_learners_choose_it":"CloudWatch alarms are familiar from monitoring scenarios. Learners often think monitoring is the solution to data loss, but alarms only notify you after the fact; they do not preserve the event."
,"how_to_avoid_it":"Understand that EventBridge automatically retries delivery for up to 24 hours, but if the target is unreachable beyond that, the event is dropped. A DLQ captures these undeliverable events. Configure a DLQ using an SQS queue per target.
Also note that the DLQ is attached at the target level, not the rule level."
Commonly Confused With
SNS is a pub/sub messaging service that pushes messages to multiple subscribers, but it does not filter events. Every subscriber receives every message. EventBridge supports rich filtering based on event content and can route different events to different targets in a single rule. SNS is simpler but less flexible.
If you want every error to go to email and every success to go to a database, EventBridge can filter by the status field. SNS would send all messages to both, and each target would have to filter itself.
SQS is a message queue for point-to-point communication, not a routing hub. Producers send messages to a queue, and consumers pull them. EventBridge pushes events to multiple targets in real-time and supports rich filtering. SQS is for buffering and decoupling producers and consumers, but not for broadcasting to multiple targets.
Use SQS when a single Lambda function needs to process work at its own pace. Use EventBridge when you want to trigger multiple actions immediately from one event.
Step Functions is a workflow orchestration service that coordinates multiple AWS services in a sequential or parallel manner. EventBridge is for event routing and does not manage state or execution flow. Step Functions accepts events from EventBridge as a trigger, but they serve different purposes: EventBridge routes events, Step Functions controls the sequence of actions.
EventBridge catches a new order event and routes it to a Step Functions state machine, which then runs a workflow for payment, inventory, and shipping.
Step-by-Step Breakdown
Event Source Emits an Event
An AWS service (like S3, EC2, or CloudWatch), a custom application, or a SaaS partner generates an event in JSON format. This event contains fields like source, detail-type, account, region, time, and the detail payload with the actual data. The source is responsible for sending the event to an event bus. For AWS services, this happens automatically to the default event bus in the same account. For custom apps, you must put the event to a custom event bus using the PutEvents API.
Event Arrives on an Event Bus
The event lands on the default, custom, or partner event bus. The event bus is a logical container that holds incoming events. Each AWS account has one default event bus automatically. You can create multiple custom buses to separate events from different applications. The event bus stores the event temporarily and begins evaluating all rules associated with that bus. The bus does not persist events beyond the evaluation window unless archiving is enabled.
Rule Matching
EventBridge evaluates each rule's event pattern against the event. The event pattern is a JSON expression that defines conditions such as matching source, detail-type, or specific fields in the detail. Only events that match the pattern are processed further. This filtering step is critical for reducing noise and ensuring only relevant events trigger actions. Rules can define multiple conditions, and you can use prefix or numeric matching for more precise control.
Input Transformation (Optional)
If a rule has an input transformer defined, EventBridge modifies the event payload before delivering it to the target. You can extract specific fields from the original event using an input path and combine them with static text or other values in an input template. This is often used to create a custom message format for the target, such as preparing a JSON payload that matches the target’s expected input. If no transformer is defined, the original event is passed as-is.
Delivery to Target with Retry and DLQ
EventBridge pushes the transformed event to the specified target (e.g., Lambda, SQS, SNS, Step Functions). If delivery fails, EventBridge retries for up to 24 hours with exponential backoff. If the event cannot be delivered after the retry period and a dead-letter queue (DLQ) is configured for that target, the event is sent to the DLQ (an SQS queue). Without a DLQ, the event is dropped. The target must have the appropriate IAM permissions to receive events from EventBridge.
Practical Mini-Lesson
EventBridge is a powerful service, but using it effectively in production requires understanding several practical aspects. First, always design your events to be self-contained. An event should include all the data the target needs to process it, avoiding the need for the target to fetch additional information. For example, if an event is triggered by a new S3 object, include the bucket name, object key, and size in the detail field. This reduces latency and makes the system more resilient because targets can operate independently.
Second, pay close attention to IAM permissions. The source (e.g., your custom application using PutEvents) must have permission to write to the event bus. The event bus itself must have a resource-based policy allowing the source to put events. The target must have a resource-based policy or IAM role that grants EventBridge permission to invoke it. For Lambda, you attach a resource-based policy to the function. For SQS, you attach a policy to the queue. Misconfiguring these permissions is the most common reason events do not reach their targets.
Third, use archiving and replay. EventBridge can archive all events for up to 365 days. This feature is invaluable for debugging and for reprocessing after a bug fix. For example, if a processing Lambda had a bug and failed to handle certain events, after fixing the bug, you can replay the archived events from that time range. This saves you from writing custom replay logic. However, archiving incurs storage costs, so you should set a reasonable retention period.
Fourth, monitor your EventBridge usage. Key CloudWatch metrics include IncomingEvents, MatchedEvents, FailedInvocations, and ThrottledEvents. If you see a high number of FailedInvocations, check the DLQ or enable CloudWatch Logs for the target. Also, be aware that EventBridge has soft quotas: 100 rules per bus, 5 targets per rule (you can request increases). Plan your architecture accordingly.
Finally, when building a serverless application, combine EventBridge with Step Functions for complex workflows. EventBridge triggers the state machine on an event, and the state machine orchestrates multiple services. This pattern is common in order processing, approval systems, and data ingestion pipelines. Always make your targets idempotent because EventBridge delivers at least once, and duplicates can occur. Using idempotency tokens and checking for duplicate events in DynamoDB or S3 is a best practice.
EventBridge Event Bus Architecture and Rules Evaluation
Amazon EventBridge is a serverless event bus service that enables you to connect your applications with data from a variety of sources. At its core, EventBridge ingests events from AWS services, custom applications, and third-party SaaS providers, then routes them to targets based on rules you define. Understanding the architecture of EventBridge is critical for the AWS Certified Solutions Architect Associate (SAA) and AWS Certified Developer Associate exams because it appears frequently in scenario-based questions about decoupling microservices, building event-driven architectures, and integrating with services like Lambda, Step Functions, and SQS.
An event bus is the central pipeline that receives events. EventBridge provides a default bus for your AWS account, which automatically receives events from many AWS services (e.g., EC2 state changes, CloudTrail, CodePipeline). You can also create custom event buses for your own applications, and partner event buses for SaaS events from providers like Datadog, PagerDuty, or Shopify. Each event bus is isolated to an account and Region, but you can send events across accounts using cross-account event buses – a key concept tested in the AWS Certified SysOps Administrator exam.
Events are JSON objects that have a structure defined by the EventBridge schema. The event schema includes metadata such as the source, detail-type, account, time, region, resources, and a detail field that contains the specific data. When an event arrives on a bus, EventBridge evaluates each rule in the bus in parallel. Rules are pattern-matching statements that specify which events should be routed to which targets. The pattern can match on fields like source, detail-type, or specific values in the detail object. For example, you can create a rule that sends all EC2 termination events to a Lambda function that performs cleanup.
One important behavior to understand for the exams is that EventBridge offers an event-driven, near-real-time delivery model. Events are delivered within milliseconds for high throughput, though there is no strict SLA for latency. Rules can have multiple targets (up to 5 per rule by default), and you can add input transformers to modify the event payload before sending it to the target. This is a critical feature for decoupling producers and consumers – the producer does not need to know the consumer's format.
EventBridge also supports event replay. If your target fails or you need to reprocess events for testing, you can set up an archive that stores all events (or filtered events) for up to 14 days. You can then replay them to any target. This is commonly tested in the AWS Certified Developer Associate exam as a way to handle transient failures and data recovery without custom code.
Another architectural component is the schema registry. EventBridge automatically discovers schemas for events from AWS and SaaS services, and you can create custom schemas for your own applications. The schema registry integrates with development tools like VS Code and allows you to generate code bindings in Java, Python, TypeScript, and other languages. This is a powerful feature for ensuring type safety in event-driven applications. In the SAA exam, you may be asked about schema registry as an alternative to manually defining event structures.
Finally, EventBridge interacts with IAM for permissions. To send events to a target, the rule must have a role that allows EventBridge to invoke the target. For cross-account event buses, you must also set up resource-based policies on the destination event bus. These policies are often a source of confusion, so the exams test whether you know that resource policies are defined on the event bus, not on the rule. Understanding these fundamental architecture patterns – buses, rules, targets, and schemas – is essential for exam success and for building resilient, event-driven systems on AWS.
EventBridge Pipes vs Event Buses: Choosing the Right Pattern
When designing event-driven architectures on AWS, you have two primary tools in EventBridge: Event Buses (the classic service now called EventBridge Bus) and EventBridge Pipes. Both are used for routing events, but they have distinct use cases, performance characteristics, and pricing models. The AWS Certified Solutions Architect Associate and AWS Certified Developer Associate exams frequently present scenarios where you must choose between them, or where you must combine them with other services like SQS, DynamoDB Streams, or Kinesis. This section explains the differences and provides a decision framework for the exam.
EventBridge Event Bus is a routing service. It receives events from multiple sources (including AWS services and custom applications) and routes them to multiple targets based on pattern-matching rules. The key feature is one-to-many routing: a single event can be delivered to multiple targets simultaneously, as long as each target has a rule that matches the event. Event buses are ideal for publishing events to many consumers. For example, an order-created event might be sent to a Lambda function that sends an email, a Step Function that processes payment, and an SQS queue for audit logging. In this case, the event bus acts as a central message hub.
EventBridge Pipes, introduced in late 2022, is a point-to-point integration service. It connects a source (such as SQS, DynamoDB Streams, Kinesis, or an MSK topic) to a single target (like a Step Function, Lambda, SQS, SNS, or another event bus) with optional filtering, enrichment, and transformation. Pipes are designed for high-throughput, single-purpose data pipelines. Unlike event buses, Pipes support ordered processing and exactly-once semantics for some sources (e.g., SQS). They also have built-in enrichment step: you can invoke a Lambda function or an API Gateway endpoint to add or modify data before it reaches the target. This is a powerful feature for data transformation without writing a separate Lambda function.
The exam often tests the following distinction: Use EventBus when you need to fan out events to multiple targets, or when you have many different event sources and consumers. Use Pipes when you have a single source and a single target, especially if you need ordering, high throughput, or enrichment. For example, if you want to process messages from an SQS queue using a Step Function, and you need to filter messages based on content before invoking the function, EventBridge Pipes is the better choice because it natively supports filtering and does not require a separate Lambda to poll the queue.
Another key difference is pricing. Event Buses charge per event ingested, per rule processed, and per cross-account event. EventBridge Pipes charge per million invocations (pipe executions) and per GB-second for enrichment. For high-volume, point-to-point streaming, Pipes are often more cost-effective because you are not paying for rules evaluation on every event. In the AWS Certified SysOps Administrator exam, you may be asked about cost optimization between these two patterns.
Consider a scenario from the SAA exam: You have an e-commerce platform with a DynamoDB table that records all orders. You need to send each new order to a fraud detection Lambda function, and also send order-summary events to a separate SNS topic for newsletters. Here, you should use both: use a DynamoDB Stream (source) with EventBridge Pipes to send orders to the Lambda function for fraud detection (single target), and also configure the DynamoDB Stream to send events to an EventBridge Bus via a Lambda trigger or a custom event integration, then have rules on the bus to fan out to SNS and other targets. However, a more common pattern found in exam questions is to use EventBridge Pipes when you are integrating DynamoDB Streams directly with a Step Function, because Pipes handle the polling, filtering, and enrichment in a managed way.
Finally, remember that EventBridge Bus and Pipes are not mutually exclusive; you can use both in the same architecture. For instance, an event bus can receive events from hundreds of services, and a rule on that bus can feed into a Pipe that enriches and then sends to a target. This layered approach is advanced but appears in real-world designs. The exam will test your understanding of when each tool is appropriate, so focus on the fundamental difference: Bus = many-to-many routing with pattern matching, Pipe = one-to-one pipeline with ordering, filtering, and enrichment. Mastering this distinction will help you answer many scenario-based questions correctly.
Memory Tip
EventBridge is the postal service of AWS: it sorts events (packages) by rules (address labels) and delivers them to targets (mailboxes) without you needing to build the trucks.
Learn This Topic Fully
This glossary page explains what EventBridge means. For a complete lesson with labs and practice, see the topic guide.
Covered in These Exams
Current Exam Context
Current exam versions that test this topic — use these objectives when studying.
Related Glossary Terms
A/B testing is a controlled experiment that compares two versions of a single variable to determine which one performs better against a predefined metric.
Two-factor authentication (2FA) is a security method that requires two different types of proof before granting access to an account or system.
An AAAA record is a DNS record that maps a domain name to an IPv6 address, allowing devices to find each other over the internet using the newer IP addressing system.
Quick Knowledge Check
1.A company wants to send EC2 instance state-change events to both a Lambda function for logging and an SQS queue for further processing. Which EventBridge feature should they use?
2.You need to process messages from an SQS queue in order, with exactly-once semantics, and enrich each message by calling an external API before sending to a Step Function. Which service should you use?
3.An EventBridge rule is configured to send events to a Lambda function. The Lambda function fails intermittently. How can the company reprocess all events from the last 5 days without recreating them?
4.A developer needs to allow a partner SaaS provider to send events into a custom event bus in their AWS account. What configuration is required?
5.Which of the following is a difference between EventBridge Event Bus and EventBridge Pipes?
6.A rule matches events with source: 'aws.ec2' and detail-type: 'EC2 Instance State-change Notification'. What must be added to the rule to route events to a Lambda function?
Frequently Asked Questions
Can EventBridge send events to a target in another AWS region?
EventBridge is regional, but you can send events to a target in another region by using a cross-region event bus or by routing the event to a Lambda function that then calls the target in the other region. There is no native cross-region target delivery.
What is the difference between the default event bus and a custom event bus?
The default event bus automatically receives events from AWS services in your account. Custom event buses are created by you to receive events from your own custom applications or from other accounts. Partner event buses are pre-created by AWS for SaaS partners.
How do I test an EventBridge rule without waiting for real events?
You can use the AWS Console’s “Test” feature for a rule, where you can send a sample event in JSON format to see if it matches the rule pattern. You can also use the AWS CLI’s test-event-pattern command or manually invoke PutEvents with a test event.
Does EventBridge preserve the order of events?
No, EventBridge does not guarantee ordering. Events may be delivered out of order. If you need strict ordering, use SQS FIFO or Kinesis Data Streams instead.
Can I use EventBridge to trigger a Lambda function in a different AWS account?
Yes, you can use cross-account event buses. The source account puts events to a custom event bus that has a resource policy allowing the target account to create rules. The target account can then have a rule that invokes a Lambda function in that account.
What happens if EventBridge cannot deliver an event to the target?
EventBridge retries delivery for up to 24 hours with exponential backoff. If it still fails and a dead-letter queue is configured, the event is sent to the DLQ. Without a DLQ, the event is dropped. You can also configure a CloudWatch alarm on the FailedInvocations metric to be notified.
Summary
Amazon EventBridge is a foundational service for building event-driven architectures on AWS. It provides a centralized event bus that decouples event producers from consumers, allowing you to route events from AWS services, custom applications, and SaaS partners to multiple targets based on flexible rules. Its ability to filter, transform, and route events with near real-time latency makes it far more advanced than simple pub/sub systems like SNS or polling-based integrations.
For IT professionals, and especially AWS certification candidates, EventBridge is a primary topic in the Solutions Architect Associate and Developer Associate exams, and it appears in SysOps and Cloud Practitioner exams as well. You must understand its three types of event buses, event patterns, input transformers, and the importance of dead-letter queues. Common exam traps include confusing EventBridge with SNS or SQS, forgetting about the DLQ, and assuming ordering guarantees.
In practice, EventBridge reduces operational overhead, improves scalability, and lowers costs by minimizing unnecessary function invocations and custom code. Always design your targets to be idempotent, implement DLQs for critical events, and use archiving for replay capabilities. By mastering EventBridge, you gain the ability to build resilient, loosely coupled systems that can evolve without breaking existing integrations. Whether you are studying for an exam or building real-world applications, EventBridge is a skill that will serve you well.