- 1.0.5 -- 2025-09-25

- add reources to the GD event rule to limit it to the specific bucket. If there are multiple deployments in the same account, they will all get the GD events otherwise.
terraform-modules · Sep 24, 2025 · 4164f72 · 4164f72
1 parent 2c0e302
commit 4164f72
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -16,3 +16,7 @@
 
 - 1.0.4 -- 2025-08-19
   - change dlq_event_age default from 3600 to 300
+
+- 1.0.5 -- 2025-09-25
+  - add reources to the GD event rule to limit it to the specific bucket.  If there are multiple deployments in the same account,
+    they will all get the GD events otherwise.
diff --git a/eventbridge.guardduty.tf b/eventbridge.guardduty.tf
@@ -76,6 +76,7 @@ module "eventbridge_guardduty" {
       event_pattern = jsonencode({
         "source"      = ["aws.guardduty"]
         "detail-type" = ["GuardDuty Malware Protection Object Scan Result"]
+        "resources" : [format("%v/*", [module.files_in.s3_bucket_arn])]
       })
     }
   }

diff --git a/version.tf b/version.tf
@@ -1,4 +1,4 @@
 locals {
   _module_name    = "aws-app-ditd-darhts-s3-transfer"
-  _module_version = "1.0.4"
+  _module_version = "1.0.5"
 }