This gist contains code from eventbridge.tf, which is part of the blog-amazon-macie-custom-eventbridge-events repository.

blog-amazon-macie-custom-eventbridge-eventbridge_lambda.tf

# EventBridge rule to capture the custom Macie job status change events
# published by the Lambda function
resource "aws_cloudwatch_event_rule" "macie_job_status" {
  name        = local.eventbridge.rule_name
  description = local.eventbridge.rule_description

  event_pattern = jsonencode({
    source      = [local.eventbridge.event_source]
    detail-type = [local.eventbridge.detail_type]
  })
}

# EventBridge target - send matching events to the SNS topic
resource "aws_cloudwatch_event_target" "sns" {
  rule      = aws_cloudwatch_event_rule.macie_job_status.name
  target_id = "macie-job-status-sns-target"
  arn       = aws_sns_topic.macie_notifications.arn

  input_transformer {
    input_paths = {
      jobId      = "$.detail.jobId"
      jobName    = "$.detail.jobName"
      eventType  = "$.detail.eventType"
      occurredAt = "$.detail.occurredAt"
    }

    input_template = "\"Amazon Macie Classification Job Status Change:\\n\\nJob Name: <jobName>\\nJob ID: <jobId>\\nEvent Type: <eventType>\\nOccurred At: <occurredAt>\""
  }
}