Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

AWS::EventSchemas::RegistryPolicy

Focus mode
AWS::EventSchemas::RegistryPolicy - AWS CloudFormation
Filter View

Use the AWS::EventSchemas::RegistryPolicy resource to specify resource-based policies for an EventBridge Schema Registry.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::EventSchemas::RegistryPolicy", "Properties" : { "Policy" : Json, "RegistryName" : String, "RevisionId" : String } }

YAML

Type: AWS::EventSchemas::RegistryPolicy Properties: Policy: Json RegistryName: String RevisionId: String

Properties

Policy

A resource-based policy.

Required: Yes

Type: Json

Update requires: No interruption

RegistryName

The name of the registry.

Required: Yes

Type: String

Update requires: No interruption

RevisionId

The revision ID of the policy.

Required: No

Type: String

Update requires: No interruption

Return values

Ref

When you provide the logical ID of this resource to the Ref intrinsic function, Ref the name of the registry.

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

Id

The ID of the policy.

Examples

YAML

Resources: RegistryPolicy: Type: AWS::EventSchemas::RegistryPolicy Properties: RegistryName: registryName Policy: Version: 2012-10-17 Statement: Sid: 1 Effect: Allow Principal: AWS: arn:aws:iam::012345678901:user/TestAccountForRegistryPolicy Action: - schemas:DescribeRegistry - schemas:CreateSchema Resource: registryArn

YAML

Resources: RegistryPolicy: Type: 'AWS::EventSchemas::RegistryPolicy' Properties: RegistryName: 'MyRegistry' Policy: Version: '2012-10-17' Statement: - Sid: 'Test' Effect: 'Allow' Action: - 'schemas:*' Principal: AWS: - '109876543210' Resource: - 'arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry' - 'arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*'

JSON

{ "Resources": { "RegistryPolicy": { "Type": "AWS::EventSchemas::RegistryPolicy", "Properties": { "RegistryName": "MyRegistry", "Policy": { "Version": "2012-10-17", "Statement": [ { "Sid": "Test", "Effect": "Allow", "Action": [ "schemas:*" ], "Principal": { "AWS": [ "109876543210" ] }, "Resource": [ "arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry", "arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*" ] } ] } } } } }

On this page

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.