aws v5.43.7 - Global Event Handlers now deliver real-time CMDB updates for all event types across regions

Apr 27, 2026GuardrailsMods

Bug fixes

  • Fixed an issue where AWS > Turbot > Event Handlers [Global] deployments were not forwarding certain event types from non-primary regions to the primary region's event bus. Only events with the AWS API Call via CloudTrail detail-type were being forwarded, so events such as EBS Volume Notification, EC2 Instance State-change Notification, AWS Service Event via CloudTrail (AppStream CreateImage, QuickSight, Organizations), and AWS Console Action via CloudTrail (Billing Console region enable/disable) emitted in non-primary regions were not reaching Guardrails. The non-primary forwarding rule now covers all detail-types defined in the configured event patterns, so Global Event Handlers deployments receive real-time CMDB updates for these events from every region.
  • Added AttachedPolicies in definitions on account, organizationRoot, and organizationalUnit resource data schemas. Enables downstream mods to query attached SCPs, RCPs, and other organization policies via typed GraphQL field access instead of reading raw data.