This topic describes the types of Anti-DDoS events that CloudMonitor or Cloud Config monitors and can be published to EventBridge.
Event types
The following table describes the types of Anti-DDoS events that can be published to EventBridge.
Event type | Value of the type parameter |
Blackhole filtering occurs | ddos:CloudMonitor:DdosbgpEventBlackhole |
Traffic scrubbing occurs | ddos:CloudMonitor:DdosbgpEventClean |
Blackhole filtering is in progress | ddos:CloudMonitor:DdoscooEventBlackholeAdd |
Blackhole filtering stops | ddos:CloudMonitor:DdoscooEventBlackholeEnd |
A Layer-4 HTTP flood attack is in progress | ddos:CloudMonitor:DdoscooEventCc4Add |
A Layer-4 HTTP flood attack ends | ddos:CloudMonitor:DdoscooEventCc4End |
A Layer-7 HTTP flood attack is in progress | ddos:CloudMonitor:DdoscooEventCc7Add |
A Layer-7 HTTP flood attack ends | ddos:CloudMonitor:DdoscooEventCc7End |
Traffic scrubbing is in progress | ddos:CloudMonitor:DdoscooEventDefenseAdd |
Traffic scrubbing stops | ddos:CloudMonitor:DdoscooEventDefenseEnd |
Blackhole filtering is in progress | ddos:CloudMonitor:DdosdipEventBlackholeAdd |
Blackhole filtering stops | ddos:CloudMonitor:DdosdipEventBlackholeEnd |
A Layer-4 HTTP flood attack is in progress | ddos:CloudMonitor:DdosdipEventCc4Add |
A Layer-4 HTTP flood attack ends | ddos:CloudMonitor:DdosdipEventCc4End |
A Layer-7 HTTP flood attack is in progress | ddos:CloudMonitor:DdosdipEventCc7Add |
A Layer-7 HTTP flood attack ends | ddos:CloudMonitor:DdosdipEventCc7End |
Traffic scrubbing is in progress | ddos:CloudMonitor:DdosdipEventDefenseAdd |
Traffic scrubbing stops | ddos:CloudMonitor:DdosdipEventDefenseEnd |
Resource change logs are delivered | ddos:Config:ConfigurationItemChangeNotification |
A notification that a resource is evaluated as non-compliant is sent | ddos:Config:NonCompliantNotification |
For more information about the parameters defined in the CloudEvents specification, see Overview.