Build1 publisher2 min readPublished
AWS lets one EventBridge custom bus serve every account in an organization through RAM
AWS launched an EventBridge custom bus that a whole organization shares through RAM, with 10,000 subscribers per bus by default. Platform teams can move onto it and retire the cross-account rules and bus-to-bus hops they wired by hand.
The Engineer · Build desk

What happened
- AWS introduced an enhanced custom event bus in EventBridge that a single organization can deploy once and share across all of its AWS accounts.
- The bus is shared through AWS Resource Access Manager, with an account, organizational unit, organization, or IAM role or user as the principal.
- Subscribing teams create their own Subscriptions on the shared bus, and the default per-bus subscriber quota can be raised on request.
- Publishers that need events delivered in sequence attach an EventGroupId when they send them.
- The classic custom event bus remains available and still routes events with rules and targets.
Compiled by The EngineerSomething wrong?How this is made
Why it matters
- decision Classic buses keep working, so migration can go one workload at a time. Each team decides when its rules and targets become Subscriptions on the shared bus.
- exposure Access to the event backbone is now set by the RAM share. A share to an organization or OU principal covers every account under it, so its scope deserves the same review as an IAM policy.
- cost Cost allocation lets a platform team attribute event spend to the teams that publish and subscribe, so one hosting account no longer has to absorb the whole bus.
- capability Ordered workloads such as location feeds can stay on EventBridge. Teams previously had to build workarounds for them or adopt a different technology.
AWS's launch post describes the setup it is replacing. Its best practice puts each team in a separate account. Moving events between those accounts meant several buses joined by cross-account rules or bus-to-bus configurations [1]. The post lists what followed: platform teams lost sight of who subscribed to which events, cross-account and bus-to-bus routing charges compounded, and teams that needed ordering built workarounds or moved to other technologies [9]. In a candid line for a launch post, AWS wrote that the workaround "reintroduces the operational complexity that serverless architectures are meant to eliminate" [14].
The cross-account part of the fix is a permissions change. The post's author wrote: "Sharing uses AWS Resource Access Manager (AWS RAM), so I did not have to set up cross-account permissions or bus-to-bus routing myself" [5]. I think reusing RAM is the right design. The bus gets its sharing model from an existing AWS service. EventBridge does not have to invent a cross-account permission scheme of its own.
On the new bus, publishers send events, subscribers consume only what they need, and EventBridge handles ordering, retention, routing and delivery [15]. AWS says platform teams keep visibility into all event flows and fine-grained control over who can publish and consume [10]. It also says the larger subscriber quota cuts the fragmentation that happens when limits force a split across buses [7]. That visibility covers the shared bus. A rule left on a classic bus in a team account keeps routing through rules and targets [3], and those flows sit outside the shared bus.
Ordering is where teams have the most homemade code to reconsider. AWS's example is a logistics application where driver location updates must arrive in sequence, because out-of-sequence events make routing algorithms act on stale data [11]. Ordered and unordered consumers can run on the same bus [12]. A team can delete its own sequencer once the documentation answers three questions. Does order hold per group for every subscriber? What happens to later events in a group when one delivery fails? How much throughput does a single group get?
AWS says the new pricing model "delivers improved economics at scale" and adds cost allocation for publishers and subscribers [13]. The post does not include per-event prices. For the saving to transfer to a given estate, the new per-event charge has to come in below what that estate pays today for an event plus every cross-account hop it takes. Estates that fan events through several team buses stand to gain the most. A two-account setup with one forwarding rule may see little change.
What to watch
- Published per-event prices for the enhanced bus, compared with a classic bus plus its cross-account and bus-to-bus routing charges.
- Documentation of EventGroupId semantics: ordering scope across subscribers, behavior after a failed delivery, and throughput per group.
- Any AWS tooling that converts classic-bus rules and targets into Subscriptions on a shared bus.