EventBridge global endpoints should have event replication enabled

How to fix it

• Can break clients: Every custom event is then processed in both Regions, so consumers that are not idempotent can act on the same event twice.

In the console

EventBridge → Global endpoints → the endpoint → Edit → Event replication

Event replication enabled

Selected

Execution role

Create a new role for this specific resource, or an existing role EventBridge can use for replication

With the AWS CLI

aws events update-endpoint --name <endpoint-name> --replication-config State=ENABLED --role-arn <replication-role-arn> --region <region>

With Terraform

resource "aws_cloudwatch_event_endpoint" "this" {
  name     = var.endpoint_name
  role_arn = var.replication_role_arn

  event_bus {
    event_bus_arn = var.primary_event_bus_arn
  }
  event_bus {
    event_bus_arn = var.secondary_event_bus_arn
  }

  replication_config {
    state = "ENABLED"
  }

  routing_config {
    failover_config {
      primary {
        health_check = var.health_check_arn
      }
      secondary {
        route = var.secondary_region
      }
    }
  }
}