AWSTemplateFormatVersion: '2010-09-09'
Resources:
  EventRule:
    Type: 'AWS::Events::Rule'
    Properties:
      Name: detect-network-acl-changes
      Description: >-
        A CloudWatch Event Rule that detects changes to network ACLs and
        publishes change events to an SNS topic for notification.
      State: ENABLED
      EventPattern:
        detail-type:
          - AWS API Call via CloudTrail
        detail:
          eventSource:
            - ec2.amazonaws.com
          eventName:
            - CreateNetworkAcl
            - CreateNetworkAclEntry
            - DeleteNetworkAcl
            - DeleteNetworkAclEntry
            - ReplaceNetworkAclEntry
            - ReplaceNetworkAclAssociation
      Targets:
        - Arn: ''
          Id: target-id1
Parameters: {}
Metadata: {}
Conditions: {}