EventBridge rule not triggering for Genesys Cloud user:updated events

I’ve got a Terraform setup deploying an EventBridge rule to catch Genesys Cloud events, but nothing is landing in the SQS queue. The integration looks solid on the AWS side, and I can see the eventbridge:send logs in the Genesys Cloud admin UI, so the push is definitely happening.

Here’s the rule pattern I’m using in the TF config:

pattern = jsonencode({
 "source" = ["com.genesys.cloud"]
 "detail-type" = ["User Updated"]
 "detail" = {
 "event.type" = ["user:updated"]
 }
})

The weird part is that user:created events work fine with a similar rule. I checked the raw JSON payload in the dead-letter queue for a test update, and the detail-type is actually User Updated (capitalized), but the event.type inside the detail object is user:updated.

Is there a mismatch in how the provider maps the detail-type string versus the internal event type? Or am I missing a filter criterion in the JSON structure? I’ve tried matching on just the source and detail-type, but still no luck with the updated events.