CloudWatch Log Integration (legacy)

We recommend our latest CloudWatch integration for a structured, modernized log delivery experience via OpenTelemetry that uses IAM role assumption instead of access keys.

This integration ships broker logs from your CloudAMQP cluster to AWS CloudWatch Logs using an IAM user with programmatic access via our legacy log-forwarding service.

Link: https://aws.amazon.com/cloudwatch

Prerequisites

Create an IAM user with programmatic access and attach a policy that grants the following permissions:

CreateLogGroup
CreateLogStream
DescribeLogStreams
PutLogEvents

To use the optional retention and tagging settings, also add:

PutRetentionPolicy
DeleteRetentionPolicy
TagResource

Setting up in the CloudAMQP console

Open the CloudAMQP console, go to Integrations → Add log integration → CloudWatch, and fill in the following fields:

Region: The AWS region where your log group is located, e.g. us-east-1
Access Key: The Access Key ID of the IAM user you created.
Secret Key: The Secret Access Key of the IAM user you created.
Retention (optional): Number of days to retain log events in the CloudAMQP log group.
Tags (optional): Comma-separated key=value pairs to tag the CloudAMQP log group.

Click Save to activate the integration. Logs will begin shipping within a few minutes.

← Back to Log Integrations

← Logs

Firewall →