CloudWatch Logs

For a newer integration that uses IAM role assumption (no access keys required), see CloudWatch log integration (OTel).

This integration ships broker logs from your CloudAMQP cluster to AWS CloudWatch Logs using an IAM user with programmatic access.

Link: https://aws.amazon.com/cloudwatch

Prerequisites

Create an IAM user with programmatic access and attach a policy that grants the following permissions:

• CreateLogGroup
• CreateLogStream
• DescribeLogStreams
• PutLogEvents

To use the optional retention and tagging settings, also add:

• PutRetentionPolicy
• DeleteRetentionPolicy
• TagResource

Setting up in the CloudAMQP console

Open the CloudAMQP console, go to Integrations → Add log integration → CloudWatch, and fill in the following fields:

Region

The AWS region where your log group is located, e.g. us-east-1

Access Key

The Access Key ID of the IAM user you created.

Secret Key

The Secret Access Key of the IAM user you created.

Retention (optional)

Number of days to retain log events in the CloudAMQP log group.

Tags (optional)

Comma-separated key=value pairs to tag the CloudAMQP log group.

Click Save to activate the integration. Logs will begin shipping within a few minutes.

← Back to Log Integrations