AWS lambda documentation change
Summary
Updated CloudWatch Logs documentation with clearer language about default log group configuration, custom logging, and log viewing methods. Renamed sections to 'Log-level filtering' and 'Configure CloudWatch function logs'.
Security assessment
The changes focus on improving clarity and structure of logging documentation. While logging practices can indirectly support security monitoring, there is no explicit mention of security vulnerabilities, access controls, encryption, or incident response. The updates are operational/functional in nature.
Diff
diff --git a/lambda/latest/dg/monitoring-cloudwatchlogs.md b/lambda/latest/dg/monitoring-cloudwatchlogs.md index 371c61e98..46089ac03 100644 --- a//lambda/latest/dg/monitoring-cloudwatchlogs.md +++ b//lambda/latest/dg/monitoring-cloudwatchlogs.md @@ -7 +7 @@ Required IAM permissionsPricing -# Using CloudWatch Logs with Lambda +# Sending Lambda function logs to CloudWatch Logs @@ -9 +9 @@ Required IAM permissionsPricing -AWS Lambda automatically monitors Lambda functions on your behalf to help you troubleshoot failures in your functions. As long as your function's [execution role](./lambda-intro-execution-role.html) has the necessary permissions, Lambda captures logs for all requests handled by your function and sends them to Amazon CloudWatch Logs. +By default, Lambda automatically captures logs for all function invocations and sends them to CloudWatch Logs, provided your function's execution role has the necessary permissions. These logs are, by default, stored in a log group named /aws/lambda/`<function-name>`. To enhance debugging, you can insert custom logging statements into your code, which Lambda will seamlessly integrate with CloudWatch Logs. If needed, you can configure your function to send logs to a different group using the Lambda console, AWS CLI, or Lambda API. See [Configuring CloudWatch log groups](./monitoring-cloudwatchlogs-loggroups.html) to learn more. @@ -11,5 +11 @@ AWS Lambda automatically monitors Lambda functions on your behalf to help you tr -You can insert logging statements into your code to help you validate that your code is working as expected. Lambda automatically integrates with CloudWatch Logs and sends all logs from your code to a CloudWatch logs group associated with a Lambda function. - -By default, Lambda sends logs to a log group named `/aws/lambda/<function name>`. If you want your function to send logs to another group, you can configure this using the Lambda console, the AWS Command Line Interface (AWS CLI) or the Lambda API. See [Configuring CloudWatch log groups](./monitoring-cloudwatchlogs-advanced.html#monitoring-cloudwatchlogs-loggroups) to learn more. - -You can view logs for Lambda functions using the Lambda console, the CloudWatch console, the AWS Command Line Interface (AWS CLI), or the CloudWatch API. +You can view logs for Lambda functions using the Lambda console, the CloudWatch console, the AWS Command Line Interface (AWS CLI), or the CloudWatch API. For more information, see to [Viewing CloudWatch logs for Lambda functions](./monitoring-cloudwatchlogs-view.html). @@ -53 +49 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Metric types +Log-level filtering @@ -55 +51 @@ Metric types -Configure function logs +Configure CloudWatch function logs