AWS AmazonCloudWatch documentation change
Summary
Replaced log source table with an icon-based bullet list showing AWS services that send logs to CloudWatch. Removed technical details about log types and destination permissions.
Security assessment
The change is purely presentational - converting a technical table into a visual service list with icons. No security vulnerabilities, configurations, or features are discussed or modified. The removal of permission/destination details actually reduces security-relevant information.
Diff
diff --git a/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md b/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md index dfb721337..45ed9b188 100644 --- a//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md +++ b//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md @@ -17,82 +17,82 @@ For services that require these permissions, there are two versions of the permi -Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure-CWL.html) | [Logs sent to Amazon S3](./AWS-logs-infrastructure-S3.html) | [Logs sent to Firehose](./AWS-logs-infrastructure-Firehose.html) | [Traces sent to X-Ray](./AWS-logs-infrastructure-V2-XRayTraces.html) ----|---|---|---|---|--- -[ Amazon API Gateway access logs](https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[AWS AppSync logs](https://docs.aws.amazon.com/appsync/latest/devguide/monitoring.html) | Custom logs | Supported | | | -[ Amazon Aurora MySQL logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.CloudWatch.html) | Custom logs | Supported | | | -[Amazon Bedrock Knowledge bases logging](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-bases-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[Amazon Bedrock Agent logging](https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[Amazon Bedrock AgentCore Runtime](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[Amazon Bedrock AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[Amazon Bedrock AgentCore Identity](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[Amazon Bedrock AgentCore Memory](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[Amazon Bedrock AgentCore Tools](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/built-in-tools.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[ Amazon Chime media quality metric logs and SIP message logs](https://docs.aws.amazon.com/chime/latest/ag/monitoring-cloudwatch.html#cw-logs) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[ CloudFront: access logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS CloudHSM audit logs](https://docs.aws.amazon.com/cloudhsm/latest/userguide/get-hsm-audit-logs-using-cloudwatch.html) | Custom logs | Supported | | | -[ CloudWatch Evidently evaluation event logs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-datastorage.html#CloudWatch-Evidently-datastorage-logformat) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[ CloudWatch Internet Monitor logs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-view-cw-tools.S3_athena.html) | Vended logs | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[ CloudTrail logs](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/monitor-cloudtrail-log-files-with-cloudwatch-logs.html) | Custom logs | Supported | | | -[AWS CodeBuild logs](https://docs.aws.amazon.com/codebuild/latest/userguide/getting-started-build-log-console.html) | Custom logs | Supported | | | -[Amazon CodeWhisperer event logs](https://docs.aws.amazon.com/eventbridge/latest/ref/events-ref-codewhisperer.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[Amazon Cognito logs](https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[Amazon Connect logs](https://docs.aws.amazon.com/connect/latest/adminguide/logging-and-monitoring.html) | Custom logs | Supported | | | -[AWS DataSync logs](https://docs.aws.amazon.com/datasync/latest/userguide/monitor-datasync.html#cloudwatchlogs) | Custom logs | Supported | | | -[AWS DevOps Agent logs](https://docs.aws.amazon.com/devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-vended-logs-and-metrics.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon ElastiCache (Redis OSS) logs](https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/Log_Delivery.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS Elastic Beanstalk logs](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.cloudwatchlogs.html) | Custom logs | Supported | | | -[ Amazon Elastic Container Service logs](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_cloudwatch_logs.html) | Custom logs | Supported | | | -[ Amazon Elastic Kubernetes Service Auto Mode logs](https://docs.aws.amazon.com/eks/latest/userguide/auto-managed-component-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Elastic Kubernetes Service control plane logs](https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html) | Vended logs | Supported | | | -[AWS Elemental MediaPackage access logs](https://docs.aws.amazon.com/mediapackage/latest/ug/access-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS Elemental MediaTailor logs](https://docs.aws.amazon.com/mediatailor/latest/ug/monitoring-cw-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS Entity Resolution logs](https://docs.aws.amazon.com/entityresolution/latest/userguide/what-is-service.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[Amazon EventBridge Pipes logging](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[Amazon EventBridge event buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS Fargate logs](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html) | Custom logs | Supported | | | -[AWS Fault Injection Service experiment logs](https://docs.aws.amazon.com/fis/latest/userguide/monitoring-logging.html) | Vended logs | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[Amazon FinSpace](https://docs.aws.amazon.com/finspace/latest/userguide/finspace-what-is.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS Global Accelerator flow logs](https://docs.aws.amazon.com/global-accelerator/latest/dg/monitoring-global-accelerator.flow-logs.html) | Vended logs | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[AWS Glue job logs](https://docs.aws.amazon.com/glue/latest/dg/monitor-continuous-logging.html) | Custom logs | Supported | | | -[ IAM Identity Center error logs](https://docs.aws.amazon.com/singlesignon/latest/userguide/logging-ad-sync-errors.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Interactive Video Service chat logs](https://docs.aws.amazon.com/ivs/latest/LowLatencyUserGuide/chat-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS IoT logs](https://docs.aws.amazon.com/iot/latest/developerguide/cloud-watch-logs.html) | Custom logs | Supported | | | -[AWS IoT FleetWise logs](https://docs.aws.amazon.com/iot-fleetwise/latest/developerguide/logging-cw.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS Lambda logs](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-cloudwatchlogs.html) | Vended logs | Supported | Supported | Supported | -[ Amazon Macie logs](https://docs.aws.amazon.com/macie/latest/user/discovery-jobs-monitor-cw-logs.html) | Custom logs | Supported | | | -[ Amazon SES logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS Mainframe Modernization](https://docs.aws.amazon.com/m2/latest/userguide/what-is-m2.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[ Amazon Managed Service for Prometheus logs](https://docs.aws.amazon.com/prometheus/latest/userguide/CW-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[ Amazon MSK broker logs](https://docs.aws.amazon.com/msk/latest/developerguide/msk-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[ Amazon MSK Connect logs](https://docs.aws.amazon.com/msk/latest/developerguide/msk-connect-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[ Amazon MQ logs](https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/configure-logging-monitoring-activemq.html) | Custom logs | Supported | | | -[AWS Network Firewall logs](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS Network Firewall Proxy logs](https://docs.aws.amazon.com/network-firewall/latest/developerguide/proxy-logging-and-monitoring.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Network Load Balancer access logs](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ OpenSearch logs](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createdomain-configure-slow-logs.html) | Custom logs | Supported | | | -[ Amazon OpenSearch Service ingestion logs](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-pipeline-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/monitoring-overview.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Q Business connector logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connectors-list.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Q Business conversation logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/cw-logs-enable-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Quick chat and feedback logs](https://docs.aws.amazon.com/quicksuite/latest/userguide/monitoring-quicksuite-chat-feedback-cloudwatch.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Relational Database ServicePostgreSQL logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Concepts.PostgreSQL.html#USER_LogAccess.PostgreSQL.PublishtoCloudWatchLogs) | Custom logs | Supported | | | -[AWS RTB Fabric](https://docs.aws.amazon.com/rtb-fabric/latest/userguide/what-is-rtb-fabric.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | | | -[AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub-v2.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | | | -[ Amazon Route 53 public DNS query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/logging-monitoring.html) | Vended logs | Supported | | | -[ Amazon Route 53 resolver query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-query-logs-choosing-target-resource.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[ Amazon SageMaker AI events](https://docs.aws.amazon.com/sagemaker/latest/dg/logging-cloudwatch.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[ Amazon SageMaker AI worker events](https://docs.aws.amazon.com/sagemaker/latest/dg/workteam-private-tracking.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[AWS Site-to_Site VPN logs](https://docs.aws.amazon.com/vpn/latest/s2svpn/monitoring-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[Amazon Simple Email Service logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[ Amazon Simple Notification Service logs](https://docs.aws.amazon.com/sns/latest/dg/sms_stats_cloudwatch.html#sns-viewing-cloudwatch-logs) | Custom logs | Supported | | | -[ Amazon Simple Notification Service data protection policy logs](https://docs.aws.amazon.com/sns/latest/dg/sns-message-data-protection-operations.html) | Custom logs | Supported | | | -[ EC2 Spot Instance data feed files](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-data-feeds.html) | Vended logs | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | -[AWS Step Functions Express Workflow and Standard Workflow logs](https://docs.aws.amazon.com/step-functions/latest/dg/cw-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[ Storage Gateway audit logs and health logs](https://docs.aws.amazon.com/storagegateway/latest/userguide/monitoring-file-gateway.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | | -[AWS Transfer Family logs](https://docs.aws.amazon.com/transfer/latest/userguide/structured-logging.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[AWS Verified Access logs](https://docs.aws.amazon.com/verified-access/latest/ug/access-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[ Amazon Virtual Private Cloud flow logs](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html) | Vended logs | Supported | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[Amazon VPC Lattice access logs](https://docs.aws.amazon.com/vpc-lattice/latest/ug/monitoring-access-logs.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | -[Amazon VPC Route Server](https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | -[AWS WAF logs](https://docs.aws.amazon.com/waf/latest/developerguide/logging-destinations.html) | Vended logs | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | Supported | -[Amazon WorkMail audit logs](https://docs.aws.amazon.com/workmail/latest/adminguide/monitoring-audit-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | + * [Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html) + * [AWS AppSync](https://docs.aws.amazon.com/appsync/latest/devguide/monitoring.html) + * [Amazon Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.CloudWatch.html) + * [Amazon Bedrock Knowledge Bases](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-bases-logging.html) + * [Amazon Bedrock Agents](https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html) + * [Amazon Bedrock AgentCore Runtime](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html) + * [Amazon Bedrock AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html) + * [Amazon Bedrock AgentCore Identity](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity.html) + * [Amazon Bedrock AgentCore Memory](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory.html) + * [Amazon Bedrock AgentCore Tools](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/built-in-tools.html) + * [Amazon Chime](https://docs.aws.amazon.com/chime/latest/ag/monitoring-cloudwatch.html#cw-logs) + * [Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) + * [AWS CloudHSM](https://docs.aws.amazon.com/cloudhsm/latest/userguide/get-hsm-audit-logs-using-cloudwatch.html) + * [CloudWatch Evidently](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-datastorage.html#CloudWatch-Evidently-datastorage-logformat) + * [CloudWatch Internet Monitor](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-view-cw-tools.S3_athena.html) + * [AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/monitor-cloudtrail-log-files-with-cloudwatch-logs.html) + * [AWS CodeBuild](https://docs.aws.amazon.com/codebuild/latest/userguide/getting-started-build-log-console.html) + * [Amazon CodeWhisperer](https://docs.aws.amazon.com/eventbridge/latest/ref/events-ref-codewhisperer.html) + * [Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html) + * [Amazon Connect](https://docs.aws.amazon.com/connect/latest/adminguide/logging-and-monitoring.html) + * [AWS DataSync](https://docs.aws.amazon.com/datasync/latest/userguide/monitor-datasync.html#cloudwatchlogs) + * [AWS DevOps Agent](https://docs.aws.amazon.com/devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-vended-logs-and-metrics.html) + * [Amazon ElastiCache (Redis OSS)](https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/Log_Delivery.html) + * [AWS Elastic Beanstalk](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.cloudwatchlogs.html) + * [Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_cloudwatch_logs.html) + * [Amazon EKS Auto Mode](https://docs.aws.amazon.com/eks/latest/userguide/auto-managed-component-logs.html) + * [Amazon EKS Control Plane](https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html) + * [AWS Elemental MediaPackage](https://docs.aws.amazon.com/mediapackage/latest/ug/access-logging.html) + * [AWS Elemental MediaTailor](https://docs.aws.amazon.com/mediatailor/latest/ug/monitoring-cw-logs.html) + * [AWS Entity Resolution](https://docs.aws.amazon.com/entityresolution/latest/userguide/what-is-service.html) + * [Amazon EventBridge Pipes](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) + * [Amazon EventBridge Event Buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) + * [AWS Fargate](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html) + * [AWS Fault Injection Service](https://docs.aws.amazon.com/fis/latest/userguide/monitoring-logging.html) + * [Amazon FinSpace](https://docs.aws.amazon.com/finspace/latest/userguide/finspace-what-is.html) + * [AWS Global Accelerator](https://docs.aws.amazon.com/global-accelerator/latest/dg/monitoring-global-accelerator.flow-logs.html) + * [AWS Glue](https://docs.aws.amazon.com/glue/latest/dg/monitor-continuous-logging.html) + * [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/logging-ad-sync-errors.html) + * [Amazon IVS Chat](https://docs.aws.amazon.com/ivs/latest/LowLatencyUserGuide/chat-logging.html) + * [AWS IoT](https://docs.aws.amazon.com/iot/latest/developerguide/cloud-watch-logs.html) + * [AWS IoT FleetWise](https://docs.aws.amazon.com/iot-fleetwise/latest/developerguide/logging-cw.html) + * [AWS Lambda](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-cloudwatchlogs.html) + * [Amazon Macie](https://docs.aws.amazon.com/macie/latest/user/discovery-jobs-monitor-cw-logs.html) + * [Amazon SES](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) + * [AWS Mainframe Modernization](https://docs.aws.amazon.com/m2/latest/userguide/what-is-m2.html) + * [Amazon Managed Service for Prometheus](https://docs.aws.amazon.com/prometheus/latest/userguide/CW-logs.html) + * [Amazon MSK](https://docs.aws.amazon.com/msk/latest/developerguide/msk-logging.html) + * [Amazon MSK Connect](https://docs.aws.amazon.com/msk/latest/developerguide/msk-connect-logging.html) + * [Amazon MQ](https://docs.aws.amazon.com/amazon-mq/latest/developer-guide/configure-logging-monitoring-activemq.html) + * [AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging.html) + * [AWS Network Firewall Proxy](https://docs.aws.amazon.com/network-firewall/latest/developerguide/proxy-logging-and-monitoring.html) + * [Network Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.html) + * [Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createdomain-configure-slow-logs.html) + * [Amazon OpenSearch Ingestion](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/monitoring-pipeline-logs.html) + * [AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/monitoring-overview.html) + * [Amazon Q Business Connectors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connectors-list.html) + * [Amazon Q Business Conversations](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/cw-logs-enable-logging.html) + * [Amazon Quick Chat and Feedback](https://docs.aws.amazon.com/quicksuite/latest/userguide/monitoring-quicksuite-chat-feedback-cloudwatch.html) + * [Amazon RDS PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Concepts.PostgreSQL.html#USER_LogAccess.PostgreSQL.PublishtoCloudWatchLogs) + * [AWS RTB Fabric](https://docs.aws.amazon.com/rtb-fabric/latest/userguide/what-is-rtb-fabric.html) + * [AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) + * [AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub-v2.html) + * [Amazon Route 53 Public DNS](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/logging-monitoring.html) + * [Amazon Route 53 Resolver](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-query-logs-choosing-target-resource.html) + * [Amazon SageMaker AI Events](https://docs.aws.amazon.com/sagemaker/latest/dg/logging-cloudwatch.html) + * [Amazon SageMaker AI Worker Events](https://docs.aws.amazon.com/sagemaker/latest/dg/workteam-private-tracking.html) + * [AWS Site-to-Site VPN](https://docs.aws.amazon.com/vpn/latest/s2svpn/monitoring-logs.html) + * [Amazon SES](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) + * [Amazon SNS](https://docs.aws.amazon.com/sns/latest/dg/sms_stats_cloudwatch.html#sns-viewing-cloudwatch-logs) + * [Amazon SNS Data Protection](https://docs.aws.amazon.com/sns/latest/dg/sns-message-data-protection-operations.html) + * [EC2 Spot Instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-data-feeds.html) + * [AWS Step Functions](https://docs.aws.amazon.com/step-functions/latest/dg/cw-logs.html) + * [AWS Storage Gateway](https://docs.aws.amazon.com/storagegateway/latest/userguide/monitoring-file-gateway.html) + * [AWS Transfer Family](https://docs.aws.amazon.com/transfer/latest/userguide/structured-logging.html) + * [AWS Verified Access](https://docs.aws.amazon.com/verified-access/latest/ug/access-logs.html) + * [Amazon VPC Flow Logs](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html) + * [Amazon VPC Lattice](https://docs.aws.amazon.com/vpc-lattice/latest/ug/monitoring-access-logs.html) + * [Amazon VPC Route Server](https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html) + * [AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/logging-destinations.html) + * [Amazon WorkMail](https://docs.aws.amazon.com/workmail/latest/adminguide/monitoring-audit-logging.html) + +