CloudWatch Logs Destinations

Service Name:	CloudWatch
ARN Format:	`arn:aws:logs:{region}:{account}:log-group:{name of group}`
Style:	Async (Write)
Actions (required Permissions):	`logs:CreateLogStream` `logs:PutLogEvents`
Payload Format:	UTF-8 String

Proxylity's integration with CloudWatch Logs writes packet data arriving at your listener to a log group of your choice. Writing packets to logs is a natural fit for protocols where the packet data is encoded as a string (SYSLOG, for example). This type of destination is particularly helpful for archiving and forensic debugging activities.

Things to know about using CloudWatch Logs destinations:

The ARN for the destination must identify an existing log group, and may not include a log stream name.
This destination will occasionally create new log streams under the log group where the stream name is unique and includes the time the stream was created.
The packet data will be interpreted as a UTF-8 encoded string when written.
The packet source, destination and certificate (if applicable) data will not be recorded in the log stream.

See CloudWatch Logs destinations in action in our SYSLOG example, which streams system log messages directly to CloudWatch Logs.

This type of destination isn't appropriate for protocols with arbitrary binary payloads (not strings).