Amazon CloudWatch Logs
API Reference (API Version 2014-03-28)


Creates or updates a destination. A destination encapsulates a physical resource (such as a Kinesis stream) and enables you to subscribe to a real-time stream of log events of a different account, ingested using PutLogEvents. Currently, the only supported physical resource is a Amazon Kinesis stream belonging to the same account as the destination.

A destination controls what is written to its Amazon Kinesis stream through an access policy. By default, PutDestination does not set any access policy with the destination, which means a cross-account user cannot call PutSubscriptionFilter against this destination. To enable this, the destination owner must call PutDestinationPolicy after PutDestination.

Request Syntax

{ "destinationName": "string", "roleArn": "string", "targetArn": "string" }

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.


A name for the destination.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 512.

Pattern: [^:*]*

Required: Yes


The ARN of an IAM role that grants CloudWatch Logs permissions to call Amazon Kinesis PutRecord on the destination stream.

Type: String

Length Constraints: Minimum length of 1.

Required: Yes


The ARN of an Amazon Kinesis stream to deliver matching log events to.

Type: String

Length Constraints: Minimum length of 1.

Required: Yes

Response Syntax

{ "destination": { "accessPolicy": "string", "arn": "string", "creationTime": number, "destinationName": "string", "roleArn": "string", "targetArn": "string" } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The destination.

Type: Destination object


For information about the errors that are common to all actions, see Common Errors.


A parameter is specified incorrectly.

HTTP Status Code: 400


Multiple requests to update the same resource were in conflict.

HTTP Status Code: 400


The service cannot complete the request.

HTTP Status Code: 500


To create or update a destination

The following example creates the specified destination.

Sample Request

POST / HTTP/1.1 Host: logs.<region>.<domain> X-Amz-Date: <DATE> Authorization: AWS4-HMAC-SHA256 Credential=<Credential>, SignedHeaders=content-type;date;host;user-agent;x-amz-date;x-amz-target;x-amzn-requestid, Signature=<Signature> User-Agent: <UserAgentString> Accept: application/json Content-Type: application/x-amz-json-1.1 Content-Length: <PayloadSizeBytes> Connection: Keep-Alive X-Amz-Target: Logs_20140328.PutDestination { "destinationName": "my-destination", "targetArn": "arn:aws:kinesis:us-east-1:123456789012:stream/my-kinesis-stream", "roleArn": "arn:aws:iam::123456789012:role/my-subscription-role" }

Sample Response

HTTP/1.1 200 OK x-amzn-RequestId: <RequestId> Content-Type: application/x-amz-json-1.1 Content-Length: <PayloadSizeBytes> Date: <Date> { "destination": [ { "destinationName": "my-destination", "targetArn": "arn:aws:kinesis:us-east-1:123456789012:stream/my-kinesis-stream", "roleArn": "arn:aws:iam::123456789012:role/my-subscription-role", "arn": "arn:aws:logs:us-east-1:123456789012:destination:my-destination", "creationTime": 1437584472382 } ] }

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: