Setting up a new cross-account subscription

Follow the steps in these sections to set up a new cross-account log subscription.

Topics

• Step 1: Create a destination
• Step 2: (Only if using an organization) Create an IAM role
• Step 3: Add/validate IAM permissions for the cross-account destination
• Step 4: Create a subscription filter
• Validate the flow of log events
• Modify destination membership at runtime