Cross-account log data sharing using Kinesis Data Firehose - Amazon CloudWatch Logs

Cross-account log data sharing using Kinesis Data Firehose

To share log data across accounts, you need to establish a log data sender and receiver:

  • Log data sender—gets the destination information from the recipient and lets CloudWatch Logs know that it is ready to send its log events to the specified destination. In the procedures in the rest of this section, the log data sender is shown with a fictional AWS account number of 111111111111.

  • Log data recipient—sets up a destination that encapsulates a Kinesis stream and lets CloudWatch Logs know that the recipient wants to receive log data. The recipient then shares the information about his destination with the sender. In the procedures in the rest of this section, the log data recipient is shown with a fictional AWS account number of 222222222222.

The example in this section uses a Kinesis Data Firehose delivery stream with Amazon S3 storage. You can also set up Kinesis Data Firehose delivery streams with different settings. For more information, see Creating a Kinesis Data Firehose Delivery Stream.

The log group and the destination must be in the same AWS Region. However, the AWS resource that the destination points to can be located in a different Region.

Note

This feature is not available in Asia Pacific (Osaka) because Kinesis Data Firehose is not available in that Region.