本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
访问 Amazon 日志中与自定义相关的消息 CloudWatch
您可以在 Amazon Logs 中存储有关创建自定义内容 CloudWatch 的信息。
您可以使用以下权限集授权您的 Amazon Q 开发者管理员查看这些日志。
要详细了解将日志传送到多个资源所需的权限,请参阅 Amazon Logs 用户指南中的需要额外权限的 CloudWatch 日志记录 [V2]。
- JSON
-
-
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowLogDeliveryActions",
"Effect": "Allow",
"Action": [
"logs:PutDeliverySource",
"logs:GetDeliverySource",
"logs:DeleteDeliverySource",
"logs:DescribeDeliverySources",
"logs:PutDeliveryDestination",
"logs:GetDeliveryDestination",
"logs:DeleteDeliveryDestination",
"logs:DescribeDeliveryDestinations",
"logs:CreateDelivery",
"logs:GetDelivery",
"logs:DeleteDelivery",
"logs:DescribeDeliveries",
"firehose:ListDeliveryStreams",
"firehose:DescribeDeliveryStream",
"s3:ListAllMyBuckets",
"s3:ListBucket",
"s3:GetBucketLocation"
],
"Resource": [
"arn:aws:logs:us-east-1:111122223333
:log-group:*",
"arn:aws:firehose:us-east-1:111122223333
:deliverystream/*",
"arn:aws:s3:::*"
]
}
]
}