Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Where are CloudWatch log data stored?

Is there some document available that shows how AWS CloudWatch log data is stored at AWS?

Especially, I would like to know:

  1. Is an existing service (e.g. Amazon S3) used for the storage of events?

  2. Is there any encryption available?

Interestingly, information is available for CloudTrail, but there seems to be no documentation about CloudWatch.

like image 829
Black Avatar asked Sep 22 '15 11:09

Black


People also ask

Where do CloudWatch logs get stored?

Flow logs are stored in an Amazon CloudWatch log group, in the same region as your Amazon Connect instance. This log group is created automatically when Enable flow logging is turned on for your instance. For example, the following image shows the CloudWatch log groups for two test instances.

Are CloudWatch logs stored in S3?

This policy enables CloudWatch Logs to export log data to your Amazon S3 bucket. The bucket owner has full permissions on all of the exported objects. If the existing bucket already has one or more policies attached to it, add the statements for CloudWatch Logs access to that policy or policies.

How long are CloudWatch logs stored?

You can store your log data in CloudWatch Logs for as long as you want. By default, CloudWatch Logs will store your log data indefinitely. You can change the retention for each Log Group at any time.


1 Answers

Logs is apparently sitting on top of Kinesis, so:

  1. Yes, existing service, probably custom configured on AWS end
  2. I think they handle this on their side

Based on this: https://youtu.be/pTzv-i1uvvE?t=1386

like image 185
Adam Owczarczyk Avatar answered Oct 21 '22 18:10

Adam Owczarczyk