本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
启用从以下位置的日志记录 AWS 务
虽然许多服务仅向日志发布日 CloudWatch 志,但有些 AWS 服务可以将日志直接发布到亚马逊简单存储服务或 Amazon Data Firehose。如果您对日志的主要需求是在其中一种服务中存储或处理日志,那么您可以轻松地让生成日志的服务将它们直接发送到 Amazon S3 或 Firehose,而无需额外设置。
即使您将日志直接发布到 Amazon S3 或 Firehose,也需要支付 CloudWatch 运费。如果您向 Amazon S3 发送日志,则费用将显示在 Cost Explorer 或账单上。如果您向 Firehose 发送日志,则会显示AWS_REGION-S3-Egress-Bytes费用。有关销售日志定价的更多信息,请参阅 Amazon CloudWatch AWS_REGION-FH-Egress-Bytes
一些 AWS 服务使用通用基础架构来发送日志。要启用从这些服务进行日志记录,您必须以具有特定权限的用户身份登录。此外,您必须 AWS 向授予权限才能发送日志。
对于需要这些权限的服务,所需的权限有两个版本。需要这些额外权限的服务在中注明为 “支持的 [V1 权限]” 和 “支持的 [V2 权限]”。支持的日志目标有关这些必需权限的信息,请参阅表后的部分。
Amazon API Gateway
AWS AppSync
Amazon Aurora MySQL
Amazon Bedrock Knowledge Bases
Amazon Bedrock Agents
Amazon Bedrock AgentCore Runtime
Amazon Bedrock AgentCore Gateway
Amazon Bedrock AgentCore Identity
Amazon Bedrock AgentCore Memory
Amazon Bedrock AgentCore Payments
Amazon Bedrock AgentCore Tools
Amazon Chime
Amazon CloudFront
AWS CloudHSM
CloudWatch Evidently
CloudWatch Internet Monitor
AWS CloudTrail
AWS CodeBuild
Amazon CodeWhisperer
Amazon Cognito
Amazon Connect
AWS DataSync
AWS DevOps Agent
Amazon ElastiCache (Redis OSS)
AWS Elastic Beanstalk
Amazon ECS
Amazon EKS Auto Mode
Amazon EKS Control Plane
AWS Elemental MediaPackage
AWS Elemental MediaTailor
AWS Entity Resolution
Amazon EventBridge Pipes
Amazon EventBridge Event Buses
AWS Fargate
AWS Fault Injection Service
Amazon FinSpace
AWS Global Accelerator
AWS Glue
IAM Identity Center
Amazon IVS Chat
AWS IoT
AWS IoT FleetWise
AWS Lambda
Amazon Macie
Amazon SES
AWS Mainframe Modernization
Amazon Managed Service for Prometheus
Amazon MSK
Amazon MSK Connect
Amazon MQ
AWS Network Firewall
AWS Network Firewall Proxy
Network Load Balancer
Amazon OpenSearch Service
Amazon OpenSearch Ingestion
AWS PCS
Amazon Q Business Connectors
Amazon Q Business Conversations
Amazon Quick Chat and Feedback
Amazon RDS PostgreSQL
AWS RTB Fabric
AWS Security Hub CSPM
AWS Security Hub
Amazon Route 53 Public DNS
Amazon Route 53 Resolver
Amazon SageMaker AI Events
Amazon SageMaker AI Worker Events
AWS Site-to-Site VPN
Amazon SES
Amazon SNS
Amazon SNS Data Protection
EC2 Spot Instance
AWS Step Functions
AWS Storage Gateway
AWS Transfer Family
AWS Verified Access
Amazon VPC Flow Logs
Amazon VPC Lattice
Amazon VPC Route Server
AWS WAF
Amazon WorkMail