search

CloudSnorkel / CloudWatch2S3

Logging infrastructure for exporting all CloudWatch logs from multiple accounts to a single S3 bucket
MIT License
48 stars 26 forks source link

Kinesis.Access_Denied. it's not the same as closed issue. #23

Open illyazhuk opened 4 months ago

illyazhuk commented 4 months ago

Hi! First of all Great tool! I can't understand exactly what is causing an error, because firehose show me this: image Like there is some issue with code, but my template created successfully: image And this is what Delivery Stream (S3 Delivery) shows me: image

Maybe the problem is with IAM rights, but I don't understand how it can be possible if your template creates it automatically?

PeterBengtson commented 4 months ago

There are other variables involved. For instance, if you're using KMS encryption, check that Firehose has been given access rights for decryption and encryption. Check the logs of the lambdas for this, rather than those for S3 or Kinesis.