CloudWatch Logs Destinations

Service Name:	CloudWatch
ARN Format:	`arn:aws:logs:{region}:{account}:log-group:{name of group}`
Style:	Async (Write)
Actions (required Permissions):	`logs:CreateLogStream` `logs:PutLogEvents`
Payload Format:	UTF-8 String

Proxylity's integtration with CloudWatch Logs writes packet data arriving at your listener to a log group of your choice. Writing packets to logs is a natural fit for protocols where the packet data is encoded as a string (SYSLOG, for example). This type of destination is particulary helpful for archiving and forensic deubgging activities.

Things to know about using CloudWatch Logs destinations:

The ARN for the destination must identify an existing log group, and may not include a log stream name.
This destination will occassionally create new log streams under the log group where the stream name is unique and includes the time the stream was created.
The packet data will be interpreted as a UTF-8 encoded string when written.
The packet source, destination and certificate (if applicable) data will not be recorded in the log stream.

This type of destination isn't appropriate for protocols with arbitrary binary payloads (not strings).