AWS CloudWatch Setup Guide

Follow our step-by-step guide to integrate Fivetran logs into your AWS CloudWatch platform.

Prerequisites

To connect AWS Cloudwatch to Fivetran, you need an AWS account that grants permission to write logs.

---

In AWS

Create IAM policy

1. .

2. Click Policies.

   

3. Click Create policy.

   

4. Select the JSON tab.

   

5. Copy the following section into the space provided in the Json tab:

   {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "VisualEditor0",
              "Effect": "Allow",
              "Action": [
                  "logs:DescribeLogGroups",
                  "logs:DescribeLogStreams",
                  "logs:CreateLogGroup",
                  "logs:CreateLogStream",
                  "logs:PutLogEvents"
              ],
              "Resource": "*"
          }
      ]
   }
   content_copy

6. Click Review policy.

   

7. In the Review policy page, fill the Name field with the value Fivetran-CloudWatch-Logs-Access.

   

8. Click Create policy

   

---

Create IAM role

1. Select Roles from the sidebar menu, then click Create role.

   

2. In the Select type of trusted entity section, click Another AWS account. In the Account ID field, enter Fivetran's account ID 834469178297.

   

3. In the Options section, click Require external ID. Fill the External ID field with a memorable value (for example, "Fivetran"). You'll enter this same value in the External ID field in Fivetran.

   

4. Click Next: Permissions.

   

5. Find and select the Fivetran-CloudWatch-Logs-Access policy, then click Next: Review.

   

6. Name your role, then click Create role.

   

7. In the Roles section, select the role you just created and note the Role ARN.

   

---

In Fivetran

1. Go to the .
2. Enter Log Group Name.
3. Enter the Role ARN .
4. Select Region.
5. Enter the External ID .
6. Click Save & Test.

IMPORTANT: The Log Group Name should follow the ^[.-_/#A-Za-z0-9]+$ pattern.

---

Related articles