AWS CloudWatch Setup Guide

Follow our step-by-step guide to integrate Fivetran logs into your AWS CloudWatch platform.

Prerequisites

To connect AWS Cloudwatch to Fivetran, you need an AWS account that grants permission to write logs.

Setup instructions

Find external ID

On the Destinations list, choose the destination, to which you want to connect a log service.
Click Connect Your Logging Service.
Select AWS CloudWatch from the list.
Make note of the External ID. You will need it to configure AWS Cloudwatch.

Create IAM policy

In your AWS account, open IAM Management Console.
Click Policies.
Click Create policy.
Select the JSON tab.

Copy the following section into the space provided in the Json tab:

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "VisualEditor0",
           "Effect": "Allow",
           "Action": [
               "logs:DescribeLogGroups",
               "logs:DescribeLogStreams",
               "logs:CreateLogGroup",
               "logs:CreateLogStream",
               "logs:PutLogEvents"
           ],
           "Resource": "*"
       }
   ]
}

Click Review policy.
In the Review policy page, fill the Name field with the value Fivetran-CloudWatch-Logs-Access.
Click Create policy.

Create IAM role

On the navigation menu, select Roles and then click Create role.
In the Select type of trusted entity section, click Another AWS account. In the Account ID field, enter Fivetran's account ID 834469178297.
In the Options section, click Require external ID. Enter the External ID you found in Step 1 .
Click Next: Permissions.
Find and select the Fivetran-CloudWatch-Logs-Access policy, then click Next: Review.
Name your role, then click Create role.
In the Roles section, select the role you just created and note the Role ARN. You will need it to configure Fivetran.