Example: Configure logging options for Amazon IoT Events - Amazon IoT Events
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

End of support notice: On May 20, 2026, Amazon end support for Amazon IoT Events. After May 20, 2026, you will no longer be able to access the Amazon IoT Events console or Amazon IoT Events resources. For more information, visit this Amazon IoT Events end of support.

Example: Configure logging options for Amazon IoT Events

Proper logging is important for monitoring, debugging, and auditing your Amazon IoT Events applications. This section provides an overview of logging options available in Amazon IoT Events.

This example demonstrates how to configure an IAM role that allows Amazon IoT Events to log data to CloudWatch Logs. The use of wildcards (*) in the resource ARN allows for comprehensive logging across your Amazon IoT Events infrastructure.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": [
          "iotevents.amazonaws.com"
        ]
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "aws:SourceAccount": "account_id"
        },
        "ArnEquals": {
          "aws:SourceArn": "arn:aws:iotevents:region:account_id:*"
        }
      }
    }
  ]
}