Differences and usage of aws vended logs vs cloudwatch

Question

I got a error  "Resource handler returned message: "Invalid Logging Configuration: The CloudWatch Logs Resource Policy size was exceeded. We suggest prefixing your CloudWatch log group name with /aws/vendedlogs/states/. (Service: AWSStepFunctions; Status Code: 400; Error Code: InvalidLoggingConfiguration; Request ID: XXX; Proxy: null)" (RequestToken: YYY, HandlerErrorCode: InvalidRequest)"
Which was solved with suggested prefixing.

I found some informations about vended logs here: https://aws.amazon.com/cloudwatch/pricing/
It looks like only difference between vended logs and classic cloudwatch logs is price, and exception in violating Resource Policy size limit. Is there any other difference?

To my understanding all what I need to do is to use prefix vendedlogs, in log group name of e.g. stepfunction (/aws/stepfunction/ -> /aws/vendedlogs/stepfunction/)

Are my assumptions correct?
Thanks

Answer

Hello, You are correct that the primary difference is the Volume pricing (as mentioned in the pricing page). For any of vended logs AWS services, you can prefix the CloudWatch Logs Log Group name with /aws/vendedlogs/ to avoid reaching the CloudWatch Logs resource policy size limit. (Step functions specific documentation - https://docs.aws.amazon.com/step-functions/latest/dg/bp-cwl.html)

So in the above case, /aws/stepfunction/ will become /aws/vendedlogs/stepfunction/

So in the above case, `/aws/stepfunction/` will become ` /aws/vendedlogs/stepfunction/`

Differences and usage of aws vended logs vs cloudwatch

Relevanter Inhalt