ECS Container logs cannot be displayed if the log group is in a different region

0

If I have a task definition where the log group is defined in a different region, the ECS logs UI shows an error when trying to view these logs:

There was an error while retrieving logs from log group: lxp-production. The specified log group does not exist.

The log group exists and logs are being stored as expected.

Could this be an IAM issue or an issue in the UI itself?

2개 답변
0

Hello.

Probably, but I think that in order to check the logs from the ECS console, they need to be output to the CloudWatch Logs log group in the same region.
We have confirmed that you can view log groups if you create them in the same region as your ECS cluster.
Therefore, I think that the UI side is probably set so that it cannot be obtained unless it is in the same region.

If you look at Google Chrome's developer tools, you can see that the following URL is being accessed.
In my environment, I have an ECS cluster in the Tokyo region, so I can see that I am accessing "ap-northeast-1".

https://logs.ap-northeast-1.amazonaws.com/
profile picture
전문가
답변함 4달 전
profile pictureAWS
전문가
검토됨 4달 전
0

Hi,

What you are trying to achieve is not possible due to Region Isolation:

All Regions currently have three or more Availability Zones. Regions themselves are isolated 
and independent from other Regions with a few exceptions noted later in this document 
(refer to Global single-Region operations). This separation between Regions limits service failures, 
when they occur, to a single Region. Other Regions’ normal operations are unaffected in this case. 
Additionally, the resources and data that you create in one Region do not exist in any other Region 
unless you explicitly use a replication or copy feature offered by an AWS service or replicate the resource yourself.

See https://docs.aws.amazon.com/whitepapers/latest/aws-fault-isolation-boundaries/regions.html

The idea is that each region must be able to operate without any dependence on any other region. Additionally, it has compliance requirements: lots of customers wants to be sure that 100% of their data (even logs) in contained in one single region and cannot be spread all around.

To match your needs, you may want to use the cross-region (and cross-account) CloudWatch console: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html

Best,

Didier

profile pictureAWS
전문가
답변함 4달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠