Skip to content

Start building

Integration · Cloud and hosting

AI agents for Amazon CloudWatch Logs

Search and read application logs in Amazon CloudWatch Logs.

Actions
8
Read
6
Write
2

Actions

What your agents can do in Amazon CloudWatch Logs

Search and read application logs in Amazon CloudWatch Logs: list log groups and streams, find events matching a pattern in a time range, run a Logs Insights query and read its results, and write log events, signed with an AWS access key.

Read 6

Look things up. Nothing changes.

  • List log groups

    Lists log groups, optionally only those whose name starts with a prefix like /aws/lambda/.

  • List log streams

    Lists a log group's streams, the most recently written first.

  • Search log events

    Finds a log group's events in a time range that match a filter pattern: a word or "quoted phrase" (ERROR, "timed out"), terms like ?ERROR ?WARN for either, or a JSON pattern like { $.status = 500 }.

  • Read a log stream

    Reads one log stream's events in order, newest last, optionally in a time range.

  • Start a Logs Insights query

    Starts a CloudWatch Logs Insights query over up to 50 log groups and a time range in seconds since 1970, like fields @timestamp.

  • Get query results

    Gets a Logs Insights query's status (Scheduled, Running, Complete, Failed, Cancelled, Timeout) and, once Complete, its results.

Write 2

Create, change or send.

  • Create a log stream

    Creates a log stream in a log group, to write events to with "Write log events".

  • Write log events

    Writes up to 10,000 events to a log stream, each with a timestamp in milliseconds since 1970 (in order, within the last 14 days) and a message up to 1 MB.

A person can approve first

Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything.

Connection

How it connects

Connect it once in the console, then give it to the agents and workflows that need it.

Sign-in details

Enter the sign-in details Amazon CloudWatch Logs gives you for its API.

What you enter

  • Access key ID
  • Secret access key

Settings

  • Region

Kept safe

  • Credentials are stored encrypted with your organization's own keys.
  • They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
  • Calls go only to the tool's own servers.

How we protect your data

Ideas

Ideas to start with

Starting points made only from the actions above. Mix them with any other tool your agents can use.

  • 01

    Ask about your Amazon CloudWatch Logs data

    Ask a question in plain words. The agent can list log groups, list log streams or search log events in Amazon CloudWatch Logs, then answers with what it found.

  • 02

    Let an agent update Amazon CloudWatch Logs

    Have the agent create a log stream in Amazon CloudWatch Logs as part of a larger task. Turn on approval and a person signs off on each change first.

  • 03

    Share what it finds in Slack

    Give one agent Amazon CloudWatch Logs and Slack: it can list log groups in Amazon CloudWatch Logs and post a summary to a Slack channel in the same run.

FAQ

Amazon CloudWatch Logs and MyDeepAgents

Can MyDeepAgents connect to Amazon CloudWatch Logs?

Yes. The Amazon CloudWatch Logs connector has 8 actions: 6 read and 2 make changes. Your agents can call them as tools, and your workflows can run them as steps.

How do I connect Amazon CloudWatch Logs?

Enter the sign-in details Amazon CloudWatch Logs gives you for its API. You'll need: Access key ID and Secret access key. The connection also asks for: Region. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.

Can an agent change data in Amazon CloudWatch Logs without asking?

Only if you let it. Each of the 2 actions that change data can be set to wait for a person's approval before it runs.

Can I use Amazon CloudWatch Logs in workflows as well as agents?

Yes. Every Amazon CloudWatch Logs action also works as a step in a workflow, and the same connection serves your agents and your workflows.

Early access

Put Amazon CloudWatch Logs to work

Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.