Revision history [back]

To activate Cloudwatch logging for AWS API Gateway using a Cloudformation template, you need to follow these steps:

1. Create a Cloudwatch log group: Create a Cloudwatch log group that will store the API Gateway logs for your API.

2. Create a Cloudformation template: Create a Cloudformation template that will define the API Gateway resource and the Cloudwatch log group. Use the AWS::ApiGateway::RestApi resource type to define the API Gateway resource and the AWS::Logs::LogGroup resource type to define the Cloudwatch log group.

3. Grant permissions: Grant the necessary permissions for the API Gateway to write logs to the Cloudwatch log group. Use the AWS::IAM::Role and AWS::IAM::Policy resources to create an IAM role and policy that grants the necessary permissions.

4. Enable logging: Enable logging for the API Gateway using the AWS::ApiGateway::Stage resource type. Set the logging level to the desired level (e.g. INFO, ERROR, etc.) and specify the Cloudwatch log group that you created earlier.

5. Deploy the Cloudformation stack: Deploy the Cloudformation stack that you created in step 2. This will create the API Gateway resource, Cloudwatch log group, and necessary IAM roles and policies.

6. Test the logging: Test the API Gateway by making requests to the API and verifying that logs are being written to the Cloudwatch log group.

Once you have completed these steps, Cloudwatch logging should be activated for your API Gateway using the Cloudformation template.