Configuring logging of AWS API Gateway

6
votes

I created a lambda function to upload files to s3. When testing via the AWS interface, everything works. Next I created the API Gateway and tried to make a request through ReactJs. But I get an error. I want to see what error occurs but I cannot add logs to the API Gateway. What I do.

  1. Create API Gateway -> go to Stages-> Logs/Tracing

  2. Try to activate checkbox Enable CloudWatch Logs but got CloudWatch Logs role ARN must be set in account settings to enable logging

  3. Create role in IAM with next policy: AmazonS3FullAccess, AmazonAPIGatewayPushToCloudWatchLogs, AWSLambdaBasicExecutionRole

  4. Copy the Role ARN

  5. go to the setting of my api and try to paste to CloudWatch log role ARN. But got The role ARN does not have required permissions set to API Gateway.

Can you tell me what other settings I need?

1
amazon-web-servicesaws-lambdaaws-api-gateway
By saying "the settings of my API", do you mean the general API Gateway Settings, or your particular API? If it is not the general one, then this is the problem. Look at this docs - aws.amazon.com/premiumsupport/knowledge-center/… – m3n7alsnak3
@m3n7alsnak3 Yeah, I've already found that manual and I've done it. Thank you. – Jekson
did it work, or you are still having issues? – m3n7alsnak3
Yeah, it works. – Jekson
Oh good, want me to add it as an answer? – m3n7alsnak3

1 Answers

12
votes

According to this documentation (https://aws.amazon.com/premiumsupport/knowledge-center/api-gateway-cloudwatch-logs/) after creating the Role, you need to add it to the Global AWS Api Gateway Settings (when you open the Console, there is a settings menu in the left pane) as the CloudWatch log role ARN.

Then it will use that role for all the gateways you create, so this is a one-time step.