モチベ

現状、 log metrics で稼動しているが、 log filter で代替したい。

original

https://docs.aws.amazon.com/ja_jp/awscloudtrail/latest/userguide/use-cloudformation-template-to-create-cloudwatch-alarms.html

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/send-cloudtrail-events-to-cloudwatch-logs.html

AWS CloudWatch Logs Subscription Filter

https://docs.aws.amazon.com/ja_jp/AmazonCloudWatch/latest/logs/SubscriptionFilters.html

https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/services-cloudwatchlogs.html

serverless framework

functions:
  myCloudWatchLog:
    handler: myCloudWatchLog.handler
    events:
      - cloudwatchLog:
          logGroup: '/aws/lambda/hello'
          filter: '{$.userIdentity.type = Root}'

ref.

https://www.serverless.com/framework/docs/providers/aws/events/cloudwatch-log

https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html

with AWS ChatBot

https://dev.classmethod.jp/articles/cdk-lambda-error-chatbot/

TODO

add chatbot.amazonaws.com to the trust relationship for arn:aws:iam::344384897107:role/service-role/chatbot-slack

https://dev.classmethod.jp/articles/cloudwatch-dashboards-logs-insights-chat-channels/