aws-stepfunctions-express-workflow-log-event

Express workflow logs can include execution input/output and task details depending on the configured includeExecutionData setting.

awscritical service: aws:stepfunctions emits ContainsSecret

Where it sits

locationCloudWatch Logs Step Functions Express execution log event.message
location kindlog_field
data kindscredential password api_key customer_data pii sensitive_data
emits edgeContainsSecret
serviceStep Functions (aws:stepfunctions)

Collection recipe

access modeindirect_destination
operationlogs:FilterLogEvents
response pathEvents[].Message
encodingjson
params{"LogGroupName": "\u003cstate-machine-log-group\u003e"}

Required permissions

states:DescribeStateMachine
logs:FilterLogEvents

References

move · open · esc close