无法查询CloudWatch Log AWS API端点

如何解决无法查询CloudWatch Log AWS API端点

我正在尝试为内部团队构建一个小型Web应用程序，以用于查看我们的CloudWatch日志。现在，我还处于开发初期，只是尝试使用AWS API官方文档中指定的https://logs.us-east-1.amazonaws.com通过Postman访问日志。

我已按照以下步骤通过以下标头向端点设置我的POST请求： Postman Generated Headers

此外，在此文档的后面，我提供了Action： {"Action": "DescribeLogGroups"}

使用AWS CLI可以正常工作，并且我可以看到所有日志组。

当我将此请求发送到https://logs.us-east-1.amazonaws.com时，我回来了：

{
    "Output": {
        "__type": "com.amazon.coral.service#UnknownOperationException","message": null
    },"Version": "1.0"
}

状态码为200。

我尝试过的事情：

• 完全删除请求的正文->导致“内部服务器错误”
• 将/describeloggroups附加到没有正文的URL->会导致“内部服务器错误”

我真的不确定我在做什么错。

解决方法

最好的方法是将X-Amz-Target标头设置为Logs_20140328.DescribeLogGroups。

以下是示例请求：https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeLogGroups.html#API_DescribeLogGroups_Example_1_Request

以下是您可以尝试的邮递员收藏。将其另存为文件，然后使用File -> Import导入Postman。还需要您在邮递员中设置凭据和区域变量。

{
    "info": {
        "name": "CloudWatch Logs","schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
    },"item": [
        {
            "name": "DescribeLogs","request": {
                "auth": {
                    "type": "awsv4","awsv4": [
                        {
                            "key": "sessionToken","value": "{{SESSION_TOKEN}}","type": "string"
                        },{
                            "key": "service","value": "logs",{
                            "key": "region","value": "{{REGION}}",{
                            "key": "secretKey","value": "{{SECRET_ACCESS_KEY}}",{
                            "key": "accessKey","value": "{{ACCESS_KEY_ID}}","type": "string"
                        }
                    ]
                },"method": "POST","header": [
                    {
                        "warning": "This is a duplicate header and will be overridden by the Content-Type header generated by Postman.","key": "Content-Type","type": "text","value": "application/json"
                    },{
                        "key": "X-Amz-Target","value": "Logs_20140328.DescribeLogGroups"
                    },{
                        "warning": "This is a duplicate header and will be overridden by the host header generated by Postman.","key": "host","value": "logs.{{REGION}}.amazonaws.com"
                    },{
                        "key": "Accept",{
                        "key": "Content-Encoding","value": "amz-1.0"
                    }
                ],"body": {
                    "mode": "raw","raw": "{}"
                },"url": {
                    "raw": "https://logs.{{REGION}}.amazonaws.com","protocol": "https","host": [
                        "logs","{{REGION}}","amazonaws","com"
                    ]
                }
            },"response": []
        }
    ],"protocolProfileBehavior": {}
}

,

尝试将其复制到 json 文件中并将其导入 Postman 并添加缺少的变量。 我试图在服务“日志”中获得一个 DescribeLogGroups。看看这里的文档 https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeLogGroups.html#API_DescribeLogGroups_Example_1_Request 有关标题和正文的更多信息。 PS：会话令牌是可选的，我不需要它 希望它适用于任何人

{
    "info": {
        "_postman_id": "8660f3fc-fc6b-4a71-84ba-739d8b4ea7c2","name": "CloudWatch Logs","awsv4": [
                        {
                            "key": "service","value": "{{AWS_SERVICE_NAME}}","value": "{{AWS_REGION}}","value": "{{AWS_SECRET_ACCESS_KEY}}","value": "{{AWS_ACCESS_KEY_ID}}",{
                            "key": "sessionToken","value": "","header": [
                    {
                        "key": "X-Amz-Target","value": "Logs_20140328.DescribeLogGroups","type": "text"
                    },"value": "amz-1.0","type": "text"
                    }
                ],"raw": "{}","options": {
                        "raw": {
                            "language": "json"
                        }
                    }
                },"url": {
                    "raw": "https://{{AWS_SERVICE_NAME}}.{{AWS_REGION}}.amazonaws.com","host": [
                        "{{AWS_SERVICE_NAME}}","{{AWS_REGION}}","response": []
        }
    ]
}