Can’t see CloudWatch Logs for an AWS DMS task – How to fix

Can’t see CloudWatch Logs for an AWS DMS task? We can help you!

Here at Bobcares, we often get requests from our customers to handle similar CloudWatch issues.

Today let’s see how our Support Engineers fix this our customers as a part of our Server Management Services.

How to see CloudWatch Logs for an AWS DMS task

To view the CloudWatch Logs for the AWS DMS task, we must confirm the following:

1. Amazon CloudWatch is enabled on the AWS DMS task.
2. The dms-cloudwatch-logs-role AWS Identity and Access Management (IAM) role is created.

Steps to see CloudWatch Logs for an AWS DMS task

1. First, we must enable CloudWatch logging for our task.

2. To enable CloudWatch logging the task must be in a Stopped or Failed state.

3. Even after enabling if we can’t view the logs, then we must confirm that we have the required IAM role.

4. After that we have to open the IAM console, and then select Roles.

5. And confirm that dms-cloudwatch-logs-role is listed.

If we are unable to create task using the AWS Command Line Interface (AWS CLI) or the dms-cloudwatch-logs-role role due to account’s insufficient permissions we can do this in the following way:

Creating the role with the required policies

1. Firstly, open the IAM console, and go to Roles.

2. Then click on Create role.

3. And select AWS service from Select type of trusted entity.

4. Further, click on DMS from Choose a use case.

This creates the following trust relationship policy so that AWS DMS can assume the role:

{  
"Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
       
    "Service": "dms.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

5. Now select Next: Permissions.

6. And enter AmazonDMSCloudWatchLogsRole in the search field.

7. Then, choose the policy to grant AWS DMS access to CloudWatch.

8. Now select, Next: Tags.

9. We can add metadata to the role by using tags as key-value pairs if needed.

10. And select Next: Review.

11. For Role name, we can enter dms-cloudwatch-logs-role.

Note: The role name dms-cloudwatch-logs-role is case-sensitive, so we must enter the rule name in lower case.

11. One the Role description is filled we can finally click on Create role.

After the role is created, we can use CloudWatch Logs to monitor our AWS DMS task.

[Need assistance? We can help you]

Conclusion

To conclude, we saw the steps that our Support Techs follow to see CloudWatch Logs for an AWS DMS task.