Amazon CloudWatch Logs launched HTTP endpoints to ingest logs using HTTP protocols with bearer token authentication, including HTTP Log Collector for JSON events, ND-JSON for newline-delimited JSON streaming, Structured JSON, and OpenTelemetry formats. This enables ingestion from systems lacking AWS SDK integration, such as third-party or packaged software.
To secure ingestion, users generate API keys with configurable expiration, and enable bearer token authentication on log groups. Additionally, service control policies can restrict needless credential creation. These endpoints are available in select AWS regions, offering enhanced flexibility and security for log pipeline integrations beyond native AWS SDK methods.
Source & further reading
Amazon CloudWatch Logs now supports log ingestion using HTTP-based protocol ↗Source published 2026-03-16. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.