The addition allows analysts to correlate logs across groups, analyze security events, and track user sessions without running multiple queries or manual data merging. For example, sub-queries can identify high-error services, while joins correlate these with performance metrics for prioritization.
This enhancement accelerates troubleshooting and provides integrated insights into distributed systems. The new query capabilities are supported in all commercial AWS Regions.
Source & further reading
Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands ↗Source published 2026-04-20. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.