The new lookup processor enables users to upload CSV reference tables and configure log pipelines to match log fields with table data, automatically adding relevant metadata. This facilitates contextual enrichment, such as associating IPs with application teams or error codes with readable descriptions, within CloudWatch ingestion flow.
By enriching logs as they arrive, this approach streamlines analytics, dashboards, and alerts without requiring external enrichment tools or post-processing. The functionality is available in all supported AWS commercial regions and configurable through multiple AWS interfaces.
Source & further reading
Amazon CloudWatch announces lookup processor for log enrichment ↗Source published 2026-07-14. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.