AWS First Steps
New feature

Amazon CloudWatch log centralization now supports log group tag propagation

Amazon CloudWatch log centralization now copies tags from source log groups to destination groups, allowing teams to use them for access control and cost reporting.

Amazon CloudWatch log centralization now copies tags from source log groups to destination log groups and keeps them synchronized based on the tag propagation behavior selected in the centralization rule setup. This allows platform teams to preserve tags such as Application and CostCenter on centralized log groups, then use those tags to scope access with IAM conditions and report centralized log spend by team in AWS Cost Explorer. Tag propagation is available in all AWS Regions where CloudWatch Centralization is offered. It can be enabled via the CloudWatch console, AWS CLI, or AWS SDKs.

Why it matters

This update benefits users centralizing logs from multiple accounts and regions, enabling more granular access control and cost management through preserved log group tags.

Read the original AWS announcement

Related articles and terms

Tag Design Determines Operations - Trivia and Practical Naming Conventions for AWS Resource Tagging StrategyWe explain why AWS resource tags are not just labels but the foundation for cost allocation, access control, and automation, covering tag key naming conventions, how to use the 50-tag limit, and governance through tag policies.Why CloudWatch Logs Costs More Than You Expect - The Cost Structure of Ingestion, Storage, and AnalysisThis article explains the pricing structure where CloudWatch Logs ingestion costs over 20 times more than storage, the cost explosions caused by VPC Flow Logs and Lambda logs, and optimization strategies using the Infrequent Access class and S3 export.The Integration Power of the AWS Observability Stack - Operational Transparency Through CloudWatch, X-Ray, and CloudTrailThis article examines the integration level of the AWS observability stack centered on CloudWatch, X-Ray, and CloudTrail, comparing it with Azure Monitor and GCP Cloud Logging to explain how the three pillars of metrics, traces, and logs drive differences in operational quality.Building a Log Analytics Platform with Amazon OpenSearch Service - Index Design and Dashboard ConstructionBuild a log analytics platform and optimize costs with index lifecycle management. Learn about OpenSearch Dashboards and Serverless mode.Amazon CloudWatchA fully managed monitoring service that provides unified monitoring and analysis of metrics, logs, and events for AWS resources and applications