npmpackage.info

Gathering detailed insights and metrics for serverless-plugin-log-subscription

Gathering detailed insights and metrics for serverless-plugin-log-subscription

serverless-plugin-log-subscription - 3.0.0 | npmpackage.info

serverless-plugin-log-subscription

3.0.0

42

NOASSERTION

JavaScript

17.25 kB

Installations

npm install serverless-plugin-log-subscription

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

20.18.2

NPM Version

10.8.2

Pull Requests

Open

20

Total

60

Closed

10

Merged

30

Issues

Open

11

Total

37

Closed

26

Releases

Unable to fetch releases

Languages

1

JavaScript

JavaScript (100%)

Developer

dougmoscrop

Download Statistics

Total Downloads

0

Last Day

0

Last Week

0

Last Month

0

Last Year

0

GitHub Statistics

NOASSERTION License

42 Stars

88 Commits

22 Forks

3 Watchers

22 Branches

16 Contributors

Updated on Jun 10, 2025

Maintainers

1

View All 16 Contributors

Package Meta Information

Latest Version

3.0.0

Package Id

serverless-plugin-log-subscription@3.0.0

Unpacked Size

17.25 kB

Size

5.12 kB

File Count

5

NPM Version

10.8.2

Node Version

20.18.2

Published on

Feb 24, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

0%

NaN

Compared to previous day

Last Week

0%

NaN

Compared to previous week

Last Month

0%

NaN

Compared to previous month

Last Year

0%

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Peer Dependencies

1

Dev Dependencies

6

@serverless/test ava aws-sdk-client-mock eslint nyc sinon

serverless-plugin-log-subscription

This plugin adds an AWS::Logs::LogSubscription for each of your Lambda functions when enabled.

Log subscriptions are used to deliver your CloudWatch Logs to a destination of some kind. This may be a CloudWatch Destination resource (which wraps a Kinesis stream) or a Lambda function.

Changes In 2.0

As of 2.0, this plugin will automatically create the AWS::Lambda::Permission if your destinationArn is a reference to a Lambda function within your service.

If you do not want permissions to be created automatically, you can set addLambdaPermission: false.

The addSourceLambdaPermission option has been removed and will throw an error.

Configuration

Configuration happens both 'globally' (via custom.logSubscription) and also at the function level (via function.yourFunction.logSubscription)

enabled - whether or not log subscriptions are enabled. defaults to false globally, if set to true it will be on for all functions (unless they set to false)

destinationArn (required) - the arn of the CloudWatch Destination (you create this resource yourself) or an Fn::GetAtt reference to a local Lambda function for direct subscription

roleArn (optional) - the arn of the IAM role granting logs permission to put to Destination (you create this resource yourself)

filterPattern (optional) if specified, it will only forward logs matching this pattern. You can do simple token matching, or JSON matching (e.g. { $.level >= 30 } to match a bunyan level)

filterName (optional) if specified, this name will be used for the FilterName property of the AWS Subscription Filter.

apiGatewayLogs (optional) if true the plugin will configure a subscription filter for the API Gateway access and execution log groups. This feature only works if logging is enabled for the API gateway as well.

Examples

The most basic:

1custom:
2  logSubscription:
3    destinationArn: 'some-arn'
4    roleArn: 'some-arn'
5
6functions:
7  myFunction:
8    logSubscription: true

Custom function settings:

1custom:
2  logSubscription:
3    destinationArn: 'some-arn'
4    filterName: 'some-filter-name'
5
6functions:
7  myFunction:
8    logSubscription:
9      filterPattern: 'WARN*'

Enabled for all functions:

1custom:
2  logSubscription:
3    enabled: true
4    destinationArn: 'some-arn'
5    roleArn: 'some-arn'
6
7functions:
8  myFunction:
9    ...

Disabled for one function:

1custom:
2  logSubscription:
3    enabled: true
4    destinationArn: 'some-arn'
5
6functions:
7  myFunction:
8    ...
9  myOtherFunction:
10    logSubscription: false

Lambda function directly:

1custom:
2  logSubscription:
3    enabled: true
4    destinationArn:
5      # Note that you have to use Serverless' naming convention here
6      Fn::GetAtt: ['LogsProcessorLambdaFunction', 'Arn']
7    addLambdaPermission: true # this is the default, set to false to manage your own permissions
8
9functions:
10  api:
11    ...
12  logsProcessor:
13    logSubscription: false # Don't subscribe the log processors logs to the log processor..

Several subscription filters for one log group / the same log group:

Note: Please make sure your AWS account is allowed to use this feature!
By default, AWS allows to use 1 subscription filter per log group and this quota can't be changed.
But, there is an opportunity to ask AWS Support to help you with using several subscription filters for one log group.

1custom:
2  logSubscription:
3    - enabled: true
4      destinationArn: 'some-arn-1'
5      roleArn: 'some-arn'
6    - enabled: true
7      destinationArn: 'some-arn-2'
8      roleArn: 'some-arn'
9
10functions:
11  myFunction:
12    ...

Empty State

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

9

License

Determines if the project has defined a license.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

40 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-h452-7996-h45h
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-xwcq-pm8m-c4vf
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-x3cc-x39p-42qx
Warn: Project is vulnerable to: GHSA-mhxj-85r3-2x55
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-h755-8qp9-cq85
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-3f95-r44v-8mrg
Warn: Project is vulnerable to: GHSA-28xr-mwxg-3qc8
Warn: Project is vulnerable to: GHSA-9p95-fxvg-qgq2
Warn: Project is vulnerable to: GHSA-9w5j-4mwv-2wj8
Warn: Project is vulnerable to: GHSA-qm95-pgcg-qqfq
Warn: Project is vulnerable to: GHSA-cqmj-92xf-r6r9
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

2.8

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.