CloudWatch Logs SubscriptionFilter error

[Jon-AtAWS]

Hi All,

I'm trying to create a CloudWatch logs SubscriptionFilter and getting "Cannot read properties of undefined (reading 'toString')"

I've been through all of the documentation and examples I can find online, but the only related item was about passing a Function instead of a destination. I think I have that right. I'm at a loss with what to do with this error.

Thanks for any help!

cdk --version 
2.64.0 (build fb67c77)

Code

class CtCwlOsCdkStack(Stack):

    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
        super().__init__(scope, construct_id, **kwargs)

        log_group = cwl.LogGroup(self, 'LogGroupForCTDelivery',
                                 log_group_name=LOG_GROUP_NAME,
                                 retention=cwl.RetentionDays.THREE_DAYS)

        vpc = ec2.Vpc(self, "CTCWLOpenSearchVPC", max_azs=3)
        es_sec_grp = ec2.SecurityGroup(self, 'CTCWLOpenSearchSecGrp', 
                                        vpc=vpc,
                                        allow_all_outbound=True,
                                        security_group_name='CTCWLExampleSecGrp')
        es_sec_grp.add_ingress_rule(ec2.Peer.any_ipv4(), ec2.Port.tcp(80))
        es_sec_grp.add_ingress_rule(ec2.Peer.any_ipv4(), ec2.Port.tcp(443))

        subscription_filter_lambda = lambda_.Function(
            self, 'CTCWLSubscriptionFilterLambda',
            function_name="CTCWLSubscriptionFilter",
            runtime = lambda_.Runtime.NODEJS_16_X,
            code=lambda_.Code.from_asset('CTCWLOpenSearchSubFilter'),
            handler='index.handler',
            vpc=vpc
        )

        lambda_destination = cwl_destinations.LambdaDestination(subscription_filter_lambda)
        subscription_filter = cwl.SubscriptionFilter(
            self, 'CloudTrailSubscriptionFilter',
            log_group=log_group,
            destination=lambda_destination,
            filter_pattern=cwl.FilterPattern.all_events()
        )

The error line is the create for the subscription filter

Full error below. Looks like something is wrong with the lambda destination. I also tried talking to the rubber ducky, but that didn't help either :-)

jsii.errors.JavaScriptError: 
  TypeError: Cannot read properties of undefined (reading 'toString')
      at Function.grantInvoke (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/jsii-kernel-4IfAXH/node_modules/aws-cdk-lib/aws-lambda/lib/function-base.js:2:2333)
      at LambdaDestination.bind (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/jsii-kernel-4IfAXH/node_modules/aws-cdk-lib/aws-lambda-destinations/lib/lambda.js:1:1054)
      at new SubscriptionFilter (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/jsii-kernel-4IfAXH/node_modules/aws-cdk-lib/aws-logs/lib/subscription-filter.js:1:637)
      at Kernel._create (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/tmp4tobxowz/lib/program.js:8467:29)
      at Kernel.create (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/tmp4tobxowz/lib/program.js:8196:29)
      at KernelHost.processRequest (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/tmp4tobxowz/lib/program.js:11482:36)
      at KernelHost.run (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/tmp4tobxowz/lib/program.js:11442:22)
      at Immediate._onImmediate (/private/var/folders/4f/2b3kckld2mn59m48yyp5h_2hjr9cf9/T/tmp4tobxowz/lib/program.js:11443:46)
      at processImmediate (node:internal/timers:464:21)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "/Users/handler/code/ct-cwl-os-cdk/app.py", line 10, in <module>
    CtCwlOsCdkStack(app, "CtCwlOsCdkStack",
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/jsii/_runtime.py", line 111, in __call__
    inst = super().__call__(*args, **kwargs)
  File "/Users/handler/code/ct-cwl-os-cdk/ct_cwl_os_cdk/ct_cwl_os_cdk_stack.py", line 137, in __init__
    subscription_filter = cwl.SubscriptionFilter(
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/jsii/_runtime.py", line 111, in __call__
    inst = super().__call__(*args, **kwargs)
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/aws_cdk/aws_logs/__init__.py", line 5697, in __init__
    jsii.create(self.__class__, self, [scope, id, props])
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/jsii/_kernel/__init__.py", line 336, in create
    response = self.provider.create(
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/jsii/_kernel/providers/process.py", line 363, in create
    return self._process.send(request, CreateResponse)
  File "/Users/handler/code/ct-cwl-os-cdk/.venv/lib/python3.9/site-packages/jsii/_kernel/providers/process.py", line 340, in send
    raise RuntimeError(resp.error) from JavaScriptError(resp.stack)
RuntimeError: Cannot read properties of undefined (reading 'toString')

[Jon-AtAWS]

Groan. OK, never mind.

I had

from aws_cdk import (
    # Duration,
    Stack,
    aws_cloudtrail as ct,
    aws_ec2 as ec2,
    aws_logs as cwl,
    aws_s3 as s3,
    aws_lambda as lambda_,
    aws_lambda_destinations as cwl_destinations,
)

from constructs import Construct

But to import aws_Logs_destinations, NOT aws_lambda_destinations

I will suggest that we improve the error here and/or name the modules so that this is more obvious.

[gmurdocca]

Thanks @Jon-AtAWS , this affected me too. As you say, improved errors/naming would be great.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.