aws-pipes: CfnPipe doesn't set the CloudWatch Log Group in AWS Console

[garysassano]

Describe the bug

I deployed this EventbridgeStack and then checked the configuration for one of the Pipes in the AWS Console.

I noticed something curious:

The CloudWatch log group appears as NOT selected in the UI, yet it is actually selected (otherwise, it wouldn’t function properly).

Let's double-check:

1. Open the dropdown menu and select the same log group specified in the EventbridgeStack.
2. Save the Pipe.
3. Run cdk deploy again.

You’ll observe that no changes are made, which indicates the log group was correctly applied despite the UI showing otherwise. This seems to be a UI bug that occurs when deploying via CDK, and it might also affect deployments through CloudFormation directly.

Regression Issue

• Select this option if this issue appears to be a regression.

Last Known Working CDK Version

No response

Expected Behavior

See above.

Current Behavior

See above.

Reproduction Steps

See above.

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.161.1

Framework Version

No response

Node.js Version

20.18.0

OS

Ubuntu 22.04

Language

TypeScript

Language Version

No response

Other information

No response

[pahud]

I deployed this EventbridgeStack and then checked the configuration for one of the Pipes in the AWS Console.

Before the deployment, if you run npx cdk diff, did you see any log group resource to be created?

The CloudWatch log group appears as NOT selected in the UI, yet it is actually selected (otherwise, it wouldn’t function properly).

And, instead of the external repo provided, are you able to provide a minimal code snippets in Reproduction Steps that reproduces this issue?

[garysassano]

Here's a minimal reproducible example using the Pipe L2 construct (which uses CfnPipe under the hood):

const ddbTable = new TableV2(this, "DDBTable", {
  tableName: "ddb-table",
  partitionKey: {
    name: "Location",
    type: AttributeType.STRING,
  },
  dynamoStream: StreamViewType.NEW_AND_OLD_IMAGES,
  removalPolicy: RemovalPolicy.DESTROY,
});

const queue = new Queue(this, "Queue", {
  retentionPeriod: Duration.days(14),
});

const pipeSource = new DynamoDBSource(ddbTable, {
  startingPosition: DynamoDBStartingPosition.LATEST,
  batchSize: 1,
  maximumRetryAttempts: 0,
});

const logGroup = new LogGroup(this, "AccessLogs", {
  retention: RetentionDays.THREE_MONTHS,
  removalPolicy: RemovalPolicy.DESTROY,
});

const cwLogDestination: ILogDestination = {
  bind: () => ({
    parameters: {
      cloudwatchLogsLogDestination: {
        logGroupArn: logGroup.logGroupArn,
      },
    },
  }),
  grantPush: (grantee) => {
    logGroup.grantWrite(grantee);
  },
};

new Pipe(this, "Pipe", {
  source: pipeSource,
  target: new SqsTarget(queue),
  logDestinations: [cwLogDestination],
});