Stream Logs to Amazon EventBridge

Amazon EventBridge is a serverless event bus that acts as an intermediary allowing you to send data from your applications to AWS services. You can create an event-driven workflow using EventBridge to send your Auth0 tenant logs to the targets of your choice, such as AWS EC2 instances, Lambda functions, Kinesis streams, and ECS tasks.

To send Auth0 events to Amazon EventBridge, you will need to:

Set up a partner event source (in this case, Auth0)
Set up a partner event bus that matches incoming events with the routes to which they should be targeted
Create a rule to route incoming events to your choice of AWS service

You can send events from Auth0 to AWS once you have matched your partner event source to the partner event bus.

First, you will need to set up Auth0 for use as the event source in the Dashboard.

Log in to the Auth0 Dashboard.
Navigate to Logs > Streams.
Click + Create Stream.
Select Amazon EventBridge, and enter a unique name for your new Amazon EventBridge Event Stream.
Create the AWS Event Source by providing your AWS Account ID and AWS Region. Note that the region you select must match the region in which your AWS EventBridge resides.
Click Save. Auth0 provides you with an Event Source Name. Make sure to save your Event Source Name value because you will be providing it to AWS at a later point to complete the integration.

Go to the Amazon EventBridge partners tab in your AWS account, and make sure you are in the AWS Region where the event source was created.
Paste the Event Source Name in the event source search box to find the newly-created Event Source, and click on it to associate it with an Event Bus. The Event Source will remain in pending state until it gets associated with an Event Bus, and all the events sent to that Event Source will be dropped.
Once you click on the Event Source, click Associate with Event Bus.
Name the Event Bus the same name as the Event Source. At this point, you can specify permissions for this Event Bus or simply associate it.

At this point, the events that you send are available on your event bus. However, before you can use the data you send to AWS services, you must create rules that map those events to specific targets.

Amazon EventBridge uses rules, which specify how you want incoming events routed to the desired targets. Targets are the services, such as AWS EC2 instances, Lambda functions, Kinesis streams, or ECS tasks, that process the event-driven data that they receive. Data received by targets are JSON-formatted.

A single rule can route to one or more targets (if there are more than one, AWS processes all in parallel).

Go to the EventBridge page, and click Create rule.
Provide the name of the Event Bus, and specify your targets.

As soon as Auth0 writes the next tenant log, you should see a copy of the log Auth0 has written in JSON format at the target you defined in your EventBridge rule.

Auth0 events are delivered to AWS via a streaming mechanism that sends each event as it is triggered in our system. If EventBridge is unable to receive the event, we will retry up to 3 times to deliver the event; otherwise, we will log the failure, and you will see the failure in the Health tab for your log stream.

Docs

Stream Logs to Amazon EventBridge

Stream Logs to Amazon EventBridge

Steps

Set up Auth0 as the partner event source

Set up event bus in AWS

Create EventBridge rules

Test integration

Delivery attempts and retries

Keep reading

Was this article helpful?