AWS CloudWatch - Rocketgraph

Rocketgraph reads from your existing CloudWatch — no SDK changes needed.

Setup

export ROCKETGRAPH_API_KEY=rg_live_xxxxxx
npx @rgraph/otel-node init

Or connect manually at rocketgraph.app/settings:

AWS Access Key ID — from a read-only IAM user
AWS Secret Access Key
Region — e.g. us-east-1
Log Group — e.g. /aws/lambda/my-function

IAM policy (minimum permissions)

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "logs:GetLogEvents",
        "logs:FilterLogEvents",
        "logs:DescribeLogGroups",
        "logs:DescribeLogStreams"
      ],
      "Resource": "arn:aws:logs:*:*:*"
    }
  ]
}

Once connected, Rocketgraph pulls your CloudWatch logs for ML anomaly detection and deploy regression analysis.