涓婃鏇存柊鏃ユ湡锛?021 骞?3 鏈?10 鏃?/i>
鎴戦渶瑕佽皟璇曟鍦ㄥ紑鍙戠殑 Amazon API Gateway REST API 鎴?WebSocket API 鐨勯敊璇€傚浣曞紑鍚棩蹇楄褰曞姛鑳斤紝浠ュ鎴戠殑 API 杩涜闂鎺掓煡锛?/b>
绠€鐭弿杩?/h2>瑕佸 API Gateway REST API 鎴?WebSocket API 杩涜闂鎺掓煡锛岃浣跨敤 Amazon CloudWatch Logs 寮€鍚墽琛屾棩蹇楄褰曞拰璁块棶鏃ュ織璁板綍鍔熻兘銆?/p>
娉ㄦ剰锛?/b>HTTP API 鐩墠鍙敮鎸佽闂棩蹇楄褰曪紝涓旇繖浜?API 鐨勬棩蹇楄褰曡缃笉鍚屻€傛湁鍏虫洿澶氫俊鎭紝璇峰弬闃?a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-logging.html" target="_blank">涓?HTTP API 閰嶇疆鏃ュ織璁板綍銆?/p>
鎵ц鏃ュ織鍖呭惈鍙敤浜庤瘑鍒拰鎺掓煡澶у鏁?API 閿欒鐨勪俊鎭€備緥濡傦細
鎮ㄧ殑 API 鎺ユ敹鍒扮殑璇锋眰銆?/li> 鏉ヨ嚜鎮ㄧ殑 API 鐨?a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-integration-settings-integration-response.html" target="_blank">闆嗘垚鍚庣鍝嶅簲銆?/li> 鐢?Lambda 鎺堟潈鏂?/a>鎻愪緵鐨勫搷搴斻€?/li> AWS 闆嗘垚缁堢鑺傜偣鐨?requestId銆?/li> 鏈夊叧鎵€鎻愪緵鐨?API 瀵嗛挜鏄惁宸茶幏寰楁巿鏉冪殑淇℃伅銆?/li>璁块棶鏃ュ織鍖呭惈鍝簺浜鸿闂簡鎮ㄧ殑 API 鍙婂叾璁块棶鏂瑰紡鐨勮缁嗕俊鎭紝鎮ㄨ繕鍙互鐢ㄨ繖浜涗俊鎭繘琛?API 閿欒鐨勯棶棰樻帓鏌ャ€傛湁鍏虫瘡绉嶆棩蹇楄褰曠被鍨嬬殑鏇村淇℃伅锛岃鍙傞槄 API Gateway 鐨?CloudWatch Log 鏍煎紡銆?/p> 瑙ｅ喅鏂规硶 鍒涘缓 IAM 瑙掕壊浠ヤ究灏嗘棩蹇楄褰曞埌 CloudWatch
1.鍦?AWS Identity and Access Management (IAM) 鎺у埗鍙?/a>鐨勫乏渚у鑸獥鏍间腑锛岄€夋嫨瑙掕壊銆?/p>
2.鍦?b>瑙掕壊绐楁牸涓紝閫夋嫨鍒涘缓瑙掕壊銆?/p>
3.鍦?Create role锛堝垱寤鸿鑹诧級椤甸潰鎵ц浠ヤ笅鎿嶄綔锛?br />瀵逛簬 Select type of trusted entity锛堥€夋嫨鍙椾俊浠诲疄浣撶被鍨嬶級锛岄€夋嫨 AWS Service锛圓WS 鏈嶅姟锛夈€?br />瀵逛簬 Choose a use case锛堥€夋嫨浣跨敤妗堜緥锛夛紝閫夋嫨 API Gateway銆?br />瀵逛簬 Select your use case锛堥€夋嫨鎮ㄧ殑浣跨敤妗堜緥锛夛紝璇烽€夋嫨 API Gateway銆?br />閫夋嫨 Next: Permissions锛堜笅涓€姝ワ細鏉冮檺锛夈€?/p>
4.璇锋敞鎰忥紝鍦?Attached permissions policies锛堥檮鍔犳潈闄愮瓥鐣ワ級涓嬶紝绯荤粺浼氶粯璁ら€変腑 AWS 鎵樼绛栫暐 AmazonAPIGatewayPushToCloudWatchLogs銆傛绛栫暐鎷ユ湁鎵€鏈夊繀闇€鐨勬潈闄愩€?br />
5.閫夋嫨 Next: Tags锛堜笅涓€姝ワ細鏍囩锛夈€?/p>
6.锛堝彲閫夛級娣诲姞鏍囩銆?/p>
7.閫夋嫨涓嬩竴姝? 妫€鏌?/b>銆?/p>
8.鍦?Review锛堝鏍革級涓嬫墽琛屼互涓嬫搷浣滐細
鍦?b>瑙掕壊鍚嶇О瀛楁涓负瑙掕壊杈撳叆涓€涓湁鎰忎箟鐨勫悕绉般€?br />锛堝彲閫夛級瀵逛簬瑙掕壊鎻忚堪锛屾牴鎹偍鐨勯閫夐」缂栬緫鎻忚堪銆?br />閫夋嫨 Create Role锛堝垱寤鸿鑹诧級銆?/p>
9.鍦?Roles锛堣鑹诧級绐楁牸涓殑鎼滅储鏍忎腑锛岃緭鍏ユ偍鍒涘缓鐨勮鑹茬殑鍚嶇О銆傜劧鍚庯紝浠庢悳绱㈢粨鏋滀腑閫夋嫨瑙掕壊銆?/p>
10.鍦?Summary锛堟憳瑕侊級绐楁牸涓紝澶嶅埗瑙掕壊 ARN銆傚湪涓嬩竴閮ㄥ垎涓偍灏嗛渶瑕佷娇鐢ㄦ Amazon 璧勬簮鍚嶇О (ARN)銆?/p>
鏈夊叧鏇村淇℃伅锛岃鍙傞槄 CloudWatch 鏃ュ織璁板綍鏉冮檺銆?/p> 鍦?API Gateway 鎺у埗鍙颁腑娣诲姞 IAM 瑙掕壊
娉ㄦ剰锛?/b>濡傛灉鎮ㄦ鍦ㄨ法涓嶅悓 AWS 鍖哄煙寮€鍙戝涓?API锛屽垯璇峰湪姣忎釜鍖哄煙涓畬鎴愪互涓嬫楠ゃ€?/p>
1.鍦?API Gateway 鎺у埗鍙?/a>涓殑 API 绐楁牸涓婏紝閫夋嫨鎮ㄥ垱寤虹殑 API 鐨勫悕绉般€?/p>
2.鍦ㄥ乏渚у鑸獥鏍间笅鏂圭殑 Client Certificates锛堝鎴风璇佷功锛夐儴鍒嗕笅鏂癸紝閫夋嫨 Settings锛堣缃級銆?/p>
3.鍦?Settings锛堣缃級涓嬶紝涓?CloudWatch 鏃ュ織瑙掕壊 ARN 绮樿创鎮ㄥ鍒剁殑 IAM 瑙掕壊 ARN銆?/p>
4.閫夋嫨 Save锛堜繚瀛橈級銆?br />娉ㄦ剰锛?/b>鎺у埗鍙颁笉浼氱‘璁?ARN 鏄惁宸蹭繚瀛樸€?/p> 閽堝鎮ㄧ殑 API 鍜岄樁娈靛紑鍚棩蹇楄褰?/h3>
1.鍦?API Gateway 鎺у埗鍙?/a>涓紝涓烘偍鐨?API 鎵惧埌 Stage Editor锛堥樁娈电紪杈戝櫒锛?/a>銆?/p>
2.鍦?Stage Editor锛堥樁娈电紪杈戝櫒锛夌獥鏍间腑锛岄€夋嫨 Logs/Tracing锛堟棩蹇?璺熻釜锛夐€夐」鍗°€?/p>
3. 鍦?Logs/Tracing锛堟棩蹇?璺熻釜锛夐€夐」鍗′笂鐨?CloudWatch Settings锛圕loudWatch 璁剧疆锛変笅锛屾墽琛屼互涓嬫搷浣滀互寮€鍚墽琛屾棩蹇楄褰曪細
閫夋嫨 Enable CloudWatch Logs锛堝惎鐢?CloudWatch Logs锛夊閫夋銆?br /> 瀵逛簬 Log level锛堟棩蹇楃骇鍒級锛岄€夋嫨 INFO锛堜俊鎭級浠ラ拡瀵规墍鏈夎姹傜敓鎴愭墽琛屾棩蹇椼€傛垨鑰咃紝閫夋嫨 ERROR锛堥敊璇級浠ヤ粎閽堝瀵艰嚧閿欒鐨?API 璇锋眰鐢熸垚鎵ц鏃ュ織銆?br /> 瀵逛簬 REST API锛岄€夋嫨 Log full requests/responses data锛堣褰曞畬鏁磋姹?鍝嶅簲鏁版嵁锛夊閫夋銆傛垨鑰咃紝瀵逛簬 WebSocket API锛岄€夋嫨 Log full message data锛堣褰曞畬鏁存秷鎭暟鎹級澶嶉€夋銆?/p>
4.鍦?b> Custom Access Logging锛堣嚜瀹氫箟璁块棶鏃ュ織璁板綍锛変笅锛屾墽琛屼互涓嬫搷浣滀互寮€鍚闂棩蹇楄褰曪細
閫夋嫨 Enable Access Logging锛堝惎鐢ㄨ闂棩蹇楄褰曪級澶嶉€夋銆?br /> 瀵逛簬 Access Log Destination ARN锛堣闂棩蹇楃洰鏍?ARN锛夛紝杈撳叆 CloudWatch 鏃ュ織缁?/a>鎴?Amazon Kinesis Data Firehose 娴佺殑 ARN銆?br /> 杈撳叆 Log Format锛堟棩蹇楁牸寮忥級銆傚浜庢寚瀵硷紝閫夋嫨 CLF銆?b>JSON銆?b>XML 鎴?CSV锛屼粠鑰屼互璇ユ牸寮忔煡鐪嬬ず渚嬨€?/p>
5.閫夋嫨 Save Changes锛堜繚瀛樻洿鏀癸級銆?br /> 娉ㄦ剰锛?/b>鎺у埗鍙颁笉浼氱‘璁よ缃槸鍚﹀凡淇濆瓨銆?/p>
鏈夊叧鏇村淇℃伅锛岃鍙傞槄浣跨敤 API Gateway 鎺у埗鍙拌缃?CloudWatch API 鏃ュ織璁板綍銆?/p> 娴嬭瘯鎮ㄧ殑鏃ュ織璁板綍鍔熻兘璁剧疆
1.浣跨敤鎮ㄧ殑瀹㈡埛绔簲鐢ㄧ▼搴忔垨鑰?Postman 搴旂敤绋嬪簭銆?a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-how-to-call-websocket-api-wscat.html" target="_blank">wscat锛堥€傜敤浜?WebSocket API锛夌瓑宸ュ叿鍚戞偍鐨?API 鍙戦€佹柊璇锋眰銆?/p>
2.鍦?CloudWatch 鎺у埗鍙?/a>宸︿晶瀵艰埅绐楁牸涓殑 Logs锛堟棩蹇楋級涓嬶紝閫夋嫨 Log Groups锛堟棩蹇楃粍锛夈€?/p>
3.鍦?Log Groups锛堟棩蹇楃粍锛夊垪琛ㄤ腑锛岄€夋嫨鎮ㄨ璋冭瘯鐨?API 鐨勬棩蹇楃粍銆?br />瀵逛簬 REST API锛屾棩蹇楃粍鍚嶇О浣跨敤浠ヤ笅鏍煎紡锛?b>API-Gateway-Execution-Logs_apiId/stageName銆?br />瀵逛簬 WebSocket API锛屾棩蹇楃粍鍚嶇О浣跨敤浠ヤ笅鏍煎紡锛?b>/aws/apigateway/apiId/stageName銆?br />娉ㄦ剰锛?/b>璁块棶鏃ュ織浣嶄簬鎮ㄥ湪寮€鍚闂棩蹇楄褰曟椂涓哄叾鎸囧畾 ARN 鐨勬棩蹇楃粍涓€?/p>
4.鍦?Log Streams锛堟棩蹇楁祦锛夌殑鍒楄〃涓紝閫夋嫨鍏锋湁鏈€鏂扮殑涓婁竴娆′簨浠舵椂闂?/b>鐨勬棩蹇楁祦銆傛閫夋嫨灏嗗厑璁告偍鏌ョ湅鍖呭惈璇锋眰鎵ц鎴栬闂缁嗕俊鎭殑娑堟伅銆?/p>
鏈夊叧鏇村淇℃伅锛岃鍙傞槄鍦?CloudWatch 鎺у埗鍙颁腑鏌ョ湅 API Gateway 鏃ュ織浜嬩欢銆?/p>