amplify-flutter Add remote logging

This issue is being split of off from https://github.com/aws-amplify/amplify-flutter/issues/1208.

Orinal Request

Remote logging: send logs and metrics from mobile app to cloud for debugging and monitoring purpose, possibly cloudwatch as the solution.

Questions & Answers

Do you mean you need an API to allow sending any type of logs to CloudWatch any time and any where in your App?

Yes, I am more referring to the forntend log and metric in our mobile app, such as clickstream, response time, etc.

The Amplify library functionalities are implemented on top of AWS services, such as AppSync, Cognito, Pinpoint etc, each of them should have service level logging mechanism.

We are using the amplify logging already, but we would like to collect frontend log and metric as well

For metrics (if you meant use cases such as collecting data of how your App users use the App), the Analytics category should be able to help.

We are using analytic already, but we can not build alarm on those metrics. Additionally, analytic does not collect runtime log

Apr 28 '22 20:04 Jordan-Nelson

Hi Guys, I thought I would add this DefCon presentation here: https://www.youtube.com/watch?app=desktop&si=H-Gg_EvgoP0sOncU&v=3T2Al3jdY38&feature=youtu.be

It goes in great details in explaining what vulnerabilities are open by allowing logging from untrusted sources.

Edit: The official OWASP link has good textual information, https://owasp.org/www-community/attacks/Log_Injection

Sep 20 '23 13:09 dgagnon

Hi, as I already wrote in July (see https://github.com/aws-amplify/amplify-flutter/issues/3400) I need Cloudwatch in my project.

Do you have any timeline when the Cloudwatch support will be released for Flutter?

Thanks

Sep 28 '23 10:09 ibelz

Hi @dgagnon - thank you for shaing that presentation - it was very insightful (and fun) to watch! We will take that into account to try to see if there are ways to validate the source sending logs.

Hi @ibelz - we are finalizing some design decisions, we will provide an update on this issue when we have a timeline locked down.