# AWS Provider fails if 2 or more CloudWatchLog events listed

**URL:** <https://forum.serverless.com/t/aws-provider-fails-if-2-or-more-cloudwatchlog-events-listed/8483>\
**Category:** Serverless Framework\
**Tags:** aws, lambda\
**Created:** [June 5, 2019, 9:02pm UTC](https://forum.serverless.com/t/aws-provider-fails-if-2-or-more-cloudwatchlog-events-listed/8483 "2019-06-05T21:02:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rickalm](https://avatars.discourse-cdn.com/v4/letter/r/dfb087/32.png) [@rickalm](https://forum.serverless.com/u/rickalm)\
**Post date:** [June 5, 2019, 9:02pm UTC](https://forum.serverless.com/t/aws-provider-fails-if-2-or-more-cloudwatchlog-events-listed/8483/1 "2019-06-05T21:02:05Z")

</div>

I have a config that lists two different events

```
functions:
  dummy-logger:
    handler: handler.logger
    events:
      - cloudwatchLog:
          logGroup: '/aws/lambda/yada-${self:provider.stage}-dummy'
          filter: 'REPORT'
      - cloudwatchLog:
          logGroup: '/aws/lambda/yada-${self:provider.stage}-dummy2'
          filter: 'REPORT'

```

It creates 2 SubscriptionFilter objects

functionnameLogsSubscriptionFilterCloudWatchLog **AWS::Logs::SubscriptionFilter**  
functionnameLogsSubscriptionFilterCloudWatchLog2 **AWS::Logs::SubscriptionFilter**

but only one Permission object  
functionnameLambdaPermissionLogsSubscriptionFilterCloudWatchLog **AWS::Lambda::Permission**

which only includes the loggroup from the first subscription filter

as such the CFN template fails with

Could not execute the lambda function. Make sure you have given CloudWatch Logs permission to execute your function. (Service: AWSLogs; Status Code: 400; Error Code: InvalidParameterException; Request ID: 0b096e01-87d2-11e9-b52a-59a1410a5e04)

**I have confirmed I’m running serverless@1.44.1**

---

<div class="post-metadata">

**Author:** ![pixelport](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/pixelport/32/4764_2.png) [@pixelport](https://forum.serverless.com/u/pixelport)\
**Post date:** [November 24, 2020, 2:41pm UTC](https://forum.serverless.com/t/aws-provider-fails-if-2-or-more-cloudwatchlog-events-listed/8483/2 "2020-11-24T14:41:39Z")

</div>

I have the same issue and am running serverless@2.2.0.

Could you resolve this or find a workaround? The only workaround I can think of is using a separate lambda function for each log group. Are there plans to fix this?