Download all CloudWatch logs

download-cloudwatchlogs

log_group_name="/aws/log-group-name"

log_stream_names=$(aws logs describe-log-streams \
  --log-group-name "$log_group_name" \
  --order-by LastEventTime \
  --descending \
  --max-items 50 \
  --output text \
  --query 'logStreams[*].logStreamName')

for log_stream_name in $log_stream_names; do
  aws logs get-log-events \
    --log-group-name "$log_group_name" \
    --log-stream-name "$log_stream_name" \
    --output text \
    --query 'events[*].message'
done > cloudwatch.log