Recommended method
CloudWatch Log Forwarder — enable execution and access logging on each API stage and the Bronto forwarder Lambda subscribes to the CloudWatch Log Groups and streams events into Bronto.Alternatives
- Kinesis Firehose — for high-volume access logs. Access logging writes to CloudWatch Logs; add a subscription filter on the access-log group targeting a Firehose stream. Choose the JSON access-log format so Bronto flattens fields automatically — a CLF/CSV/XML format is stored raw and requires a custom parser. See Supported record formats.

