Thanks for replying. We would also like to look up all the logs of one correlation ID in one place. Traversing between different log groups is really not that practical in Cloudwatch. In your part 3 article, you mentioned shipping logs from CloudWatch to ELK. Do you still recommend ELK? Or is there a better option now?