Logs in Cloudwatch

[dalethompsonplx]

I been doing some testing and playing around, but I been unable to get logs in cloudwatch with details as to what is going on in the calls. Even simple as the server start logs are not showing up in cloudwatch. I am running in VPC mode, with security groups and a nat.
It might be something simple I am doing wrong, but no luck so far.
Tracing working, in cloudwatch, all the sessions work. but still no simple logs that can help with debugging and problem solving

console.log('CONSOLE LOGGING TEST')
console.log('This message should appear in CloudWatch logs')
console.log('If you can see this, console.log is working')
console.log('Log group should be: /aws/bedrock-agentcore/runtimes/{RUNTIME_ID}-DEFAULT')
console.log('END CONSOLE LOGGING TEST')

[dalethompsonplx]

ah I figured it out, I had the permissions wrong for the

"logs:DescribeLogGroups",
"logs:DescribeLogStreams"

The permission required is at the higher level..