So this function can work with both CloudWatch Logs as well as Kinesis as event source.

If you subscribe this function to individual log groups then you’ll end up with the same problem with scaling it to support ALL your functions. Which is why we use this SAR app to manage the log subscription for us.

If you watch the Twitch stream, we subscribed all log groups to a Kinesis stream, and subscribe this function to that Kinesis stream.