AWS First Steps
LanguageEnglish
Region expansion

Amazon S3 server access log delivery to Amazon CloudWatch Logs now available in five additional AWS Regions

Amazon S3 now delivers server access logs to CloudWatch Logs in AWS GovCloud (US), European Sovereign Cloud, and China Regions, enabling real-time querying, alarms, and AWS KMS encryption.

Amazon S3 server access logs can now be delivered to CloudWatch Logs in AWS GovCloud (US), AWS European Sovereign Cloud, and AWS China regions. This allows querying, setting alarms, and encrypting logs with AWS KMS keys upon arrival. It enables flexible monitoring and analysis of data access alongside existing S3 general bucket logging. Features include error rate alarms, traffic pattern monitoring, access incident investigation, and correlation with other operational data. Delivery to CloudWatch Logs is available in all AWS regions, with vendor-provided logging charges applying; see Amazon CloudWatch pricing for details.

Why it matters

For organizations prioritizing data security and compliance, this enables more efficient monitoring and analysis of S3 access through CloudWatch Logs.

Regions: All Regions

Read the original AWS announcement

Related articles and terms

Why CloudWatch Logs Costs More Than You Expect - The Cost Structure of Ingestion, Storage, and AnalysisThis article explains the pricing structure where CloudWatch Logs ingestion costs over 20 times more than storage, the cost explosions caused by VPC Flow Logs and Lambda logs, and optimization strategies using the Infrequent Access class and S3 export.Amazon CloudWatchA service that provides monitoring, log management, and alarms for AWS resources and applicationsThe Integration Power of the AWS Observability Stack - Operational Transparency Through CloudWatch, X-Ray, and CloudTrailThis article examines the integration level of the AWS observability stack centered on CloudWatch, X-Ray, and CloudTrail, comparing it with Azure Monitor and GCP Cloud Logging to explain how the three pillars of metrics, traces, and logs drive differences in operational quality.Building Unified Monitoring with Amazon CloudWatch - Designing Metrics, Logs, and AlarmsBuild unified monitoring with the three pillars of metrics, logs, and alarms. This article covers interactive analysis with Logs Insights, high-precision notifications with composite alarms, and leveraging Embedded Metric Format.Building a Security Data Lake with Amazon Security Lake - Unified Analysis in OCSF FormatLearn about Security Lake's automatic aggregation of CloudTrail, VPC Flow Logs, and Route 53 logs, OCSF normalization, and integration with subscribers.