Amazon S3 log management

Amazon Simple Storage Service (S3) is a quick and cost effective way to store data. S3 server access logs record data access and contain details of each request, such as the request type, the resources specified in the request, and the time and date the request was processed. These logs are written to an S3 bucket once access logging is enabled. By granting Cloud Security Plus read access to this S3 bucket, the logs are processed and presented as S3 traffic analysis reports, which are useful in:

• Security or access audits
• Understanding data access patterns
• Error conditions

Amazon S3 traffic analysis reports

S3 Traffic overview: Gives an overview of all the requestts made by S3.

S3 Requests by file: Displays requests made when accessing a particular file.

S3 Requests by IP: Displays requests made by a particular remote IP.

S3 Requests by Requestor: Displays requests made by a particular requestor

S3 Requests by Error Codes: Displays requests that couldn't be executed due to errors.

S3 Requests by Methods: Gives report results that are based on the data request operation or method entered in a given field.

Detailed S3 traffic analysis reports

These reports provide information on:

• Data requests:
  • GET - Request to access an object.
  • PUT - Request permission to add data to a resource and make it available via URL.
  • LIST - Request to view the contents of a resource.
  • DELETE - Request privileges to remove a resource.