AWS AmazonCloudFront documentation change
Summary
Added troubleshooting section for standard logging configuration issues
Security assessment
Addresses log delivery configuration errors but does not directly relate to security vulnerabilities or add new security documentation.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/standard-logging.md index 471f79097..cdaaeeded 100644 --- a/AmazonCloudFront/latest/DeveloperGuide/standard-logging.md +++ b/AmazonCloudFront/latest/DeveloperGuide/standard-logging.md @@ -766,0 +767,4 @@ When you delete standard logging from the CloudFront console, this action only d +Use the following information to fix common issues when you work with CloudFront standard logging (v2). + +### Delivery source already exists + @@ -773,0 +778,21 @@ To create another delivery source, delete the existing one first. For more infor +### I changed the suffix path and the Amazon S3 bucket can't receive my logs + +If you enabled standard logging (v2) and specify a bucket ARN without a prefix, CloudFront will append the following default to the suffix path: `AWSLogs/{account-id}/CloudFront`. If you use the CloudFront console or the [UpdateDeliveryConfiguration](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateDeliveryConfiguration.html) API operation to specify a different suffix path, you must update the Amazon S3 bucket policy to use the same path. + +###### Example: Updating the suffix path + + 1. Your default suffix path is `AWSLogs/{account-id}/CloudFront` and you replace it with `myFolderA`. + + 2. Because your new suffix path is different than the path specified in the Amazon S3 bucket policy, your access logs won't be delivered. + + 3. You can do one of the following steps: + + * Update the Amazon S3 bucket permission from `amzn-s3-demo-bucket/AWSLogs/`<your-account-ID>`/CloudFront/*` to `amzn-s3-demo-bucket/myFolderA/*`. + + * Update your logging configuration to use the default suffix again: `AWSLogs/{account-id}/CloudFront` + + + + +For more information, see Permissions. +