AWS AmazonS3 documentation change
Summary
Added details about delivering server access logs to CloudWatch Logs for structured querying/cross-account aggregation and S3 buckets.
Security assessment
Expands documentation for server access logs – a security feature used for audits. New CloudWatch Logs/S3 delivery options enhance security monitoring capabilities but don't address a specific vulnerability.
Diff
diff --git a/AmazonS3/latest/userguide/monitoring-overview.md b/AmazonS3/latest/userguide/monitoring-overview.md index f9cb75c2a..17206f72b 100644 --- a//AmazonS3/latest/userguide/monitoring-overview.md +++ b//AmazonS3/latest/userguide/monitoring-overview.md @@ -52 +52 @@ CloudTrail provides a record of actions taken by a user, role, or an AWS service -Server access logs provide detailed records about requests that are made to a bucket. Server access logs are useful for many applications. For example, access log information can be useful in security and access audits. For more information, see [Logging requests with server access logging](./ServerLogs.html). +Server access logs provide detailed records about requests that are made to a bucket. Server access logs are useful for many applications. For example, access log information can be useful in security and access audits. You can deliver logs to Amazon CloudWatch Logs for structured querying and cross-account aggregation, or to an Amazon S3 general purpose bucket in text format at no charge. For more information, see [Logging requests with server access logging](./ServerLogs.html).