How do I turn on logging for my CloudFront distribution?

Resolution

To turn on logging for CloudFront distributions, you can use CloudFront standard logs or CloudFront real-time logs.

Turn on CloudFront standard logs

Prerequisites:

• The Amazon Simple Storage Service (Amazon S3) bucket that you use for log files must adhere to the CloudFront requirements.
• Your AWS account must have the required permissions for the bucket.
• If you use AWS Key Management Service (AWS KMS): You must have the required key policy for buckets that use a customer managed key for server-side encryption with AWS KMS keys (SSE-KMS).

To turn on standard logging for a CloudFront distribution, complete the following steps:

1. Open the CloudFront console.
2. Select the distribution that you want to update.
3. In the General tab, under Settings, choose Edit.
4. For Standard logging, select On.
5. Choose the S3 bucket where you want CloudFront to deliver the log files. You can specify an optional prefix for the file names.
6. (Optional) For Cookie logging, select On or Off. If turned on, then CloudFront logs the cookies in all requests regardless of which cookies you forward to the origin.
7. Choose Save changes.

Turn on CloudFront real-time logs

Create and use a real-time log configurations