使用AWS re:Post即您表示您同意 AWS re:Post 使用条款
AWS re:Postre:Post

S3 access logging

0

Hi team,

I enabled the Server access logging in my bucket and specified a destination bucket for logs,

the destination bucket is encrypted with SSE-KMS (using my own KMS KEY),

but noticed that the logs don't come to this destination log bucket

is there a missing step to do so I can see logs on the destination bucket?

Thank you!

主题
存储安全、身份和合规性管理与治理微服务
标签
亚马逊简单存储服务 (S3)AWS 智能钥匙管理服务安全、身份和合规性AWS CloudFormation微服务
语言
English
Jess
已提问 2 年前1278 查看次数
1 回答
2

Permissions need to be configured for log delivery. This might help: https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html

edeastwood
已回答 2 年前
  • Jess
    2 年前

    yea I already did that, still not working, seems KMs not supported??

  • RichardFan
    2 年前

    Yes, the document says:

    You can use default bucket encryption on the target bucket only if you use AES256 (SSE-S3). Default encryption with AWS KMS keys (SSE-KMS) is not supported.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈，并能促进提问者的职业发展。

回答问题的准则

相关内容