Delving into the AWS world, I have created two buckets in my AWS. The first one called
BucketA (holding the files) and the second one called
BucketB (holding the log files).
BucketA will be hosting images which will be accessible from the outside world as these are not sensitive. Let's assume the images are called
image3.png and the pattern continues.
Both my buckets are in the same region.
The web addresses for each file is as follows: (these are sample links and are not real and at the moment apparently someone owns them and they are in an access denied mode)
My goal is to accomplish the following: To know which IP address, at what time opened and viewed a certain image.
I have set the
Log Delivery for
S3 log delivery group in
BucketB to read and write, and for
BucketA I have enabled the
Server access logging and set the
Target Bucket to be
Now, for testing purposes, I am trying to enter the links above, but I am not getting any logs written in the
- Can I accomplish what I am trying to accomplish by this method? (I Know I might use AWS CloudTrail with Data Events but I want to use good-old Server Logging)
- Does this type of loggin work on basic link visit? Or it has to be done programmatically with a specific HTTP GET request so that a log appears?
- Do I need to add any type of Bucket Policy or ACL than the ones automatically generated by allowing log access using the normal web console?
- Does a request gets logged even if the access is denied to that object ?
There is a similar question here: S3 logs do not appear in targeted bucket which was solved by deleting all the buckets and creating new ones, which isn't really providing a solution to the problem and is the aws version of an IT saying
Please restart the computer and it should work.