Amazon_S3_2

Ensure S3 bucket access logging is enabled on the CloudTrail S3 bucket

Description

S3 Bucket Access Logging generates a log that contains access records for each request made to your S3 bucket. An access log record contains details about the request, such as the request type, the resources specified in the request worked, and the time and date the request was processed. It is recommended that bucket access logging be enabled on the CloudTrail S3 bucket.

Remediation

Perform the following to enable S3 bucket logging:

Via the Management Console

  1. Sign in to the AWS Management Console and open the S3 console
    at https://console.aws.amazon.com/s3.
  2. Under All Buckets click on the target S3 bucket
  3. Click on Properties in the top right of the console
  4. Under Bucket: &lt

Service

S3

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!