Amazon S3 Tables now support S3 server access logging

Amazon S3 Tables Server Access Logging

Amazon S3 Tables now support server access logging, providing detailed records of requests made to your table buckets. This feature enables tracking of table operations, namespace management, and data access to support security audits, access analysis, and cost attribution. Log delivery is available at no additional cost, with charges only for the storage of the log files.

When you enable server access logging on a table bucket, S3 delivers logs for requests to all tables and namespaces in that bucket to a general purpose bucket in the same account and Region. Each log record captures the requester, operation, table name, namespace, response status, and request timing, using the same space-delimited format as S3 server access logs for general purpose buckets. This allows you to reuse your existing log analysis workflows to query S3 Table logs with any query engine of your choice, such as Amazon Athena and DuckDB.

Server access logging for S3 Tables is available in all AWS Regions where S3 Tables are available. You can enable it using the AWS Management Console, AWS CLI, AWS SDKs, or AWS CloudFormation.

What to do

• Enable server access logging on your table buckets to track operations and access.
• Use existing log analysis workflows to query S3 Table logs with query engines like Amazon Athena and DuckDB.
• Review the S3 server access logging documentation for more details.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.