'AWS S3 Access Logging for All Buckets
Is it possible to have server access logging enabled for all S3 buckets in an account? While you can configure an S3 bucket to log to itself, according to this document that will result in a loop that will cascade: https://aws.amazon.com/premiumsupport/knowledge-center/s3-server-access-logs-same-bucket/.
Is there some way to tell it not to log actions caused by the access logging action? Should the access log bucket not have access logs enable for itself? Seems like that'd be leaving a security hole.
I set my S3 access log bucket to send access logs to itself and, as expected, an infinite storm of logs occurred as the access logging seemed to log it's own actions. I had hoped that maybe AWS had improved this over the years, but I guess not.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
