Medium
S3
S3 general purpose buckets should have server access logging enabled
NISTISO 27001HIPAA
Description
Checks if S3 bucket server access logging is enabled.
Remediation
To enable server access logging for an S3 bucket, follow these steps:
Steps
- Sign in to the AWS Management Console and open the Amazon S3 console.
- In the Buckets list, choose the name of the bucket for which you want to enable server access logging.
- Choose the 'Properties' tab.
- In the 'Server access logging' section, choose 'Edit'.
- Select 'Enable' for server access logging.
- In the 'Target bucket' field, enter the name of the bucket where you want the log files to be stored. This can be the same bucket or a different one.
- Optionally, you can specify a prefix for the log files in the 'Target prefix' field.
- Choose 'Save changes'.
- Ensure that the target bucket has the necessary permissions to store the log files. If you're using a different bucket for logs, you may need to update its bucket policy or ACL to allow log delivery.
- Verify that logs are being delivered to the target bucket after enabling the feature.
Compliance
NISTISO 27001HIPAA