# Amazon S3 log management

Amazon Simple Storage Service (S3) is a quick and cost effective way to store data. S3 server access logs record data access and contain details of each request, such as the request type, the resources specified in the request, and the time and date the request was processed. These logs are written to an S3 bucket once access logging is enabled. By granting Cloud Security Plus read access to this S3 bucket, the logs are processed and presented as S3 traffic analysis reports, which are useful in:

- Security or access audits
- Understanding data access patterns
- Error conditions

## Amazon S3 traffic analysis reports

**S3 Traffic overview:** Gives an overview of all the requestts made by S3.

[![All S3 access requests](https://www.manageengine.com/cloud-security/images/all-s3-access-requests-thumb.png)](https://www.manageengine.com/cloud-security/images/all-s3-access-requests.png)

[![Error access requests](https://www.manageengine.com/cloud-security/images/error-access-requests-thumb.png)](https://www.manageengine.com/cloud-security/images/error-access-requests.png)

**S3 Requests by file:** Displays requests made when accessing a particular file.

**S3 Requests by IP:** Displays requests made by a particular remote IP.

**S3 Requests by Requestor:** Displays requests made by a particular requestor

**S3 Requests by Error Codes:** Displays requests that couldn't be executed due to errors.

**S3 Requests by Methods:** Gives report results that are based on the data request operation or method entered in a given field.

## Detailed S3 traffic analysis reports

These reports provide information on:

- Data requests:
  - **GET** - Request to access an object.
  - **PUT** - Request permission to add data to a resource and make it available via URL.
  - **LIST** - Request to view the contents of a resource.
  - **DELETE** - Request privileges to remove a resource.

[![Event Details](https://www.manageengine.com/cloud-security/images/event-details-thumb.png)](https://www.manageengine.com/cloud-security/images/event-details.png)

- The remote IP from which the request was sent.
- The identity of the user who made a request.
- The total number of times a particular request was made by a specific user.
- The bucket where a resource is located.
- The Unique Resource Identifier (URI) of requested resources.
- Individual event details.