Amazon S3 server access logs can now be delivered to CloudWatch Logs and S3 Tables
Amazon S3 now supports delivering server access logs to Amazon CloudWatch Logs, enabling instant querying, alarms, and cross-account aggregation. Logs can also be mirrored to Amazon S3 Tables in Apache Iceberg format for SQL querying. These options provide greater flexibility for monitoring and analyzing data access, complementing existing S3 bucket delivery. CloudWatch Logs delivery is available in all standard AWS Regions.
- →S3 server access logs delivery to Amazon CloudWatch Logs
- →S3 server access logs mirroring to Amazon S3 Tables
- →New delivery options enhance S3 access log flexibility
- →Availability of CloudWatch Logs delivery
Features (2) ›
- S3 server access logs delivery to Amazon CloudWatch Logs
Amazon S3 now supports delivering server access logs to Amazon CloudWatch Logs. This integration allows for instant querying, alarms, cross-account and cross-Region aggregation, and KMS encryption for access log data. It enables monitoring of traffic patterns, investigation of access incidents, and correlation with other operational data.
- S3 server access logs mirroring to Amazon S3 Tables
Server access logs can now be mirrored to Amazon S3 Tables in Apache Iceberg format at no additional storage cost. These logs are immediately queryable with standard SQL in Amazon Athena, Amazon Redshift, and other compatible engines for auditing and trend analysis.
Notes (2) ›
- New delivery options enhance S3 access log flexibility
These new delivery paths complement the existing free delivery of server access logs to S3 general purpose buckets, offering users more flexibility in how they monitor and analyze access to their data.
- Availability of CloudWatch Logs delivery
Delivery of S3 server access logs to CloudWatch Logs is available today in all AWS Regions, with the exception of AWS China Regions and AWS GovCloud (US) Regions.
https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-s3-cloudwatch-logs-tables/