Policy: AWS > S3 > Bucket > Access Logging > Bucket

The name of an S3 Bucket to which the Bucket access logs will be delivered.

The S3 Bucket must already exist and the S3 service must be allowed write access. The bucket should reside in same account and same region as of the Bucket.

example: testbucket turbotbucket

Targets

This policy targets the following resource types:

AWS > S3 > Bucket

Primary Policy

This policy is used with the following primary policy:

AWS > S3 > Bucket > Access Logging

Controls

Setting this policy configures this control:

AWS > S3 > Bucket > Access Logging

Policy Packs

This policy setting is used by the following policy packs:

Policy Specification

Schema Type	`string`
Default template	`{% if $.turbotLoggingBucket %}"{{ $.turbotLoggingBucket }}"{% else %}""{% endif %}`
Default template input	`\| { turbotLoggingBucket: policy(uri: "aws#/policy/types/loggingBucketDefault") }`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceLogging

Policy Type URI

tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket

GraphQL

query policyType(id: "tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-s3#/policy/types/bucketAccessLoggingBucket"