Log Bucket Access

Logging access to a bucket

You can record all accesses to a bucket in a log file that conforms to IONOS S3 Object Storage bucket logging from the time logging is activated. If the bucket is accessed, this log file is created in a bucket of your choice at an interval specified by the system. Please note that logging is not activated by default.

Note: Logging into a bucket is not activated by default.

You can use the same bucket, but this is not recommended. Because additional logs are created for the logs written to the bucket, this makes it difficult to find the logs you need.

Prerequisites: Make sure you have the appropriate permissions. Only contract owners, administrators, or users with access rights to the data center can log in to the bucket. Other user types have read-only access and can't provision changes.

1. Access individual bucket properties by going to Buckets > Name > Properties.

Manage Buckets using the Properties tab.

There are two ways to assign write access. The first method is via Bucket Permissions.

2. From the Bucket Permissions tab, check off the Writable box under Log Delivery Group.

3. Save your preferences.

The Log Delivery Group lets you set writing preferences for your IONOS S3 Object Storage Bucket.

Alternatively, you may set write access from the Bucket Canned ACL tab.

4. From the Bucket Canned ACL tab, select Log Delivery Write from the SET CANNED ACL dropdown.

5. Save your preferences.

Alternatively, you can make a Bucket writable from the Bucket Canned ACL tab.

Activating logging

Prerequisites: Write access for Log Delivery needs to be enabled on the target bucket. You have to be the owner of the target bucket.

1. Under a Bucket's properties, open the Logging tab.

2. To activate logging, click the Enable Logging check box.

3. In the Destination Bucket field, enter the name of the buckets in which to save the log files. Source and target bucket may be identical.

Note: The destination bucket for logs can only be in the same region, and you must be the owner of the destination bucket.

Enabling logging for an individual bucket is done from the Logging tab of the Properties.

Optional: In the Target Prefix field, enter the prefix for log files so that you can sort them more easily later (e. g. log_). If you enter no prefix, the log file name is derived from its time stamp alone.

The prefix can also be used as a folder, such as logs/log_.

Once logging is enabled, you can use the Bucket Lifecycle feature. This feature adjusts the processing of logs as they become outdated.

Deactivating logging

1. To deactivate logging, clear the Enable Logging check box.

2. Save your settings by clicking Save.

3. Log files are generated and saved to the target bucket in the format (<prefix>)<time stamp>.

4. You can modify or deactivate logging at any time with no effect on existing log files. Log files are handled like any other object in the IONOS S3 Object Storage.