Shifter includes a feature that allows you to export access logs to a specified S3 bucket. (Available on Tier 1 and higher plans.)
You can also analyze the access logs obtained using this feature.
This document explains how to configure access log export settings.
Preparation
1. – Create an S3 bucket for the export destination, and make a note of the bucket name and region.
Please refer to the AWS documentation for instructions on creating a bucket.
Check Your Plan
2. Click “Recurring Billing.”
3. Verify that your plan is “Tier 1” or higher
Enable and Configure Access Logs
4. Click “Live”
5. Click “Access Logs”
6. The access logs configuration screen will appear
7. Set the “S3 Bucket name”
8. Select the bucket’s region under “S3 Bucket domain”
9. Click the “Update setting” button
10. Copy the code displayed under “Update your S3 bucket policy”
Updating the Bucket Policy
11. Refer to the AWS documentation and configure the bucket policy using the code you copied
Adding a Bucket Policy Using the Amazon S3 Console
For “Block public access (bucket settings),” select “Block all public access”
Enable ACLs for object owners
Connect the bucket to Shifter’s access logging feature
12. Check the box next to “I have updated my S3 bucket policy”
13. Click “Submit.”
14. Click “Update setting.”
15. “Access logs have been successfully enabled.”
Check the status of access log exports
16. Access the bucket you created
17. Verify that the logs have been saved
That completes the setup.