Exporting Access Logs

Requirements:

  • Tier 1 plan or higher
  • An AWS S3 bucket in your own AWS account
  • Bucket policy configuration

Setup Instructions:

  1. Verify Your Plan: Verify that the plan for the target website is Tier 3 on the Shifter dashboard.

  2. Create an S3 Bucket: Use the AWS Console or AWS CLI to create an S3 bucket in your AWS account. Create an S3 bucket using the AWS Console or AWS CLI.

    • Bucket Name (Required): Select a bucket name and enter it here.
    • Region (required): Select a region from the drop-down menu.

    In this example, the bucket name is set to REPLACE-WITH-YOUR-S3-BUCKET-NAME and the region is set to US East (us-east-1). Be sure to copy both values.

    For details on creating an S3 bucket, refer to the official documentation “ Creating a Bucket.”

  3. Configuring the S3 Bucket in the Shifter Dashboard: Set the bucket name in the S3 Bucket field of the Shifter dashboard. Return to the Shifter dashboard and configure the values as follows.

    • S3 Bucket: Enter the bucket name you created above.
    • S3 Bucket Region: Select the same region as the one selected above.
  4. Copy S3 Bucket Policy: Click the [Next] button to display the bucket policy. Copy the code.

    Sample Policy:

    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Principal": {
            "AWS": "arn:aws:iam::027273742350:root"
          },
          "Action": [
            "s3:GetBucketAcl",
            "s3:PutBucketAcl"
          ],
          "Resource": "arn:aws:s3:::REPLACE-WITH-YOUR-S3-BUCKET-NAME"
        }
      ]
    }
  5. Updating the S3 bucket policy: Return to the S3 console, paste the copied policy, and click the [Save] button in the upper-right corner of the text area. If you are familiar with the AWS CLI, please refer to the “https://docs.aws.amazon.com/cli/latest/reference/s3api/put-bucket-policy.html” documentation for more details.

  6. Configuring Object Ownership: Configure object ownership as follows.

  7. Connecting Shifter to Your S3 Bucket: Connect Shifter to your S3 bucket. Return to the Shifter dashboard. Next, select the checkbox labeled [I’ve updated my bucket policy].

  8. Configuration Complete: The configuration is now complete.

  9. Exporting Access Logs: After a short while, Shifter will export the log files to the S3 bucket you specified.