Logging with Amazon CloudTrail for S3 Express One Zone - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Logging with Amazon CloudTrail for S3 Express One Zone

Amazon S3 is integrated with Amazon CloudTrail, a service that provides a record of actions taken by a user, role, or an Amazon service. CloudTrail captures all API calls for Amazon S3 as events. Using the information collected by CloudTrail, you can determine the request that was made to Amazon S3, the IP address from which the request was made, when it was made, and additional details. When a supported event activity occurs in Amazon S3, that activity is recorded in a CloudTrail event. You can use Amazon CloudTrail trail to log management events and data events for S3 Express One Zone. For more information, see Amazon S3 CloudTrail events and What is Amazon CloudTrail? in the Amazon CloudTrail User Guide.

CloudTrail management events for S3 Express One Zone

By default, CloudTrail logs bucket-level actions for directory buckets as management events. The eventsource for CloudTrail management events for S3 Express One Zone is s3express.amazonaws.com. When you set up your Amazon account, CloudTrail management events are enabled by default. The following Regional endpoint API operations (bucket-level, or control plane, API operations) are logged to CloudTrail.

Note

ListMultipartUploads is a Zonal endpoint API operation. However, this API operation is logged to CloudTrail as a management event. For more information, see ListMultipartUploads in the Amazon Simple Storage Service API Reference.

For more information on CloudTrail management events, see Logging management events in the Amazon CloudTrail User Guide.

CloudTrail data events for S3 Express One Zone

Data events provide information about the resource operations performed on or in a resource (for example, reading or writing to an Amazon S3 object). These are also known as data plane operations. Data events are often high-volume activities. By default, CloudTrail trails don't log data events, but you can configure trails to log data events for objects stored in general purpose buckets and directory buckets. For more information, see Enable logging for objects in a bucket using the console .

When you log data events for a trail in CloudTrail, you can choose to use advanced event selectors or basic event selectors. To log data events for objects stored in directory buckets, you must use advanced event selectors. When configuring advanced resource selectors, you will choose or specify the resource type for S3 Express One Zone which is Amazon::S3Express::Object.

The following Zonal endpoint API operations (object-level , or. data plane, API operations) are logged to CloudTrail.

For more information on CloudTrail data events, see Logging data events in the Amazon CloudTrail User Guide.

For additional information about CloudTrail events for S3 Express One Zone, see the following topics: