Amazon introduced new options for S3 server access log delivery, enabling logs to stream directly to Amazon CloudWatch Logs for real-time monitoring, alerting, and cross-account aggregation with KMS encryption options. Additionally, logs can now be mirrored to S3 Tables in Apache Iceberg format at no additional storage cost, facilitating query and analysis with SQL engines like Athena and Redshift.
These delivery methods complement existing free log delivery to S3 buckets, offering users greater flexibility in monitoring and auditing data access patterns. The CloudWatch Logs option is broadly available across all AWS Regions except China and GovCloud.
Source & further reading
Amazon S3 server access logs now deliver to Amazon CloudWatch Logs and Amazon S3 Tables ↗Source published 2026-06-29. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.