Ensure that Object-level logging for read events is enabled for S3 bucket
S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events.Object-level logging is managed by Cloudtrail hence this rule will show results of cloudtrail entity.By default, CloudTrail trails don't log data events and so it is recommended to enable Object-level logging for S3 buckets.Enabling object-level logging will help you meet data compliance requirements within your organization, perform comprehensive security analysis, monitor specific patterns of user behavior in your AWS account or take immediate actions on any object-level API activity using Amazon CloudWatch Events.
Updated 7 months ago