{"id":15860,"date":"2014-10-27T15:23:40","date_gmt":"2014-10-27T09:53:40","guid":{"rendered":"https:\/\/2thenew.today\/blog\/?p=15860"},"modified":"2014-10-27T15:57:57","modified_gmt":"2014-10-27T10:27:57","slug":"elb-logs-on-s3-bucket","status":"publish","type":"post","link":"https:\/\/2thenew.today\/blog\/elb-logs-on-s3-bucket\/","title":{"rendered":"ELB Logs on S3 Bucket"},"content":{"rendered":"

Today we’ll be implementing an S3 bucket policy for storing multiple Elastic Load Balancer access logs on a single S3 bucket.<\/p>\n

\"elb3\"<\/p>\n

Instead of having multiple S3 bucket for each ELB access logs, we’ll create only one S3 bucket for storing all ELB’s access logs.<\/p>\n

This section walks you through the step by step guide for configuring S3 bucket for storing ELB logs.<\/p>\n

Step1: Create S3 bucket
\nStep2: Attach a bucket policy to the S3 Bucket
\nStep3: Enable Access logs at the ELB
\n<\/strong><\/p>\n

Step1: Create S3 bucket: <\/h3>\n

<\/p>\n

Let’s create an S3 bucket for storing our ELB logs.
\nS3 bucket:<\/strong> com.domainame.com.elb.logs<\/p>\n

\"elb1\"<\/p>\n

Let’s create few folder inside our S3 bucket. e.g. myapp1, myapp2, myapp3 for storing respective elb access logs.<\/p>\n

Step2: Attach a bucket policy to the S3 bucket.<\/h3>\n

<\/p>\n

You can use below bucket policy for this purpose. You have to change certain parameters on this policy like “account number, bucket name , folder name” as per your setup.<\/p>\n

[js]
\n{
\n"Version": "2008-10-17",
\n"Id": "Policy1413182823222",
\n"Statement": [
\n {
\n "Sid": "Stmt1413182819426",
\n "Effect": "Allow",
\n "Principal": {
\n "AWS": "arn:aws:iam::ELB-REGION-ID:root"
\n },
\n "Action": "s3:PutObject",
\n "Resource": [
\n "arn:aws:s3:::com.domainname.com.elb.logs\/myapp1\/AWSLogs\/XXXXXXXXXXXX\/*",
\n "arn:aws:s3:::com.domainname.com.elb.logs\/myapp2\/AWSLogs\/XXXXXXXXXXXX\/*",
\n "arn:aws:s3:::com.domainname.com.elb.logs\/myapp3\/AWSLogs\/XXXXXXXXXXXX\/*",
\n ]
\n }
\n ]
\n}
\n[\/js]
\n–> In place of ELB-REGION-ID, you have to use ‘127311923021’ if your ELB is in North Virginia and ‘156460612806’ if your ELB is in EU (Ireland). For a complete list of ELB REGION ID you can follow this link “http:\/\/docs.aws.amazon.com\/ElasticLoadBalancing\/latest\/DeveloperGuide\/configure-s3-bucket.html<\/a>”<\/p>\n

–> In Resource section above , You have to use below format <\/p>\n

[js] arn:aws:s3:::yourS3bucketname\/prefix\/AWSLogs\/yourAWSAccountID\/* [\/js]<\/p>\n

like we did
\nyourS3bucketname:<\/strong> “com.domainname.com.elb.logs”
\nprefix:<\/strong> “myapp1”
\nAWSlogs:<\/strong> “leave it as it is”
\nyourAWSAccountID:<\/strong> “your 12 digit AWS Account Number”<\/p>\n

Similarly you can define multiple prefix for multiple application.<\/p>\n

Step3: Enable Access logs at the ELB <\/h3>\n

<\/p>\n

Log In to EC2 Section -> Browse to Load Balancers -> Click on any load Balancer -> Enable Access log [Edit],
\nThis will ask you for your S3 Bucket location with prefix. <\/p>\n

Give the path of S3 bucket. “com.domainname.com.elb.logs\/myapp1”<\/p>\n

\"elb5\"<\/p>\n

\"elb6\"<\/p>\n

Similarly for another ELB you can enable access log and use myapp2 folder.<\/p>\n","protected":false},"excerpt":{"rendered":"

Today we’ll be implementing an S3 bucket policy for storing multiple Elastic Load Balancer access logs on a single S3 bucket. Instead of having multiple S3 bucket for each ELB access logs, we’ll create only one S3 bucket for storing all ELB’s access logs. This section walks you through the step by step guide for […]<\/p>\n","protected":false},"author":100,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":49,"footnotes":""},"categories":[1174],"tags":[1462,528,670],"class_list":["post-15860","post","type-post","status-publish","format-standard","hentry","category-aws-2","tag-elb","tag-log","tag-s3"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t