Search code examples
amazon-web-servicesamazon-s3amazon-cloudfront

Enable S3 ACL access for CloudFront logs

What I try to do is to enable Standard Logging for a CloudFront distribution, via AWS console, as in the picture below:

AWS Console

I have set the following S3 Bucket Policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::931426637260:user/relu"
            },
            "Action": [
                "s3:GetBucketAcl",
                "s3:PutBucketAcl"
            ],
            "Resource": "arn:aws:s3:::[...]"
        }
    ]
}

"Block all public access" is Off.

Though, I keep getting this error:

The S3 bucket that you specified for CloudFront logs does not enable ACL access: [...].s3.amazonaws.com

I get this error even if I try to enable logging as the root user.

Does anybody have any idea what might be wrong?

Solution

  • It seems I had to enable ACL here:

    enter image description here