standard logging for s3 bucket

rrigato · May 15, 2024 · 5f3a315 · 5f3a315
1 parent f39dc05
commit 5f3a315
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/templates/prod_homepage.yml b/templates/prod_homepage.yml
@@ -36,6 +36,10 @@ Resources:
     Type: AWS::S3::Bucket
     Properties:
       BucketName: !Sub '${ProjectName}-logging'
+      OwnershipControls:
+        Rules:
+          - ObjectOwnership: BucketOwnerPreferred
+
 
   WebsiteBucket:
     Condition: RetainResourcesCreated
@@ -126,7 +130,6 @@ Resources:
 ###########################
 #Content delivery network
 #for the static (html/css/js) content
-#TODO - add Logging property for s3 bucket
 ##########################
   StaticWebpageCdn:
     DependsOn: CloudFrontOai
@@ -146,6 +149,10 @@ Resources:
               - - 'www'
                 - !Ref BucketName
         Enabled: true
+        Logging:
+          Bucket: !GetAtt ApplicationLogBucket.DomainName
+          IncludeCookies: false
+          Prefix: cdnlogs/
         DefaultCacheBehavior:
           ForwardedValues:
             QueryString: true