1. Packages
  2. AWS
  3. API Docs
  4. s3
  5. BucketLogging
AWS v7.1.0 published on Monday, Jul 21, 2025 by Pulumi

aws.s3.BucketLogging

Explore with Pulumi AI

aws logo
AWS v7.1.0 published on Monday, Jul 21, 2025 by Pulumi

    Provides an S3 bucket (server access) logging resource. For more information, see Logging requests using server access logging in the AWS S3 User Guide.

    Note: Amazon S3 supports server access logging, AWS CloudTrail, or a combination of both. Refer to the Logging options for Amazon S3 to decide which method meets your requirements.

    This resource cannot be used with S3 directory buckets.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const example = new aws.s3.Bucket("example", {bucket: "my-tf-example-bucket"});
    const exampleBucketAcl = new aws.s3.BucketAcl("example", {
        bucket: example.id,
        acl: "private",
    });
    const logBucket = new aws.s3.Bucket("log_bucket", {bucket: "my-tf-log-bucket"});
    const logBucketAcl = new aws.s3.BucketAcl("log_bucket_acl", {
        bucket: logBucket.id,
        acl: "log-delivery-write",
    });
    const exampleBucketLogging = new aws.s3.BucketLogging("example", {
        bucket: example.id,
        targetBucket: logBucket.id,
        targetPrefix: "log/",
    });
    
    import pulumi
    import pulumi_aws as aws
    
    example = aws.s3.Bucket("example", bucket="my-tf-example-bucket")
    example_bucket_acl = aws.s3.BucketAcl("example",
        bucket=example.id,
        acl="private")
    log_bucket = aws.s3.Bucket("log_bucket", bucket="my-tf-log-bucket")
    log_bucket_acl = aws.s3.BucketAcl("log_bucket_acl",
        bucket=log_bucket.id,
        acl="log-delivery-write")
    example_bucket_logging = aws.s3.BucketLogging("example",
        bucket=example.id,
        target_bucket=log_bucket.id,
        target_prefix="log/")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/s3"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		example, err := s3.NewBucket(ctx, "example", &s3.BucketArgs{
    			Bucket: pulumi.String("my-tf-example-bucket"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = s3.NewBucketAcl(ctx, "example", &s3.BucketAclArgs{
    			Bucket: example.ID(),
    			Acl:    pulumi.String("private"),
    		})
    		if err != nil {
    			return err
    		}
    		logBucket, err := s3.NewBucket(ctx, "log_bucket", &s3.BucketArgs{
    			Bucket: pulumi.String("my-tf-log-bucket"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = s3.NewBucketAcl(ctx, "log_bucket_acl", &s3.BucketAclArgs{
    			Bucket: logBucket.ID(),
    			Acl:    pulumi.String("log-delivery-write"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = s3.NewBucketLogging(ctx, "example", &s3.BucketLoggingArgs{
    			Bucket:       example.ID(),
    			TargetBucket: logBucket.ID(),
    			TargetPrefix: pulumi.String("log/"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Aws.S3.Bucket("example", new()
        {
            BucketName = "my-tf-example-bucket",
        });
    
        var exampleBucketAcl = new Aws.S3.BucketAcl("example", new()
        {
            Bucket = example.Id,
            Acl = "private",
        });
    
        var logBucket = new Aws.S3.Bucket("log_bucket", new()
        {
            BucketName = "my-tf-log-bucket",
        });
    
        var logBucketAcl = new Aws.S3.BucketAcl("log_bucket_acl", new()
        {
            Bucket = logBucket.Id,
            Acl = "log-delivery-write",
        });
    
        var exampleBucketLogging = new Aws.S3.BucketLogging("example", new()
        {
            Bucket = example.Id,
            TargetBucket = logBucket.Id,
            TargetPrefix = "log/",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.s3.Bucket;
    import com.pulumi.aws.s3.BucketArgs;
    import com.pulumi.aws.s3.BucketAcl;
    import com.pulumi.aws.s3.BucketAclArgs;
    import com.pulumi.aws.s3.BucketLogging;
    import com.pulumi.aws.s3.BucketLoggingArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new Bucket("example", BucketArgs.builder()
                .bucket("my-tf-example-bucket")
                .build());
    
            var exampleBucketAcl = new BucketAcl("exampleBucketAcl", BucketAclArgs.builder()
                .bucket(example.id())
                .acl("private")
                .build());
    
            var logBucket = new Bucket("logBucket", BucketArgs.builder()
                .bucket("my-tf-log-bucket")
                .build());
    
            var logBucketAcl = new BucketAcl("logBucketAcl", BucketAclArgs.builder()
                .bucket(logBucket.id())
                .acl("log-delivery-write")
                .build());
    
            var exampleBucketLogging = new BucketLogging("exampleBucketLogging", BucketLoggingArgs.builder()
                .bucket(example.id())
                .targetBucket(logBucket.id())
                .targetPrefix("log/")
                .build());
    
        }
    }
    
    resources:
      example:
        type: aws:s3:Bucket
        properties:
          bucket: my-tf-example-bucket
      exampleBucketAcl:
        type: aws:s3:BucketAcl
        name: example
        properties:
          bucket: ${example.id}
          acl: private
      logBucket:
        type: aws:s3:Bucket
        name: log_bucket
        properties:
          bucket: my-tf-log-bucket
      logBucketAcl:
        type: aws:s3:BucketAcl
        name: log_bucket_acl
        properties:
          bucket: ${logBucket.id}
          acl: log-delivery-write
      exampleBucketLogging:
        type: aws:s3:BucketLogging
        name: example
        properties:
          bucket: ${example.id}
          targetBucket: ${logBucket.id}
          targetPrefix: log/
    

    Create BucketLogging Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new BucketLogging(name: string, args: BucketLoggingArgs, opts?: CustomResourceOptions);
    @overload
    def BucketLogging(resource_name: str,
                      args: BucketLoggingInitArgs,
                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def BucketLogging(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      bucket: Optional[str] = None,
                      target_bucket: Optional[str] = None,
                      target_prefix: Optional[str] = None,
                      expected_bucket_owner: Optional[str] = None,
                      region: Optional[str] = None,
                      target_grants: Optional[Sequence[BucketLoggingTargetGrantArgs]] = None,
                      target_object_key_format: Optional[BucketLoggingTargetObjectKeyFormatArgs] = None)
    func NewBucketLogging(ctx *Context, name string, args BucketLoggingArgs, opts ...ResourceOption) (*BucketLogging, error)
    public BucketLogging(string name, BucketLoggingArgs args, CustomResourceOptions? opts = null)
    public BucketLogging(String name, BucketLoggingArgs args)
    public BucketLogging(String name, BucketLoggingArgs args, CustomResourceOptions options)
    
    type: aws:s3:BucketLogging
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args BucketLoggingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args BucketLoggingInitArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args BucketLoggingArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args BucketLoggingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args BucketLoggingArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var bucketLoggingResource = new Aws.S3.BucketLogging("bucketLoggingResource", new()
    {
        Bucket = "string",
        TargetBucket = "string",
        TargetPrefix = "string",
        ExpectedBucketOwner = "string",
        Region = "string",
        TargetGrants = new[]
        {
            new Aws.S3.Inputs.BucketLoggingTargetGrantArgs
            {
                Grantee = new Aws.S3.Inputs.BucketLoggingTargetGrantGranteeArgs
                {
                    Type = "string",
                    DisplayName = "string",
                    EmailAddress = "string",
                    Id = "string",
                    Uri = "string",
                },
                Permission = "string",
            },
        },
        TargetObjectKeyFormat = new Aws.S3.Inputs.BucketLoggingTargetObjectKeyFormatArgs
        {
            PartitionedPrefix = new Aws.S3.Inputs.BucketLoggingTargetObjectKeyFormatPartitionedPrefixArgs
            {
                PartitionDateSource = "string",
            },
            SimplePrefix = null,
        },
    });
    
    example, err := s3.NewBucketLogging(ctx, "bucketLoggingResource", &s3.BucketLoggingArgs{
    	Bucket:              pulumi.String("string"),
    	TargetBucket:        pulumi.String("string"),
    	TargetPrefix:        pulumi.String("string"),
    	ExpectedBucketOwner: pulumi.String("string"),
    	Region:              pulumi.String("string"),
    	TargetGrants: s3.BucketLoggingTargetGrantArray{
    		&s3.BucketLoggingTargetGrantArgs{
    			Grantee: &s3.BucketLoggingTargetGrantGranteeArgs{
    				Type:         pulumi.String("string"),
    				DisplayName:  pulumi.String("string"),
    				EmailAddress: pulumi.String("string"),
    				Id:           pulumi.String("string"),
    				Uri:          pulumi.String("string"),
    			},
    			Permission: pulumi.String("string"),
    		},
    	},
    	TargetObjectKeyFormat: &s3.BucketLoggingTargetObjectKeyFormatArgs{
    		PartitionedPrefix: &s3.BucketLoggingTargetObjectKeyFormatPartitionedPrefixArgs{
    			PartitionDateSource: pulumi.String("string"),
    		},
    		SimplePrefix: &s3.BucketLoggingTargetObjectKeyFormatSimplePrefixArgs{},
    	},
    })
    
    var bucketLoggingResource = new BucketLogging("bucketLoggingResource", BucketLoggingArgs.builder()
        .bucket("string")
        .targetBucket("string")
        .targetPrefix("string")
        .expectedBucketOwner("string")
        .region("string")
        .targetGrants(BucketLoggingTargetGrantArgs.builder()
            .grantee(BucketLoggingTargetGrantGranteeArgs.builder()
                .type("string")
                .displayName("string")
                .emailAddress("string")
                .id("string")
                .uri("string")
                .build())
            .permission("string")
            .build())
        .targetObjectKeyFormat(BucketLoggingTargetObjectKeyFormatArgs.builder()
            .partitionedPrefix(BucketLoggingTargetObjectKeyFormatPartitionedPrefixArgs.builder()
                .partitionDateSource("string")
                .build())
            .simplePrefix(BucketLoggingTargetObjectKeyFormatSimplePrefixArgs.builder()
                .build())
            .build())
        .build());
    
    bucket_logging_resource = aws.s3.BucketLogging("bucketLoggingResource",
        bucket="string",
        target_bucket="string",
        target_prefix="string",
        expected_bucket_owner="string",
        region="string",
        target_grants=[{
            "grantee": {
                "type": "string",
                "display_name": "string",
                "email_address": "string",
                "id": "string",
                "uri": "string",
            },
            "permission": "string",
        }],
        target_object_key_format={
            "partitioned_prefix": {
                "partition_date_source": "string",
            },
            "simple_prefix": {},
        })
    
    const bucketLoggingResource = new aws.s3.BucketLogging("bucketLoggingResource", {
        bucket: "string",
        targetBucket: "string",
        targetPrefix: "string",
        expectedBucketOwner: "string",
        region: "string",
        targetGrants: [{
            grantee: {
                type: "string",
                displayName: "string",
                emailAddress: "string",
                id: "string",
                uri: "string",
            },
            permission: "string",
        }],
        targetObjectKeyFormat: {
            partitionedPrefix: {
                partitionDateSource: "string",
            },
            simplePrefix: {},
        },
    });
    
    type: aws:s3:BucketLogging
    properties:
        bucket: string
        expectedBucketOwner: string
        region: string
        targetBucket: string
        targetGrants:
            - grantee:
                displayName: string
                emailAddress: string
                id: string
                type: string
                uri: string
              permission: string
        targetObjectKeyFormat:
            partitionedPrefix:
                partitionDateSource: string
            simplePrefix: {}
        targetPrefix: string
    

    BucketLogging Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The BucketLogging resource accepts the following input properties:

    Bucket string
    Name of the bucket.
    TargetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    TargetPrefix string
    Prefix for all log object keys.
    ExpectedBucketOwner string
    Account ID of the expected bucket owner.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    TargetGrants List<BucketLoggingTargetGrant>
    Set of configuration blocks with information for granting permissions. See below.
    TargetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    Bucket string
    Name of the bucket.
    TargetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    TargetPrefix string
    Prefix for all log object keys.
    ExpectedBucketOwner string
    Account ID of the expected bucket owner.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    TargetGrants []BucketLoggingTargetGrantArgs
    Set of configuration blocks with information for granting permissions. See below.
    TargetObjectKeyFormat BucketLoggingTargetObjectKeyFormatArgs
    Amazon S3 key format for log objects. See below.
    bucket String
    Name of the bucket.
    targetBucket String
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetPrefix String
    Prefix for all log object keys.
    expectedBucketOwner String
    Account ID of the expected bucket owner.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetGrants List<BucketLoggingTargetGrant>
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    bucket string
    Name of the bucket.
    targetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetPrefix string
    Prefix for all log object keys.
    expectedBucketOwner string
    Account ID of the expected bucket owner.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetGrants BucketLoggingTargetGrant[]
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    bucket str
    Name of the bucket.
    target_bucket str
    Name of the bucket where you want Amazon S3 to store server access logs.
    target_prefix str
    Prefix for all log object keys.
    expected_bucket_owner str
    Account ID of the expected bucket owner.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    target_grants Sequence[BucketLoggingTargetGrantArgs]
    Set of configuration blocks with information for granting permissions. See below.
    target_object_key_format BucketLoggingTargetObjectKeyFormatArgs
    Amazon S3 key format for log objects. See below.
    bucket String
    Name of the bucket.
    targetBucket String
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetPrefix String
    Prefix for all log object keys.
    expectedBucketOwner String
    Account ID of the expected bucket owner.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetGrants List<Property Map>
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat Property Map
    Amazon S3 key format for log objects. See below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the BucketLogging resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing BucketLogging Resource

    Get an existing BucketLogging resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: BucketLoggingState, opts?: CustomResourceOptions): BucketLogging
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            bucket: Optional[str] = None,
            expected_bucket_owner: Optional[str] = None,
            region: Optional[str] = None,
            target_bucket: Optional[str] = None,
            target_grants: Optional[Sequence[BucketLoggingTargetGrantArgs]] = None,
            target_object_key_format: Optional[BucketLoggingTargetObjectKeyFormatArgs] = None,
            target_prefix: Optional[str] = None) -> BucketLogging
    func GetBucketLogging(ctx *Context, name string, id IDInput, state *BucketLoggingState, opts ...ResourceOption) (*BucketLogging, error)
    public static BucketLogging Get(string name, Input<string> id, BucketLoggingState? state, CustomResourceOptions? opts = null)
    public static BucketLogging get(String name, Output<String> id, BucketLoggingState state, CustomResourceOptions options)
    resources:  _:    type: aws:s3:BucketLogging    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Bucket string
    Name of the bucket.
    ExpectedBucketOwner string
    Account ID of the expected bucket owner.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    TargetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    TargetGrants List<BucketLoggingTargetGrant>
    Set of configuration blocks with information for granting permissions. See below.
    TargetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    TargetPrefix string
    Prefix for all log object keys.
    Bucket string
    Name of the bucket.
    ExpectedBucketOwner string
    Account ID of the expected bucket owner.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    TargetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    TargetGrants []BucketLoggingTargetGrantArgs
    Set of configuration blocks with information for granting permissions. See below.
    TargetObjectKeyFormat BucketLoggingTargetObjectKeyFormatArgs
    Amazon S3 key format for log objects. See below.
    TargetPrefix string
    Prefix for all log object keys.
    bucket String
    Name of the bucket.
    expectedBucketOwner String
    Account ID of the expected bucket owner.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetBucket String
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetGrants List<BucketLoggingTargetGrant>
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    targetPrefix String
    Prefix for all log object keys.
    bucket string
    Name of the bucket.
    expectedBucketOwner string
    Account ID of the expected bucket owner.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetBucket string
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetGrants BucketLoggingTargetGrant[]
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat BucketLoggingTargetObjectKeyFormat
    Amazon S3 key format for log objects. See below.
    targetPrefix string
    Prefix for all log object keys.
    bucket str
    Name of the bucket.
    expected_bucket_owner str
    Account ID of the expected bucket owner.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    target_bucket str
    Name of the bucket where you want Amazon S3 to store server access logs.
    target_grants Sequence[BucketLoggingTargetGrantArgs]
    Set of configuration blocks with information for granting permissions. See below.
    target_object_key_format BucketLoggingTargetObjectKeyFormatArgs
    Amazon S3 key format for log objects. See below.
    target_prefix str
    Prefix for all log object keys.
    bucket String
    Name of the bucket.
    expectedBucketOwner String
    Account ID of the expected bucket owner.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    targetBucket String
    Name of the bucket where you want Amazon S3 to store server access logs.
    targetGrants List<Property Map>
    Set of configuration blocks with information for granting permissions. See below.
    targetObjectKeyFormat Property Map
    Amazon S3 key format for log objects. See below.
    targetPrefix String
    Prefix for all log object keys.

    Supporting Types

    BucketLoggingTargetGrant, BucketLoggingTargetGrantArgs

    Grantee BucketLoggingTargetGrantGrantee
    Configuration block for the person being granted permissions. See below.
    Permission string
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.
    Grantee BucketLoggingTargetGrantGrantee
    Configuration block for the person being granted permissions. See below.
    Permission string
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.
    grantee BucketLoggingTargetGrantGrantee
    Configuration block for the person being granted permissions. See below.
    permission String
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.
    grantee BucketLoggingTargetGrantGrantee
    Configuration block for the person being granted permissions. See below.
    permission string
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.
    grantee BucketLoggingTargetGrantGrantee
    Configuration block for the person being granted permissions. See below.
    permission str
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.
    grantee Property Map
    Configuration block for the person being granted permissions. See below.
    permission String
    Logging permissions assigned to the grantee for the bucket. Valid values: FULL_CONTROL, READ, WRITE.

    BucketLoggingTargetGrantGrantee, BucketLoggingTargetGrantGranteeArgs

    Type string
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    DisplayName string
    EmailAddress string
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    Id string
    Canonical user ID of the grantee.
    Uri string
    URI of the grantee group.
    Type string
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    DisplayName string
    EmailAddress string
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    Id string
    Canonical user ID of the grantee.
    Uri string
    URI of the grantee group.
    type String
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    displayName String
    emailAddress String
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    id String
    Canonical user ID of the grantee.
    uri String
    URI of the grantee group.
    type string
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    displayName string
    emailAddress string
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    id string
    Canonical user ID of the grantee.
    uri string
    URI of the grantee group.
    type str
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    display_name str
    email_address str
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    id str
    Canonical user ID of the grantee.
    uri str
    URI of the grantee group.
    type String
    Type of grantee. Valid values: CanonicalUser, AmazonCustomerByEmail, Group.
    displayName String
    emailAddress String
    Email address of the grantee. See Regions and Endpoints for supported AWS regions where this argument can be specified.
    id String
    Canonical user ID of the grantee.
    uri String
    URI of the grantee group.

    BucketLoggingTargetObjectKeyFormat, BucketLoggingTargetObjectKeyFormatArgs

    PartitionedPrefix BucketLoggingTargetObjectKeyFormatPartitionedPrefix
    Partitioned S3 key for log objects. See below.
    SimplePrefix BucketLoggingTargetObjectKeyFormatSimplePrefix
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.
    PartitionedPrefix BucketLoggingTargetObjectKeyFormatPartitionedPrefix
    Partitioned S3 key for log objects. See below.
    SimplePrefix BucketLoggingTargetObjectKeyFormatSimplePrefix
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.
    partitionedPrefix BucketLoggingTargetObjectKeyFormatPartitionedPrefix
    Partitioned S3 key for log objects. See below.
    simplePrefix BucketLoggingTargetObjectKeyFormatSimplePrefix
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.
    partitionedPrefix BucketLoggingTargetObjectKeyFormatPartitionedPrefix
    Partitioned S3 key for log objects. See below.
    simplePrefix BucketLoggingTargetObjectKeyFormatSimplePrefix
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.
    partitioned_prefix BucketLoggingTargetObjectKeyFormatPartitionedPrefix
    Partitioned S3 key for log objects. See below.
    simple_prefix BucketLoggingTargetObjectKeyFormatSimplePrefix
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.
    partitionedPrefix Property Map
    Partitioned S3 key for log objects. See below.
    simplePrefix Property Map
    Use the simple format for S3 keys for log objects. To use, set simple_prefix {}.

    BucketLoggingTargetObjectKeyFormatPartitionedPrefix, BucketLoggingTargetObjectKeyFormatPartitionedPrefixArgs

    PartitionDateSource string
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.
    PartitionDateSource string
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.
    partitionDateSource String
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.
    partitionDateSource string
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.
    partition_date_source str
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.
    partitionDateSource String
    Specifies the partition date source for the partitioned prefix. Valid values: EventTime, DeliveryTime.

    Import

    If the owner (account ID) of the source bucket differs from the account used to configure the AWS Provider, import using the bucket and expected_bucket_owner separated by a comma (,):

    Using pulumi import to import S3 bucket logging using the bucket or using the bucket and expected_bucket_owner separated by a comma (,). For example:

    If the owner (account ID) of the source bucket is the same account used to configure the AWS Provider, import using the bucket:

    $ pulumi import aws:s3/bucketLogging:BucketLogging example bucket-name
    

    If the owner (account ID) of the source bucket differs from the account used to configure the AWS Provider, import using the bucket and expected_bucket_owner separated by a comma (,):

    $ pulumi import aws:s3/bucketLogging:BucketLogging example bucket-name,123456789012
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    AWS v7.1.0 published on Monday, Jul 21, 2025 by Pulumi