Reply To: Question about accessing S3 bucket

[JR-TutorialsDojo]

Hi Chris,

A combination of S3 Access Points, CloudTrail, and Athena would indeed be a valid solution for this scenario. However, the inclusion of Server Access Logging and Amazon QuickSight makes it wrong.

Using CloudTrail is recommended for logging both bucket-level and object-level actions for Amazon S3 resources. –

https://docs.aws.amazon.com/AmazonS3/latest/userguide/logging-with-S3.html

QuickSight is primarily a visualization tool, not an auditing tool.

I hope this clears things up! Let me know if you have further questions or need more clarification.

Regards,
JR @ Tutorials Dojo