Log Shipping
Log Shipping sends a copy of your access logs to an S3 bucket you own on a regular basis.
Optional Add-On: Log Shipping is available as an optional add-on to your Altis Cloud subscription, available on any plan. Contact your account manager for more information about pricing.
How it works
Log Shipping automatically copies your CloudFront access logs to your own S3 bucket using
S3 Event Notifications. When new log files are created, they are automatically copied to
your destination bucket under the path
s3://<your-bucket>/<environment-name>/cloudfront/...
.
The logs are delivered in CloudFront's standard format and include all HTTP requests made to your application, including request details, response codes, and timing information.
Use Cases
Log Shipping is commonly used for:
- Compliance: Meet regulatory requirements for log retention and audit trails
- Security analysis: Monitor access patterns and detect potential security threats
- Performance monitoring: Analyze traffic patterns and optimize application performance
- Business intelligence: Track user behavior and site usage for business insights
- Data archival: Maintain long-term historical records of site activity
Lifecycle Management
You are responsible for managing the lifecycle of the log files in your S3 bucket, including storage costs, retention policies, and access patterns. Consider setting up S3 lifecycle rules to automatically transition older logs to cheaper storage classes or delete them after your required retention period.
Configuration
Log Shipping requires configuration of your S3 bucket. The feature is not enabled by default and requires setup by the Altis team.
When requesting Log Shipping setup, provide your destination S3 bucket name.
You will need to grant Altis write access to your bucket. We will provide the required AWS details.
Contact support or your account manager to enable Log Shipping for your environment.