Syncing Data to AWS S3
Admins can configure Twingate to send audit logs to their AWS S3 buckets. Logs are sent every 5 minutes.
- Open the AWS IAM console
- Go to Users
- Create a User who will have access to the S3 bucket
- Select the user who should have access
- Click Create Access Key
- Save the Access Key and Secret Access Key
- Make sure the user has
s3:PutObjectlisted in their policy
Any subsequent audit log events will be synced to your S3 bucket every 5 minutes on an ongoing basis.
If you’ve just configured your S3 sync and it immediately fails, you could be running into a configuration issue. Please check that your bucket name, access key, secret access key, and AWS user policies are correct. The AWS user trying to access the bucket should have
In the case that there are no events to sync, Twingate sends an empty file to the S3 bucket. This assures that the sync is still working without taking up storage space.
Events can take up to 10 minutes to be reflected in the audit log sync.
Last updated 1 month ago