AWS WAF - Auto Save Web Application Firewall logs in S3

Question

How do you route AWS Web Application Firewall (WAF) logs to an S3 bucket? Is this something I can quickly do through the AWS Console? Or, would I have to use a lambda function (invoked by a CloudWatch timer event) to query the WAF logs every n minutes?

Answer 1

You can do this through the console by using Cloudtrail.

From an AWS article on this topic

AWS WAF is integrated with CloudTrail, a service that captures all the AWS WAF API calls and delivers the log files to an Amazon S3 bucket that you specify.

Try the Cloudtrail getting started

Answer 2

Any service that alters or denies your customer traffic should provide you with a comprehensive audit log. It's a shame they don't support this yet.