How can I monitor AWS S3 access by user?

user_864112 0
Viewed 128

I have a number of IAM AWS users and I would like to:

  1. See when and how much data each user is accessing.
  2. Limit the amount of monthly data each user can read (to keep costs under control)

Is there a way to do that from within AWS?

The scenario I am trying to avoid here is having one user spam AWS S3 requests in a tight loop and generating a huge bill. I would like to be able to block access for that one particular user before they can rack up too huge a bill.

amazon-web-services amazon-s3
1 Answers

There is no direct way of monitoring IAM Users data usage in AWS. One (complex) approach to have some monitoring of this kind if you are using only S3 would be:

  1. Implement AWS CloudTrail for auditing
  2. Use CloudTrail logs to monitor user activity, such as GetObject requests to S3
  3. Implement functions to get the S3 object size and multiply by the number of get requests of each user
  4. Implement alarms related to that consumption per user

Its neither a simple nor an efficient approach, but there is no direct way of doing so in AWS.

user_30713500
Related