---
title: 'Tutorial: Configure AWS S3 bucket for CloudConnexa Log Streaming'
canonical: https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/log-streaming/tutorial--configure-aws-s3-bucket-for-cloudconnexa-log-streaming/
product: CloudConnexa Docs
description: The steps to configure a S3 bucket for CloudConnexa Log Streaming are listed.
keywords: S3 bucket
---

# Tutorial: Configure AWS S3 bucket for CloudConnexa Log Streaming

CloudConnexa Log Streaming writes logs to your AWS S3 bucket. Your SIEM or other log collection systems can then ingest these logs.

A properly configured S3 bucket with access policies that allow OpenVPN's AWS Account write permissions is required to operate CloudConnexa Log Streaming properly.

To properly configure an AWS S3 bucket for Log Streaming, follow the steps below:

1. Create an AWS S3 bucket using [instructions from AWS](https://docs.aws.amazon.com/AmazonS3/latest/userguide/create-bucket-overview.html).
2. Provide permissions for the `PutObject` and `ListBucket` actions to be carried out on your S3 bucket by us by adding the policy statement below to your AWS S3 bucket policies configuration.

   > **Note**
   >
   > Replace `<bucketName>` with the name of your S3 bucket in the policy statement.

   ```
   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Principal": {
                   "AWS": "*"
               },
               "Action": [
                   "s3:PutObject",
                   "s3:ListBucket"
               ],
               "Resource": [
                   "arn:aws:s3:::<bucketName>/*",
                   "arn:aws:s3:::<bucketName>"
               ],
               "Condition": {
                   "ArnEquals": {
                       "aws:PrincipalArn": "arn:aws:iam::444663524611:role/connexa-log-streaming-role"
                   }
               }
           }
       ]
   }
   ```
3. Set up automatic removal of old files if you don't want the log files written by CloudConnexa to remain in the S3 bucket forever. Refer to [AWS documentation on bucket lifecycle configuration.](https://docs.aws.amazon.com/AmazonS3/latest/userguide/how-to-set-lifecycle-configuration-intro.html)
4. Now, you are ready to use the AWS Region and the AWS S3 bucket name of the bucket you just configured to set up CloudConnexa Log Streaming.

## Related Video

[Video: Configure Log Collection](https://openvpn.net/cloud-docs/videos/configuration/log-streaming/video--configure-log-collection.md)

---

Prev: [Log Streaming](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/log-streaming.md)
Next: [Tutorial: Configure DataDog for CloudConnexa Log Streaming](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/log-streaming/tutorial--configure-datadog-for-cloudconnexa-log-streaming.md)
Index: https://openvpn.net/cloud-docs/llms.txt