Amazon Simple Storage Service (S3) is a highly available and scalable cloud storage service.
Enable this integration to see in Datadog all your S3 metrics.
If you haven’t already, set up the Amazon Web Services integration first.
In the AWS integration tile, ensure that S3 is checked under metric collection.
Add those permissions to your Datadog IAM policy in order to collect Amazon S3 metrics:
s3:ListAllMyBuckets: Used to list available bucketss3:GetBucketTagging: Used to get custom bucket tagsFor more information on S3 policies, review the documentation on the AWS website.
Install the Datadog - AWS S3 integration.
(optional) To gather Request Metrics, Enable Requests metrics on your Amazon S3 buckets from the AWS console.
Select the S3 bucket and click on the properties tab:
Then click on Server access logging and choose enable:
Then select the s3 bucket the logs should be written into. For more information see the dedicated S3 AWS documentation
Once the lambda function is installed, there are two ways to collect your S3 access logs:
Object Created (All) then click on the add button.Once done, go in your Datadog Log section to start exploring your logs!
| aws.s3.bucket_size_bytes (gauge) | The amount of data in bytes stored in a bucket in the Standard storage class, Standard - Infrequent Access (Standard_IA) storage class, or the Reduced Redundancy Storage (RRS) class. shown as byte |
| aws.s3.number_of_objects (gauge) | The total number of objects stored in a bucket for all storage classes except for the GLACIER storage class. |
| aws.s3.all_requests (count) | The total number of HTTP requests made to a bucket, regardless of type. |
| aws.s3.get_requests (count) | The number of HTTP GET requests made for objects in a bucket. This doesn't include list operations. |
| aws.s3.put_requests (count) | The number of HTTP PUT requests made for objects in a bucket. |
| aws.s3.delete_requests (count) | The number of HTTP DELETE requests made for objects in a bucket. This also includes Delete Multiple Objects requests. |
| aws.s3.head_requests (count) | The number of HTTP HEAD requests made to a bucket. |
| aws.s3.post_requests (count) | The number of HTTP POST requests made to a bucket. |
| aws.s3.list_requests (count) | The number of HTTP requests that list the contents of a bucket. |
| aws.s3.bytes_downloaded (count) | The total number bytes downloaded from the bucket. shown as byte |
| aws.s3.bytes_uploaded (count) | The total number bytes uploaded to the bucket. shown as byte |
| aws.s3.4xx_errors (count) | The total number of HTTP 4xx server error status code requests made to a bucket |
| aws.s3.5xx_errors (count) | The total number of HTTP 5xx server error status code requests made to a bucket |
| aws.s3.first_byte_latency (gauge) | The average per-request time from the complete request being received by a bucket to when the response starts to be returned. shown as millisecond |
| aws.s3.first_byte_latency.minimum (gauge) | The minimum per-request time from the complete request being received by a bucket to when the response starts to be returned. shown as millisecond |
| aws.s3.first_byte_latency.maximum (gauge) | The maximum per-request time from the complete request being received by a bucket to when the response starts to be returned. shown as millisecond |
| aws.s3.total_request_latency (gauge) | The average elapsed per-request time from the first byte received to the last byte sent to a bucket shown as millisecond |
| aws.s3.total_request_latency.minimum (gauge) | The minimum elapsed per-request time from the first byte received to the last byte sent to a bucket shown as millisecond |
| aws.s3.total_request_latency.maximum (gauge) | The maximum elapsed per-request time from the first byte received to the last byte sent to a bucket shown as millisecond |
Each of the metrics retrieved from AWS will be assigned the same tags that appear in the AWS console, including but not limited to host name, security-groups, and more.
The AWS S3 integration does not include any events.
The AWS S3 integration does not include any service checks.
If your AWS CloudTrail log data is encrypted by KMS in your AWS S3, allow the Datadog role to decrypt the Cloudtrail log data with the following policy: kms:Decrypt. Learn more about your KMS encrypt/decrypt policy.
