Skip to main content
Amazon CloudFront can emit logs in two distinct shapes: real-time logs (per-request details including cache status, edge location, URI, status code, and time to first byte, streamed within seconds) and standard access logs (a similar shape with delayed batch delivery — minutes to hours). Standard logging is available in two versions: v1 delivers to S3 only, while v2 also supports CloudWatch Logs and Kinesis Data Firehose as destinations. Kinesis Firehose (Preview) — real-time logs deliver via a Kinesis Data Stream into a Firehose-backed pipeline. This is the only path that preserves the low-latency stream.

​
Alternatives

  • S3 Log Forwarder — for standard access logs (v1, or v2 routed to S3). Different schema and delayed delivery; not equivalent to real-time logs.
  • CloudWatch Log Forwarder — for standard access logs (v2) routed to a CloudWatch Log Group.
Kinesis Firehose support is currently in Preview. Contact support@bronto.io to enable it for your account.
See Ingesting AWS Data into Bronto for the full service-to-method mapping.

​
References