S3 Server Access Logs Now Stream to CloudWatch Logs Everywhere
Amazon S3 server access logs can now be delivered directly to CloudWatch Logs across all AWS Regions, including GovCloud, European Sovereign Cloud, and China Regions. This means you can query logs in real-time, set alarms on error rates, and encrypt everything with KMS—giving you way more flexibility than the old S3-bucket-only approach.
source: [aws/whats-new]