69 | | === Analytics === |
70 | | Toggle read access for a thirdparty analytics application creates a new [wiki:help/en/howto/iam IAM] user with the following policy: |
71 | | |
72 | | {{{ |
73 | | { |
74 | | "Statement": [ |
75 | | { |
76 | | "Action": [ |
77 | | "s3:Get*", |
78 | | "s3:List*" |
79 | | ], |
80 | | "Effect": "Allow", |
81 | | "Resource": "arn:aws:s3:::*" |
82 | | }, |
83 | | { |
84 | | "Action": [ |
85 | | "cloudfront:Get*", |
86 | | "cloudfront:List*" |
87 | | ], |
88 | | "Effect": "Allow", |
89 | | "Resource": "*" |
90 | | } |
91 | | ] |
92 | | } |
93 | | }}} |
94 | | |
95 | | After logging is configured, you can [https://qloudstat.com access statistics from your access logs] with [https://qloudstat.com Qloudstat]. |
| 69 | === Qloudstat Analytics === |
| 70 | The ''Read Access for Qloudstat'' checkbox in the ''Info'' panel tab creates a dedicated IAM user with a read only IAM policy for Qloudstat to fetch log files. Unchecking the Read Access for Qloudstat checkbox will remove the IAM user again revoking all access for Qloudstat. When enabled, a clickable link is displayed that redirects to [https://qloudstat.com Qloudstat] to confirm the new setup. |