Without access logs, object reads, writes, and deletions may go untracked, hindering detection of unauthorized access and data exfiltration. This degrades forensic visibility, delays incident response, and weakens evidence integrity, impacting confidentiality and integrity.

Enable server access logging and send logs to a dedicated log bucket with least privilege, retention, and monitoring. Complement with CloudTrail data events for object-level visibility. Apply defense in depth by centralizing logs and protecting them from tampering.

• https://docs.amazonaws.cn/en_us/config/latest/developerguide/s3-bucket-logging-enabled.html
• https://docs.aws.amazon.com/AmazonS3/latest/dev/security-best-practices.html