---
title: "Prerequisites for Log Export"
canonical: "https://docs.infoblox.com/space/BloxOneCloud/35366664/Prerequisites%20for%20Log%20Export"
format: markdown
---
Before enabling log export, ensure that you have completed the following:

- Create and set up an Amazon S3 bucket that can receive log data from Infoblox Platform. Infoblox recommends that you create a dedicated S3 bucket for response log export. You must use the **Principal ID** that Infoblox provides to grant Infoblox Platform all access permissions to your S3 bucket. For information about how to set up the S3 bucket, refer to the <span style="color: #0000FF">[<u>*AWS documentation*</u>](https://docs.aws.amazon.com/AmazonS3/latest/gsg/GetStartedWithS3.html)</span>*.*
- Properly configure the IAM (Identity and Access Management) policies and grant Infoblox Platform the following access permissions to the S3 bucket using the **Principal ID** that Infoblox provides on the Infoblox Portal. Enter the** Principal ID** in the **Account** field while configuring permissions. You can find the **Principal ID** on the *Response Log Export* page when you log in to the Infoblox Portal.
  - ListBucket
  - ListObjectsV2
  - CopyObject
  - GetObject
  - PutObject
- The following options are supported for log export:
  - Object Lock
  - Bucket Versioning
- Log export does not support encryption with KMS keys configured. Only AWS-managed keys are supported.

---

> ⚠️ Please make sure that you configure your IAM policies correctly, so Infoblox Platform can push log data to your S3 bucket. Otherwise, you might risk losing log data.

---

For information about how to configure IAM policies and permissions, refer to the <span style="color: #0000FF">[<u>*AWS documentation*</u>](https://docs.aws.amazon.com/AmazonS3/latest/user-guide/set-permissions.html)</span>*.*