Enable DNS query logging in AWS

📘It is recommended to create a new S3 bucket to be used only for DNS query log storage

See our Create S3 bucket steps.

1. Navigate to Route53 in the AWS console

1. Under Resolver in the sidebar, click Query logging

1. Click Configure query logging

1. Enter a name

1. Select S3 bucket

2. Enter the S3 URI to the S3 bucket to send your DNS query logs

1. Click Add VPC

1. Check the box of the VPCs to log DNS queries for, then click Add

1. Save the VPC ID as you'll need this later in Netography Fusion.

1. Click Configure query logging at the bottom of the page to save.

Add the S3 bucket storing DNS query logs to your policy

We need to update the policy created in the Create IAM policy step to add your S3 bucket storing DNS query logs.

1. From the IAM policies page, search for your policy name, then click the + to expand it.

1. Click the Edit button

1. Add two new S3 entries for your DNS query logs S3 bucket, make sure you're following JSON format with proper comma syntax.

1. Click Next

1. Click Save changes