Sending protection pack (web ACL) traffic logs to an Amazon Simple Storage Service bucket - AWS WAF, AWS Firewall Manager, AWS Shield Advanced, and AWS Shield network security director

Configure protection pack (web ACL) traffic logging to Amazon S3.
docs.aws.amazon.com docs.aws.amazon.com