In this step, we will create an S3 bucket to store session logs sent from EC2 instances.
Access the S3 service management console

At the Create bucket page.

The S3 bucket name must ensure it does not duplicate with any other S3 buckets in the system. You can replace your name and enter random numbers when creating the S3 bucket name.

When creating the S3 bucket we have performed Block all public access so our EC2 instances will not be able to connect to S3 via the internet. In the next step we will configure the S3 Gateway Endpoint feature to allow EC2 instances to connect to the S3 bucket via the VPC’s internal network.