Skip to main content
Archive Policy Gateway events in an Amazon S3 bucket. One JSON object per event — good for long-term retention and downstream Athena / Snowflake / BigQuery analysis.

​
Configure

FieldValue
TypeAmazon S3
Buckete.g. my-policy-logs
Regione.g. us-east-1
Access Key IDAWS access key
Secret Access KeyAWS secret
PrefixDefault policy-gateway/
Server-Side EncryptionOptional — AES256 or aws:kms
KMS Key IDOnly when SSE is aws:kms

​
Object layout

s3://<bucket>/policy-gateway/
  date=2026-04-20/
    <event_id>.json
One event per JSON object, partitioned by date.

​
Query with Athena

CREATE EXTERNAL TABLE ai_audit (
  event_id string,
  event_type string,
  policy_id string,
  decision string,
  effective_decision string,
  enforced boolean,
  rollout_mode string,
  reason_code string,
  policy_target string,
  project_id string,
  model string,
  triggered_categories array<string>,
  denylist_hits array<string>,
  allowlist_hits array<string>
)
PARTITIONED BY (date string)
ROW FORMAT SERDE 'org.openx.data.jsonserde.JsonSerDe'
LOCATION 's3://<bucket>/policy-gateway/';
See the full field list in connectors.