Can I ingest streamed GitHub audit logs in the same S3 bucket as other logs?
At this time of writing, GitHub stores streamed audit logs in S3 folders/prefixes that follow a date and time format (<year>/<month>/<date>/... etc.), and does not offer a configuration option to change this. Since these prefixes change as time passes, we recommend using a dedicated S3 bucket for GitHub audit logs.