Amplify access logs can track opens of tagged links

To see whether a shared link on an AWS Amplify Hosting site was opened without changing code, append a unique query tag (?r=abc) and run aws amplify generate-access-logs --app-id X --domain-name example.com --start-time ... --end-time .... It returns a presigned S3 URL to a CSV in CloudFront log format, including cs-uri-query, c-ip and user agent. Entries lagged by a few minutes in testing. = is escaped in the log (step\=1), so match on the tag value rather than r=abc. Chat and email link previews also appear, so check the user agent to separate bots from real opens.