S3 provides two ways to delete objects: A DELETE operation for deleting single objects and a Multi-Object Delete operation to delete multiple objects with a single API call.
For the DELETE operation S3 access logs and CloudTrail S3 data logs contain information about the affected object. That's not the case for Multi-Object Delete operations, which are just a POST request, containing the affected objects in its body, which is logged neither by S3 access logs nor by CloudTrail S3 data logs.
What's the best way to keep track of which objects were affected by a Multi-Object Delete operation?
