...
Account owner needs to setup S3 export ARN in the account settings before enabling S3 export for domains.
Configure automatic export of your click stream to Amazon S3.
Upload custom SSL certificates