Audit logging

A step of the Cloud application tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Record who did what and when for every sensitive action, in a log the application itself cannot edit.

Usually comes after: Authorization & least privilege.

Prompt for your AI assistant

Add an append-only audit log that records the actor, action, target and timestamp for every sensitive operation, stored separately from application logs.

• Show on map
• This step as Markdown
• Every step of the tree, for AI assistants

This is https://gradus.kazet.blog/tree/cloud-application/step/audit-logging as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.