# Audit logging

A step of the [Cloud application](https://gradus.kazet.blog/tree/cloud-application) tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Page: https://gradus.kazet.blog/tree/cloud-application/step/audit-logging

Record who did what and when for every sensitive action, in a log the application itself cannot edit.

Usually comes after: [Authorization & least privilege](https://gradus.kazet.blog/tree/cloud-application/step/authorization).

## Prompt for your AI assistant

```
Add an append-only audit log that records the actor, action, target and timestamp for every sensitive operation, stored separately from application logs.
```

Every step of the tree: https://gradus.kazet.blog/tree/cloud-application/llms.txt