Audit logging? Alex Szlavik

[gak]

No description provided.

[AlexSzlavik]

Audit logging is a fundamental component for any forensic activity. Understanding who or what performed which action, with nonrepudiation and integrity is especially important for financial services. The key part here is that the logging should persist for a long time (indefinitely) and have strong integrity to be valuable. Append only data stores have been used to accomplish this in some places. Requirements here are generally that we want to capture what identity, perform which action. A good place to start is anything administratively in FTL, like deployments, scaling pods, accessing secrets or configs etc.