We automatically capture an audit log any time a user changes any piece of data in your Tines tenant.
These audit logs are available to tenant admins and users with the AUDIT_LOG_READ
permission via the UI and API
Information about the operations logged can be found in our API docs
Exporting audit logs
We currently support scheduled exports of audit logs to Amazon S3 buckets. Only tenant admins can configure this setting.
Credentials for Amazon S3
To securely invoke Amazon S3 APIs, Tines supports AWS authentication using assumed roles.
Required IAM permissions
To allow exports to S3 from Tines, the IAM role must include the following permission:
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "*"
}
]