Uploaded image for project: 'Atlassian Access'
  1. Atlassian Access
  2. ACCESS-1421

Improve organization audit log for IP allowlisting

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Unresolved
    • Audit Log
    • None
    • 8
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Problem Definition

      The organisation audit logs related to IP allowlisting is not sufficient to know what change was made (e.g. edited the name, before and after), what product was added/removed, on which site. 

      Suggested Solution

      Please add all the details for any change in the IP allowlist in the organisation audit log entry. Examples are:

      • Change of IP policy name, before and after
      • Added/Removed product on the policy
      • Added/removed site on the policy
      • Added/removed IP address on the policy

      Why this is important

      This is important to track what has been changed and by who for security purposes. Currently, the information are not logged in detail. 

      It only shows "Edited <Policy Name> IP allowlist" which isn't helpful with auditing and security investigations. 

      Workaround

      No workaround is available right now

      Attachments

        Issue Links

          Activity

            People

              jyu@atlassian.com Jonathon Yu
              6b2430609069 Alexis
              Votes:
              10 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: