audit-logging

A tamper-proof audit trail records user actions and data changes in an append-only store with structured events. This Skill automates that process, adding request context and supporting compliance programs like SOC 2, HIPAA, and GDPR.

Audit logging supports both TypeScript/JavaScript and Python implementations. You can instrument application code with auditLogService calls and middleware to capture request context across different language environments.

You can export audit logs to CloudWatch for security incident investigations. The Skill configures log destinations to include both an append-only store and optional external cloud services for centralized observability.

An append-only audit store is a log where events can be added but never modified or deleted. You need it when regulatory frameworks require immutable, tamper-evident records of user actions, data changes, and system events.

To add request context to compliance audit logs, use middleware to capture requestId, IP, and userAgent automatically. The Skill enriches structured audit events with this context during the logging process.

AWS credentials are only required if you configure optional export to CloudWatch. The core append-only audit store and structured event logging function without any AWS dependencies.