Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Revert audit log args redaction to restore CloudWatch visibility #21039

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
roboquat merged 1 commit into main from revert-audit-args-redaction
Sep 4, 2025

Conversation

@corneliusludmann
Copy link
Contributor

@corneliusludmann corneliusludmann commented Sep 4, 2025
edited
Loading

Problem

Customer reported that commit b007b1d broke their audit monitoring setup by redacting args in CloudWatch logs (/aws/containerinsights/meta/audit). This has created security concerns as they've lost visibility into admin actions.

Root Cause

Commit b007b1d redacted args in the container logs (via log.info()) to prevent sensitive data exposure, but this affected customers who rely on CloudWatch for audit trail monitoring.

Solution

Revert the args redaction to restore audit visibility in CloudWatch logs. The original audit database logs were never affected and continue to work properly.

Impact

  • ✅ Restores audit visibility for customers using CloudWatch monitoring
  • ✅ Maintains compliance and security monitoring capabilities

Fixes customer complaint about missing args in CloudWatch audit logs.

Co-authored-by: Ona no-reply@ona.com

@roboquat roboquat merged commit 29f3c59 into main Sep 4, 2025
47 of 48 checks passed
@roboquat roboquat deleted the revert-audit-args-redaction branch September 4, 2025 10:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@geropl geropl geropl approved these changes

Assignees

No one assigned

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

AltStyle によって変換されたページ (->オリジナル) /