Currently, Ploi Cloud does not provide a way to see:
- When a change was made, and by whom.
- When someone enabled "debug access" on a database, thereby gaining access to that database.
This makes it difficult to trace who performed which action, which poses a risk to traceability and security (e.g. in the event of an incident or unauthorized access).
Requested Solution
An audit logging feature that tracks, at minimum:
- Who made a change (user/account)
- When the change was made (timestamp)
- What was changed (action type / description)
- When database debug access was enabled/disabled, by whom, and for how long it was active
Why This Matters
Without this logging, there is no visibility into who has had access to sensitive data (such as databases), making it difficult to demonstrate accountability or trace misuse/unintended access.
Compliance Relevance
This functionality would help us support compliance with information security standards such as ISO 27001 (control A.8.15 – Logging), which requires event logs covering user activities, exceptions, faults, and information security events to be produced, retained, and reviewed.