"¿Quién ha parado la máquina?" "¿Quién abrió el puerto 3306 a todo el mundo?" "¿Alguien ha borrado la copia de la semana pasada?" En AWS la respuesta está en CloudTrail, si lo activaste, en forma de eventos JSON con el identificador del recurso y el nombre de la API, que hay que saber buscar. Y si todos entran con la misma cuenta, la respuesta es siempre la misma: "la cuenta".
En Simplio cada persona tiene su usuario, y cada acción queda apuntada con quién, qué, cuándo y desde qué IP: arranques, paradas, cambios de firewall, subidas y borrados, instantáneas, copias de bases de datos, terminales abiertas, cambios de permisos, activaciones del doble factor, usos de la llave de repuesto. Un registro que tú, tu cliente o tu asesor pueden leer sin ser técnicos.
How it works
Every action is recorded as it happens
There is nothing to enable. When someone presses a button that changes something, or opens a terminal, or gets in with the spare key, the entry is written at that moment.
You read it in plain language
"Ana stopped Shop on 30/10 at 9:12 from 83.x.x.x". Recent activity is on the home screen, with what's new since your last sign-in highlighted, and the monthly report includes all of it.
What failed too
Attempts that didn't go through (no permission, wrong phone code, AWS rejecting the action) are also kept, marked as failed.
How secure it is
Nobody deletes the log
The log can't be edited or deleted from the application. What happened, happened.
No secrets inside
Passwords that Simplio generates (for example, when rescuing a machine) are never written to the log.
Everyone sees the activity of what's theirs
The activity a user sees is that of the objects and accounts they have permission for. The customer's person in charge sees what happens in their own, nothing more.
The same task, in AWS and in Simplio
| On your own in AWS | In Simplio | |
|---|---|---|
| Know who stopped a machine | CloudTrail enabled, search for StopInstances, decipher the IAM user (if each person had their own) | Read it in recent activity |
| Let the customer read it | CloudTrail access with IAM permissions | Their own Simplio user: they see the activity of what's theirs |
| Terminal openings | SSH logs on each machine | In the same log, with user and IP |
Frequently asked questions
How long is it kept?
The log is kept in Simplio along with your account; it isn't deleted by age from the application.
Does it log what's done outside Simplio?
No. It logs what is done from Simplio. Whatever someone does directly in the AWS console ends up in CloudTrail, if you have it enabled.