REMINDER! Review audit logs for month 2024-09

[github-actions]

This issue is an automated monthly reminder to review the audit logs of all DAP systems for indications of inappropriate or unusual activity.

Acceptance criteria

1. Complete and check off each of the tasks in the Audit Tasks list. Keep a list of any findings.
2. If there are any findings in your list, email them to:

• [email protected] (ISSM)
• [email protected] (ISSO)
• [email protected] (System owner)

3. Close the ticket with a comment "Closed with findings" or "Closed without findings", as appropriate. Feel free to add any other comments as well.

Audit Tasks

• Cloud.gov: Review Cloud Foundry events in the 'gsa-opp-analytics' organization. See https://cloud.gov/docs/compliance/auditing-activity/.
• Cloud.gov: Verify ssh disabled for production applications and spaces.
• Google Analytics: Review the GA4 Account Change History (viewing instructions at https://support.google.com/analytics/answer/9305465?hl=en).
• AWS: Review CloudTrail logs for AWS S3 and CloudFront.
• New Relic: Review NrAuditEvent events for 'analytics.usa.gov' account.