Audit

All application traffic is routed through the AWS API Gateway. API gateway is configured to log full application request and responses in AWS Cloudwatch.

Every 24 hours [configurable] an AWS Lambda Function will backup an export of the cloudwatch api gateway log to an S3 bucket. Cloudwatch logs are kept for a max of 7 days [configurable].