AWS TEAM is a great control by itself, however being able to feedback the metrics or trends that could be observed through it's use would greatly improve its value to my organisation.
Having an extra menu section available only to Auditor/Admins which displays graphs/tables/charts/visualisations of the data created through/by the app. For example, we could have a dashboard displaying:
Trend/Top AWS accounts / roles requested for
Trend/Top approvers
Top users not inputting ticketNo. correctly (for auto approved requests)
Most common AWS service used with the requested role (from CloudTrail logs)
Most common access length / usage patterns
There are many more examples I could give, ultimately this information would be used to feed into other processes within the organisation to reduce manual overhead through automation, to identify key man resources and to reduce role permissions i.e. least-privilege
Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 7 days it will automatically be closed.
AWS TEAM is a great control by itself, however being able to feedback the metrics or trends that could be observed through it's use would greatly improve its value to my organisation.
Having an extra menu section available only to Auditor/Admins which displays graphs/tables/charts/visualisations of the data created through/by the app. For example, we could have a dashboard displaying:
There are many more examples I could give, ultimately this information would be used to feed into other processes within the organisation to reduce manual overhead through automation, to identify key man resources and to reduce role permissions i.e. least-privilege