Skip to Main Content
Status Delivered
Workspace * IBM Cloud Ideas
Created by Guest
Created on Aug 15, 2019

Audit log based alerting

We would need to get an email or some other notification if someone tries to log in to our cloud environment or tries to use stolen credentials.

Idea priority High
  • Guest
    Aug 25, 2021

    Managing an account to minimize the risk of inappropriate login to the account can be done in several ways:

    1. Define the specific IP addresses this an ID may login from. Details how to configure this can be found here: https://cloud.ibm.com/docs/account?topic=account-ips

    2. Limit the number of concurrent sessions an ID may have logged in at 1 time. Details how to configure this can be found here: https://cloud.ibm.com/docs/account?topic=account-iam-work-sessions.

    3. If there a specific IDs that require additional close attention, it is possible to setup an alert in activity tracker event to alert on when a specific user logs in. When a userID is logged in, an event is generated. Login events include the following: https://cloud.ibm.com/docs/activity-tracker?topic=activity-tracker-at_events_iam&locale=en#at_events_iam_login. The subsequent alert can then be assessed if the user ID is logging in at an unexpected time.