Logging and auditing best practices

In this last section, we will cover some logging and auditing best practices. From an exam perspective, you are not really tested with questions on these practices, but you may find indirect references to them. Since Data Access audit logs are not enabled by default, it’s important that you review and enable Data Access audit logs for relevant services.

Note

You can find more details on how to enable these logs at https://packt.link/w0ZWY.

Let’s look at some best practices for logging and auditing:

• Ensure that you specify the correct log storage destination—Google Cloud Storage for archival and retention and BigQuery for analytics and forensics
• Configure appropriate permissions for the access of your logs
• Ensure that sensitive data is stripped from the logs before they are stored
• Periodically review your audit logs that are stored in Cloud Logging, BigQuery, or your third-party SIEM solutions

...