Audit

Compliance & audit

Access & consent log

4,646 access events today · 2 failed attempts. Every action is recorded immutably and reconciled against CloudTrail.

Restricted — Compliance & Admin Auditor roles only

Viewing this page is itself logged. Records are read-only here; corrections are filed as new events, never edits.

Event log12

Denied attempts and PHI reads first — open a row to inspect the full record.

  • Failed sign-in · 4 attempts

    unknown · Unauthenticated · IP 203.0.113.44 · POST /auth/login

    AuthDenied
  • PHI export blocked · missing scope

    r.okafor · Support agent · IP 10.2.4.18 · GET /api/patients/export

    ExportDenied
  • PHI read · patient #2231

    dr.jenkins · Clinician · IP 10.2.1.7 · GET /clinician/patients/2231

    PHI accessSuccess
  • PHI read · patient #2188

    m.khan · Coordinator · IP 10.2.0.3 · GET /admin/patients/2188

    PHI accessSuccess
  • PHI read · prescription T-100479

    s.alvarez · Pharmacist · IP 10.4.2.9 · GET /pharmacy/tasks/100479

    PHI accessSuccess
  • Consent accepted · data_collection

    patient #2240 · Patient · IP 198.51.100.12 · POST /api/consent

    ConsentSuccess
  • Prescription handoff · T-100479

    system · Service · clinician→rx · IP internal · POST /api/handoff

    HandoffSuccess
  • Consent granted · ai_assisted_review

    patient #2231 · Patient · IP 198.51.100.77 · POST /api/consent

    ConsentSuccess
  • AI draft generated · intake summary

    bedrock · Service · AI pipeline · IP internal · POST /api/ai/summarize

    AISuccess
  • Audit log exported · 30-day window

    a.compliance · Compliance auditor · IP 10.2.6.1 · GET /admin/audit/export

    ExportSuccess
  • Role changed · support → read-only

    m.khan · Coordinator · IP 10.2.0.3 · PATCH /admin/users/okafor

    User actionSuccess
  • Signed in · MFA verified

    a.compliance · Compliance auditor · IP 10.2.6.1 · POST /auth/login

    AuthSuccess