• Use pyinotify to "tail" the audit log
• Only "act" on log entries (these docs might be useful)
  • with the "type": "response" since a request might fail/get denied (see these docs)
  • where "request": { "operation": "..." } is:
    • create
    • update
    • delete
• Send the request object in the message
  • Filter out sensitive data (i.e. all hmac- values)
    • When an object only has a string hmac value don't send that key-value pair e.g. client_token
    • When an object has a object with hmac values only send the keys e.g. data object
• Use entrypoints to use a plugin based system for where to write the events

Use data in tests/*.json

logrotate -s $PWD/meow logrotatevault.conf worked IIRC?

https://docs.pytest.org/en/stable/how-to/tmp_path.html