Administration Guide

How to configure Audit service settings

This guide shows you how to configure the per-Site settings that govern inactive Audit Services and cloud-audit script prerequisites.

Admin Center > Site Settings > Settings > Audit service settings

What this page controls

This page has two main concerns:

  • when inactive Audit Services should be automatically scheduled for deletion
  • whether cloud audit scripts may install required modules on the Audit Service host

Prerequisites

  • You are signed in as a Site Administrator.
  • You know the inactivity threshold your Site should enforce.
  • If you audit AWS or Azure assets, you know whether module installation is allowed on the Audit Service host.

Steps

  1. Navigate to Admin Center > Site Settings > Settings > Audit service settings.
  2. In Inactivity period, set the number of days after which inactive Audit Services should be scheduled for deletion.
  3. Review the help text for the deletion workflow. The system schedules deletion after inactivity and applies its follow-up deletion timing from there.
  4. In Cloud audit scripts, decide whether to enable Allow module installation on audit service host.
  5. Save.

When to enable cloud module installation

Enable the cloud-module option when the Site's Audit Services need to run cloud audit scripts that depend on host-side modules, such as AWS PowerShell or Azure Az modules.

Keep it off when:

  • cloud auditing is not used on this Site
  • host mutation is tightly controlled
  • required modules are already managed outside AlloyScan

Verify

  1. Refresh the page and confirm the inactivity period and cloud-module setting persisted.
  2. Review the affected Audit Services over time and confirm inactive services follow the configured cleanup policy.
  3. If cloud audits are used, run a cloud audit and confirm the Audit Service can satisfy the required module prerequisites.