Lumos Audit Events

Lumos provides access management and governance capabilities with comprehensive audit logging for security and compliance monitoring. These logs capture information such as access requests, approvals, provisioning activities, and administrative events. They help administrators track user access patterns, detect unauthorized access attempts, and maintain compliance with access governance policies.

Lumos Source Setup

Ingest Methods

Setup the ingestion of this source using one of the following guides.

If using an AWS S3 bucket use the following SNS topic ARN to send your bucket notifications.

arn:aws:sns:<REGION>:253602268883:runreveal_lumos

Setup

For detailed setup instructions, see the Lumos integration patterns documentation to configure audit event streaming to your chosen storage solution.

Lumos Event Types

The Lumos integration collects comprehensive access management and governance audit events from your Lumos platform. These events provide visibility into user access requests, approvals, provisioning activities, and administrative actions across your organization.

Event Categories Collected

Access Management

  • Access Requests - New access requests submitted through Lumos
  • Access Approvals - Approval decisions for access requests
  • Access Rejections - Denial decisions for access requests
  • Access Grants - Successful access provisioning events
  • Access Revocations - Access removal and deprovisioning events

User Provisioning

  • User Creation - New user account provisioning
  • User Updates - User profile and attribute modifications
  • User Deactivation - User account deactivation and suspension
  • User Deletion - User account removal and cleanup

Application Management

  • App Registration - New application registrations in Lumos
  • App Configuration - Application settings and configuration changes
  • App Permissions - Permission assignments and modifications
  • App Deactivation - Application deactivation and removal

Group & Role Management

  • Group Creation - New group creation and configuration
  • Group Updates - Group membership and attribute changes
  • Role Assignments - Role-based access control assignments
  • Permission Changes - Permission modifications and updates

Administrative Actions

  • Policy Changes - Access policy modifications and updates
  • Configuration Updates - System configuration changes
  • Audit Trail Events - Administrative and system-generated events
  • Integration Events - Third-party integration activities

Event Data Structure

Each Lumos event includes:

  • Actor Information - User ID, name, email, and actor type
  • Event Details - Event type, outcome, timestamp, and user-friendly description
  • Target Information - Affected users, applications, groups, or resources
  • Event Metadata - Additional context and business justification
  • Access Details - Permissions, access length, and resource information

Helpful Resources

This integration provides comprehensive visibility into your access management activities, helping you track user access patterns, detect unauthorized access attempts, and maintain compliance with access governance policies.