> The fact that dev can have access to PROD logs just by himself unsupervised (even if for obviously good reasons from his/company point of view) is a big fat r

> The fact that dev can have access to PROD logs just by himself unsupervised (even if for obviously good reasons from his/company point of view) is a big fat red flag What's wrong with granting engineers access to PII-less logs[1] by default? How does that compromise privacy? I'm willing to bet your bank differed on the following ways from Google in absolute numbers and per-engineer: * handled significantly less requests per second - at least 2 orders of magnitude - therefore lower log volumes * shipped less changes to prod per unit time, so fewer problems to investigate 1. No IP client address, raw session id or username