Real logging of IAM access and key/role usage would be much appreciated for auditing. Tough now to figure out who is doing what, from where, and with what permi

Real logging of IAM access and key/role usage would be much appreciated for auditing. Tough now to figure out who is doing what, from where, and with what permissions. Restricting AWS API access from sources outside the AWS network would also be pretty useful.