Are admins capable of obtaining verbose logging details for 3rd party apps (3PA) that have a one-way API integration? E.g., from 3PA to JIRA?
Unless I missed it, I did not see any cURL connection attempts, NOR probing attempts in the audit log.
In my use case, a given ${3PA} needs access to ${companyName} JIRA org. How would I know if unauthorized hosts OR any other 3PAs are leveraging REST API tool(s) to probe https://api.atlassian.com/admin/v1/orgs/${ORG_ID} OR running cURL command such as…
curl --request GET \
--url 'https://api.atlassian.com/admin/v1/orgs/${ORG_ID}' \
--header 'Authorization: Bearer ${ORG_TOKEN}' \
--header 'Accept: application/json'