Cloud Manager Audit events

suggestion, this could be done using Adobe IO Reading Cloud Manager API and Events - but will be  custom application deployed on cloud / server less @brad_morris  

Thanks yes i'm aware of the API's, but the API's will only give me the state and not the change event. The events supported currently only relate to pipelines.

@brad_morris  Cloud Manager API that allows you to retrieve information on pipeline executions, environments, branches, domains, IP whitelisting, execution and others can be used for tracking, what specific you want to capture here

@riteshy18 , yes I am aware I have tested this API.

Via the API Approach, if I have an environment variable thats been changed, I would need to perform analysis on the variables to determine the change over time which may be long after its changed, additionally if this environment variable is a secret then we have no mechanism to track change. Therefore an event which indicates change would allow us to understand and track a change has occurred. Cloud Manager events exist today, so extending them to allow for the subscription of change would be the minimum.
Considering there is no audit report in Cloud manager and no way to stream logs, its the one part of AEMaaCS which does not have enough auditing or logging capabilities for change management. Considering the changes that could occur in Cloud Manager, it could have extreme consequences for businesses.

EG: Environment Variable secret:

yes  i agree about current API limitation however my point was most of key features / access can be done using API and have custom solution including historical logs , events etc. 

Your use case is for Monitoring or specific to event audit which is nothing but a requirement to see who did what, when, and where.