heroui logo

Notion Page API Permissions Changed

Panther Rules

View Source
Summary
The rule "Notion Page API Permissions Changed" is designed to monitor changes to API permissions related to Notion pages. When a new API integration is added or existing permissions are altered, this rule triggers an alert. The rule utilizes Notion's audit logs to track these modifications, ensuring that any unauthorized or unintended changes to API access can be swiftly identified and addressed. Given that these changes may lead to potential exposure of sensitive data, the rule is classified with a low severity level, indicating the need for awareness but not immediate, high-impact risk. A runbook is provided to guide users on steps to review and rectify any changes, with a reference link for further understanding of sharing and permissions within Notion. This rule is particularly relevant for organizations concerned about data security and integration with third-party applications.
Categories
  • Cloud
  • Application
  • Identity Management
Data Sources
  • Logon Session
  • Application Log
  • User Account
  • Service
Created: 2023-10-13