As part of SOC2 audit we would like to implement a session recording solution of our production envirionment.
We utilise kubectl installed on MacOS laptops, in combination with aws-vault for storing the temporary aws access tokens and aws-iam-authenticator to serialise the authentication to the kubernetes api (kubectl). On top of this tooling we would like to do session recording with replaying for security reasons.
Is there a good session (linux terminal) recording solution, which would work well with kubectl and containers ? Any examples are welcome.
My main idea was to write a custom wrapper or override the aws-iam-authenticator or the kubectl cli with custom code, which runs a solution like https://asciinema.org/, but there might be some linux/k8s solutions out of the box for free.