Audit log events
In audit logs, an event is a record of a create, update, or delete operation on resources and entities. Reading sensitive data, such as passwords, certificates, etc., is also recorded in audit logs.
An event has a fixed structure and can be of different types.
Event structure
An event has a JSON structure:
[
{
"event_saved_time": "2025-09-29T13:13:25.196Z",
"event_id": "string",
"event_type": "string",
"event_time": "2025-09-29T13:13:25.196Z",
"status": "string",
"error_code": "string",
"request_id": "string",
"subject": {
"id": "string",
"type": "string",
"name": "string",
"auth_provider": "string",
"is_authorized": true,
"authorized_by": [
"string"
],
"credentials_fingerprint": "string"
},
"resource": {
"id": "string",
"type": "string",
"name": "string",
"account_id": "string",
"project_id": "string",
"location": "string",
"details": {},
"old_values": {
"additionalProp1": {}
},
"new_values": {
"additionalProp1": {}
}
},
"source_type": "string",
"request": {
"remote_address": "string",
"user_agent": "string",
"type": "string",
"path": "string",
"method": "string",
"parameters": "string"
},
"schema_version": "string"
}
]
Some fields are optional and may be absent from the event. Some fields also have reserved values.
Event fields
| Field | Description | Data type | Required | |
|---|---|---|---|---|
event_id | Unique event identifier | String | ✓ | |
event_type | Event type; you can view the full list in the Event types subsection | String | ✓ | |
event_time | Time the event occurred in ISO8601 format with timezone | String | ✓ | |
event_saved_time | Time the event was saved in audit logs in ISO8601 format with timezone | String | ✓ | |
status | Event status. Possible values:
| String | ✓ | |
error_code | Error code | String | ✗ | |
request_id | Unique event chain identifier or request identifier | String | ✓ | |
subject | Information about the subject—a service or user that performed the operation | Object | ✓ | |
id | Unique identifier of the action subject. Example formats:
| String | ✓ | |
type | Subject type. Possible values:
| String | ✓ | |
name | Subject name | String | ✗ | |
auth_provider | Subject authentication provider. Possible values:
| String | ✗ | |
is_authorized | Authorization result | Boolean | ✓ | |
authorized_by | List of roles and other authorization attributes used to authorize the request | Array of strings | ✗ | |
credentials_fingerprint | Fingerprint of the secret used to authorize the request | String | ✗ | |
resource | Action object; the entity on which the subject performed the operation. An object can be a resource (server, disk), user, role, account, etc. | Object | ✓ | |
id | Unique object identifier | String | ✓ | |
type | Object type | String | ✓ | |
name | Object name | String | ✗ | |
account_id | Account identifier | String | ✓ | |
project_id | Project identifier | String | ✗ | |
location | Data center, availability zone, or pool where the subject is located | String | ✗ | |
details | Event details. Defined by the source service and event type | Object | ✗ | |
changes | Changes that occurred to the subject | Object | ✗ | |
changes_old_values | Set of old subject attribute values | Object | ✗ | |
changes_new_values | Set of new subject attribute values | Object | ✓ | |
source | Service that recorded the change | Object | ✓ | |
type | Name of the product, service, or feature where the event occurred | String | ✓ | |
request | Request information | Object | ✓ | |
remote_address | IP address the request came from | String | ✗ | |
user_agent | User Agent of the event subject | String | ✗ | |
type | Request type. Possible values:
| String | ✓ | |
path | Path to the resource where the event occurred | String | ✗ | |
method | Request method | String | ✗ | |
parameters | Query parameters | String | ✗ | |
schema_version | Fixed value — 1.0 | String | ✓ | |
Reserved values
If a field value cannot be determined by log source services—for example, if an error occurred while performing an action or the object has not yet been created and resource_id is missing—the reserved value undefined is used.
It can appear in the following fields:
subject_id;subject_type;resource_id;resource_type;resource_account_id.
Event types (event_type)
In audit logs, event types are grouped by services responsible for different parts of products. You can use services to filter events when exporting logs.
The list of products that support audit logs, services, and event types will be expanded.
| Product or management area | Services |
|---|---|
| Account, users, projects, and permissions | iam |
| Billing, payment information | legal billing |
| Dedicated servers, Colocation, basic firewall, storage systems | dedicated |
| Cloud platform | vpc quota_management compute filestorage |
| Secrets manager | secrets |
| Certificate manager | certificates |
| Logs | logs |
| Audit logs | audit_logs |
| DNS Hosting | dns |
| Global Router | global_router |
| Managed Kubernetes | mks |
| S3 | s3 |
| Managed Databases | dbaas |
| Email Service | ses |
iam service
Responsible for operations in the account, with users, projects, and access permissions. You can manage some of them (for example, users and their keys) via the IAM API.
| Event name (event_type) | Description | |
|---|---|---|
| Account | iam.account.init_action | Subject authentication when performing an operation in the billing service. Combined with the main operation event via the request_id |
| iam.account.email_confirmation | Email address confirmation during account registration | |
| iam.account.phone_confirmation | Phone number confirmation during account registration | |
| iam.account.fill | Filling in account details | |
| iam.account.delete | Deleting an account | |
| iam.account.update | Updating account details | |
| Account login | iam.user.login | User login to account |
| iam.user_password.check | User entering password | |
| iam.user.logout | User logout from account | |
| iam.user_2fa_code.verify | 2FA login attempt | |
| iam.user_session.reset_all_other | Resetting all sessions except the current one | |
| iam.user_session.reset_all_within_browser | Logging out of all accounts logged in to in the browser | |
| iam.user_session.reset_all | Forced session termination by the system | |
| Password | iam.user_password.reset_request | Requesting an email with a password reset link |
| iam.user_password.reset_apply | Password reset with creating a new password | |
| iam.user_password.update | Changing password | |
| Two-factor authentication | iam.user_2fa.enable | Enabling two-factor authentication |
| iam.user_2fa.disable | Disabling two-factor authentication | |
| iam.user_2fa_code.send | Requesting a two-factor authentication code | |
| iam.user_2fa_backup_codes.create | Creating backup codes | |
| iam.user_2fa_otp.enable | Enabling login via authenticator app | |
| iam.user_2fa_email.enable | Enabling login via email | |
| iam.user_2fa_sms.enable | Enabling login via SMS | |
| iam.user_2fa_backup_codes.enable | Enabling login with backup codes and generating them | |
| iam.user_2fa_otp.disable | Disabling login via authenticator app | |
| iam.user_2fa_email.disable | Disabling login via email | |
| iam.user_2fa_sms.disable | Disabling login via SMS | |
| Changing contact details | iam.user_email.change_init | Requesting an email address change |
| iam.user_email.change_unlocked | Confirming an email address change | |
| iam.user_email.update | Successful email address change | |
| iam.user_phone.change_init | Requesting a phone number change | |
| iam.user_phone.change_unlocked | Confirming a phone number change | |
| iam.user_phone.update | Successful phone number change | |
| Users | iam.user_profile.create | Creating a new user profile |
| iam.user.email_confirmation | Registering a new user via the link from the invitation email | |
| iam.federated_user_profile.create iam.federated_user.create * | Creating a federated user profile | |
| iam.user.phone_confirmation | Phone number confirmation during new user registration | |
| iam.user_profile.fill | User filling in their profile details | |
| iam.user_profile.update | User updating their profile details | |
| iam.federated_user_profile.update | Updating federated user profile details | |
| iam.user_profile.delete | Deleting a user profile | |
| iam.federated_user_profile.delete | Deleting a federated user profile | |
| iam.user_subscription.add | Adding a notification category to a user | |
| iam.user_subscription.delete | Deleting a notification category from a user | |
| iam.user.create | Creating a user | |
| iam.user.delete | Deleting a user | |
| iam.user_role.add | Assigning roles to a user | |
| iam.user_role.remove | Removing roles from a user | |
| iam.user_group.add | Assigning groups to a user | |
| iam.user_group.remove | Removing groups from a user | |
| Service users | iam.service_user.create | Creating a service user |
| iam.service_user.update | Updating a service user | |
| iam.service_user.delete | Deleting a service user | |
| iam.service_user_role.add | Assigning roles to a service user | |
| iam.service_user_role.remove | Removing roles from a service user | |
| iam.service_user_group.add | Assigning groups to a service user | |
| iam.service_user_group.remove | Removing groups from a service user | |
| User group | iam.group.create | Creating a user group |
| iam.group.update | Updating a user group | |
| iam.group.delete | Deleting a user group | |
| iam.group_user.add | Adding users to a group | |
| iam.group_user.remove | Removing users from a group | |
| iam.group_role.add | Assigning roles to a user group | |
| iam.group_role.remove | Removing roles from a user group | |
| Federations | iam.federation.create | Creating a federation |
| iam.federation.update | Updating a federation | |
| iam.federation.delete | Deleting a federation | |
| iam.federation_cert.create | Creating a federation certificate | |
| iam.federation_cert.update | Updating a federation certificate | |
| iam.federation_cert.delete | Deleting a federation certificate | |
| iam.federation_group_mapping.create | Creating a mapping between a Servercore user group and an Identity Provider group | |
| iam.federation_group_mapping.update | Replacing all user group mappings for a federation with mappings to other Identity Provider groups | |
| iam.federation_group_mapping.delete | Deleting a mapping between a Servercore user group and an Identity Provider group | |
| Projects | iam.project.create | Creating a project |
| iam.project.update | Updating a project | |
| iam.project_domain.detach | Deleting a project domain | |
| iam.project.delete | Deleting a project | |
| IAM tokens | iam.auth_token.issue | Issuing an IAM token |
| iam.auth_token.revoke | Revoking an IAM token | |
| S3 keys | iam.user_credential.add | Creating an S3 key for a user |
| iam.user_credential.remove | Deleting an S3 key from a user | |
| iam.service_user_credential.add | Creating an S3 key for a service user | |
| iam.service_user_credential.remove | Deleting an S3 key from a service user | |
| Static tokens | iam.api_key.create | Creating a static token |
| iam.api_key.update | Updating a static token | |
| iam.api_key.enable | Activating a static token | |
| iam.api_key.disable | Deactivating a static token | |
| iam.api_key.delete | Deleting a static token | |
| ACL | iam.acl.enable | Enabling ACL |
| iam.acl.disable | Disabling ACL | |
| iam.acl_ip.create | Creating an ACL rule | |
| iam.acl_ip.delete | Deleting an ACL rule |
* The event is deprecated and will soon no longer be recorded in audit logs.
legal service
Responsible for operations with the customer under the contract—the payer.
| Event name (event_type) | Description | |
|---|---|---|
| Customer under contract | legal.payer.create | Creating a customer |
| legal.payer.update | Updating customer details | |
| legal.payer.reorganisation | Reorganization of the customer's company |
billing service
Responsible for operations that occur with resources during deferred payment, non-payment, or debt settlement.
In billing service events, detailed information about the subject is provided in a paired authentication event. In it, events of type iam.account.init_action are combined with the main event via the request_id field.
| Event name (event_type) | Description | |
|---|---|---|
| Cloud platform financial signals | billing.block_signal.apply | Blocking a resource |
| billing.unblock_signal.apply | Unblocking a resource | |
| billing.restrict_signal.apply | Restricting access to a resource | |
| billing.unrestrict_signal.apply | Removing resource access restriction | |
| billing.delete_signal.apply | Deleting a resource | |
| Deferred payment | billing.soft_grace_policy.enable | Enabling deferred payment |
| billing.soft_grace_policy.disable | Disabling deferred payment | |
| billing.soft_grace_signal.apply | Activating deferred payment | |
| billing.unsoft_grace_signal.apply | Ending active deferred payment |
dedicated service
Responsible for operations:
You can manage servers and equipment via the Dedicated Servers API.
| Event name (event_type) | Description | |
|---|---|---|
| Dedicated server | dedicated.server.create | Ordering a dedicated server |
| dedicated.server.update | Updating a dedicated server | |
| dedicated.server.delete | Deleting a dedicated server | |
| dedicated.server.power_on | Powering on a dedicated server | |
| dedicated.server.power_off | Powering off a dedicated server | |
| dedicated.server.reboot | Rebooting a dedicated server | |
| dedicated.server.os_reinstall | Reinstalling OS on a dedicated server | |
| dedicated.server.password_show | Viewing dedicated server password | |
| dedicated.server.console_open | Opening dedicated server console | |
| dedicated.server.upgrade_create | Creating a dedicated server upgrade | |
| dedicated.server.upgrade_cancel | Canceling a dedicated server upgrade | |
| Additional services | dedicated.additional_resource.create | Ordering an additional service |
| dedicated.additional_resource.update | Updating an additional service | |
| dedicated.additional_resource.delete | Deleting an additional service | |
| Colocation | dedicated.colocation.create | Order colocation |
| dedicated.colocation.update | Modify colocation | |
| dedicated.colocation.delete | Delete colocation | |
| Firewall | dedicated.firewall.create | Order firewall |
| dedicated.firewall.update | Modify firewall | |
| dedicated.firewall.delete | Delete firewall | |
| Network equipment | dedicated.network_equipment.create | Order network equipment |
| dedicated.network_equipment.update | Modify network equipment | |
| dedicated.network_equipment.delete | Delete network equipment | |
| Equipment (storage systems) | dedicated.equipment.create | Order equipment |
| dedicated.equipment.update | Modify equipment | |
| dedicated.equipment.delete | Delete equipment | |
| Network service | dedicated.network.create | Order network service |
| dedicated.network.update | Modify network service | |
| dedicated.network.delete | Delete network service | |
| Port service | dedicated.port.create | Order port service |
| dedicated.port.update | Modify port service | |
| dedicated.port.delete | Delete network service | |
| Software | dedicated.software.create | Order software |
| dedicated.software.update | Modify software | |
| dedicated.software.delete | Delete software | |
| Tags | dedicated.tag.create | Order software |
| dedicated.tag.update | Modify software | |
| dedicated.tag.delete | Delete software | |
| Basic firewall | dedicated.basic_firewall.create | Create basic firewall |
| dedicated.basic_firewall.update | Modify basic firewall | |
| dedicated.basic_firewall.delete | Delete basic firewall | |
| Public subnet | dedicated.public_subnet.create | Create public subnet |
| dedicated.public_subnet.update | Modify public subnet | |
| dedicated.public_subnet.delete | Delete public subnet | |
| Private subnet | dedicated.private_subnet.create | Create private subnet |
| dedicated.private_subnet.update | Modify private subnet | |
| dedicated.private_subnet.delete | Delete private subnet | |
| Public VLAN | dedicated.public_vlan.create | Create public VLAN |
| dedicated.public_vlan.update | Modify public VLAN | |
| dedicated.public_vlan.delete | Delete public VLAN | |
| Private VLAN | dedicated.private_vlan.create | Create private VLAN |
| dedicated.private_vlan.update | Modify private VLAN | |
| dedicated.private_vlan.delete | Delete private VLAN | |
| SSH keys | dedicated.ssh_key.create | Create SSH key |
| dedicated.ssh_key.update | Modify SSH key | |
| dedicated.ssh_key.delete | Delete SSH key | |
| IPMI monitoring | dedicated.monitoring.create | Create monitoring |
| dedicated.monitoring.delete | Delete monitoring | |
| Custom images | dedicated.custom_os_image.create | Create custom image |
| dedicated.custom_os_image.update | Modify custom image | |
| dedicated.custom_os_image.delete | Delete custom image | |
| Network drives | dedicated.blockstorage_disk.create | Create network drive |
| dedicated.blockstorage_disk.update | Modify network drive | |
| dedicated.blockstorage_disk.delete | Delete network drive | |
| SAN network | dedicated.blockstorage_san_network.create | Create SAN network |
| dedicated.blockstorage_san_network.update | Modify SAN network | |
| dedicated.blockstorage_san_network.delete | Delete SAN network |
vpc service
Responsible for operations with Cloud Platform networks, cloud firewalls, private DNS, security groups, cloud load balancers.
| Event name (event_type) | Description | |
|---|---|---|
| Private networks | vpc.network.create | Create private network |
| vpc.network.update | Modify private network | |
| vpc.network.delete | Delete private network | |
| Private subnets | vpc.subnet.create | Create private subnet |
| vpc.subnet.update | Modify private subnet | |
| vpc.subnet.delete | Delete private subnet | |
| Public subnets | vpc.subnet.create | Create public subnet |
| vpc.subnet.bulk_create | Add public subnet to project | |
| vpc.subnet.update | Modify public subnet | |
| vpc.subnet.delete | Delete public subnet | |
| vpc.subnet.init_delete | Delete public subnet from project | |
| Subnet pools | vpc.subnet_pool.create | Create subnet pool |
| vpc.subnet_pool.update | Modify subnet pool | |
| vpc.subnet_pool.delete | Delete subnet pool | |
| Address scopes | vpc.address_scope.create | Create address scope |
| vpc.address_scope.update | Modify address scope | |
| vpc.address_scope.delete | Delete address scope | |
| Address groups | vpc.address_group.create | Create address group |
| vpc.address_group.update | Modify address group | |
| vpc.address_group.delete | Delete address group | |
| Public floating IP addresses | vpc.floatingip.create | Create public floating IP address |
| vpc.floatingip.bulk_create | Add public floating IP address to project | |
| vpc.floatingip.update | Modify public floating IP address, including connecting to or disconnecting from a port | |
| vpc.floatingip_port_forwarding.create | Create port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip_port_forwarding.update | Modify port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip_port_forwarding.delete | Delete port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip.init_delete | Delete public floating IP address from project | |
| vpc.floatingip.delete | Delete public floating IP address | |
| Direct public IP addresses | vpc.public_port.create | Create direct public IP address |
| vpc.public_port.update | Update direct public IP address | |
| vpc.public_port.delete | Delete direct public IP address | |
| Ports | vpc.port.create | Create port |
| vpc.port.update | Modify port | |
| vpc.port.delete | Delete port | |
| Cloud routers | vpc.router.create | Create cloud router |
| vpc.router.update | Modify cloud router | |
| vpc.router.delete | Delete cloud router | |
| vpc.router.add_interface | Connect subnet to router | |
| vpc.router.remove_interface | Disconnect subnet from router | |
| Security groups | vpc.security_group.create | Create security group |
| vpc.security_group.update | Modify security group | |
| vpc.security_group.delete | Delete security group | |
| vpc.security_group_rule.create | Create security group rule | |
| vpc.security_group_rule.delete | Delete security group rule | |
| Resource access policies | vpc.rbac_policy.create | Create access policy |
| vpc.rbac_policy.update | Modify access policy | |
| vpc.rbac_policy.delete | Delete access policy | |
| Cloud firewalls | vpc.firewall.create | Create firewall |
| vpc.firewall.update | Modify firewall | |
| vpc.firewall.delete | Delete firewall | |
| vpc.firewall_rule.create | Create firewall rule | |
| vpc.firewall_rule.update | Modify firewall rule | |
| vpc.firewall_rule.delete | Delete firewall rule | |
| vpc.firewall_policy.create | Create firewall policy | |
| vpc.firewall_policy.update | Modify firewall policy | |
| vpc.firewall_policy.delete | Delete firewall policy | |
| Private DNS | vpc.private_dns_zone.create | Create zone |
| vpc.private_dns_zone.update | Update zone | |
| vpc.private_dns_zone.delete | Delete zone | |
| vpc.private_dns_zone.update_recordset | Modify zone records | |
| vpc.private_dns_service.create | Connect network to private DNS resolver | |
| vpc.private_dns_service.delete | Disconnect network from private DNS resolver | |
| vpc.private_dns_service.update | Modify network connection parameters to private DNS resolver | |
| vpc.private_dns_service.update_network | Reconfigure private DNS resolver ports | |
| Load balancer | vpc.load_balancer.create | Create load balancer |
| vpc.load_balancer.update | Modify load balancer | |
| vpc.load_balancer.delete | Delete load balancer | |
| vpc.load_balancer.failover | Initiate load balancer rebuild | |
| vpc.load_balancer_log_offloading.enable | Enable load balancer log offloading task | |
| vpc.load_balancer_log_offloading.disable | Disable load balancer log offloading task | |
| vpc.load_balancer_pool_member.create | Add server to load balancer pool | |
| vpc.load_balancer_pool_member.update | Modify server in load balancer pool | |
| vpc.load_balancer_pool_member.delete | Delete server from load balancer pool | |
| vpc.load_balancer_pool.create | Create load balancer pool | |
| vpc.load_balancer_pool.update | Modify load balancer pool | |
| vpc.load_balancer_pool.delete | Delete load balancer pool | |
| vpc.load_balancer_listener.create | Create load balancer listener | |
| vpc.load_balancer_listener.update | Modify load balancer listener | |
| vpc.load_balancer_listener.delete | Delete load balancer listener | |
| vpc.load_balancer_l7_policy.create | Create load balancer HTTP policy | |
| vpc.load_balancer_l7_policy.update | Modify load balancer HTTP policy | |
| vpc.load_balancer_l7_policy.delete | Delete load balancer HTTP policy | |
| vpc.load_balancer_l7_policy_rule.create | Create load balancer L7 rule | |
| vpc.load_balancer_l7_policy_rule.update | Modify load balancer L7 rule | |
| vpc.load_balancer_l7_policy_rule.delete | Delete load balancer L7 rule | |
| vpc.load_balancer_healthmonitor.create | Create load balancer health check | |
| vpc.load_balancer_healthmonitor.update | Modify load balancer health check | |
| vpc.load_balancer_healthmonitor.delete | Delete load balancer health check | |
| vpc.load_balancer_amphorae.delete | Delete load balancer instance | |
| vpc.load_balancer_amphorae.failover | Initiate load balancer instance rebuild |
quota_manager service
Responsible for operations with project quotas. You can manage quotas via the Quota Management API.
| Event name (event_type) | Description | |
|---|---|---|
| Quotas | quota_manager.project.update | Update quotas |
compute service
Responsible for operations with licenses, cloud servers, network drives, disk snapshots, network drive backups, and images of cloud servers.
You can manage licenses via the Cloud Platform Projects and Resources API.
| Event name (event_type) | Description | |
|---|---|---|
| SSH keys (keypairs) | compute.keypair.bulk_create | Create keypair (bulk operation) |
| compute.keypair.bulk_delete | Delete keypair (bulk operation) | |
| compute.keypair.create | Create or import keypair | |
| compute.keypair.delete | Delete keypair | |
| Licenses | compute.license.bulk_create | Create license (bulk operation) |
| compute.license.delete | Delete license | |
| Cloud servers | compute.server.init_delete | Initiate cloud server deletion |
| compute.server.init_rebuild | Initiate cloud server rebuild | |
| compute.server.create | Create cloud server | |
| compute.server.update | Update cloud server information | |
| compute.server.delete | Delete cloud server (in soft mode) | |
| compute.server.add_floatingip | Add public floating IP address to cloud server | |
| compute.server.remove_floatingip | Disconnect public floating IP address from cloud server | |
| compute.server.add_fixedip | Add fixed IP address to cloud server | |
| compute.server.remove_fixedip | Disconnect fixed IP address from cloud server | |
| compute.server.add_security_group | Add security group to cloud server | |
| compute.server.remove_security_group | Disconnect security group from cloud server | |
| compute.server.set_admin_password | Change cloud server OS administrator password | |
| compute.server.resize | Initiate cloud server configuration change | |
| compute.server.confirm_resize | Confirm cloud server configuration change | |
| compute.server.revert_resize | Cancel cloud server configuration change | |
| compute.server.create_backup | Create cloud server backup | |
| compute.server.create_image | Create cloud server disk image | |
| compute.server.lock | Lock cloud server | |
| compute.server.unlock | Unlock cloud server | |
| compute.server.pause | Pause cloud server | |
| compute.server.unpause | Unpause cloud server | |
| compute.server.reboot | Reboot cloud server | |
| compute.server.rebuild | Rebuild cloud server | |
| compute.server.rescue | Start Rescue mode for cloud server | |
| compute.server.unrescue | Exit Rescue mode for cloud server | |
| compute.server.start | Start cloud server | |
| compute.server.stop | Stop cloud server | |
| compute.server.get_console_output | Request cloud server console output | |
| compute.server.shelve | Shelve cloud server | |
| compute.server.unshelve | Unshelve cloud server | |
| compute.server.trigger_crash_dump | Trigger cloud server crash dump | |
| compute.server.create_serial_console | Create cloud server serial console | |
| compute.server.create_spice_console | Create cloud server SPICE console | |
| compute.server.create_vnc_console | Create cloud server VNC console | |
| compute.server.create_rdp_console | Create cloud server RDP console | |
| compute.server.create_console | Create cloud server console | |
| compute.server.create_metadata | Create cloud server metadata | |
| compute.server.update_metadata | Update cloud server metadata | |
| compute.server.update_metadata_item | Update cloud server metadata item | |
| compute.server.delete_metadata_item | Delete cloud server metadata item | |
| compute.server.attach_interface | Create interface and attach it to cloud server | |
| compute.server.detach_interface | Detach interface from cloud server | |
| compute.server.clear_admin_password | Clear OS administrator password from metadata server | |
| compute.server.attach_volume | Attach network drive to cloud server | |
| compute.server.detach_volume | Detach network drive from cloud server | |
| compute.server.update_volume_attachment | Update disk attachment information for cloud server | |
| compute.server.replace_all_tags | Replace cloud server tags | |
| compute.server.add_tag | Add tag to cloud server | |
| compute.server.delete_all_tags | Delete all cloud server tags | |
| compute.server.delete_tag | Delete cloud server tag | |
| compute.server.leave_server_group | Remove cloud server from server group | |
| Flavors | compute.flavor.create | Create flavor |
| compute.flavor.delete | Delete flavor | |
| Server groups | compute.server_group.create | Create server group |
| compute.server_group.delete | Delete server group | |
| Public floating IP addresses | compute.floatingip.create | Create public floating IP address |
| compute.floatingip.delete | Delete public floating IP address | |
| Network drives | compute.volume_attachment.create | Create disk attachment to cloud server |
| compute.volume_attachment.delete | Delete disk attachment to cloud server | |
| compute.volume_attachment.update | Update disk attachment to cloud server | |
| compute.volume_attachment.complete | Mark disk attachment to cloud server as complete | |
| compute.volume_metadata.create | Create disk metadata | |
| compute.volume_metadata.delete | Delete disk metadata | |
| compute.volume_metadata.update_key | Update disk metadata key | |
| compute.volume_metadata.update | Update disk metadata | |
| compute.volume.revert | Revert disk to snapshot | |
| compute.volume_transfer.create | Create disk transfer to another project | |
| compute.volume_transfer.delete | Delete disk transfer to another project | |
| compute.volume_transfer.update | Accept disk transfer to another project | |
| compute.volume.create_image | Create image from disk | |
| compute.volume.create | Create disk | |
| compute.volume.delete | Delete disk | |
| compute.volume.read_image_metadata | Read image metadata for disk | |
| compute.volume.update | Modify disk attributes (e.g., rename) | |
| compute.volume.attach | Attach disk to virtual machine | |
| compute.volume.detach | Detach disk from virtual machine | |
| compute.volume.extend | Extend disk size | |
| compute.volume.reimage | Rebuild disk from image | |
| compute.volume.detach_abort | Change disk status to IN-USE | |
| compute.volume.detach_init | Change disk status to DETACHING | |
| compute.volume.attach_init | Initiate disk attachment to cloud server | |
| compute.volume.reserve | Reserve disk for attaching to cloud server | |
| compute.volume.unreserve | Unreserve disk for attaching to cloud server | |
| compute.volume.update_readonly_mark | Switch disk to or from read-only mode | |
| compute.volume.update_bootable_mark | Change bootable flag of disk | |
| compute.volume.update_image_metadata | Add image metadata to disk | |
| compute.volume.attach_terminate | Force detach network drive from cloud server | |
| compute.volume.delete_image_metadata | Delete image metadata from disk by key | |
| Snapshots | compute.snapshot.create | Create disk snapshot |
| compute.snapshot.delete | Delete disk snapshot | |
| compute.snapshot.update | Modify snapshot parameters (renaming) | |
| compute.snapshot.update_status | Update snapshot status | |
| compute.snapshot_metadata.delete | Delete snapshot metadata | |
| compute.snapshot_metadata.update_key | Update snapshot metadata by key | |
| compute.snapshot_metadata.create | Create snapshot metadata | |
| compute.snapshot_metadata.update | Update snapshot metadata | |
| Backups | compute.backup.create | Create backup |
| compute.backup.create_ondemand | Create on-demand backup | |
| compute.backup.delete | Delete backup | |
| compute.backup.restore | Restore from backup | |
| compute.backup.update | Update backup | |
| Images | compute.image.create_metadata | Create image metadata |
| compute.image.update_metadata | Update image metadata | |
| compute.image.update_metadata_item | Update image metadata item | |
| compute.image.delete_metadata_item | Delete image metadata item | |
| compute.image.create | Create image | |
| compute.image.delete | Delete image | |
| compute.image.update | Update image | |
| compute.image.upload | Upload image from file | |
| compute.image.deactivate | Deactivate image | |
| compute.image.reactivate | Reactivate image | |
| compute.image.import | Import image (e.g., via link) | |
| compute.image_member.create | Request image access for another project | |
| compute.image_member.delete | Delete image access for another project | |
| compute.image_member.update | Update image access status from another project | |
| compute.image_tag.create | Create image tag | |
| compute.image_tag.delete | Delete image tag | |
| compute.image.validate_url | Validate image before loading via URL | |
| compute.image.validate_file | Validate image before uploading from file | |
| Security groups | compute.security_group.create | Create security group |
| compute.security_group.update | Update security group | |
| compute.security_group.delete | Delete security group | |
| compute.security_group_rule.create | Create security group rule | |
| compute.security_group_rule.delete | Delete security group rule |
filestorage service
Responsible for operations with file storage.
| Event name (event_type) | Description | |
|---|---|---|
| File storage | filestorage.access_rule_metadata.update | Modify file storage access rule metadata |
| filestorage.access_rule_metadata.delete | Delete file storage access rule metadata | |
| filestorage.share_network.create | Create network connection for file storage | |
| filestorage.share_network.delete | Delete network for file storage | |
| filestorage.share_network.update | Modify network for file storage | |
| filestorage.share_network_subnet.create | Create subnet for file storage | |
| filestorage.share_network_subnet.delete | Delete subnet for file storage | |
| filestorage.metadata.create | Add file storage metadata | |
| filestorage.metadata.update | Modify file storage metadata | |
| filestorage.metadata.delete | Delete file storage metadata item | |
| filestorage.share.allow | Add file storage access rule | |
| filestorage.share.deny | Delete file storage access rule | |
| filestorage.share.create | Create file storage | |
| filestorage.share.delete | Delete file storage | |
| filestorage.share.update | Modify file storage attributes (e.g., renaming) | |
| filestorage.share.extend | Extend file storage size | |
| filestorage.share.reload_network | Update file storage network settings | |
| filestorage.message.delete | Delete message |
secrets service
Responsible for secrets in Secrets Manager. You can manage secrets via the Secrets API.
| Event name (event_type) | Description | |
|---|---|---|
| Secrets | secrets.secret.create | Create secret |
| secrets.secret.update | Update secret description | |
| secrets.secret.get | Get secret | |
| secrets.secret.delete | Delete all secrets in project | |
| secrets.secret.delete | Delete secret | |
| Secret versions | secrets.secret_version.get | Get secret version value |
| secrets.secret_version.create | Create new secret version | |
| secrets.secret_version.activate | Set version as current |
certificates service
Responsible for certificates in Certificate Manager. You can manage user certificates via the User Certificates API, and Let’s Encrypt® certificates via the Let’s Encrypt® Certificates API.
| Event name (event_type) | Description | |
|---|---|---|
| Certificates | certificates.certificate.upload | Upload certificate |
| certificates.certificate.p12.get | Get keypair | |
| certificates.certificate.private_key.get | Get private key | |
| certificates.certificate.ca_chain.get | Get CA bundle certificate chain | |
| certificates.certificate.delete | Delete certificate | |
| certificates.certificate_name.update | Update certificate | |
| certificates.le_certificate.issue | Issue Let’s Encrypt® certificate | |
| certificates.le_certificate.delete | Delete Let’s Encrypt® certificate |
logs service
Responsible for operations in logs.
| Event name (event_type) | Description | |
|---|---|---|
| Logs | logs.group.create | Create log group |
| logs.group.delete | Delete log group | |
| logs.stream.create | Create event stream | |
| logs.stream.delete | Delete event stream |
audit_logs service
Responsible for operations with audit logs.
| Event name (event_type) | Description | |
|---|---|---|
| Audit logs | audit_logs.log.download | Export audit logs |
| Automatic audit log export | audit_logs.autoexport.create | Create automatic export |
| audit_logs.autoexport.update | Modify automatic export | |
| audit_logs.autoexport.execution | Generate automatic export file | |
| audit_logs.autoexport.delete | Delete automatic export |
dns service
Responsible for operations with DNS hosting.
| Event name (event_type) | Description | |
|---|---|---|
| Domain zone | dns.zone.create | Create domain zone |
| dns.zone.update | Modify domain zone | |
| dns.zone.delete | Delete domain zone | |
| dns.zone_owner.update | Change domain zone project | |
| dns.zone.protection | Enable or disable domain zone deletion protection | |
| dns.zone.activation | Activate domain zone | |
| Resource record set | dns.rrset.create | Create resource record set |
| dns.rrset.update | Modify resource record set | |
| dns.rrset.delete | Delete resource record set | |
| dns.rrset.managed | Manage resource record set by external service |
global_router service
Responsible for operations with global router.
| Event name (event_type) | Description | |
|---|---|---|
| Global router | global_router.router.create | Create router |
| global_router.router.update | Modify router | |
| global_router.router.delete_init | Initiate router deletion | |
| global_router.router.delete | Delete router | |
| global_router.network.create | Create global router network | |
| global_router.network.update | Edit global router network | |
| global_router.network.delete_init | Initiate global router network deletion | |
| global_router.network.delete | Delete global router network | |
| global_router.subnet.create | Create global router subnet | |
| global_router.subnet.update | Edit global router subnet | |
| global_router.subnet.delete_init | Initiate global router subnet deletion | |
| global_router.subnet.delete | Delete global router subnet | |
| global_router.static_route.create | Create global router route | |
| global_router.static_route.update | Edit global router route | |
| global_router.static_route.delete_init | Initiate global router route deletion | |
| global_router.static_route.delete | Delete global router route |
mks service
Responsible for operations with the cluster, node groups, and nodes in Managed Kubernetes.
| Event name (event_type) | Description | |
|---|---|---|
| Cluster | mks.cluster.init_create | Create cluster (event start) |
| mks.cluster.create | Create cluster (event end) | |
| mks.cluster.init_delete | Delete cluster (event start) | |
| mks.cluster.delete | Delete cluster (event end) | |
| mks.cluster.init_update | Update cluster (event start) | |
| mks.cluster.update | Update cluster (event end) | |
| mks.cluster.init_upgrade_minor | Upgrade cluster minor version (event start) | |
| mks.cluster.upgrade_minor | Upgrade cluster minor version (event end) | |
| mks.cluster.init_upgrade_patch | Upgrade cluster patch version (event start) | |
| mks.cluster.upgrade_patch | Upgrade cluster patch version (event end) | |
| mks.cluster_certs.init_rotate | Rotate cluster certificates (event start) | |
| mks.cluster_certs.rotate | Rotate cluster certificates (event end) | |
| Node group | mks.cluster_nodegroup.init_create | Create node group (event start) |
| mks.cluster_nodegroup.create | Create node group (event end) | |
| mks.cluster_nodegroup.init_delete | Delete node group (event start) | |
| mks.cluster_nodegroup.delete | Delete node group (event end) | |
| mks.cluster_nodegroup.init_update | Update node group (event start) | |
| mks.cluster_nodegroup.update | Update node group (event end) | |
| mks.cluster_nodegroup.init_resize | Resize node group (event start) | |
| mks.cluster_nodegroup.resize | Resize node group (event end) | |
| mks.cluster_nodegroup.update_autoscale | Update Autoscaler settings for node group | |
| Node | mks.cluster_nodegroup_node.init_delete | Delete node (event start) |
| mks.cluster_nodegroup_node.delete | Delete node (event end) | |
| mks.cluster_nodegroup_node.init_reinstall | Reinstall node (event start) | |
| mks.cluster_nodegroup_node.reinstall | Reinstall node (event end) | |
| Managed Kubernetes integration with Container Registry | mks.cluster_registries_integration.init_create | Create cluster integration (event start) |
| mks.cluster_registries_integration.create | Create cluster integration (event end) | |
| mks.cluster_registries_integration.init_delete_all | Delete all cluster integrations (event start) | |
| mks.cluster_registries_integration.delete_all | Delete all cluster integrations (event end) | |
| mks.cluster_registries_integration.init_delete | Delete single cluster integration (event start) | |
| mks.cluster_registries_integration.delete | Delete single cluster integration (event end) | |
| mks.cluster_registries_integration.init_update | Update cluster integration (event start) | |
| mks.cluster_registries_integration.update | Update cluster integration (event end) | |
| Envoy Gateway application | mks.cluster_addon_envoy_gateway.init_create | Install Envoy Gateway cluster application (event start) |
| mks.cluster_addon_envoy_gateway.create | Install Envoy Gateway cluster application (event end) | |
| mks.cluster_addon_envoy_gateway.init_delete | Delete Envoy Gateway cluster application (event start) | |
| mks.cluster_addon_envoy_gateway.delete | Delete Envoy Gateway cluster application (event end) | |
| NGINX Ingress Controller application | mks.cluster_addon_ingress_nginx.init_delete | Delete NGINX Ingress Controller application (event start) |
| mks.cluster_addon_ingress_nginx.delete | Delete NGINX Ingress Controller application (event end) |
s3 service
Responsible for operations with S3. You can manage S3 via the Object Storage API, S3 API, and Swift API.
| Event name (event_type) | Description | |
|---|---|---|
| Buckets | s3.bucket.create | Create bucket |
| s3.bucket.delete | Delete bucket | |
| s3.bucket_meta.update | Edit bucket metadata | |
| s3.bucket_expiring.update | Edit Default-Delete-After header | |
| s3.bucket_limits.update | Edit bucket limits | |
| s3.bucket_publicity.enable | Change bucket type to public | |
| s3.bucket_publicity.disable | Change bucket type to private | |
| s3.bucket_versioning.enable | Enable bucket versioning | |
| s3.bucket_versioning.suspend | Suspend bucket versioning | |
| s3.bucket_cors.set | Apply bucket CORS rules | |
| s3.bucket_cors.delete | Delete bucket CORS rules | |
| s3.bucket_custom_domain.add | Add custom domain | |
| s3.bucket_custom_domain.delete | Delete custom domain | |
| s3.bucket_website.update | Configure bucket website | |
| s3.bucket_policy.set | Create access policy | |
| s3.bucket_policy.delete | Delete access policy | |
| s3.bucket_cache_control.set | Add Cache-Control header | |
| s3.bucket_cache_control.delete | Delete Cache-Control header | |
| s3.bucket_addressing.update | Change bucket addressing from Path-Style to vHosted | |
| s3.bucket_object_lock.enable | Enable Object Lock in bucket | |
| s3.bucket_object_lock.update | Edit default temporary lock configuration in bucket | |
| TLS (SSL) certificates | s3.certificate.upload | Upload certificate |
| s3.certificate.update | Update certificate | |
| s3.certificate.delete | Delete certificate | |
| Public bucket domains | s3.public_domain.create | Create domain |
| s3.public_domain.delete | Delete domain | |
| s3.public_domain.bind | Bind domain to bucket | |
| s3.public_domain.unbind | Unbind domain from bucket | |
| Cache purge | s3.cache.flush | Request cache purge |
| Logs | s3.logs.dump | Create storage log export |
| s3.logs.cancel | Cancel storage log export creation |
dbaas service
Responsible for operations with cloud databases.
| Event name (event_type) | Description | |
|---|---|---|
| Cluster | dbaas.cluster.create | Create cluster |
| dbaas.cluster.update | Update cluster | |
| dbaas.cluster.delete | Delete cluster | |
| dbaas.cluster.resize | Resize cluster | |
| dbaas.cluster_readonly_mode.enable | Set read-only mode | |
| dbaas.cluster_readwrite_mode.enable | Set read-write mode | |
| dbaas.cluster.lock | Lock cluster | |
| dbaas.cluster.unlock | Unlock cluster | |
| Backups | dbaas.cluster_backup.update | Update backup settings |
| DBMS settings | dbaas.cluster_config.update | Update DBMS settings |
| Database | dbaas.cluster_database.create | Create database |
| dbaas.cluster_database.update | Update database | |
| dbaas.cluster_database.delete | Delete database | |
| Connection pooler | dbaas.cluster_pooler.update | Update connection pooler |
| Token for Prometheus | dbaas.prometheus_token.create | Create token |
| dbaas.prometheus_token.update | Update token | |
| dbaas.prometheus_token.delete | Delete token | |
| Node group | dbaas.cluster_node_group.create | Create node group |
| dbaas.cluster_node_group.update | Update node group | |
| dbaas.cluster_node_group.delete | Delete node group | |
| dbaas.cluster_node_group.resize | Resize node group | |
| Public floating IP address | dbaas.cluster_floating_ip.create | Create IP address |
| dbaas.cluster_floating_ip.delete | Delete IP address | |
| Allowed IP address list | dbaas.cluster_firewall_rule.update | Update allowed IP address list |
| Kafka topic | dbaas.cluster_database_topic.create | Create topic |
| dbaas.cluster_database_topic.update | Update topic | |
| dbaas.cluster_database_topic.delete | Delete topic | |
| User | dbaas.cluster_database_user.create | Create user |
| dbaas.cluster_database_user.update | Update user | |
| dbaas.cluster_database_user.delete | Delete user | |
| dbaas.cluster_database_user_password.update | Change user password | |
| User permissions | dbaas.cluster_database_permission.create | Create permission |
| dbaas.cluster_database_permission.delete | Delete permission | |
| Access Control Lists (ACLs) | dbaas.cluster_acl.create | Create Access Control List |
| dbaas.cluster_acl.update | Update Access Control List | |
| dbaas.cluster_acl.delete | Delete Access Control List | |
| Security groups | dbaas.cluster_security_group.update | Update security groups |
| Logical replication slot | dbaas.cluster_database_logical_replication_slot.create | Create logical replication slot |
| dbaas.cluster_database_logical_replication_slot.delete | Delete logical replication slot | |
| Extension | dbaas.cluster_database_extension.create | Add extension |
| dbaas.cluster_database_extension.delete | Delete extension | |
| Logs | dbaas.cluster_log_platform.enable | Enable logging |
| dbaas.cluster_log_platform.disable | Disable logging |
ses service
Responsible for operations with the email service. You can manage the email service via the Email Service API.
| Event name (event_type) | Description | |
|---|---|---|
| Resources | ses.resource.create | Create resource |
| ses.resource.transfer | Transfer resource | |
| ses.resource.delete | Delete resource | |
| ses.resource_name.update | Update resource name | |
| ses.resource_password.update | Update resource password | |
| ses.resource_quota.update | Update resource quotas | |
| Domains | ses.resource_domain.create | Create domain |
| ses.resource_domain.delete | Delete domain | |
| Stop lists | ses.resource_stop_list_email.add | Add entry to stop list |
| ses.resource_stop_list_email.delete | Delete entry from stop list | |
| Projects | ses.project_quota.update | Update resource quotas in project |
| ses.project.delete | Delete all resources in project | |
| ses.project.cleanup | Automatically delete all resources in a project when a user is deleted or the account is blocked |