General information about the Audit-Logs service
For your information
Only the Account Owner has access to the audit logs.
Audit Logs is a service for collecting and storing logs of events that occur in an account. Events reflect operations with resources or users:
- authentication and starting or ending a session in the control panel;
- reading specific data (accessing the secrets service, reading encryption keys, etc.);
- management of access rights and security services (users, roles, passwords, tokens, access keys, secrets, certificates, etc.);
- mutating operations with resources (creation, modification, deletion of servers, networks, disks, etc.).
Audit logs include successful and unsuccessful events, as well as events that are not allowed by security policies.When an event occurs, it goes into the audit logs and becomes available after a few minutes.
Audit logs are collected automatically and stored for 90 days.At any time you can upload them in your dashboard or via Audit Logs API.
Tasks to be solved
The audit-log service can be used:
- for audits, certifications and compliance procedures;
- monitoring access to sensitive information;
- filtering logs for transmission to analysis systems;
- tracking suspicious behavior;
- Analyze the actions of a particular user or service and detect anomalies;
- investigating information security incidents.
Cost
The service is provided free of charge.