---
title: "Audit log events"
sidebar_label: "Events"
sidebar_position: 3
description: "Event structure in audit logs, event types"
---

import {CustomTable} from '@selectel/docux/components'
import {TabItemLabel} from '@selectel/docux/components'
import Formbricks from '@theme/MDXComponents/Formbricks'

# Audit log events

In audit logs, an event is a record of a create, update, or delete operation on resources and entities. Reading sensitive data, such as passwords, certificates, etc., is also recorded in audit logs.

An event has a fixed [structure](#event-structure) and can be of different [types](#event-type).

## Event structure \{#event-structure}

An event has a JSON structure:

```json
[
  {
    "event_saved_time": "2025-09-29T13:13:25.196Z",
    "event_id": "string",
    "event_type": "string",
    "event_time": "2025-09-29T13:13:25.196Z",
    "status": "string",
    "error_code": "string",
    "request_id": "string",
    "subject": {
      "id": "string",
      "type": "string",
      "name": "string",
      "auth_provider": "string",
      "is_authorized": true,
      "authorized_by": [
        "string"
      ],
      "credentials_fingerprint": "string"
    },
    "resource": {
      "id": "string",
      "type": "string",
      "name": "string",
      "account_id": "string",
      "project_id": "string",
      "location": "string",
      "details": {},
      "old_values": {
        "additionalProp1": {}
      },
      "new_values": {
        "additionalProp1": {}
      }
    },
    "source_type": "string",
    "request": {
      "remote_address": "string",
      "user_agent": "string",
      "type": "string",
      "path": "string",
      "method": "string",
      "parameters": "string"
    },
    "schema_version": "string"
  }
]
```

Some [fields](#fields) are optional and may be absent from an event. Also, some fields have [reserved values](#reserved-values).

### Event fields \{#fields}

<CustomTable>
  <table>
    <thead>
      <tr>
        <th colspan="2">Field</th><th>Description</th><th>Data type</th><th>Required</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th colspan="2">`event_id`</th><td>Unique event identifier</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`event_type`</th><td>Event type; for the full list, see the [Event types](#event-type) subsection</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`event_time`</th><td>Time the event occurred in ISO8601 format with timezone</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`event_saved_time`</th><td>Time the event was saved in audit logs in ISO8601 format with timezone</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`status`</th>

        <td>
          Event status. Possible values:

          <ul>
            <li>`success;`</li><li>`fail;`</li><li>`accepted;`</li><li>`NA (not applicable)` — none of the statuses apply to the event</li>
          </ul>
        </td>

        <td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`error_code`</th><td>Error code</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <th colspan="2">`request_id`</th><td>Unique event chain identifier or request identifier</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`subject`</th><td>Information about the subject—a service or user that performed the operation</td><td>Object</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`id`</th>

        <td>
          Unique identifier of the action subject. Example formats:

          <ul>
            <li>`12345_13423;`</li><li>`3112f9b7aec64fe49700c7cd0f5f6ddc`. You can use `subject_id` to [identify the user](/audit-logs/faq.mdx#how-to-identify-user). If the value could not be retrieved, `undefined` will be specified.</li>
          </ul>
        </td>

        <td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`type`</th>

        <td>
          Subject type. Possible values:

          <ul>
            <li>`employee` — Selectel employee;</li><li>`user` — user;</li><li>`service_user` — service user;</li><li>`service` — Selectel service</li>
          </ul>
        </td>

        <td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`name`</th><td>Subject name</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`auth_provider`</th>

        <td>
          Subject authentication provider. Possible values:

          <ul>
            <li>`keystone` — IAM token;</li><li>`api_key` — static token;</li><li>`session` — session identifier</li>
          </ul>
        </td>

        <td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`is_authorized`</th><td>Authorization result</td><td>Boolean</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`authorized_by`</th><td>List of roles and other authorization attributes used to authorize the request</td><td>Array of strings</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`credentials_fingerprint`</th><td>Fingerprint of the secret used to authorize the request</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <th colspan="2">`resource`</th><td>Action object; the entity on which the subject performed the operation. An object can be a resource (server, disk), user, role, account, etc.</td><td>Object</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`id`</th><td>Unique object identifier</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`type`</th><td>Object type</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`name`</th><td>Object name</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`account_id`</th><td>Account identifier</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`project_id`</th><td>Project identifier</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`location`</th><td>Data center, availability zone, or pool where the subject is located</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`details`</th><td>Event details. Defined by the source service and event type</td><td>Object</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`changes`</th><td>Changes that occurred to the subject</td><td>Object</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`changes_old_values`</th><td>Set of old subject attribute values</td><td>Object</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`changes_new_values`</th><td>Set of new subject attribute values</td><td>Object</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`source`</th><td>Service that recorded the change</td><td>Object</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`type`</th><td>Name of the product, service, or feature where the event occurred</td><td>String</td><td>✓</td>
      </tr>

      <tr>
        <th colspan="2">`request`</th><td>Request information</td><td>Object</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`remote_address`</th><td>IP address the request came from</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`user_agent`</th><td>User Agent of the event subject</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`type`</th>

        <td>
          Request type. Possible values:

          <ul>
            <li>`http;`</li><li>`grpc;`</li><li>`queue;`</li><li>`internal`</li>
          </ul>
        </td>

        <td>String</td><td>✓</td>
      </tr>

      <tr>
        <td />

        <th>`path`</th><td>Path to the resource where the event occurred</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`method`</th><td>Request method</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <td />

        <th>`parameters`</th><td>Query parameters</td><td>String</td><td>✗</td>
      </tr>

      <tr>
        <th colspan="2">`schema_version`</th><td>Fixed value — 1.0</td><td>String</td><td>✓</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### Reserved values \{#reserved-values}

If a field value cannot be determined by the log source services — for example, if an error occurred during the action or the object has not yet been created and there is no `resource_id` — the reserved value `undefined` is used.

It can appear in the following fields:

* `subject_id;`
* `subject_type;`
* `resource_id;`
* `resource_type;`
* `resource_account_id.`

## Event types (event\_type) \{#event-type}

In audit logs, event types are grouped by services that are responsible for different parts of the products. You can use services to filter events when [exporting logs](/audit-logs/export-logs/).

The list of products that support audit logs, services, and event types will be expanded.

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th>Product or management area</th><th>Services</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <td>Account, users, projects, and permissions</td><td>[iam](#iam)</td>
      </tr>

      <tr>
        <td>Billing, payment information</td><td>[legal](#legal)<br />[billing](#billing)</td>
      </tr>

      <tr>
        <td>Dedicated servers, Colocation, basic firewall, storage systems</td><td>[dedicated](#dedicated)</td>
      </tr>

      <tr>
        <td>Cloud platform</td><td>[vpc](#vpc)<br />[quota\_management](#quota-management)<br />[compute](#compute)<br />[filestorage](#filestorage)</td>
      </tr>

      <tr>
        <td>Secrets manager</td><td>[secrets](#secrets)</td>
      </tr>

      <tr>
        <td>Certificate manager</td><td>[certificates](#certificates)</td>
      </tr>

      <tr>
        <td>Logs</td><td>[logs](#logs)</td>
      </tr>

      <tr>
        <td>Audit logs</td><td>[audit\_logs](#audit-logs)</td>
      </tr>

      <tr>
        <td>Domains</td><td>[domains](#domains)</td>
      </tr>

      <tr>
        <td>DNS Hosting</td><td>[dns](#dns)</td>
      </tr>

      <tr>
        <td>Global Router</td><td>[global\_router](#global-router)</td>
      </tr>

      <tr>
        <td>Managed Kubernetes</td><td>[mks](#managed-kubernetes)</td>
      </tr>

      <tr>
        <td>S3</td><td>[s3](#s3)</td>
      </tr>

      <tr>
        <td>Managed databases</td><td>[dbaas](#dbaas)</td>
      </tr>

      <tr>
        <td>Email service</td><td>[SES](#ses)</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### IAM service \{#iam}

Responsible for operations in the [account](/account/), with [users](/access-control/), [projects](/access-control/projects/), and access rights. Some of these (for example, users and their keys) can be managed via [IAM API](/api/users-and-roles/).

<CustomTable>
  <table>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="6">Account</th><td>iam.account.init\_action</td><td>Subject authentication when performing an operation in the [service `billing`](#billing). Combined with the main operation event via the `request_id` field</td>
      </tr>

      <tr>
        <td>iam.account.email\_confirmation</td><td>Email address confirmation during account registration</td>
      </tr>

      <tr>
        <td>iam.account.phone\_confirmation</td><td>Phone number confirmation during account registration</td>
      </tr>

      <tr>
        <td>iam.account.fill</td><td>Entering account data</td>
      </tr>

      <tr>
        <td>iam.account.delete</td><td>Account deletion</td>
      </tr>

      <tr>
        <td>iam.account.update</td><td>Changing account data</td>
      </tr>

      <tr>
        <th rowspan="7">Sign in to account</th><td>iam.user.login</td><td>User sign in to account</td>
      </tr>

      <tr>
        <td>iam.user\_password.check</td><td>Entering password by a user</td>
      </tr>

      <tr>
        <td>iam.user.logout</td><td>User sign out from account</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_code.verify</td><td>Attempt to sign in using 2FA</td>
      </tr>

      <tr>
        <td>iam.user\_session.reset\_all\_other</td><td>Resetting all sessions except the current one</td>
      </tr>

      <tr>
        <td>iam.user\_session.reset\_all\_within\_browser</td><td>Signing out from all accounts signed in within the browser</td>
      </tr>

      <tr>
        <td>iam.user\_session.reset\_all</td><td>Forced session termination by the system</td>
      </tr>

      <tr>
        <th rowspan="3">Password</th><td>iam.user\_password.reset\_request</td><td>Requesting an email with a password reset link</td>
      </tr>

      <tr>
        <td>iam.user\_password.reset\_apply</td><td>Password reset creating a new password</td>
      </tr>

      <tr>
        <td>iam.user\_password.update</td><td>Change password</td>
      </tr>

      <tr>
        <th rowspan="11">Two-factor authentication</th><td>iam.user\_2fa.enable</td><td>Enabling two-factor authentication</td>
      </tr>

      <tr>
        <td>iam.user\_2fa.disable</td><td>Disabling two-factor authentication</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_code.send</td><td>Requesting a two-factor authentication code</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_backup\_codes.create</td><td>Creating backup codes</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_otp.enable</td><td>Enabling sign-in via an authenticator app</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_email.enable</td><td>Enabling sign-in via email</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_sms.enable</td><td>Enabling sign-in via SMS</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_backup\_codes.enable</td><td>Enabling sign-in using backup codes and their creation</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_otp.disable</td><td>Disabling sign-in via an authenticator app</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_email.disable</td><td>Disabling sign-in via email</td>
      </tr>

      <tr>
        <td>iam.user\_2fa\_sms.disable</td><td>Disabling sign-in via SMS</td>
      </tr>

      <tr>
        <th rowspan="6">Changing contact information</th><td>iam.user\_email.change\_init</td><td>Change email address request</td>
      </tr>

      <tr>
        <td>iam.user\_email.change\_unlocked</td><td>Confirmation of email address change</td>
      </tr>

      <tr>
        <td>iam.user\_email.update</td><td>Email address successfully changed</td>
      </tr>

      <tr>
        <td>iam.user\_phone.change\_init</td><td>Change phone number request</td>
      </tr>

      <tr>
        <td>iam.user\_phone.change\_unlocked</td><td>Confirmation of phone number change</td>
      </tr>

      <tr>
        <td>iam.user\_phone.update</td><td>Phone number successfully changed</td>
      </tr>

      <tr>
        <th rowspan="17">Users</th><td>iam.user\_profile.create</td><td>Creating a new user profile</td>
      </tr>

      <tr>
        <td>iam.user.email\_confirmation</td><td>Registering a new user via the link from an invitation email</td>
      </tr>

      <tr>
        <td>iam.federated\_user\_profile.create<br /><br /> iam.federated\_user.create `*`</td><td>Creating a federated user profile</td>
      </tr>

      <tr>
        <td>iam.user.phone\_confirmation</td><td>Confirming the phone number during new user registration</td>
      </tr>

      <tr>
        <td>iam.user\_profile.fill</td><td>Filling in user profile details</td>
      </tr>

      <tr>
        <td>iam.user\_profile.update</td><td>Updating user profile details</td>
      </tr>

      <tr>
        <td>iam.federated\_user\_profile.update</td><td>Updating federated user profile details</td>
      </tr>

      <tr>
        <td>iam.user\_profile.delete</td><td>Deleting a user profile</td>
      </tr>

      <tr>
        <td>iam.federated\_user\_profile.delete</td><td>Deleting a federated user profile</td>
      </tr>

      <tr>
        <td>iam.user\_subscription.add</td><td>Adding a notification category to a user</td>
      </tr>

      <tr>
        <td>iam.user\_subscription.delete</td><td>Removing a notification category from a user</td>
      </tr>

      <tr>
        <td>iam.user.create</td><td>Creating a user</td>
      </tr>

      <tr>
        <td>iam.user.delete</td><td>Deleting a user</td>
      </tr>

      <tr>
        <td>iam.user\_role.add</td><td>Assigning roles to a user</td>
      </tr>

      <tr>
        <td>iam.user\_role.remove</td><td>Removing roles from a user</td>
      </tr>

      <tr>
        <td>iam.user\_group.add</td><td>Assigning groups to a user</td>
      </tr>

      <tr>
        <td>iam.user\_group.remove</td><td>Removing groups from a user</td>
      </tr>

      <tr>
        <th rowspan="7">Service users</th><td>iam.service\_user.create</td><td>Creating a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user.update</td><td>Updating a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user.delete</td><td>Deleting a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_role.add</td><td>Assigning roles to a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_role.remove</td><td>Removing roles from a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_group.add</td><td>Assigning groups to a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_group.remove</td><td>Removing groups from a service user</td>
      </tr>

      <tr>
        <th rowspan="7">User group</th><td>iam.group.create</td><td>Creating a user group</td>
      </tr>

      <tr>
        <td>iam.group.update</td><td>Updating a user group</td>
      </tr>

      <tr>
        <td>iam.group.delete</td><td>Deleting a user group</td>
      </tr>

      <tr>
        <td>iam.group\_user.add</td><td>Adding users to a group</td>
      </tr>

      <tr>
        <td>iam.group\_user.remove</td><td>Removing users from a group</td>
      </tr>

      <tr>
        <td>iam.group\_role.add</td><td>Assigning roles to a user group</td>
      </tr>

      <tr>
        <td>iam.group\_role.remove</td><td>Removing roles from a user group</td>
      </tr>

      <tr>
        <th rowspan="9">Federations</th><td>iam.federation.create</td><td>Creating a federation</td>
      </tr>

      <tr>
        <td>iam.federation.update</td><td>Modifying a federation</td>
      </tr>

      <tr>
        <td>iam.federation.delete</td><td>Deleting a federation</td>
      </tr>

      <tr>
        <td>iam.federation\_cert.create</td><td>Creating a federation certificate</td>
      </tr>

      <tr>
        <td>iam.federation\_cert.update</td><td>Updating a federation certificate</td>
      </tr>

      <tr>
        <td>iam.federation\_cert.delete</td><td>Deleting a federation certificate</td>
      </tr>

      <tr>
        <td>iam.federation\_group\_mapping.create</td><td>Creating a mapping between a Selectel user group and an identity provider group</td>
      </tr>

      <tr>
        <td>iam.federation\_group\_mapping.update</td><td>Replacing all user group mappings for a federation with mappings to other identity provider groups</td>
      </tr>

      <tr>
        <td>iam.federation\_group\_mapping.delete</td><td>Deleting a mapping between a Selectel user group and an identity provider group</td>
      </tr>

      <tr>
        <th rowspan="4">Projects</th><td>iam.project.create</td><td>Creating a project</td>
      </tr>

      <tr>
        <td>iam.project.update</td><td>Updating a project</td>
      </tr>

      <tr>
        <td>iam.project\_domain.detach</td><td>Removing a project domain</td>
      </tr>

      <tr>
        <td>iam.project.delete</td><td>Deleting a project</td>
      </tr>

      <tr>
        <th rowspan="2">IAM tokens</th><td>iam.auth\_token.issue</td><td>Issuing an IAM token</td>
      </tr>

      <tr>
        <td>iam.auth\_token.revoke</td><td>Revoking an IAM token</td>
      </tr>

      <tr>
        <th rowspan="4">S3 keys</th><td>iam.user\_credential.add</td><td>Creating an S3 key for a user</td>
      </tr>

      <tr>
        <td>iam.user\_credential.remove</td><td>Removing an S3 key from a user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_credential.add</td><td>Creating an S3 key for a service user</td>
      </tr>

      <tr>
        <td>iam.service\_user\_credential.remove</td><td>Removing an S3 key from a service user</td>
      </tr>

      <tr>
        <th rowspan="5">Static tokens</th><td>iam.api\_key.create</td><td>Creating a static token</td>
      </tr>

      <tr>
        <td>iam.api\_key.update</td><td>Updating a static token</td>
      </tr>

      <tr>
        <td>iam.api\_key.enable</td><td>Activating a static token</td>
      </tr>

      <tr>
        <td>iam.api\_key.disable</td><td>Deactivating a static token</td>
      </tr>

      <tr>
        <td>iam.api\_key.delete</td><td>Deleting a static token</td>
      </tr>

      <tr>
        <th rowspan="4">ACL</th><td>iam.acl.enable</td><td>Enabling ACL</td>
      </tr>

      <tr>
        <td>iam.acl.disable</td><td>Disabling ACL</td>
      </tr>

      <tr>
        <td>iam.acl\_ip.create</td><td>Creating an ACL rule</td>
      </tr>

      <tr>
        <td>iam.acl\_ip.delete</td><td>Deleting an ACL rule</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

`*` This event is deprecated and will soon no longer be recorded in audit logs.

### Legal service \{#legal}

Responsible for contract-related operations with the customer—the payer.

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="3">Customer under contract</th><td>legal.payer.create</td><td>Creating a customer</td>
      </tr>

      <tr>
        <td>legal.payer.update</td><td>Updating customer details</td>
      </tr>

      <tr>
        <td>legal.payer.reorganisation</td><td>Reorganizing a customer company</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### Billing service \{#billing}

Responsible for operations occurring with resources during payment deferment, non-payment, or debt repayment.

In events of the `billing` service, detailed information about the subject is provided in a paired authentication event. In it, events with the type `iam.account.init_action` are linked to the main event via the `request_id` field.

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="5">Cloud platform financial signals</th><td>billing.block\_signal.apply</td><td>Resource blocking</td>
      </tr>

      <tr>
        <td>billing.unblock\_signal.apply</td><td>Resource unblocking</td>
      </tr>

      <tr>
        <td>billing.restrict\_signal.apply</td><td>Restricting access to a resource</td>
      </tr>

      <tr>
        <td>billing.unrestrict\_signal.apply</td><td>Removing access restrictions from a resource</td>
      </tr>

      <tr>
        <td>billing.delete\_signal.apply</td><td>Deleting a resource</td>
      </tr>

      <tr>
        <th rowspan="4">Payment deferment</th><td>billing.soft\_grace\_policy.enable</td><td>Enabling payment deferment</td>
      </tr>

      <tr>
        <td>billing.soft\_grace\_policy.disable</td><td>Disabling payment deferment</td>
      </tr>

      <tr>
        <td>billing.soft\_grace\_signal.apply</td><td>Activating payment deferment</td>
      </tr>

      <tr>
        <td>billing.unsoft\_grace\_signal.apply</td><td>Completing an active payment deferment</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### Dedicated service \{#dedicated}

Responsible for operations:

* with [dedicated servers](/dedicated/);
* [colocated equipment](/server-colocation/);
* [basic firewall](/basic-firewall/);
* [data storage systems](/data-storage-system/).

You can manage servers and equipment via the [Dedicated Servers API](/api/dedicated/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="11">Dedicated server</th><td>dedicated.server.create</td><td>Ordering a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.update</td><td>Modifying a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.delete</td><td>Deleting a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.power\_on</td><td>Powering on a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.power\_off</td><td>Powering off a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.reboot</td><td>Rebooting a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.os\_reinstall</td><td>Reinstalling the OS on a dedicated server</td>
      </tr>

      <tr>
        <td>dedicated.server.password\_show</td><td>Viewing the dedicated server password</td>
      </tr>

      <tr>
        <td>dedicated.server.console\_open</td><td>Opening the dedicated server console</td>
      </tr>

      <tr>
        <td>dedicated.server.upgrade\_create</td><td>Creating a dedicated server upgrade</td>
      </tr>

      <tr>
        <td>dedicated.server.upgrade\_cancel</td><td>Canceling a dedicated server upgrade</td>
      </tr>

      <tr>
        <th rowspan="3">Additional services</th><td>dedicated.additional\_resource.create</td><td>Ordering an additional service</td>
      </tr>

      <tr>
        <td>dedicated.additional\_resource.update</td><td>Modifying an additional service</td>
      </tr>

      <tr>
        <td>dedicated.additional\_resource.delete</td><td>Deleting an additional service</td>
      </tr>

      <tr>
        <th rowspan="3">Colocation</th><td>dedicated.colocation.create</td><td>Ordering colocation</td>
      </tr>

      <tr>
        <td>dedicated.colocation.update</td><td>Modifying colocation</td>
      </tr>

      <tr>
        <td>dedicated.colocation.delete</td><td>Deleting colocation</td>
      </tr>

      <tr>
        <th rowspan="3">Firewall</th><td>dedicated.firewall.create</td><td>Ordering a firewall</td>
      </tr>

      <tr>
        <td>dedicated.firewall.update</td><td>Modifying a firewall</td>
      </tr>

      <tr>
        <td>dedicated.firewall.delete</td><td>Deleting a firewall</td>
      </tr>

      <tr>
        <th rowspan="3">Network equipment</th><td>dedicated.network\_equipment.create</td><td>Ordering network equipment</td>
      </tr>

      <tr>
        <td>dedicated.network\_equipment.update</td><td>Modifying network equipment</td>
      </tr>

      <tr>
        <td>dedicated.network\_equipment.delete</td><td>Deleting network equipment</td>
      </tr>

      <tr>
        <th rowspan="3">Equipment<br />(data storage systems)</th><td>dedicated.equipment.create</td><td>Ordering equipment</td>
      </tr>

      <tr>
        <td>dedicated.equipment.update</td><td>Modifying equipment</td>
      </tr>

      <tr>
        <td>dedicated.equipment.delete</td><td>Deleting equipment</td>
      </tr>

      <tr>
        <th rowspan="3">Network service</th><td>dedicated.network.create</td><td>Ordering a network service</td>
      </tr>

      <tr>
        <td>dedicated.network.update</td><td>Modifying a network service</td>
      </tr>

      <tr>
        <td>dedicated.network.delete</td><td>Deleting a network service</td>
      </tr>

      <tr>
        <th rowspan="3">Port service</th><td>dedicated.port.create</td><td>Ordering a port service</td>
      </tr>

      <tr>
        <td>dedicated.port.update</td><td>Modifying a port service</td>
      </tr>

      <tr>
        <td>dedicated.port.delete</td><td>Deleting a network service</td>
      </tr>

      <tr>
        <th rowspan="3">Software</th><td>dedicated.software.create</td><td>Ordering software</td>
      </tr>

      <tr>
        <td>dedicated.software.update</td><td>Modifying software</td>
      </tr>

      <tr>
        <td>dedicated.software.delete</td><td>Deleting software</td>
      </tr>

      <tr>
        <th rowspan="3">Tags</th><td>dedicated.tag.create</td><td>Ordering software</td>
      </tr>

      <tr>
        <td>dedicated.tag.update</td><td>Modifying software</td>
      </tr>

      <tr>
        <td>dedicated.tag.delete</td><td>Deleting software</td>
      </tr>

      <tr>
        <th rowspan="3">Basic firewall</th><td>dedicated.basic\_firewall.create</td><td>Creating a basic firewall</td>
      </tr>

      <tr>
        <td>dedicated.basic\_firewall.update</td><td>Modifying a basic firewall</td>
      </tr>

      <tr>
        <td>dedicated.basic\_firewall.delete</td><td>Deleting a basic firewall</td>
      </tr>

      <tr>
        <th rowspan="3">Public subnetwork</th><td>dedicated.public\_subnet.create</td><td>Creating a public subnetwork</td>
      </tr>

      <tr>
        <td>dedicated.public\_subnet.update</td><td>Modifying a public subnetwork</td>
      </tr>

      <tr>
        <td>dedicated.public\_subnet.delete</td><td>Deleting a public subnetwork</td>
      </tr>

      <tr>
        <th rowspan="3">Private subnetwork</th><td>dedicated.private\_subnet.create</td><td>Creating a private subnetwork</td>
      </tr>

      <tr>
        <td>dedicated.private\_subnet.update</td><td>Modifying a private subnetwork</td>
      </tr>

      <tr>
        <td>dedicated.private\_subnet.delete</td><td>Deleting a private subnetwork</td>
      </tr>

      <tr>
        <th rowspan="3">Public VLAN</th><td>dedicated.public\_vlan.create</td><td>Creating a public VLAN</td>
      </tr>

      <tr>
        <td>dedicated.public\_vlan.update</td><td>Modifying a public VLAN</td>
      </tr>

      <tr>
        <td>dedicated.public\_vlan.delete</td><td>Deleting a public VLAN</td>
      </tr>

      <tr>
        <th rowspan="3">Private VLAN</th><td>dedicated.private\_vlan.create</td><td>Creating a private VLAN</td>
      </tr>

      <tr>
        <td>dedicated.private\_vlan.update</td><td>Modifying a private VLAN</td>
      </tr>

      <tr>
        <td>dedicated.private\_vlan.delete</td><td>Deleting a private VLAN</td>
      </tr>

      <tr>
        <th rowspan="3">SSH keys</th><td>dedicated.ssh\_key.create</td><td>Creating an SSH key</td>
      </tr>

      <tr>
        <td>dedicated.ssh\_key.update</td><td>Modifying an SSH key</td>
      </tr>

      <tr>
        <td>dedicated.ssh\_key.delete</td><td>Deleting an SSH key</td>
      </tr>

      <tr>
        <th rowspan="2">IPMI monitoring</th><td>dedicated.monitoring.create</td><td>Creating monitoring</td>
      </tr>

      <tr>
        <td>dedicated.monitoring.delete</td><td>Deleting monitoring</td>
      </tr>

      <tr>
        <th rowspan="3">Client images</th><td>dedicated.custom\_os\_image.create</td><td>Create client image</td>
      </tr>

      <tr>
        <td>dedicated.custom\_os\_image.update</td><td>Update client image</td>
      </tr>

      <tr>
        <td>dedicated.custom\_os\_image.delete</td><td>Delete client image</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### VPC service \{#vpc}

Responsible for operations with [cloud platform networks](/cloud-servers/cloud-networks/), [cloud firewalls](/cloud-servers/firewalls/), [private DNS](/cloud-servers/private-dns/), [security groups](/cloud-servers/security-groups/), [cloud load balancers](/cloud-servers/load-balancers/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="3">Private networks</th><td>vpc.network.create</td><td>Create private network</td>
      </tr>

      <tr>
        <td>vpc.network.update</td><td>Update private network</td>
      </tr>

      <tr>
        <td>vpc.network.delete</td><td>Delete private network</td>
      </tr>

      <tr>
        <th rowspan="3">Private subnets</th><td>vpc.subnet.create</td><td>Create private subnet</td>
      </tr>

      <tr>
        <td>vpc.subnet.update</td><td>Update private subnet</td>
      </tr>

      <tr>
        <td>vpc.subnet.delete</td><td>Delete private subnet</td>
      </tr>

      <tr>
        <th rowspan="5">Public subnets</th><td>vpc.subnet.create</td><td>Create public subnet</td>
      </tr>

      <tr>
        <td>vpc.subnet.bulk\_create</td><td>Add public subnet to project</td>
      </tr>

      <tr>
        <td>vpc.subnet.update</td><td>Update public subnet</td>
      </tr>

      <tr>
        <td>vpc.subnet.delete</td><td>Delete public subnet</td>
      </tr>

      <tr>
        <td>vpc.subnet.init\_delete</td><td>Delete public subnet from project</td>
      </tr>

      <tr>
        <th rowspan="3">Subnet pools</th><td>vpc.subnet\_pool.create</td><td>Create subnet pool</td>
      </tr>

      <tr>
        <td>vpc.subnet\_pool.update</td><td>Update subnet pool</td>
      </tr>

      <tr>
        <td>vpc.subnet\_pool.delete</td><td>Delete subnet pool</td>
      </tr>

      <tr>
        <th rowspan="3">Address scopes</th><td>vpc.address\_scope.create</td><td>Create address scope</td>
      </tr>

      <tr>
        <td>vpc.address\_scope.update</td><td>Update address scope</td>
      </tr>

      <tr>
        <td>vpc.address\_scope.delete</td><td>Delete address scope</td>
      </tr>

      <tr>
        <th rowspan="3">Address groups</th><td>vpc.address\_group.create</td><td>Create address group</td>
      </tr>

      <tr>
        <td>vpc.address\_group.update</td><td>Update address group</td>
      </tr>

      <tr>
        <td>vpc.address\_group.delete</td><td>Delete address group</td>
      </tr>

      <tr>
        <th rowspan="8">Public floating IP addresses</th><td>vpc.floatingip.create</td><td>Create public floating IP address</td>
      </tr>

      <tr>
        <td>vpc.floatingip.bulk\_create</td><td>Add public floating IP address to project</td>
      </tr>

      <tr>
        <td>vpc.floatingip.update</td><td>Update public floating IP address, including connecting to or disconnecting from a port</td>
      </tr>

      <tr>
        <td>vpc.floatingip\_port\_forwarding.create</td><td>Create port forwarding (1:1 NAT via cloud router)</td>
      </tr>

      <tr>
        <td>vpc.floatingip\_port\_forwarding.update</td><td>Update port forwarding (1:1 NAT via cloud router)</td>
      </tr>

      <tr>
        <td>vpc.floatingip\_port\_forwarding.delete</td><td>Delete port forwarding (1:1 NAT via cloud router)</td>
      </tr>

      <tr>
        <td>vpc.floatingip.init\_delete</td><td>Delete public floating IP address from project</td>
      </tr>

      <tr>
        <td>vpc.floatingip.delete</td><td>Delete public floating IP address</td>
      </tr>

      <tr>
        <th rowspan="3">Direct public IP addresses</th><td>vpc.public\_port.create</td><td>Create direct public IP address</td>
      </tr>

      <tr>
        <td>vpc.public\_port.update</td><td>Update direct public IP address</td>
      </tr>

      <tr>
        <td>vpc.public\_port.delete</td><td>Delete direct public IP address</td>
      </tr>

      <tr>
        <th rowspan="3">Ports</th><td>vpc.port.create</td><td>Create port</td>
      </tr>

      <tr>
        <td>vpc.port.update</td><td>Update port</td>
      </tr>

      <tr>
        <td>vpc.port.delete</td><td>Delete port</td>
      </tr>

      <tr>
        <th rowspan="5">Cloud routers</th><td>vpc.router.create</td><td>Create cloud router</td>
      </tr>

      <tr>
        <td>vpc.router.update</td><td>Update cloud router</td>
      </tr>

      <tr>
        <td>vpc.router.delete</td><td>Delete cloud router</td>
      </tr>

      <tr>
        <td>vpc.router.add\_interface</td><td>Connect subnet to router</td>
      </tr>

      <tr>
        <td>vpc.router.remove\_interface</td><td>Disconnect subnet from router</td>
      </tr>

      <tr>
        <th rowspan="5">Security groups</th><td>vpc.security\_group.create</td><td>Create security group</td>
      </tr>

      <tr>
        <td>vpc.security\_group.update</td><td>Update security group</td>
      </tr>

      <tr>
        <td>vpc.security\_group.delete</td><td>Delete security group</td>
      </tr>

      <tr>
        <td>vpc.security\_group\_rule.create</td><td>Create security group rule</td>
      </tr>

      <tr>
        <td>vpc.security\_group\_rule.delete</td><td>Delete security group rule</td>
      </tr>

      <tr>
        <th rowspan="3">Resource access policies</th><td>vpc.rbac\_policy.create</td><td>Create access policy</td>
      </tr>

      <tr>
        <td>vpc.rbac\_policy.update</td><td>Update access policy</td>
      </tr>

      <tr>
        <td>vpc.rbac\_policy.delete</td><td>Delete access policy</td>
      </tr>

      <tr>
        <th rowspan="9">Cloud firewalls</th><td>vpc.firewall.create</td><td>Create firewall</td>
      </tr>

      <tr>
        <td>vpc.firewall.update</td><td>Update firewall</td>
      </tr>

      <tr>
        <td>vpc.firewall.delete</td><td>Delete firewall</td>
      </tr>

      <tr>
        <td>vpc.firewall\_rule.create</td><td>Create firewall rule</td>
      </tr>

      <tr>
        <td>vpc.firewall\_rule.update</td><td>Update firewall rule</td>
      </tr>

      <tr>
        <td>vpc.firewall\_rule.delete</td><td>Delete firewall rule</td>
      </tr>

      <tr>
        <td>vpc.firewall\_policy.create</td><td>Create firewall policy</td>
      </tr>

      <tr>
        <td>vpc.firewall\_policy.update</td><td>Update firewall policy</td>
      </tr>

      <tr>
        <td>vpc.firewall\_policy.delete</td><td>Delete firewall policy</td>
      </tr>

      <tr>
        <th rowspan="8">Private DNS</th><td>vpc.private\_dns\_zone.create</td><td>Create zone</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_zone.update</td><td>Update zone</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_zone.delete</td><td>Delete zone</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_zone.update\_recordset</td><td>Update zone records</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_service.create</td><td>Connect network to private DNS resolver</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_service.delete</td><td>Disconnect network from private DNS resolver</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_service.update</td><td>Update connection parameters of network to private DNS resolver</td>
      </tr>

      <tr>
        <td>vpc.private\_dns\_service.update\_network</td><td>Reconfigure private DNS resolver ports</td>
      </tr>

      <tr>
        <th rowspan="26">Load balancer</th><td>vpc.load\_balancer.create</td><td>Create load balancer</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer.update</td><td>Update load balancer</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer.delete</td><td>Delete load balancer</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer.failover</td><td>Trigger load balancer recreation</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_log\_offloading.enable</td><td>Enable load balancer log offloading task</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_log\_offloading.disable</td><td>Disable load balancer log offloading task</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool\_member.create</td><td>Add server to load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool\_member.update</td><td>Update server in load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool\_member.delete</td><td>Delete server from load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool.create</td><td>Create load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool.update</td><td>Update load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_pool.delete</td><td>Delete load balancer target group</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_listener.create</td><td>Create load balancer rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_listener.update</td><td>Update load balancer rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_listener.delete</td><td>Delete load balancer rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy.create</td><td>Create load balancer HTTP policy</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy.update</td><td>Update load balancer HTTP policy</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy.delete</td><td>Delete load balancer HTTP policy</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy\_rule.create</td><td>Create load balancer L7 rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy\_rule.update</td><td>Update load balancer L7 rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_l7\_policy\_rule.delete</td><td>Delete load balancer L7 rule</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_healthmonitor.create</td><td>Create load balancer availability check</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_healthmonitor.update</td><td>Update load balancer availability check</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_healthmonitor.delete</td><td>Delete load balancer availability check</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_amphorae.delete</td><td>Delete load balancer instance</td>
      </tr>

      <tr>
        <td>vpc.load\_balancer\_amphorae.failover</td><td>Trigger load balancer instance recreation</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### quota\_manager service \{#quota-management}

Responsible for operations with [project quotas](/access-control/projects/quotas/). You can manage quotas via [Quota Management API](/api/quota-management/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th>Quotas</th><td>quota\_manager.project.update</td><td>Update quotas</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### compute service \{#compute}

Responsible for operations with licenses, [cloud servers](/cloud-servers/), [network volumes](/cloud-servers/volumes/about-network-volumes.mdx), [volume snapshots](/cloud-servers/volumes/snapshots.mdx), [network volume backups](/cloud-servers/backups/) and [cloud server images](/cloud-servers/images/)..

You can manage licenses via [Cloud Platform Projects and Resources API](/api/cloud-projects-and-resources/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="4">SSH keys (keypairs)</th><td>compute.keypair.bulk\_create</td><td>Create key pair (bulk operation)</td>
      </tr>

      <tr>
        <td>compute.keypair.bulk\_delete</td><td>Delete key pair (bulk operation)</td>
      </tr>

      <tr>
        <td>compute.keypair.create</td><td>Create or import key pair</td>
      </tr>

      <tr>
        <td>compute.keypair.delete</td><td>Delete key pair</td>
      </tr>

      <tr>
        <th rowspan="2">Licenses</th><td>compute.license.bulk\_create</td><td>Create license (bulk operation)</td>
      </tr>

      <tr>
        <td>compute.license.delete</td><td>Delete license</td>
      </tr>

      <tr>
        <th rowspan="51">Cloud servers</th><td>compute.server.init\_delete</td><td>Initialize cloud server deletion</td>
      </tr>

      <tr>
        <td>compute.server.init\_rebuild</td><td>Initialize cloud server recreation</td>
      </tr>

      <tr>
        <td>compute.server.create</td><td>Create cloud server</td>
      </tr>

      <tr>
        <td>compute.server.update</td><td>Update information about cloud server</td>
      </tr>

      <tr>
        <td>compute.server.delete</td><td>Delete cloud server (soft mode)</td>
      </tr>

      <tr>
        <td>compute.server.add\_floatingip</td><td>Add public floating IP address to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.remove\_floatingip</td><td>Disconnect public floating IP address from cloud server</td>
      </tr>

      <tr>
        <td>compute.server.add\_fixedip</td><td>Add fixed IP address to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.remove\_fixedip</td><td>Disconnect fixed IP address from cloud server</td>
      </tr>

      <tr>
        <td>compute.server.add\_security\_group</td><td>Add security group to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.remove\_security\_group</td><td>Disconnect security group from cloud server</td>
      </tr>

      <tr>
        <td>compute.server.set\_admin\_password</td><td>Change OS administrator password for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.resize</td><td>Trigger cloud server configuration change</td>
      </tr>

      <tr>
        <td>compute.server.confirm\_resize</td><td>Confirm cloud server configuration change</td>
      </tr>

      <tr>
        <td>compute.server.revert\_resize</td><td>Revert cloud server configuration change</td>
      </tr>

      <tr>
        <td>compute.server.create\_backup</td><td>Create cloud server backup</td>
      </tr>

      <tr>
        <td>compute.server.create\_image</td><td>Create disk image of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.lock</td><td>Lock cloud server</td>
      </tr>

      <tr>
        <td>compute.server.unlock</td><td>Unlock cloud server</td>
      </tr>

      <tr>
        <td>compute.server.pause</td><td>Pause cloud server</td>
      </tr>

      <tr>
        <td>compute.server.unpause</td><td>Unpause cloud server</td>
      </tr>

      <tr>
        <td>compute.server.reboot</td><td>Reboot cloud server</td>
      </tr>

      <tr>
        <td>compute.server.rebuild</td><td>Recreate cloud server</td>
      </tr>

      <tr>
        <td>compute.server.rescue</td><td>Start Rescue mode for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.unrescue</td><td>Exit Rescue mode for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.start</td><td>Turn on cloud server</td>
      </tr>

      <tr>
        <td>compute.server.stop</td><td>Turn off cloud server</td>
      </tr>

      <tr>
        <td>compute.server.get\_console\_output</td><td>Request console output of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.shelve</td><td>Shelve cloud server</td>
      </tr>

      <tr>
        <td>compute.server.unshelve</td><td>Unshelve cloud server</td>
      </tr>

      <tr>
        <td>compute.server.trigger\_crash\_dump</td><td>Trigger crash dump of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_serial\_console</td><td>Create serial console of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_spice\_console</td><td>Create SPICE console of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_vnc\_console</td><td>Create VNC console of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_rdp\_console</td><td>Create RDP console of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_console</td><td>Create console of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.create\_metadata</td><td>Create metadata for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.update\_metadata</td><td>Update metadata for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.update\_metadata\_item</td><td>Update metadata property for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.delete\_metadata\_item</td><td>Delete metadata property for cloud server</td>
      </tr>

      <tr>
        <td>compute.server.attach\_interface</td><td>Create interface and connect it to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.detach\_interface</td><td>Disconnect interface from cloud server</td>
      </tr>

      <tr>
        <td>compute.server.clear\_admin\_password</td><td>Reset OS administrator password from metadata server</td>
      </tr>

      <tr>
        <td>compute.server.attach\_volume</td><td>Connect network volume to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.detach\_volume</td><td>Disconnect network volume from cloud server</td>
      </tr>

      <tr>
        <td>compute.server.update\_volume\_attachment</td><td>Update information about network volume connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.replace\_all\_tags</td><td>Replace tag set of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.add\_tag</td><td>Add tag to cloud server</td>
      </tr>

      <tr>
        <td>compute.server.delete\_all\_tags</td><td>Delete all tags of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.delete\_tag</td><td>Delete tag of cloud server</td>
      </tr>

      <tr>
        <td>compute.server.leave\_server\_group</td><td>Delete cloud server from placement group</td>
      </tr>

      <tr>
        <th rowspan="2">Flavors</th><td>compute.flavor.create</td><td>Create flavor</td>
      </tr>

      <tr>
        <td>compute.flavor.delete</td><td>Delete flavor</td>
      </tr>

      <tr>
        <th rowspan="2">Placement groups</th><td>compute.server\_group.create</td><td>Create placement group</td>
      </tr>

      <tr>
        <td>compute.server\_group.delete</td><td>Delete placement group</td>
      </tr>

      <tr>
        <th rowspan="2">Public floating IP addresses</th><td>compute.floatingip.create</td><td>Create public floating IP address</td>
      </tr>

      <tr>
        <td>compute.floatingip.delete</td><td>Delete public floating IP address</td>
      </tr>

      <tr>
        <th rowspan="31">Network volumes</th><td>compute.volume\_attachment.create</td><td>Create network volume connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume\_attachment.delete</td><td>Delete network volume connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume\_attachment.update</td><td>Update network volume connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume\_attachment.complete</td><td>Mark network volume connection to cloud server as ready</td>
      </tr>

      <tr>
        <td>compute.volume\_metadata.create</td><td>Create network volume metadata</td>
      </tr>

      <tr>
        <td>compute.volume\_metadata.delete</td><td>Delete network volume metadata</td>
      </tr>

      <tr>
        <td>compute.volume\_metadata.update\_key</td><td>Update network volume metadata by key</td>
      </tr>

      <tr>
        <td>compute.volume\_metadata.update</td><td>Update network volume metadata</td>
      </tr>

      <tr>
        <td>compute.volume.revert</td><td>Revert network volume to snapshot</td>
      </tr>

      <tr>
        <td>compute.volume\_transfer.create</td><td>Create transfer of network volume to another project</td>
      </tr>

      <tr>
        <td>compute.volume\_transfer.delete</td><td>Delete transfer of network volume to another project</td>
      </tr>

      <tr>
        <td>compute.volume\_transfer.update</td><td>Confirm transfer of network volume to another project</td>
      </tr>

      <tr>
        <td>compute.volume.create\_image</td><td>Create image from network volume</td>
      </tr>

      <tr>
        <td>compute.volume.create</td><td>Create network volume</td>
      </tr>

      <tr>
        <td>compute.volume.delete</td><td>Delete network volume</td>
      </tr>

      <tr>
        <td>compute.volume.read\_image\_metadata</td><td>Read image metadata for network volume</td>
      </tr>

      <tr>
        <td>compute.volume.update</td><td>Change network volume attributes (e.g., rename)</td>
      </tr>

      <tr>
        <td>compute.volume.attach</td><td>Connect network volume to virtual machine</td>
      </tr>

      <tr>
        <td>compute.volume.detach</td><td>Disconnect network volume from virtual machine</td>
      </tr>

      <tr>
        <td>compute.volume.extend</td><td>Increase network volume capacity</td>
      </tr>

      <tr>
        <td>compute.volume.reimage</td><td>Recreate network volume from image</td>
      </tr>

      <tr>
        <td>compute.volume.detach\_abort</td><td>Change network volume status to `IN-USE`</td>
      </tr>

      <tr>
        <td>compute.volume.detach\_init</td><td>Change network volume status to `DETACHING`</td>
      </tr>

      <tr>
        <td>compute.volume.attach\_init</td><td>Initialize network volume connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume.reserve</td><td>Reserve network volume for connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume.unreserve</td><td>Release reservation of network volume for connection to cloud server</td>
      </tr>

      <tr>
        <td>compute.volume.update\_readonly\_mark</td><td>Set network volume to read-only mode or disable it</td>
      </tr>

      <tr>
        <td>compute.volume.update\_bootable\_mark</td><td>Change `bootable` label of network volume</td>
      </tr>

      <tr>
        <td>compute.volume.update\_image\_metadata</td><td>Add image metadata to network volume</td>
      </tr>

      <tr>
        <td>compute.volume.attach\_terminate</td><td>Forcibly disconnect network volume from cloud server</td>
      </tr>

      <tr>
        <td>compute.volume.delete\_image\_metadata</td><td>Delete image metadata from network volume by key</td>
      </tr>

      <tr>
        <th rowspan="8">Snapshots</th><td>compute.snapshot.create</td><td>Create network volume snapshot</td>
      </tr>

      <tr>
        <td>compute.snapshot.delete</td><td>Delete network volume snapshot</td>
      </tr>

      <tr>
        <td>compute.snapshot.update</td><td>Change snapshot parameters (rename)</td>
      </tr>

      <tr>
        <td>compute.snapshot.update\_status</td><td>Change snapshot status</td>
      </tr>

      <tr>
        <td>compute.snapshot\_metadata.delete</td><td>Delete snapshot metadata</td>
      </tr>

      <tr>
        <td>compute.snapshot\_metadata.update\_key</td><td>Update snapshot metadata by key</td>
      </tr>

      <tr>
        <td>compute.snapshot\_metadata.create</td><td>Create snapshot metadata</td>
      </tr>

      <tr>
        <td>compute.snapshot\_metadata.update</td><td>Update snapshot metadata</td>
      </tr>

      <tr>
        <th rowspan="5">Backups</th><td>compute.backup.create</td><td>Create backup</td>
      </tr>

      <tr>
        <td>compute.backup.create\_ondemand</td><td>Create on-demand backup (on\_demand)</td>
      </tr>

      <tr>
        <td>compute.backup.delete</td><td>Delete backup</td>
      </tr>

      <tr>
        <td>compute.backup.restore</td><td>Restore from backup</td>
      </tr>

      <tr>
        <td>compute.backup.update</td><td>Update backup</td>
      </tr>

      <tr>
        <th rowspan="18">Images</th><td>compute.image.create\_metadata</td><td>Create image metadata</td>
      </tr>

      <tr>
        <td>compute.image.update\_metadata</td><td>Update image metadata</td>
      </tr>

      <tr>
        <td>compute.image.update\_metadata\_item</td><td>Update image metadata property</td>
      </tr>

      <tr>
        <td>compute.image.delete\_metadata\_item</td><td>Delete image metadata property</td>
      </tr>

      <tr>
        <td>compute.image.create</td><td>Create image</td>
      </tr>

      <tr>
        <td>compute.image.delete</td><td>Delete image</td>
      </tr>

      <tr>
        <td>compute.image.update</td><td>Update image</td>
      </tr>

      <tr>
        <td>compute.image.upload</td><td>Upload image from file</td>
      </tr>

      <tr>
        <td>compute.image.deactivate</td><td>Deactivate image</td>
      </tr>

      <tr>
        <td>compute.image.reactivate</td><td>Reactivate image</td>
      </tr>

      <tr>
        <td>compute.image.import</td><td>Import image (e.g., by link)</td>
      </tr>

      <tr>
        <td>compute.image\_member.create</td><td>Request access to image for another project</td>
      </tr>

      <tr>
        <td>compute.image\_member.delete</td><td>Delete access to image for another project</td>
      </tr>

      <tr>
        <td>compute.image\_member.update</td><td>Update status of image access from another project</td>
      </tr>

      <tr>
        <td>compute.image\_tag.create</td><td>Create tag for image</td>
      </tr>

      <tr>
        <td>compute.image\_tag.delete</td><td>Delete tag for image</td>
      </tr>

      <tr>
        <td>compute.image.validate\_url</td><td>Validate image before import by link</td>
      </tr>

      <tr>
        <td>compute.image.validate\_file</td><td>Validate image before upload from file</td>
      </tr>

      <tr>
        <th rowspan="5">Security groups</th><td>compute.security\_group.create</td><td>Create security group</td>
      </tr>

      <tr>
        <td>compute.security\_group.update</td><td>Update security group</td>
      </tr>

      <tr>
        <td>compute.security\_group.delete</td><td>Delete security group</td>
      </tr>

      <tr>
        <td>compute.security\_group\_rule.create</td><td>Create security group rule</td>
      </tr>

      <tr>
        <td>compute.security\_group\_rule.delete</td><td>Delete security group rule</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### filestorage service \{#filestorage}

Responsible for operations with [file storage](/file-storage/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="19">File storage</th><td>filestorage.access\_rule\_metadata.update</td><td>Update file storage access rule metadata</td>
      </tr>

      <tr>
        <td>filestorage.access\_rule\_metadata.delete</td><td>Delete file storage access rule metadata</td>
      </tr>

      <tr>
        <td>filestorage.share\_network.create</td><td>Create network connection for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share\_network.delete</td><td>Delete network for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share\_network.update</td><td>Update network for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share\_network\_subnet.create</td><td>Create subnet for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share\_network\_subnet.delete</td><td>Delete subnet for file storage</td>
      </tr>

      <tr>
        <td>filestorage.metadata.create</td><td>Add file storage metadata</td>
      </tr>

      <tr>
        <td>filestorage.metadata.update</td><td>Update file storage metadata</td>
      </tr>

      <tr>
        <td>filestorage.metadata.delete</td><td>Delete file storage metadata attribute</td>
      </tr>

      <tr>
        <td>filestorage.share.allow</td><td>Add access rule for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share.deny</td><td>Delete access rule for file storage</td>
      </tr>

      <tr>
        <td>filestorage.share.create</td><td>Create file storage</td>
      </tr>

      <tr>
        <td>filestorage.share.delete</td><td>Delete file storage</td>
      </tr>

      <tr>
        <td>filestorage.share.update</td><td>Update file storage attributes (e.g., rename)</td>
      </tr>

      <tr>
        <td>filestorage.share.extend</td><td>Increase file storage capacity</td>
      </tr>

      <tr>
        <td>filestorage.share.reload\_network</td><td>Update network settings of file storage</td>
      </tr>

      <tr>
        <td>filestorage.message.delete</td><td>Delete message</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### secrets service \{#secrets}

Responsible for secrets in [Secrets Manager](/secrets-manager/). You can manage secrets via [Secrets API](/api/secrets-manager/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="5">Secrets</th><td>secrets.secret.create</td><td>Create secret</td>
      </tr>

      <tr>
        <td>secrets.secret.update</td><td>Update secret description</td>
      </tr>

      <tr>
        <td>secrets.secret.get</td><td>Get secret</td>
      </tr>

      <tr>
        <td>secrets.secret.delete</td><td>Delete all secrets in project</td>
      </tr>

      <tr>
        <td>secrets.secret.delete</td><td>Delete secret</td>
      </tr>

      <tr>
        <th rowspan="3">Secret versions</th><td>secrets.secret\_version.get</td><td>Get secret version value</td>
      </tr>

      <tr>
        <td>secrets.secret\_version.create</td><td>Create new secret version</td>
      </tr>

      <tr>
        <td>secrets.secret\_version.activate</td><td>Set version as current</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### certificates service \{#certificates}

Responsible for certificates in [Certificates Manager](/certificates-manager/). You can manage user certificates via [User Certificates API](/api/certificates-manager/), and Let’s Encrypt® certificates via [Let’s Encrypt® Certificates API](/api/lets-encrypt-certificates/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="8">Certificates</th><td>certificates.certificate.upload</td><td>Upload certificate</td>
      </tr>

      <tr>
        <td>certificates.certificate.p12.get</td><td>Get key pair</td>
      </tr>

      <tr>
        <td>certificates.certificate.private\_key.get</td><td>Get private key</td>
      </tr>

      <tr>
        <td>certificates.certificate.ca\_chain.get</td><td>Get CA bundle certificate chain</td>
      </tr>

      <tr>
        <td>certificates.certificate.delete</td><td>Delete certificate</td>
      </tr>

      <tr>
        <td>certificates.certificate\_name.update</td><td>Update certificate</td>
      </tr>

      <tr>
        <td>certificates.le\_certificate.issue</td><td>Issue Let’s Encrypt® certificate</td>
      </tr>

      <tr>
        <td>certificates.le\_certificate.delete</td><td>Delete Let’s Encrypt® certificate</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### logs service \{#logs}

Responsible for operations in [logs](/logs).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="4">Logs</th><td>logs.group.create</td><td>Create log group</td>
      </tr>

      <tr>
        <td>logs.group.delete</td><td>Delete log group</td>
      </tr>

      <tr>
        <td>logs.stream.create</td><td>Create event stream</td>
      </tr>

      <tr>
        <td>logs.stream.delete</td><td>Delete event stream</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### audit\_logs service \{#audit-logs}

Responsible for operations with audit logs.

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th>Audit logs</th><td>audit\_logs.log.download</td><td>Export audit logs</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### domains service \{#domains}

Responsible for operations with [domains](/domains/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="12">Domain</th><td>domains.domain.create</td><td>Create domain</td>
      </tr>

      <tr>
        <td>domains.domain.update</td><td>Update domain (e.g., project, hosts, contacts)</td>
      </tr>

      <tr>
        <td>domains.domain.delete</td><td>Delete domain</td>
      </tr>

      <tr>
        <td>domains.domain.autoextend</td><td>Automatic registration renewal</td>
      </tr>

      <tr>
        <td>domains.domain\_authinfo.create</td><td>Generate new authorization code (authInfo)</td>
      </tr>

      <tr>
        <td>domains.domain.extend</td><td>Renew domain for a year</td>
      </tr>

      <tr>
        <td>domains.domain\_transfer.request</td><td>Initiate domain transfer from another registrar</td>
      </tr>

      <tr>
        <td>domains.domain\_transfer.approve</td><td>Confirm domain transfer to Selectel</td>
      </tr>

      <tr>
        <td>domains.contact\_change.request</td><td>Request domain ownership change (within Selectel)</td>
      </tr>

      <tr>
        <td>domains.contact\_change.approve</td><td>Confirm domain ownership change</td>
      </tr>

      <tr>
        <td>domains.contact\_change.cancel</td><td>Cancel domain ownership change request</td>
      </tr>

      <tr>
        <td>domains.domain\_hosts.update</td><td>Update DNS host list for domain</td>
      </tr>

      <tr>
        <th rowspan="4">Domain administrator</th><td>domains.contact.create</td><td>Create new contact person</td>
      </tr>

      <tr>
        <td>domains.contact.update</td><td>Update contact information (email, phone)</td>
      </tr>

      <tr>
        <td>domains.contact.admin\_update</td><td>Update contact via technical support</td>
      </tr>

      <tr>
        <td>domains.contact.delete</td><td>Delete contact person</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### dns service \{#dns}

Responsible for operations with [DNS hosting](/dns-hosting/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="6">Domain zone</th><td>dns.zone.create</td><td>Create domain zone</td>
      </tr>

      <tr>
        <td>dns.zone.update</td><td>Update domain zone</td>
      </tr>

      <tr>
        <td>dns.zone.delete</td><td>Delete domain zone</td>
      </tr>

      <tr>
        <td>dns.zone\_owner.update</td><td>Change project for domain zone</td>
      </tr>

      <tr>
        <td>dns.zone.protection</td><td>Enable or disable domain zone deletion protection</td>
      </tr>

      <tr>
        <td>dns.zone.activation</td><td>Activate domain zone</td>
      </tr>

      <tr>
        <th rowspan="4">Resource record group</th><td>dns.rrset.create</td><td>Create resource record group</td>
      </tr>

      <tr>
        <td>dns.rrset.update</td><td>Update resource record group</td>
      </tr>

      <tr>
        <td>dns.rrset.delete</td><td>Delete resource record group</td>
      </tr>

      <tr>
        <td>dns.rrset.managed</td><td>Administer resource record group via external service</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### global\_router service \{#global-router}

Responsible for operations with [global router](/global-router/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="16">Global router</th><td>global\_router.router.create</td><td>Create router</td>
      </tr>

      <tr>
        <td>global\_router.router.update</td><td>Update router</td>
      </tr>

      <tr>
        <td>global\_router.router.delete\_init</td><td>Initialize router deletion</td>
      </tr>

      <tr>
        <td>global\_router.router.delete</td><td>Delete router</td>
      </tr>

      <tr>
        <td>global\_router.network.create</td><td>Create global router network</td>
      </tr>

      <tr>
        <td>global\_router.network.update</td><td>Update global router network</td>
      </tr>

      <tr>
        <td>global\_router.network.delete\_init</td><td>Initialize global router network deletion</td>
      </tr>

      <tr>
        <td>global\_router.network.delete</td><td>Delete global router network</td>
      </tr>

      <tr>
        <td>global\_router.subnet.create</td><td>Create global router subnet</td>
      </tr>

      <tr>
        <td>global\_router.subnet.update</td><td>Update global router subnet</td>
      </tr>

      <tr>
        <td>global\_router.subnet.delete\_init</td><td>Initialize global router subnet deletion</td>
      </tr>

      <tr>
        <td>global\_router.subnet.delete</td><td>Delete global router subnet</td>
      </tr>

      <tr>
        <td>global\_router.static\_route.create</td><td>Create global router route</td>
      </tr>

      <tr>
        <td>global\_router.static\_route.update</td><td>Update global router route</td>
      </tr>

      <tr>
        <td>global\_router.static\_route.delete\_init</td><td>Initialize global router route deletion</td>
      </tr>

      <tr>
        <td>global\_router.static\_route.delete</td><td>Delete global router route</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### mks service \{#managed-kubernetes}

Responsible for operations with clusters, node groups, and nodes in [Managed Kubernetes](/managed-kubernetes/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="12">Cluster</th><td>mks.cluster.init\_create</td><td>Create cluster (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster.create</td><td>Create cluster (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster.init\_delete</td><td>Delete cluster (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster.delete</td><td>Delete cluster (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster.init\_update</td><td>Update cluster (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster.update</td><td>Update cluster (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster.init\_upgrade\_minor</td><td>Update minor version of cluster (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster.upgrade\_minor</td><td>Update minor version of cluster (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster.init\_upgrade\_patch</td><td>Update patch version of cluster (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster.upgrade\_patch</td><td>Update patch version of cluster (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_certs.init\_rotate</td><td>Rotate cluster certificates (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_certs.rotate</td><td>Rotate cluster certificates (event finish)</td>
      </tr>

      <tr>
        <th rowspan="9">Node group</th><td>mks.cluster\_nodegroup.init\_create</td><td>Create node group (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.create</td><td>Create node group (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.init\_delete</td><td>Delete node group (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.delete</td><td>Delete node group (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.init\_update</td><td>Update node group (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.update</td><td>Update node group (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.init\_resize</td><td>Resize node group (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.resize</td><td>Resize node group (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup.update\_autoscale</td><td>Change Autoscaler parameters for node group</td>
      </tr>

      <tr>
        <th rowspan="4">Node</th><td>mks.cluster\_nodegroup\_node.init\_delete</td><td>Delete node (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup\_node.delete</td><td>Delete node (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup\_node.init\_reinstall</td><td>Reinstall node (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_nodegroup\_node.reinstall</td><td>Reinstall node (event finish)</td>
      </tr>

      <tr>
        <th rowspan="8">Integration of Managed Kubernetes with Container Registry</th><td>mks.cluster\_registries\_integration.init\_create</td><td>Create cluster integration (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.create</td><td>Create cluster integration (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.init\_delete\_all</td><td>Delete all cluster integrations (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.delete\_all</td><td>Delete all cluster integrations (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.init\_delete</td><td>Delete one cluster integration (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.delete</td><td>Delete one cluster integration (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.init\_update</td><td>Update cluster integration (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_registries\_integration.update</td><td>Update cluster integration (event finish)</td>
      </tr>

      <tr>
        <th rowspan="4">Envoy Gateway application</th><td>mks.cluster\_addon\_envoy\_gateway.init\_create</td><td>Install Envoy Gateway cluster application (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_addon\_envoy\_gateway.create</td><td>Install Envoy Gateway cluster application (event finish)</td>
      </tr>

      <tr>
        <td>mks.cluster\_addon\_envoy\_gateway.init\_delete</td><td>Delete Envoy Gateway cluster application (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_addon\_envoy\_gateway.delete</td><td>Delete Envoy Gateway cluster application (event finish)</td>
      </tr>

      <tr>
        <th rowspan="4">NGINX Ingress Controller application</th><td>mks.cluster\_addon\_ingress\_nginx.init\_delete</td><td>Delete NGINX Ingress Controller application (event start)</td>
      </tr>

      <tr>
        <td>mks.cluster\_addon\_ingress\_nginx.delete</td><td>Delete NGINX Ingress Controller application (event finish)</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### s3 service \{#s3}

Responsible for operations with [S3](/s3/). You can manage S3 via [Object Storage API](/api/object-storage/), [S3 API](/api/object-storage-s3/), and [Swift API](/api/object-storage-swift/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="21">Buckets</th><td>s3.bucket.create</td><td>Create bucket</td>
      </tr>

      <tr>
        <td>s3.bucket.delete</td><td>Delete bucket</td>
      </tr>

      <tr>
        <td>s3.bucket\_meta.update</td><td>Update bucket metadata</td>
      </tr>

      <tr>
        <td>s3.bucket\_expiring.update</td><td>Update `Default-Delete-After` header</td>
      </tr>

      <tr>
        <td>s3.bucket\_limits.update</td><td>Update bucket limits</td>
      </tr>

      <tr>
        <td>s3.bucket\_publicity.enable</td><td>Change bucket type to public</td>
      </tr>

      <tr>
        <td>s3.bucket\_publicity.disable</td><td>Change bucket type to private</td>
      </tr>

      <tr>
        <td>s3.bucket\_versioning.enable</td><td>Enable bucket versioning</td>
      </tr>

      <tr>
        <td>s3.bucket\_versioning.suspend</td><td>Suspend bucket versioning</td>
      </tr>

      <tr>
        <td>s3.bucket\_cors.set</td><td>Apply bucket CORS rules</td>
      </tr>

      <tr>
        <td>s3.bucket\_cors.delete</td><td>Delete bucket CORS rules</td>
      </tr>

      <tr>
        <td>s3.bucket\_custom\_domain.add</td><td>Add custom domain</td>
      </tr>

      <tr>
        <td>s3.bucket\_custom\_domain.delete</td><td>Delete custom domain</td>
      </tr>

      <tr>
        <td>s3.bucket\_website.update</td><td>Configure bucket website</td>
      </tr>

      <tr>
        <td>s3.bucket\_policy.set</td><td>Create access policy</td>
      </tr>

      <tr>
        <td>s3.bucket\_policy.delete</td><td>Delete access policy</td>
      </tr>

      <tr>
        <td>s3.bucket\_cache\_control.set</td><td>Add `Cache-Сontrol` header</td>
      </tr>

      <tr>
        <td>s3.bucket\_cache\_control.delete</td><td>Delete `Cache-Сontrol` header</td>
      </tr>

      <tr>
        <td>s3.bucket\_addressing.update</td><td>Change bucket addressing from Path-Style to vHosted</td>
      </tr>

      <tr>
        <td>s3.bucket\_object\_lock.enable</td><td>Enable Object Lock in bucket</td>
      </tr>

      <tr>
        <td>s3.bucket\_object\_lock.update</td><td>Change default temporary lock configuration in bucket</td>
      </tr>

      <tr>
        <th rowspan="3">TLS (SSL) certificates</th><td>s3.certificate.upload</td><td>Upload certificate</td>
      </tr>

      <tr>
        <td>s3.certificate.update</td><td>Update certificate</td>
      </tr>

      <tr>
        <td>s3.certificate.delete</td><td>Delete certificate</td>
      </tr>

      <tr>
        <th rowspan="4">Public bucket domains</th><td>s3.public\_domain.create</td><td>Create domain</td>
      </tr>

      <tr>
        <td>s3.public\_domain.delete</td><td>Delete domain</td>
      </tr>

      <tr>
        <td>s3.public\_domain.bind</td><td>Bind domain to bucket</td>
      </tr>

      <tr>
        <td>s3.public\_domain.unbind</td><td>Unbind domain from bucket</td>
      </tr>

      <tr>
        <th>Clear cache</th><td>s3.cache.flush</td><td>Cache flush request</td>
      </tr>

      <tr>
        <th rowspan="2">Logs</th><td>s3.logs.dump</td><td>Creating storage log dump</td>
      </tr>

      <tr>
        <td>s3.logs.cancel</td><td>Canceling storage log dump creation</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### DBaaS service \{#dbaas}

Responsible for operations with [Managed Databases](/managed-databases/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="8">Cluster</th><td>dbaas.cluster.create</td><td>Creating a cluster</td>
      </tr>

      <tr>
        <td>dbaas.cluster.update</td><td>Updating a cluster</td>
      </tr>

      <tr>
        <td>dbaas.cluster.delete</td><td>Deleting a cluster</td>
      </tr>

      <tr>
        <td>dbaas.cluster.resize</td><td>Scaling a cluster</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_readonly\_mode.enable</td><td>Setting read-only mode</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_readwrite\_mode.enable</td><td>Setting read-write mode</td>
      </tr>

      <tr>
        <td>dbaas.cluster.lock</td><td>Locking a cluster</td>
      </tr>

      <tr>
        <td>dbaas.cluster.unlock</td><td>Unlocking a cluster</td>
      </tr>

      <tr>
        <th rowspan="1">Backups</th><td>dbaas.cluster\_backup.update</td><td>Updating backup settings</td>
      </tr>

      <tr>
        <th rowspan="1">DBMS settings</th><td>dbaas.cluster\_config.update</td><td>Updating DBMS settings</td>
      </tr>

      <tr>
        <th rowspan="3">Database</th><td>dbaas.cluster\_database.create</td><td>Creating a database</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database.update</td><td>Updating a database</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database.delete</td><td>Deleting a database</td>
      </tr>

      <tr>
        <th rowspan="1">Connection pooler</th><td>dbaas.cluster\_pooler.update</td><td>Updating connection pooler</td>
      </tr>

      <tr>
        <th rowspan="3">Prometheus token</th><td>dbaas.prometheus\_token.create</td><td>Creating a token</td>
      </tr>

      <tr>
        <td>dbaas.prometheus\_token.update</td><td>Updating a token</td>
      </tr>

      <tr>
        <td>dbaas.prometheus\_token.delete</td><td>Deleting a token</td>
      </tr>

      <tr>
        <th rowspan="4">Node group</th><td>dbaas.cluster\_node\_group.create</td><td>Creating a node group</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_node\_group.update</td><td>Updating a node group</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_node\_group.delete</td><td>Deleting a node group</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_node\_group.resize</td><td>Scaling a node group</td>
      </tr>

      <tr>
        <th rowspan="2">Public floating IP address</th><td>dbaas.cluster\_floating\_ip.create</td><td>Creating an IP address</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_floating\_ip.delete</td><td>Deleting an IP address</td>
      </tr>

      <tr>
        <th rowspan="1">Allowlist of IP addresses</th><td>dbaas.cluster\_firewall\_rule.update</td><td>Updating allowlist of IP addresses</td>
      </tr>

      <tr>
        <th rowspan="3">Kafka topic</th><td>dbaas.cluster\_database\_topic.create</td><td>Creating a topic</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_topic.update</td><td>Updating a topic</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_topic.delete</td><td>Deleting a topic</td>
      </tr>

      <tr>
        <th rowspan="4">User</th><td>dbaas.cluster\_database\_user.create</td><td>Creating a user</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_user.update</td><td>Updating a user</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_user.delete</td><td>Deleting a user</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_user\_password.update</td><td>Changing user password</td>
      </tr>

      <tr>
        <th rowspan="2">User permissions</th><td>dbaas.cluster\_database\_permission.create</td><td>Creating a permission</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_permission.delete</td><td>Deleting a permission</td>
      </tr>

      <tr>
        <th rowspan="3">Access Control Lists (ACLs)</th><td>dbaas.cluster\_acl.create</td><td>Creating an Access Control List</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_acl.update</td><td>Updating an Access Control List</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_acl.delete</td><td>Deleting an Access Control List</td>
      </tr>

      <tr>
        <th rowspan="1">Security groups</th><td>dbaas.cluster\_security\_group.update</td><td>Updating security groups</td>
      </tr>

      <tr>
        <th rowspan="2">Logical replication slot</th><td>dbaas.cluster\_database\_logical\_replication\_slot.create</td><td>Creating a logical replication slot</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_logical\_replication\_slot.delete</td><td>Deleting a logical replication slot</td>
      </tr>

      <tr>
        <th rowspan="2">Extension</th><td>dbaas.cluster\_database\_extension.create</td><td>Adding an extension</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_database\_extension.delete</td><td>Deleting an extension</td>
      </tr>

      <tr>
        <th rowspan="2">Logs</th><td>dbaas.cluster\_log\_platform.enable</td><td>Enabling logging</td>
      </tr>

      <tr>
        <td>dbaas.cluster\_log\_platform.disable</td><td>Disabling logging</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

### SES service \{#ses}

Responsible for operations with [Email Service](/email-service/). You can manage the email service via [Email Service API](/api/email-service/).

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Event name (event\_type)</th><th>Description</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th rowspan="6">Resources</th><td>ses.resource.create</td><td>Creating a resource</td>
      </tr>

      <tr>
        <td>ses.resource.transfer</td><td>Transferring a resource</td>
      </tr>

      <tr>
        <td>ses.resource.delete</td><td>Deleting a resource</td>
      </tr>

      <tr>
        <td>ses.resource\_name.update</td><td>Updating a resource name</td>
      </tr>

      <tr>
        <td>ses.resource\_password.update</td><td>Updating a resource password</td>
      </tr>

      <tr>
        <td>ses.resource\_quota.update</td><td>Updating resource quotas</td>
      </tr>

      <tr>
        <th rowspan="2">Domains</th><td>ses.resource\_domain.create</td><td>Creating a domain</td>
      </tr>

      <tr>
        <td>ses.resource\_domain.delete</td><td>Deleting a domain</td>
      </tr>

      <tr>
        <th rowspan="2">Stop lists</th><td>ses.resource\_stop\_list\_email.add</td><td>Adding an entry to a stop list</td>
      </tr>

      <tr>
        <td>ses.resource\_stop\_list\_email.delete</td><td>Deleting an entry from a stop list</td>
      </tr>

      <tr>
        <th rowspan="3">Projects</th><td>ses.project\_quota.update</td><td>Updating project resource quotas</td>
      </tr>

      <tr>
        <td>ses.project.delete</td><td>Deleting all resources in a project</td>
      </tr>

      <tr>
        <td>ses.project.cleanup</td><td>Automatic deletion of all resources in a project when a user is deleted or an account is blocked</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

<Formbricks />