Audit log events

Last update: September 07 2026Open in Markdown

In audit logs, an event is a record of a create, update, or delete operation on resources and entities. Reading sensitive data, such as passwords, certificates, etc., is also recorded in audit logs.

An event has a fixed structure and can be of different types.

Event structure

An event has a JSON structure:

[
  {
    "event_saved_time": "2025-09-29T13:13:25.196Z",
    "event_id": "string",
    "event_type": "string",
    "event_time": "2025-09-29T13:13:25.196Z",
    "status": "string",
    "error_code": "string",
    "request_id": "string",
    "subject": {
      "id": "string",
      "type": "string",
      "name": "string",
      "auth_provider": "string",
      "is_authorized": true,
      "authorized_by": [
        "string"
      ],
      "credentials_fingerprint": "string"
    },
    "resource": {
      "id": "string",
      "type": "string",
      "name": "string",
      "account_id": "string",
      "project_id": "string",
      "location": "string",
      "details": {},
      "old_values": {
        "additionalProp1": {}
      },
      "new_values": {
        "additionalProp1": {}
      }
    },
    "source_type": "string",
    "request": {
      "remote_address": "string",
      "user_agent": "string",
      "type": "string",
      "path": "string",
      "method": "string",
      "parameters": "string"
    },
    "schema_version": "string"
  }
]

Some fields are optional and may be absent from an event. Also, some fields have reserved values.

Event fields

Field		Description	Data type	Required
event_id		Unique event identifier	String	✓
event_type		Event type; for the full list, see the Event types subsection	String	✓
event_time		Time the event occurred in ISO8601 format with timezone	String	✓
event_saved_time		Time the event was saved in audit logs in ISO8601 format with timezone	String	✓
status		Event status. Possible values: success; fail; accepted; NA (not applicable) — none of the statuses apply to the event	String	✓
error_code		Error code	String	✗
request_id		Unique event chain identifier or request identifier	String	✓
subject		Information about the subject—a service or user that performed the operation	Object	✓
	id	Unique identifier of the action subject. Example formats: 12345_13423; 3112f9b7aec64fe49700c7cd0f5f6ddc. You can use subject_id to identify the user. If the value could not be retrieved, undefined will be specified.	String	✓
	type	Subject type. Possible values: employee — Selectel employee; user — user; service_user — service user; service — Selectel service	String	✓
	name	Subject name	String	✗
	auth_provider	Subject authentication provider. Possible values: keystone — IAM token; api_key — static token; session — session identifier	String	✗
	is_authorized	Authorization result	Boolean	✓
	authorized_by	List of roles and other authorization attributes used to authorize the request	Array of strings	✗
	credentials_fingerprint	Fingerprint of the secret used to authorize the request	String	✗
resource		Action object; the entity on which the subject performed the operation. An object can be a resource (server, disk), user, role, account, etc.	Object	✓
	id	Unique object identifier	String	✓
	type	Object type	String	✓
	name	Object name	String	✗
	account_id	Account identifier	String	✓
	project_id	Project identifier	String	✗
	location	Data center, availability zone, or pool where the subject is located	String	✗
	details	Event details. Defined by the source service and event type	Object	✗
	changes	Changes that occurred to the subject	Object	✗
	changes_old_values	Set of old subject attribute values	Object	✗
	changes_new_values	Set of new subject attribute values	Object	✓
source		Service that recorded the change	Object	✓
	type	Name of the product, service, or feature where the event occurred	String	✓
request		Request information	Object	✓
	remote_address	IP address the request came from	String	✗
	user_agent	User Agent of the event subject	String	✗
	type	Request type. Possible values: http; grpc; queue; internal	String	✓
	path	Path to the resource where the event occurred	String	✗
	method	Request method	String	✗
	parameters	Query parameters	String	✗
schema_version		Fixed value — 1.0	String	✓

Reserved values

If a field value cannot be determined by the log source services — for example, if an error occurred during the action or the object has not yet been created and there is no resource_id — the reserved value undefined is used.

It can appear in the following fields:

• subject_id;
• subject_type;
• resource_id;
• resource_type;
• resource_account_id.

Event types (event_type)

In audit logs, event types are grouped by services that are responsible for different parts of the products. You can use services to filter events when exporting logs.

The list of products that support audit logs, services, and event types will be expanded.

Product or management area	Services
Account, users, projects, and permissions	iam
Billing, payment information	legal billing
Dedicated servers, Colocation, basic firewall, storage systems	dedicated
Cloud platform	vpc quota_management compute filestorage
Secrets manager	secrets
Certificate manager	certificates
Logs	logs
Audit logs	audit_logs
Domains	domains
DNS Hosting	dns
Global Router	global_router
Managed Kubernetes	mks
S3	s3
Managed databases	dbaas
Email service	SES

IAM service

Responsible for operations in the account, with users, projects, and access rights. Some of these (for example, users and their keys) can be managed via IAM API.

	Event name (event_type)	Description
Account	iam.account.init_action	Subject authentication when performing an operation in the service billing. Combined with the main operation event via the request_id field
	iam.account.email_confirmation	Email address confirmation during account registration
	iam.account.phone_confirmation	Phone number confirmation during account registration
	iam.account.fill	Entering account data
	iam.account.delete	Account deletion
	iam.account.update	Changing account data
Sign in to account	iam.user.login	User sign in to account
	iam.user_password.check	Entering password by a user
	iam.user.logout	User sign out from account
	iam.user_2fa_code.verify	Attempt to sign in using 2FA
	iam.user_session.reset_all_other	Resetting all sessions except the current one
	iam.user_session.reset_all_within_browser	Signing out from all accounts signed in within the browser
	iam.user_session.reset_all	Forced session termination by the system
Password	iam.user_password.reset_request	Requesting an email with a password reset link
	iam.user_password.reset_apply	Password reset creating a new password
	iam.user_password.update	Change password
Two-factor authentication	iam.user_2fa.enable	Enabling two-factor authentication
	iam.user_2fa.disable	Disabling two-factor authentication
	iam.user_2fa_code.send	Requesting a two-factor authentication code
	iam.user_2fa_backup_codes.create	Creating backup codes
	iam.user_2fa_otp.enable	Enabling sign-in via an authenticator app
	iam.user_2fa_email.enable	Enabling sign-in via email
	iam.user_2fa_sms.enable	Enabling sign-in via SMS
	iam.user_2fa_backup_codes.enable	Enabling sign-in using backup codes and their creation
	iam.user_2fa_otp.disable	Disabling sign-in via an authenticator app
	iam.user_2fa_email.disable	Disabling sign-in via email
	iam.user_2fa_sms.disable	Disabling sign-in via SMS
Changing contact information	iam.user_email.change_init	Change email address request
	iam.user_email.change_unlocked	Confirmation of email address change
	iam.user_email.update	Email address successfully changed
	iam.user_phone.change_init	Change phone number request
	iam.user_phone.change_unlocked	Confirmation of phone number change
	iam.user_phone.update	Phone number successfully changed
Users	iam.user_profile.create	Creating a new user profile
	iam.user.email_confirmation	Registering a new user via the link from an invitation email
	iam.federated_user_profile.create iam.federated_user.create *	Creating a federated user profile
	iam.user.phone_confirmation	Confirming the phone number during new user registration
	iam.user_profile.fill	Filling in user profile details
	iam.user_profile.update	Updating user profile details
	iam.federated_user_profile.update	Updating federated user profile details
	iam.user_profile.delete	Deleting a user profile
	iam.federated_user_profile.delete	Deleting a federated user profile
	iam.user_subscription.add	Adding a notification category to a user
	iam.user_subscription.delete	Removing a notification category from a user
	iam.user.create	Creating a user
	iam.user.delete	Deleting a user
	iam.user_role.add	Assigning roles to a user
	iam.user_role.remove	Removing roles from a user
	iam.user_group.add	Assigning groups to a user
	iam.user_group.remove	Removing groups from a user
Service users	iam.service_user.create	Creating a service user
	iam.service_user.update	Updating a service user
	iam.service_user.delete	Deleting a service user
	iam.service_user_role.add	Assigning roles to a service user
	iam.service_user_role.remove	Removing roles from a service user
	iam.service_user_group.add	Assigning groups to a service user
	iam.service_user_group.remove	Removing groups from a service user
User group	iam.group.create	Creating a user group
	iam.group.update	Updating a user group
	iam.group.delete	Deleting a user group
	iam.group_user.add	Adding users to a group
	iam.group_user.remove	Removing users from a group
	iam.group_role.add	Assigning roles to a user group
	iam.group_role.remove	Removing roles from a user group
Federations	iam.federation.create	Creating a federation
	iam.federation.update	Modifying a federation
	iam.federation.delete	Deleting a federation
	iam.federation_cert.create	Creating a federation certificate
	iam.federation_cert.update	Updating a federation certificate
	iam.federation_cert.delete	Deleting a federation certificate
	iam.federation_group_mapping.create	Creating a mapping between a Selectel user group and an identity provider group
	iam.federation_group_mapping.update	Replacing all user group mappings for a federation with mappings to other identity provider groups
	iam.federation_group_mapping.delete	Deleting a mapping between a Selectel user group and an identity provider group
Projects	iam.project.create	Creating a project
	iam.project.update	Updating a project
	iam.project_domain.detach	Removing a project domain
	iam.project.delete	Deleting a project
IAM tokens	iam.auth_token.issue	Issuing an IAM token
	iam.auth_token.revoke	Revoking an IAM token
S3 keys	iam.user_credential.add	Creating an S3 key for a user
	iam.user_credential.remove	Removing an S3 key from a user
	iam.service_user_credential.add	Creating an S3 key for a service user
	iam.service_user_credential.remove	Removing an S3 key from a service user
Static tokens	iam.api_key.create	Creating a static token
	iam.api_key.update	Updating a static token
	iam.api_key.enable	Activating a static token
	iam.api_key.disable	Deactivating a static token
	iam.api_key.delete	Deleting a static token
ACL	iam.acl.enable	Enabling ACL
	iam.acl.disable	Disabling ACL
	iam.acl_ip.create	Creating an ACL rule
	iam.acl_ip.delete	Deleting an ACL rule

* This event is deprecated and will soon no longer be recorded in audit logs.

Legal service

Responsible for contract-related operations with the customer—the payer.

	Event name (event_type)	Description
Customer under contract	legal.payer.create	Creating a customer
	legal.payer.update	Updating customer details
	legal.payer.reorganisation	Reorganizing a customer company

Billing service

Responsible for operations occurring with resources during payment deferment, non-payment, or debt repayment.

In events of the billing service, detailed information about the subject is provided in a paired authentication event. In it, events with the type iam.account.init_action are linked to the main event via the request_id field.

	Event name (event_type)	Description
Cloud platform financial signals	billing.block_signal.apply	Resource blocking
	billing.unblock_signal.apply	Resource unblocking
	billing.restrict_signal.apply	Restricting access to a resource
	billing.unrestrict_signal.apply	Removing access restrictions from a resource
	billing.delete_signal.apply	Deleting a resource
Payment deferment	billing.soft_grace_policy.enable	Enabling payment deferment
	billing.soft_grace_policy.disable	Disabling payment deferment
	billing.soft_grace_signal.apply	Activating payment deferment
	billing.unsoft_grace_signal.apply	Completing an active payment deferment

Dedicated service

Responsible for operations:

• with dedicated servers;
• colocated equipment;
• basic firewall;
• data storage systems.

You can manage servers and equipment via the Dedicated Servers API.

	Event name (event_type)	Description
Dedicated server	dedicated.server.create	Ordering a dedicated server
	dedicated.server.update	Modifying a dedicated server
	dedicated.server.delete	Deleting a dedicated server
	dedicated.server.power_on	Powering on a dedicated server
	dedicated.server.power_off	Powering off a dedicated server
	dedicated.server.reboot	Rebooting a dedicated server
	dedicated.server.os_reinstall	Reinstalling the OS on a dedicated server
	dedicated.server.password_show	Viewing the dedicated server password
	dedicated.server.console_open	Opening the dedicated server console
	dedicated.server.upgrade_create	Creating a dedicated server upgrade
	dedicated.server.upgrade_cancel	Canceling a dedicated server upgrade
Additional services	dedicated.additional_resource.create	Ordering an additional service
	dedicated.additional_resource.update	Modifying an additional service
	dedicated.additional_resource.delete	Deleting an additional service
Colocation	dedicated.colocation.create	Ordering colocation
	dedicated.colocation.update	Modifying colocation
	dedicated.colocation.delete	Deleting colocation
Firewall	dedicated.firewall.create	Ordering a firewall
	dedicated.firewall.update	Modifying a firewall
	dedicated.firewall.delete	Deleting a firewall
Network equipment	dedicated.network_equipment.create	Ordering network equipment
	dedicated.network_equipment.update	Modifying network equipment
	dedicated.network_equipment.delete	Deleting network equipment
Equipment (data storage systems)	dedicated.equipment.create	Ordering equipment
	dedicated.equipment.update	Modifying equipment
	dedicated.equipment.delete	Deleting equipment
Network service	dedicated.network.create	Ordering a network service
	dedicated.network.update	Modifying a network service
	dedicated.network.delete	Deleting a network service
Port service	dedicated.port.create	Ordering a port service
	dedicated.port.update	Modifying a port service
	dedicated.port.delete	Deleting a network service
Software	dedicated.software.create	Ordering software
	dedicated.software.update	Modifying software
	dedicated.software.delete	Deleting software
Tags	dedicated.tag.create	Ordering software
	dedicated.tag.update	Modifying software
	dedicated.tag.delete	Deleting software
Basic firewall	dedicated.basic_firewall.create	Creating a basic firewall
	dedicated.basic_firewall.update	Modifying a basic firewall
	dedicated.basic_firewall.delete	Deleting a basic firewall
Public subnetwork	dedicated.public_subnet.create	Creating a public subnetwork
	dedicated.public_subnet.update	Modifying a public subnetwork
	dedicated.public_subnet.delete	Deleting a public subnetwork
Private subnetwork	dedicated.private_subnet.create	Creating a private subnetwork
	dedicated.private_subnet.update	Modifying a private subnetwork
	dedicated.private_subnet.delete	Deleting a private subnetwork
Public VLAN	dedicated.public_vlan.create	Creating a public VLAN
	dedicated.public_vlan.update	Modifying a public VLAN
	dedicated.public_vlan.delete	Deleting a public VLAN
Private VLAN	dedicated.private_vlan.create	Creating a private VLAN
	dedicated.private_vlan.update	Modifying a private VLAN
	dedicated.private_vlan.delete	Deleting a private VLAN
SSH keys	dedicated.ssh_key.create	Creating an SSH key
	dedicated.ssh_key.update	Modifying an SSH key
	dedicated.ssh_key.delete	Deleting an SSH key
IPMI monitoring	dedicated.monitoring.create	Creating monitoring
	dedicated.monitoring.delete	Deleting monitoring
Client images	dedicated.custom_os_image.create	Create client image
	dedicated.custom_os_image.update	Update client image
	dedicated.custom_os_image.delete	Delete client image

VPC service

Responsible for operations with cloud platform networks, cloud firewalls, private DNS, security groups, cloud load balancers.

	Event name (event_type)	Description
Private networks	vpc.network.create	Create private network
	vpc.network.update	Update private network
	vpc.network.delete	Delete private network
Private subnets	vpc.subnet.create	Create private subnet
	vpc.subnet.update	Update private subnet
	vpc.subnet.delete	Delete private subnet
Public subnets	vpc.subnet.create	Create public subnet
	vpc.subnet.bulk_create	Add public subnet to project
	vpc.subnet.update	Update public subnet
	vpc.subnet.delete	Delete public subnet
	vpc.subnet.init_delete	Delete public subnet from project
Subnet pools	vpc.subnet_pool.create	Create subnet pool
	vpc.subnet_pool.update	Update subnet pool
	vpc.subnet_pool.delete	Delete subnet pool
Address scopes	vpc.address_scope.create	Create address scope
	vpc.address_scope.update	Update address scope
	vpc.address_scope.delete	Delete address scope
Address groups	vpc.address_group.create	Create address group
	vpc.address_group.update	Update address group
	vpc.address_group.delete	Delete address group
Public floating IP addresses	vpc.floatingip.create	Create public floating IP address
	vpc.floatingip.bulk_create	Add public floating IP address to project
	vpc.floatingip.update	Update public floating IP address, including connecting to or disconnecting from a port
	vpc.floatingip_port_forwarding.create	Create port forwarding (1:1 NAT via cloud router)
	vpc.floatingip_port_forwarding.update	Update port forwarding (1:1 NAT via cloud router)
	vpc.floatingip_port_forwarding.delete	Delete port forwarding (1:1 NAT via cloud router)
	vpc.floatingip.init_delete	Delete public floating IP address from project
	vpc.floatingip.delete	Delete public floating IP address
Direct public IP addresses	vpc.public_port.create	Create direct public IP address
	vpc.public_port.update	Update direct public IP address
	vpc.public_port.delete	Delete direct public IP address
Ports	vpc.port.create	Create port
	vpc.port.update	Update port
	vpc.port.delete	Delete port
Cloud routers	vpc.router.create	Create cloud router
	vpc.router.update	Update cloud router
	vpc.router.delete	Delete cloud router
	vpc.router.add_interface	Connect subnet to router
	vpc.router.remove_interface	Disconnect subnet from router
Security groups	vpc.security_group.create	Create security group
	vpc.security_group.update	Update security group
	vpc.security_group.delete	Delete security group
	vpc.security_group_rule.create	Create security group rule
	vpc.security_group_rule.delete	Delete security group rule
Resource access policies	vpc.rbac_policy.create	Create access policy
	vpc.rbac_policy.update	Update access policy
	vpc.rbac_policy.delete	Delete access policy
Cloud firewalls	vpc.firewall.create	Create firewall
	vpc.firewall.update	Update firewall
	vpc.firewall.delete	Delete firewall
	vpc.firewall_rule.create	Create firewall rule
	vpc.firewall_rule.update	Update firewall rule
	vpc.firewall_rule.delete	Delete firewall rule
	vpc.firewall_policy.create	Create firewall policy
	vpc.firewall_policy.update	Update firewall policy
	vpc.firewall_policy.delete	Delete firewall policy
Private DNS	vpc.private_dns_zone.create	Create zone
	vpc.private_dns_zone.update	Update zone
	vpc.private_dns_zone.delete	Delete zone
	vpc.private_dns_zone.update_recordset	Update zone records
	vpc.private_dns_service.create	Connect network to private DNS resolver
	vpc.private_dns_service.delete	Disconnect network from private DNS resolver
	vpc.private_dns_service.update	Update connection parameters of network to private DNS resolver
	vpc.private_dns_service.update_network	Reconfigure private DNS resolver ports
Load balancer	vpc.load_balancer.create	Create load balancer
	vpc.load_balancer.update	Update load balancer
	vpc.load_balancer.delete	Delete load balancer
	vpc.load_balancer.failover	Trigger load balancer recreation
	vpc.load_balancer_log_offloading.enable	Enable load balancer log offloading task
	vpc.load_balancer_log_offloading.disable	Disable load balancer log offloading task
	vpc.load_balancer_pool_member.create	Add server to load balancer target group
	vpc.load_balancer_pool_member.update	Update server in load balancer target group
	vpc.load_balancer_pool_member.delete	Delete server from load balancer target group
	vpc.load_balancer_pool.create	Create load balancer target group
	vpc.load_balancer_pool.update	Update load balancer target group
	vpc.load_balancer_pool.delete	Delete load balancer target group
	vpc.load_balancer_listener.create	Create load balancer rule
	vpc.load_balancer_listener.update	Update load balancer rule
	vpc.load_balancer_listener.delete	Delete load balancer rule
	vpc.load_balancer_l7_policy.create	Create load balancer HTTP policy
	vpc.load_balancer_l7_policy.update	Update load balancer HTTP policy
	vpc.load_balancer_l7_policy.delete	Delete load balancer HTTP policy
	vpc.load_balancer_l7_policy_rule.create	Create load balancer L7 rule
	vpc.load_balancer_l7_policy_rule.update	Update load balancer L7 rule
	vpc.load_balancer_l7_policy_rule.delete	Delete load balancer L7 rule
	vpc.load_balancer_healthmonitor.create	Create load balancer availability check
	vpc.load_balancer_healthmonitor.update	Update load balancer availability check
	vpc.load_balancer_healthmonitor.delete	Delete load balancer availability check
	vpc.load_balancer_amphorae.delete	Delete load balancer instance
	vpc.load_balancer_amphorae.failover	Trigger load balancer instance recreation

quota_manager service

Responsible for operations with project quotas. You can manage quotas via Quota Management API.

	Event name (event_type)	Description
Quotas	quota_manager.project.update	Update quotas

compute service

Responsible for operations with licenses, cloud servers, network volumes, volume snapshots, network volume backups and cloud server images..

You can manage licenses via Cloud Platform Projects and Resources API.

	Event name (event_type)	Description
SSH keys (keypairs)	compute.keypair.bulk_create	Create key pair (bulk operation)
	compute.keypair.bulk_delete	Delete key pair (bulk operation)
	compute.keypair.create	Create or import key pair
	compute.keypair.delete	Delete key pair
Licenses	compute.license.bulk_create	Create license (bulk operation)
	compute.license.delete	Delete license
Cloud servers	compute.server.init_delete	Initialize cloud server deletion
	compute.server.init_rebuild	Initialize cloud server recreation
	compute.server.create	Create cloud server
	compute.server.update	Update information about cloud server
	compute.server.delete	Delete cloud server (soft mode)
	compute.server.add_floatingip	Add public floating IP address to cloud server
	compute.server.remove_floatingip	Disconnect public floating IP address from cloud server
	compute.server.add_fixedip	Add fixed IP address to cloud server
	compute.server.remove_fixedip	Disconnect fixed IP address from cloud server
	compute.server.add_security_group	Add security group to cloud server
	compute.server.remove_security_group	Disconnect security group from cloud server
	compute.server.set_admin_password	Change OS administrator password for cloud server
	compute.server.resize	Trigger cloud server configuration change
	compute.server.confirm_resize	Confirm cloud server configuration change
	compute.server.revert_resize	Revert cloud server configuration change
	compute.server.create_backup	Create cloud server backup
	compute.server.create_image	Create disk image of cloud server
	compute.server.lock	Lock cloud server
	compute.server.unlock	Unlock cloud server
	compute.server.pause	Pause cloud server
	compute.server.unpause	Unpause cloud server
	compute.server.reboot	Reboot cloud server
	compute.server.rebuild	Recreate cloud server
	compute.server.rescue	Start Rescue mode for cloud server
	compute.server.unrescue	Exit Rescue mode for cloud server
	compute.server.start	Turn on cloud server
	compute.server.stop	Turn off cloud server
	compute.server.get_console_output	Request console output of cloud server
	compute.server.shelve	Shelve cloud server
	compute.server.unshelve	Unshelve cloud server
	compute.server.trigger_crash_dump	Trigger crash dump of cloud server
	compute.server.create_serial_console	Create serial console of cloud server
	compute.server.create_spice_console	Create SPICE console of cloud server
	compute.server.create_vnc_console	Create VNC console of cloud server
	compute.server.create_rdp_console	Create RDP console of cloud server
	compute.server.create_console	Create console of cloud server
	compute.server.create_metadata	Create metadata for cloud server
	compute.server.update_metadata	Update metadata for cloud server
	compute.server.update_metadata_item	Update metadata property for cloud server
	compute.server.delete_metadata_item	Delete metadata property for cloud server
	compute.server.attach_interface	Create interface and connect it to cloud server
	compute.server.detach_interface	Disconnect interface from cloud server
	compute.server.clear_admin_password	Reset OS administrator password from metadata server
	compute.server.attach_volume	Connect network volume to cloud server
	compute.server.detach_volume	Disconnect network volume from cloud server
	compute.server.update_volume_attachment	Update information about network volume connection to cloud server
	compute.server.replace_all_tags	Replace tag set of cloud server
	compute.server.add_tag	Add tag to cloud server
	compute.server.delete_all_tags	Delete all tags of cloud server
	compute.server.delete_tag	Delete tag of cloud server
	compute.server.leave_server_group	Delete cloud server from placement group
Flavors	compute.flavor.create	Create flavor
	compute.flavor.delete	Delete flavor
Placement groups	compute.server_group.create	Create placement group
	compute.server_group.delete	Delete placement group
Public floating IP addresses	compute.floatingip.create	Create public floating IP address
	compute.floatingip.delete	Delete public floating IP address
Network volumes	compute.volume_attachment.create	Create network volume connection to cloud server
	compute.volume_attachment.delete	Delete network volume connection to cloud server
	compute.volume_attachment.update	Update network volume connection to cloud server
	compute.volume_attachment.complete	Mark network volume connection to cloud server as ready
	compute.volume_metadata.create	Create network volume metadata
	compute.volume_metadata.delete	Delete network volume metadata
	compute.volume_metadata.update_key	Update network volume metadata by key
	compute.volume_metadata.update	Update network volume metadata
	compute.volume.revert	Revert network volume to snapshot
	compute.volume_transfer.create	Create transfer of network volume to another project
	compute.volume_transfer.delete	Delete transfer of network volume to another project
	compute.volume_transfer.update	Confirm transfer of network volume to another project
	compute.volume.create_image	Create image from network volume
	compute.volume.create	Create network volume
	compute.volume.delete	Delete network volume
	compute.volume.read_image_metadata	Read image metadata for network volume
	compute.volume.update	Change network volume attributes (e.g., rename)
	compute.volume.attach	Connect network volume to virtual machine
	compute.volume.detach	Disconnect network volume from virtual machine
	compute.volume.extend	Increase network volume capacity
	compute.volume.reimage	Recreate network volume from image
	compute.volume.detach_abort	Change network volume status to IN-USE
	compute.volume.detach_init	Change network volume status to DETACHING
	compute.volume.attach_init	Initialize network volume connection to cloud server
	compute.volume.reserve	Reserve network volume for connection to cloud server
	compute.volume.unreserve	Release reservation of network volume for connection to cloud server
	compute.volume.update_readonly_mark	Set network volume to read-only mode or disable it
	compute.volume.update_bootable_mark	Change bootable label of network volume
	compute.volume.update_image_metadata	Add image metadata to network volume
	compute.volume.attach_terminate	Forcibly disconnect network volume from cloud server
	compute.volume.delete_image_metadata	Delete image metadata from network volume by key
Snapshots	compute.snapshot.create	Create network volume snapshot
	compute.snapshot.delete	Delete network volume snapshot
	compute.snapshot.update	Change snapshot parameters (rename)
	compute.snapshot.update_status	Change snapshot status
	compute.snapshot_metadata.delete	Delete snapshot metadata
	compute.snapshot_metadata.update_key	Update snapshot metadata by key
	compute.snapshot_metadata.create	Create snapshot metadata
	compute.snapshot_metadata.update	Update snapshot metadata
Backups	compute.backup.create	Create backup
	compute.backup.create_ondemand	Create on-demand backup (on_demand)
	compute.backup.delete	Delete backup
	compute.backup.restore	Restore from backup
	compute.backup.update	Update backup
Images	compute.image.create_metadata	Create image metadata
	compute.image.update_metadata	Update image metadata
	compute.image.update_metadata_item	Update image metadata property
	compute.image.delete_metadata_item	Delete image metadata property
	compute.image.create	Create image
	compute.image.delete	Delete image
	compute.image.update	Update image
	compute.image.upload	Upload image from file
	compute.image.deactivate	Deactivate image
	compute.image.reactivate	Reactivate image
	compute.image.import	Import image (e.g., by link)
	compute.image_member.create	Request access to image for another project
	compute.image_member.delete	Delete access to image for another project
	compute.image_member.update	Update status of image access from another project
	compute.image_tag.create	Create tag for image
	compute.image_tag.delete	Delete tag for image
	compute.image.validate_url	Validate image before import by link
	compute.image.validate_file	Validate image before upload from file
Security groups	compute.security_group.create	Create security group
	compute.security_group.update	Update security group
	compute.security_group.delete	Delete security group
	compute.security_group_rule.create	Create security group rule
	compute.security_group_rule.delete	Delete security group rule

filestorage service

Responsible for operations with file storage.

	Event name (event_type)	Description
File storage	filestorage.access_rule_metadata.update	Update file storage access rule metadata
	filestorage.access_rule_metadata.delete	Delete file storage access rule metadata
	filestorage.share_network.create	Create network connection for file storage
	filestorage.share_network.delete	Delete network for file storage
	filestorage.share_network.update	Update network for file storage
	filestorage.share_network_subnet.create	Create subnet for file storage
	filestorage.share_network_subnet.delete	Delete subnet for file storage
	filestorage.metadata.create	Add file storage metadata
	filestorage.metadata.update	Update file storage metadata
	filestorage.metadata.delete	Delete file storage metadata attribute
	filestorage.share.allow	Add access rule for file storage
	filestorage.share.deny	Delete access rule for file storage
	filestorage.share.create	Create file storage
	filestorage.share.delete	Delete file storage
	filestorage.share.update	Update file storage attributes (e.g., rename)
	filestorage.share.extend	Increase file storage capacity
	filestorage.share.reload_network	Update network settings of file storage
	filestorage.message.delete	Delete message

secrets service

Responsible for secrets in Secrets Manager. You can manage secrets via Secrets API.

	Event name (event_type)	Description
Secrets	secrets.secret.create	Create secret
	secrets.secret.update	Update secret description
	secrets.secret.get	Get secret
	secrets.secret.delete	Delete all secrets in project
	secrets.secret.delete	Delete secret
Secret versions	secrets.secret_version.get	Get secret version value
	secrets.secret_version.create	Create new secret version
	secrets.secret_version.activate	Set version as current

certificates service

Responsible for certificates in Certificates Manager. You can manage user certificates via User Certificates API, and Let’s Encrypt® certificates via Let’s Encrypt® Certificates API.

	Event name (event_type)	Description
Certificates	certificates.certificate.upload	Upload certificate
	certificates.certificate.p12.get	Get key pair
	certificates.certificate.private_key.get	Get private key
	certificates.certificate.ca_chain.get	Get CA bundle certificate chain
	certificates.certificate.delete	Delete certificate
	certificates.certificate_name.update	Update certificate
	certificates.le_certificate.issue	Issue Let’s Encrypt® certificate
	certificates.le_certificate.delete	Delete Let’s Encrypt® certificate

logs service

Responsible for operations in logs.

	Event name (event_type)	Description
Logs	logs.group.create	Create log group
	logs.group.delete	Delete log group
	logs.stream.create	Create event stream
	logs.stream.delete	Delete event stream

audit_logs service

Responsible for operations with audit logs.

	Event name (event_type)	Description
Audit logs	audit_logs.log.download	Export audit logs

domains service

Responsible for operations with domains.

	Event name (event_type)	Description
Domain	domains.domain.create	Create domain
	domains.domain.update	Update domain (e.g., project, hosts, contacts)
	domains.domain.delete	Delete domain
	domains.domain.autoextend	Automatic registration renewal
	domains.domain_authinfo.create	Generate new authorization code (authInfo)
	domains.domain.extend	Renew domain for a year
	domains.domain_transfer.request	Initiate domain transfer from another registrar
	domains.domain_transfer.approve	Confirm domain transfer to Selectel
	domains.contact_change.request	Request domain ownership change (within Selectel)
	domains.contact_change.approve	Confirm domain ownership change
	domains.contact_change.cancel	Cancel domain ownership change request
	domains.domain_hosts.update	Update DNS host list for domain
Domain administrator	domains.contact.create	Create new contact person
	domains.contact.update	Update contact information (email, phone)
	domains.contact.admin_update	Update contact via technical support
	domains.contact.delete	Delete contact person

dns service

Responsible for operations with DNS hosting.

	Event name (event_type)	Description
Domain zone	dns.zone.create	Create domain zone
	dns.zone.update	Update domain zone
	dns.zone.delete	Delete domain zone
	dns.zone_owner.update	Change project for domain zone
	dns.zone.protection	Enable or disable domain zone deletion protection
	dns.zone.activation	Activate domain zone
Resource record group	dns.rrset.create	Create resource record group
	dns.rrset.update	Update resource record group
	dns.rrset.delete	Delete resource record group
	dns.rrset.managed	Administer resource record group via external service

global_router service

Responsible for operations with global router.

	Event name (event_type)	Description
Global router	global_router.router.create	Create router
	global_router.router.update	Update router
	global_router.router.delete_init	Initialize router deletion
	global_router.router.delete	Delete router
	global_router.network.create	Create global router network
	global_router.network.update	Update global router network
	global_router.network.delete_init	Initialize global router network deletion
	global_router.network.delete	Delete global router network
	global_router.subnet.create	Create global router subnet
	global_router.subnet.update	Update global router subnet
	global_router.subnet.delete_init	Initialize global router subnet deletion
	global_router.subnet.delete	Delete global router subnet
	global_router.static_route.create	Create global router route
	global_router.static_route.update	Update global router route
	global_router.static_route.delete_init	Initialize global router route deletion
	global_router.static_route.delete	Delete global router route

mks service

Responsible for operations with clusters, node groups, and nodes in Managed Kubernetes.

	Event name (event_type)	Description
Cluster	mks.cluster.init_create	Create cluster (event start)
	mks.cluster.create	Create cluster (event finish)
	mks.cluster.init_delete	Delete cluster (event start)
	mks.cluster.delete	Delete cluster (event finish)
	mks.cluster.init_update	Update cluster (event start)
	mks.cluster.update	Update cluster (event finish)
	mks.cluster.init_upgrade_minor	Update minor version of cluster (event start)
	mks.cluster.upgrade_minor	Update minor version of cluster (event finish)
	mks.cluster.init_upgrade_patch	Update patch version of cluster (event start)
	mks.cluster.upgrade_patch	Update patch version of cluster (event finish)
	mks.cluster_certs.init_rotate	Rotate cluster certificates (event start)
	mks.cluster_certs.rotate	Rotate cluster certificates (event finish)
Node group	mks.cluster_nodegroup.init_create	Create node group (event start)
	mks.cluster_nodegroup.create	Create node group (event finish)
	mks.cluster_nodegroup.init_delete	Delete node group (event start)
	mks.cluster_nodegroup.delete	Delete node group (event finish)
	mks.cluster_nodegroup.init_update	Update node group (event start)
	mks.cluster_nodegroup.update	Update node group (event finish)
	mks.cluster_nodegroup.init_resize	Resize node group (event start)
	mks.cluster_nodegroup.resize	Resize node group (event finish)
	mks.cluster_nodegroup.update_autoscale	Change Autoscaler parameters for node group
Node	mks.cluster_nodegroup_node.init_delete	Delete node (event start)
	mks.cluster_nodegroup_node.delete	Delete node (event finish)
	mks.cluster_nodegroup_node.init_reinstall	Reinstall node (event start)
	mks.cluster_nodegroup_node.reinstall	Reinstall node (event finish)
Integration of Managed Kubernetes with Container Registry	mks.cluster_registries_integration.init_create	Create cluster integration (event start)
	mks.cluster_registries_integration.create	Create cluster integration (event finish)
	mks.cluster_registries_integration.init_delete_all	Delete all cluster integrations (event start)
	mks.cluster_registries_integration.delete_all	Delete all cluster integrations (event finish)
	mks.cluster_registries_integration.init_delete	Delete one cluster integration (event start)
	mks.cluster_registries_integration.delete	Delete one cluster integration (event finish)
	mks.cluster_registries_integration.init_update	Update cluster integration (event start)
	mks.cluster_registries_integration.update	Update cluster integration (event finish)
Envoy Gateway application	mks.cluster_addon_envoy_gateway.init_create	Install Envoy Gateway cluster application (event start)
	mks.cluster_addon_envoy_gateway.create	Install Envoy Gateway cluster application (event finish)
	mks.cluster_addon_envoy_gateway.init_delete	Delete Envoy Gateway cluster application (event start)
	mks.cluster_addon_envoy_gateway.delete	Delete Envoy Gateway cluster application (event finish)
NGINX Ingress Controller application	mks.cluster_addon_ingress_nginx.init_delete	Delete NGINX Ingress Controller application (event start)
	mks.cluster_addon_ingress_nginx.delete	Delete NGINX Ingress Controller application (event finish)

s3 service

Responsible for operations with S3. You can manage S3 via Object Storage API, S3 API, and Swift API.

	Event name (event_type)	Description
Buckets	s3.bucket.create	Create bucket
	s3.bucket.delete	Delete bucket
	s3.bucket_meta.update	Update bucket metadata
	s3.bucket_expiring.update	Update Default-Delete-After header
	s3.bucket_limits.update	Update bucket limits
	s3.bucket_publicity.enable	Change bucket type to public
	s3.bucket_publicity.disable	Change bucket type to private
	s3.bucket_versioning.enable	Enable bucket versioning
	s3.bucket_versioning.suspend	Suspend bucket versioning
	s3.bucket_cors.set	Apply bucket CORS rules
	s3.bucket_cors.delete	Delete bucket CORS rules
	s3.bucket_custom_domain.add	Add custom domain
	s3.bucket_custom_domain.delete	Delete custom domain
	s3.bucket_website.update	Configure bucket website
	s3.bucket_policy.set	Create access policy
	s3.bucket_policy.delete	Delete access policy
	s3.bucket_cache_control.set	Add Cache-Сontrol header
	s3.bucket_cache_control.delete	Delete Cache-Сontrol header
	s3.bucket_addressing.update	Change bucket addressing from Path-Style to vHosted
	s3.bucket_object_lock.enable	Enable Object Lock in bucket
	s3.bucket_object_lock.update	Change default temporary lock configuration in bucket
TLS (SSL) certificates	s3.certificate.upload	Upload certificate
	s3.certificate.update	Update certificate
	s3.certificate.delete	Delete certificate
Public bucket domains	s3.public_domain.create	Create domain
	s3.public_domain.delete	Delete domain
	s3.public_domain.bind	Bind domain to bucket
	s3.public_domain.unbind	Unbind domain from bucket
Clear cache	s3.cache.flush	Cache flush request
Logs	s3.logs.dump	Creating storage log dump
	s3.logs.cancel	Canceling storage log dump creation

DBaaS service

Responsible for operations with Managed Databases.

	Event name (event_type)	Description
Cluster	dbaas.cluster.create	Creating a cluster
	dbaas.cluster.update	Updating a cluster
	dbaas.cluster.delete	Deleting a cluster
	dbaas.cluster.resize	Scaling a cluster
	dbaas.cluster_readonly_mode.enable	Setting read-only mode
	dbaas.cluster_readwrite_mode.enable	Setting read-write mode
	dbaas.cluster.lock	Locking a cluster
	dbaas.cluster.unlock	Unlocking a cluster
Backups	dbaas.cluster_backup.update	Updating backup settings
DBMS settings	dbaas.cluster_config.update	Updating DBMS settings
Database	dbaas.cluster_database.create	Creating a database
	dbaas.cluster_database.update	Updating a database
	dbaas.cluster_database.delete	Deleting a database
Connection pooler	dbaas.cluster_pooler.update	Updating connection pooler
Prometheus token	dbaas.prometheus_token.create	Creating a token
	dbaas.prometheus_token.update	Updating a token
	dbaas.prometheus_token.delete	Deleting a token
Node group	dbaas.cluster_node_group.create	Creating a node group
	dbaas.cluster_node_group.update	Updating a node group
	dbaas.cluster_node_group.delete	Deleting a node group
	dbaas.cluster_node_group.resize	Scaling a node group
Public floating IP address	dbaas.cluster_floating_ip.create	Creating an IP address
	dbaas.cluster_floating_ip.delete	Deleting an IP address
Allowlist of IP addresses	dbaas.cluster_firewall_rule.update	Updating allowlist of IP addresses
Kafka topic	dbaas.cluster_database_topic.create	Creating a topic
	dbaas.cluster_database_topic.update	Updating a topic
	dbaas.cluster_database_topic.delete	Deleting a topic
User	dbaas.cluster_database_user.create	Creating a user
	dbaas.cluster_database_user.update	Updating a user
	dbaas.cluster_database_user.delete	Deleting a user
	dbaas.cluster_database_user_password.update	Changing user password
User permissions	dbaas.cluster_database_permission.create	Creating a permission
	dbaas.cluster_database_permission.delete	Deleting a permission
Access Control Lists (ACLs)	dbaas.cluster_acl.create	Creating an Access Control List
	dbaas.cluster_acl.update	Updating an Access Control List
	dbaas.cluster_acl.delete	Deleting an Access Control List
Security groups	dbaas.cluster_security_group.update	Updating security groups
Logical replication slot	dbaas.cluster_database_logical_replication_slot.create	Creating a logical replication slot
	dbaas.cluster_database_logical_replication_slot.delete	Deleting a logical replication slot
Extension	dbaas.cluster_database_extension.create	Adding an extension
	dbaas.cluster_database_extension.delete	Deleting an extension
Logs	dbaas.cluster_log_platform.enable	Enabling logging
	dbaas.cluster_log_platform.disable	Disabling logging

SES service

Responsible for operations with Email Service. You can manage the email service via Email Service API.

	Event name (event_type)	Description
Resources	ses.resource.create	Creating a resource
	ses.resource.transfer	Transferring a resource
	ses.resource.delete	Deleting a resource
	ses.resource_name.update	Updating a resource name
	ses.resource_password.update	Updating a resource password
	ses.resource_quota.update	Updating resource quotas
Domains	ses.resource_domain.create	Creating a domain
	ses.resource_domain.delete	Deleting a domain
Stop lists	ses.resource_stop_list_email.add	Adding an entry to a stop list
	ses.resource_stop_list_email.delete	Deleting an entry from a stop list
Projects	ses.project_quota.update	Updating project resource quotas
	ses.project.delete	Deleting all resources in a project
	ses.project.cleanup	Automatic deletion of all resources in a project when a user is deleted or an account is blocked