Audit log events
In audit logs, an event is a record of a create, update, or delete operation on resources and entities. Reading sensitive data, such as passwords, certificates, etc., is also recorded in audit logs.
An event has a fixed structure and can be of different types.
Event structure
An event has a JSON structure:
[
{
"event_saved_time": "2025-09-29T13:13:25.196Z",
"event_id": "string",
"event_type": "string",
"event_time": "2025-09-29T13:13:25.196Z",
"status": "string",
"error_code": "string",
"request_id": "string",
"subject": {
"id": "string",
"type": "string",
"name": "string",
"auth_provider": "string",
"is_authorized": true,
"authorized_by": [
"string"
],
"credentials_fingerprint": "string"
},
"resource": {
"id": "string",
"type": "string",
"name": "string",
"account_id": "string",
"project_id": "string",
"location": "string",
"details": {},
"old_values": {
"additionalProp1": {}
},
"new_values": {
"additionalProp1": {}
}
},
"source_type": "string",
"request": {
"remote_address": "string",
"user_agent": "string",
"type": "string",
"path": "string",
"method": "string",
"parameters": "string"
},
"schema_version": "string"
}
]
Some fields are optional and may be absent from an event. Also, some fields have reserved values.
Event fields
| Field | Description | Data type | Required | |
|---|---|---|---|---|
event_id | Unique event identifier | String | ✓ | |
event_type | Event type; for the full list, see the Event types subsection | String | ✓ | |
event_time | Time the event occurred in ISO8601 format with timezone | String | ✓ | |
event_saved_time | Time the event was saved in audit logs in ISO8601 format with timezone | String | ✓ | |
status | Event status. Possible values:
| String | ✓ | |
error_code | Error code | String | ✗ | |
request_id | Unique event chain identifier or request identifier | String | ✓ | |
subject | Information about the subject—a service or user that performed the operation | Object | ✓ | |
id | Unique identifier of the action subject. Example formats:
| String | ✓ | |
type | Subject type. Possible values:
| String | ✓ | |
name | Subject name | String | ✗ | |
auth_provider | Subject authentication provider. Possible values:
| String | ✗ | |
is_authorized | Authorization result | Boolean | ✓ | |
authorized_by | List of roles and other authorization attributes used to authorize the request | Array of strings | ✗ | |
credentials_fingerprint | Fingerprint of the secret used to authorize the request | String | ✗ | |
resource | Action object; the entity on which the subject performed the operation. An object can be a resource (server, disk), user, role, account, etc. | Object | ✓ | |
id | Unique object identifier | String | ✓ | |
type | Object type | String | ✓ | |
name | Object name | String | ✗ | |
account_id | Account identifier | String | ✓ | |
project_id | Project identifier | String | ✗ | |
location | Data center, availability zone, or pool where the subject is located | String | ✗ | |
details | Event details. Defined by the source service and event type | Object | ✗ | |
changes | Changes that occurred to the subject | Object | ✗ | |
changes_old_values | Set of old subject attribute values | Object | ✗ | |
changes_new_values | Set of new subject attribute values | Object | ✓ | |
source | Service that recorded the change | Object | ✓ | |
type | Name of the product, service, or feature where the event occurred | String | ✓ | |
request | Request information | Object | ✓ | |
remote_address | IP address the request came from | String | ✗ | |
user_agent | User Agent of the event subject | String | ✗ | |
type | Request type. Possible values:
| String | ✓ | |
path | Path to the resource where the event occurred | String | ✗ | |
method | Request method | String | ✗ | |
parameters | Query parameters | String | ✗ | |
schema_version | Fixed value — 1.0 | String | ✓ | |
Reserved values
If a field value cannot be determined by the log source services — for example, if an error occurred during the action or the object has not yet been created and there is no resource_id — the reserved value undefined is used.
It can appear in the following fields:
subject_id;subject_type;resource_id;resource_type;resource_account_id.
Event types (event_type)
In audit logs, event types are grouped by services that are responsible for different parts of the products. You can use services to filter events when exporting logs.
The list of products that support audit logs, services, and event types will be expanded.
| Product or management area | Services |
|---|---|
| Account, users, projects, and permissions | iam |
| Billing, payment information | legal billing |
| Dedicated servers, Colocation, basic firewall, storage systems | dedicated |
| Cloud platform | vpc quota_management compute filestorage |
| Secrets manager | secrets |
| Certificate manager | certificates |
| Logs | logs |
| Audit logs | audit_logs |
| Domains | domains |
| DNS Hosting | dns |
| Global Router | global_router |
| Managed Kubernetes | mks |
| S3 | s3 |
| Managed databases | dbaas |
| Email service | SES |
IAM service
Responsible for operations in the account, with users, projects, and access rights. Some of these (for example, users and their keys) can be managed via IAM API.
| Event name (event_type) | Description | |
|---|---|---|
| Account | iam.account.init_action | Subject authentication when performing an operation in the service billing. Combined with the main operation event via the request_id field |
| iam.account.email_confirmation | Email address confirmation during account registration | |
| iam.account.phone_confirmation | Phone number confirmation during account registration | |
| iam.account.fill | Entering account data | |
| iam.account.delete | Account deletion | |
| iam.account.update | Changing account data | |
| Sign in to account | iam.user.login | User sign in to account |
| iam.user_password.check | Entering password by a user | |
| iam.user.logout | User sign out from account | |
| iam.user_2fa_code.verify | Attempt to sign in using 2FA | |
| iam.user_session.reset_all_other | Resetting all sessions except the current one | |
| iam.user_session.reset_all_within_browser | Signing out from all accounts signed in within the browser | |
| iam.user_session.reset_all | Forced session termination by the system | |
| Password | iam.user_password.reset_request | Requesting an email with a password reset link |
| iam.user_password.reset_apply | Password reset creating a new password | |
| iam.user_password.update | Change password | |
| Two-factor authentication | iam.user_2fa.enable | Enabling two-factor authentication |
| iam.user_2fa.disable | Disabling two-factor authentication | |
| iam.user_2fa_code.send | Requesting a two-factor authentication code | |
| iam.user_2fa_backup_codes.create | Creating backup codes | |
| iam.user_2fa_otp.enable | Enabling sign-in via an authenticator app | |
| iam.user_2fa_email.enable | Enabling sign-in via email | |
| iam.user_2fa_sms.enable | Enabling sign-in via SMS | |
| iam.user_2fa_backup_codes.enable | Enabling sign-in using backup codes and their creation | |
| iam.user_2fa_otp.disable | Disabling sign-in via an authenticator app | |
| iam.user_2fa_email.disable | Disabling sign-in via email | |
| iam.user_2fa_sms.disable | Disabling sign-in via SMS | |
| Changing contact information | iam.user_email.change_init | Change email address request |
| iam.user_email.change_unlocked | Confirmation of email address change | |
| iam.user_email.update | Email address successfully changed | |
| iam.user_phone.change_init | Change phone number request | |
| iam.user_phone.change_unlocked | Confirmation of phone number change | |
| iam.user_phone.update | Phone number successfully changed | |
| Users | iam.user_profile.create | Creating a new user profile |
| iam.user.email_confirmation | Registering a new user via the link from an invitation email | |
| iam.federated_user_profile.create iam.federated_user.create * | Creating a federated user profile | |
| iam.user.phone_confirmation | Confirming the phone number during new user registration | |
| iam.user_profile.fill | Filling in user profile details | |
| iam.user_profile.update | Updating user profile details | |
| iam.federated_user_profile.update | Updating federated user profile details | |
| iam.user_profile.delete | Deleting a user profile | |
| iam.federated_user_profile.delete | Deleting a federated user profile | |
| iam.user_subscription.add | Adding a notification category to a user | |
| iam.user_subscription.delete | Removing a notification category from a user | |
| iam.user.create | Creating a user | |
| iam.user.delete | Deleting a user | |
| iam.user_role.add | Assigning roles to a user | |
| iam.user_role.remove | Removing roles from a user | |
| iam.user_group.add | Assigning groups to a user | |
| iam.user_group.remove | Removing groups from a user | |
| Service users | iam.service_user.create | Creating a service user |
| iam.service_user.update | Updating a service user | |
| iam.service_user.delete | Deleting a service user | |
| iam.service_user_role.add | Assigning roles to a service user | |
| iam.service_user_role.remove | Removing roles from a service user | |
| iam.service_user_group.add | Assigning groups to a service user | |
| iam.service_user_group.remove | Removing groups from a service user | |
| User group | iam.group.create | Creating a user group |
| iam.group.update | Updating a user group | |
| iam.group.delete | Deleting a user group | |
| iam.group_user.add | Adding users to a group | |
| iam.group_user.remove | Removing users from a group | |
| iam.group_role.add | Assigning roles to a user group | |
| iam.group_role.remove | Removing roles from a user group | |
| Federations | iam.federation.create | Creating a federation |
| iam.federation.update | Modifying a federation | |
| iam.federation.delete | Deleting a federation | |
| iam.federation_cert.create | Creating a federation certificate | |
| iam.federation_cert.update | Updating a federation certificate | |
| iam.federation_cert.delete | Deleting a federation certificate | |
| iam.federation_group_mapping.create | Creating a mapping between a Selectel user group and an identity provider group | |
| iam.federation_group_mapping.update | Replacing all user group mappings for a federation with mappings to other identity provider groups | |
| iam.federation_group_mapping.delete | Deleting a mapping between a Selectel user group and an identity provider group | |
| Projects | iam.project.create | Creating a project |
| iam.project.update | Updating a project | |
| iam.project_domain.detach | Removing a project domain | |
| iam.project.delete | Deleting a project | |
| IAM tokens | iam.auth_token.issue | Issuing an IAM token |
| iam.auth_token.revoke | Revoking an IAM token | |
| S3 keys | iam.user_credential.add | Creating an S3 key for a user |
| iam.user_credential.remove | Removing an S3 key from a user | |
| iam.service_user_credential.add | Creating an S3 key for a service user | |
| iam.service_user_credential.remove | Removing an S3 key from a service user | |
| Static tokens | iam.api_key.create | Creating a static token |
| iam.api_key.update | Updating a static token | |
| iam.api_key.enable | Activating a static token | |
| iam.api_key.disable | Deactivating a static token | |
| iam.api_key.delete | Deleting a static token | |
| ACL | iam.acl.enable | Enabling ACL |
| iam.acl.disable | Disabling ACL | |
| iam.acl_ip.create | Creating an ACL rule | |
| iam.acl_ip.delete | Deleting an ACL rule |
* This event is deprecated and will soon no longer be recorded in audit logs.
Legal service
Responsible for contract-related operations with the customer—the payer.
| Event name (event_type) | Description | |
|---|---|---|
| Customer under contract | legal.payer.create | Creating a customer |
| legal.payer.update | Updating customer details | |
| legal.payer.reorganisation | Reorganizing a customer company |
Billing service
Responsible for operations occurring with resources during payment deferment, non-payment, or debt repayment.
In events of the billing service, detailed information about the subject is provided in a paired authentication event. In it, events with the type iam.account.init_action are linked to the main event via the request_id field.
| Event name (event_type) | Description | |
|---|---|---|
| Cloud platform financial signals | billing.block_signal.apply | Resource blocking |
| billing.unblock_signal.apply | Resource unblocking | |
| billing.restrict_signal.apply | Restricting access to a resource | |
| billing.unrestrict_signal.apply | Removing access restrictions from a resource | |
| billing.delete_signal.apply | Deleting a resource | |
| Payment deferment | billing.soft_grace_policy.enable | Enabling payment deferment |
| billing.soft_grace_policy.disable | Disabling payment deferment | |
| billing.soft_grace_signal.apply | Activating payment deferment | |
| billing.unsoft_grace_signal.apply | Completing an active payment deferment |
Dedicated service
Responsible for operations:
You can manage servers and equipment via the Dedicated Servers API.
| Event name (event_type) | Description | |
|---|---|---|
| Dedicated server | dedicated.server.create | Ordering a dedicated server |
| dedicated.server.update | Modifying a dedicated server | |
| dedicated.server.delete | Deleting a dedicated server | |
| dedicated.server.power_on | Powering on a dedicated server | |
| dedicated.server.power_off | Powering off a dedicated server | |
| dedicated.server.reboot | Rebooting a dedicated server | |
| dedicated.server.os_reinstall | Reinstalling the OS on a dedicated server | |
| dedicated.server.password_show | Viewing the dedicated server password | |
| dedicated.server.console_open | Opening the dedicated server console | |
| dedicated.server.upgrade_create | Creating a dedicated server upgrade | |
| dedicated.server.upgrade_cancel | Canceling a dedicated server upgrade | |
| Additional services | dedicated.additional_resource.create | Ordering an additional service |
| dedicated.additional_resource.update | Modifying an additional service | |
| dedicated.additional_resource.delete | Deleting an additional service | |
| Colocation | dedicated.colocation.create | Ordering colocation |
| dedicated.colocation.update | Modifying colocation | |
| dedicated.colocation.delete | Deleting colocation | |
| Firewall | dedicated.firewall.create | Ordering a firewall |
| dedicated.firewall.update | Modifying a firewall | |
| dedicated.firewall.delete | Deleting a firewall | |
| Network equipment | dedicated.network_equipment.create | Ordering network equipment |
| dedicated.network_equipment.update | Modifying network equipment | |
| dedicated.network_equipment.delete | Deleting network equipment | |
| Equipment (data storage systems) | dedicated.equipment.create | Ordering equipment |
| dedicated.equipment.update | Modifying equipment | |
| dedicated.equipment.delete | Deleting equipment | |
| Network service | dedicated.network.create | Ordering a network service |
| dedicated.network.update | Modifying a network service | |
| dedicated.network.delete | Deleting a network service | |
| Port service | dedicated.port.create | Ordering a port service |
| dedicated.port.update | Modifying a port service | |
| dedicated.port.delete | Deleting a network service | |
| Software | dedicated.software.create | Ordering software |
| dedicated.software.update | Modifying software | |
| dedicated.software.delete | Deleting software | |
| Tags | dedicated.tag.create | Ordering software |
| dedicated.tag.update | Modifying software | |
| dedicated.tag.delete | Deleting software | |
| Basic firewall | dedicated.basic_firewall.create | Creating a basic firewall |
| dedicated.basic_firewall.update | Modifying a basic firewall | |
| dedicated.basic_firewall.delete | Deleting a basic firewall | |
| Public subnetwork | dedicated.public_subnet.create | Creating a public subnetwork |
| dedicated.public_subnet.update | Modifying a public subnetwork | |
| dedicated.public_subnet.delete | Deleting a public subnetwork | |
| Private subnetwork | dedicated.private_subnet.create | Creating a private subnetwork |
| dedicated.private_subnet.update | Modifying a private subnetwork | |
| dedicated.private_subnet.delete | Deleting a private subnetwork | |
| Public VLAN | dedicated.public_vlan.create | Creating a public VLAN |
| dedicated.public_vlan.update | Modifying a public VLAN | |
| dedicated.public_vlan.delete | Deleting a public VLAN | |
| Private VLAN | dedicated.private_vlan.create | Creating a private VLAN |
| dedicated.private_vlan.update | Modifying a private VLAN | |
| dedicated.private_vlan.delete | Deleting a private VLAN | |
| SSH keys | dedicated.ssh_key.create | Creating an SSH key |
| dedicated.ssh_key.update | Modifying an SSH key | |
| dedicated.ssh_key.delete | Deleting an SSH key | |
| IPMI monitoring | dedicated.monitoring.create | Creating monitoring |
| dedicated.monitoring.delete | Deleting monitoring | |
| Client images | dedicated.custom_os_image.create | Create client image |
| dedicated.custom_os_image.update | Update client image | |
| dedicated.custom_os_image.delete | Delete client image | |
| Network drives | dedicated.blockstorage_disk.create | Create a network drive |
| dedicated.blockstorage_disk.update | Edit a network drive | |
| dedicated.blockstorage_disk.delete | Delete a network drive | |
| SAN network | dedicated.blockstorage_san_network.create | Create a SAN network |
| dedicated.blockstorage_san_network.update | Edit a SAN network | |
| dedicated.blockstorage_san_network.delete | Delete a SAN network |
vpc service
Responsible for operations with Cloud Platform networks, cloud firewalls, private DNS, security groups, cloud load balancers.
| Event name (event_type) | Description | |
|---|---|---|
| Private networks | vpc.network.create | Create a private network |
| vpc.network.update | Edit a private network | |
| vpc.network.delete | Delete a private network | |
| Private subnets | vpc.subnet.create | Create a private subnet |
| vpc.subnet.update | Edit private subnet | |
| vpc.subnet.delete | Delete private subnet | |
| Public subnets | vpc.subnet.create | Create public subnet |
| vpc.subnet.bulk_create | Add public subnet to project | |
| vpc.subnet.update | Edit public subnet | |
| vpc.subnet.delete | Delete public subnet | |
| vpc.subnet.init_delete | Delete public subnet from project | |
| Subnet pools | vpc.subnet_pool.create | Create subnet pool |
| vpc.subnet_pool.update | Edit subnet pool | |
| vpc.subnet_pool.delete | Delete subnet pool | |
| Address scopes | vpc.address_scope.create | Create address scope |
| vpc.address_scope.update | Edit address scope | |
| vpc.address_scope.delete | Delete address scope | |
| Address groups | vpc.address_group.create | Create address group |
| vpc.address_group.update | Edit address group | |
| vpc.address_group.delete | Delete address group | |
| Public floating IP addresses | vpc.floatingip.create | Create public floating IP address |
| vpc.floatingip.bulk_create | Add public floating IP address to project | |
| vpc.floatingip.update | Edit public floating IP address, including attaching to or detaching from port | |
| vpc.floatingip_port_forwarding.create | Create port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip_port_forwarding.update | Edit port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip_port_forwarding.delete | Delete port forwarding (1:1 NAT via cloud router) | |
| vpc.floatingip.init_delete | Delete public floating IP address from project | |
| vpc.floatingip.delete | Delete public floating IP address | |
| Direct public IP addresses | vpc.public_port.create | Create direct public IP address |
| vpc.public_port.update | Update direct public IP address | |
| vpc.public_port.delete | Delete direct public IP address | |
| Ports | vpc.port.create | Create port |
| vpc.port.update | Edit port | |
| vpc.port.delete | Delete port | |
| Cloud routers | vpc.router.create | Create cloud router |
| vpc.router.update | Edit cloud router | |
| vpc.router.delete | Delete cloud router | |
| vpc.router.add_interface | Attach subnet to router | |
| vpc.router.remove_interface | Detach subnet from router | |
| Security groups | vpc.security_group.create | Create security group |
| vpc.security_group.update | Edit security group | |
| vpc.security_group.delete | Delete security group | |
| vpc.security_group_rule.create | Create security group rule | |
| vpc.security_group_rule.delete | Delete security group rule | |
| Resource access policies | vpc.rbac_policy.create | Create access policy |
| vpc.rbac_policy.update | Edit access policy | |
| vpc.rbac_policy.delete | Delete access policy | |
| Cloud firewalls | vpc.firewall.create | Create firewall |
| vpc.firewall.update | Edit firewall | |
| vpc.firewall.delete | Delete firewall | |
| vpc.firewall_rule.create | Create firewall rule | |
| vpc.firewall_rule.update | Edit firewall rule | |
| vpc.firewall_rule.delete | Delete firewall rule | |
| vpc.firewall_policy.create | Create firewall policy | |
| vpc.firewall_policy.update | Edit firewall policy | |
| vpc.firewall_policy.delete | Delete firewall policy | |
| Private DNS | vpc.private_dns_zone.create | Create zone |
| vpc.private_dns_zone.update | Update zone | |
| vpc.private_dns_zone.delete | Delete zone | |
| vpc.private_dns_zone.update_recordset | Edit zone records | |
| vpc.private_dns_service.create | Connect network to private DNS resolver | |
| vpc.private_dns_service.delete | Disconnect network from private DNS resolver | |
| vpc.private_dns_service.update | Edit network connection settings to private DNS resolver | |
| vpc.private_dns_service.update_network | Reconfigure private DNS resolver ports | |
| Load balancer | vpc.load_balancer.create | Create load balancer |
| vpc.load_balancer.update | Edit load balancer | |
| vpc.load_balancer.delete | Delete load balancer | |
| vpc.load_balancer.failover | Initiate load balancer recreation | |
| vpc.load_balancer_log_offloading.enable | Enable load balancer log offloading task | |
| vpc.load_balancer_log_offloading.disable | Disable load balancer log offloading task | |
| vpc.load_balancer_pool_member.create | Add server to load balancer pool | |
| vpc.load_balancer_pool_member.update | Edit server in load balancer pool | |
| vpc.load_balancer_pool_member.delete | Delete server from load balancer pool | |
| vpc.load_balancer_pool.create | Create load balancer pool | |
| vpc.load_balancer_pool.update | Edit load balancer pool | |
| vpc.load_balancer_pool.delete | Delete load balancer pool | |
| vpc.load_balancer_listener.create | Create load balancer rule | |
| vpc.load_balancer_listener.update | Edit load balancer rule | |
| vpc.load_balancer_listener.delete | Delete load balancer rule | |
| vpc.load_balancer_l7_policy.create | Create load balancer HTTP policy | |
| vpc.load_balancer_l7_policy.update | Edit load balancer HTTP policy | |
| vpc.load_balancer_l7_policy.delete | Delete load balancer HTTP policy | |
| vpc.load_balancer_l7_policy_rule.create | Create load balancer L7 rule | |
| vpc.load_balancer_l7_policy_rule.update | Edit load balancer L7 rule | |
| vpc.load_balancer_l7_policy_rule.delete | Delete load balancer L7 rule | |
| vpc.load_balancer_healthmonitor.create | Create load balancer health check | |
| vpc.load_balancer_healthmonitor.update | Edit load balancer health check | |
| vpc.load_balancer_healthmonitor.delete | Delete load balancer health check | |
| vpc.load_balancer_amphorae.delete | Delete load balancer instance | |
| vpc.load_balancer_amphorae.failover | Initiate load balancer instance recreation |
quota_manager service
Responsible for operations with project quotas. You can manage quotas via the Quota Management API.
| Event name (event_type) | Description | |
|---|---|---|
| Quotas | quota_manager.project.update | Update quotas |
compute service
Responsible for operations with licenses, cloud servers, network volumes, volume snapshots, network volume backups, and images of cloud servers.
You can manage licenses via the Cloud Platform Projects and Resources API.
| Event name (event_type) | Description | |
|---|---|---|
| SSH keys (keypairs) | compute.keypair.bulk_create | Create key pair (bulk operation) |
| compute.keypair.bulk_delete | Delete key pair (bulk operation) | |
| compute.keypair.create | Create or import key pair | |
| compute.keypair.delete | Delete key pair | |
| Licenses | compute.license.bulk_create | Create license (bulk operation) |
| compute.license.delete | Delete license | |
| Cloud servers | compute.server.init_delete | Initiate cloud server deletion |
| compute.server.init_rebuild | Initiate cloud server rebuild | |
| compute.server.create | Create cloud server | |
| compute.server.update | Update cloud server details | |
| compute.server.delete | Delete cloud server (soft delete) | |
| compute.server.add_floatingip | Attach public floating IP address to cloud server | |
| compute.server.remove_floatingip | Detach public floating IP address from cloud server | |
| compute.server.add_fixedip | Add fixed IP address to cloud server | |
| compute.server.remove_fixedip | Detach fixed IP address from cloud server | |
| compute.server.add_security_group | Add security group to cloud server | |
| compute.server.remove_security_group | Detach security group from cloud server | |
| compute.server.set_admin_password | Change cloud server OS administrator password | |
| compute.server.resize | Initiate cloud server configuration resize | |
| compute.server.confirm_resize | Confirm cloud server configuration resize | |
| compute.server.revert_resize | Revert cloud server configuration resize | |
| compute.server.create_backup | Create cloud server backup | |
| compute.server.create_image | Create cloud server disk image | |
| compute.server.lock | Lock cloud server | |
| compute.server.unlock | Unlock cloud server | |
| compute.server.pause | Pause cloud server | |
| compute.server.unpause | Unpause cloud server | |
| compute.server.reboot | Reboot cloud server | |
| compute.server.rebuild | Rebuild cloud server | |
| compute.server.rescue | Initiate Rescue mode for cloud server | |
| compute.server.unrescue | Exit Rescue mode for cloud server | |
| compute.server.start | Start cloud server | |
| compute.server.stop | Stop cloud server | |
| compute.server.get_console_output | Get cloud server console output | |
| compute.server.shelve | Shelve cloud server | |
| compute.server.unshelve | Unshelve cloud server | |
| compute.server.trigger_crash_dump | Trigger cloud server crash dump | |
| compute.server.create_serial_console | Create cloud server serial console | |
| compute.server.create_spice_console | Create cloud server SPICE console | |
| compute.server.create_vnc_console | Create cloud server VNC console | |
| compute.server.create_rdp_console | Create cloud server RDP console | |
| compute.server.create_console | Create cloud server console | |
| compute.server.create_metadata | Create cloud server metadata | |
| compute.server.update_metadata | Update cloud server metadata | |
| compute.server.update_metadata_item | Update cloud server metadata item | |
| compute.server.delete_metadata_item | Delete cloud server metadata item | |
| compute.server.attach_interface | Create interface and attach it to cloud server | |
| compute.server.detach_interface | Detach interface from cloud server | |
| compute.server.clear_admin_password | Reset OS administrator password from metadata server | |
| compute.server.attach_volume | Attach network volume to cloud server | |
| compute.server.detach_volume | Detach network volume from cloud server | |
| compute.server.update_volume_attachment | Update volume attachment details for cloud server | |
| compute.server.replace_all_tags | Replace cloud server tags | |
| compute.server.add_tag | Add tag to cloud server | |
| compute.server.delete_all_tags | Delete all cloud server tags | |
| compute.server.delete_tag | Delete cloud server tag | |
| compute.server.leave_server_group | Remove cloud server from server group | |
| Flavors | compute.flavor.create | Create flavor |
| compute.flavor.delete | Delete flavor | |
| Server groups | compute.server_group.create | Create server group |
| compute.server_group.delete | Delete server group | |
| Public floating IP addresses | compute.floatingip.create | Create public floating IP address |
| compute.floatingip.delete | Delete public floating IP address | |
| Network volumes | compute.volume_attachment.create | Create volume attachment to cloud server |
| compute.volume_attachment.delete | Delete volume attachment from cloud server | |
| compute.volume_attachment.update | Update volume attachment to cloud server | |
| compute.volume_attachment.complete | Mark volume attachment to cloud server as completed | |
| compute.volume_metadata.create | Create volume metadata | |
| compute.volume_metadata.delete | Delete volume metadata | |
| compute.volume_metadata.update_key | Update volume metadata by key | |
| compute.volume_metadata.update | Update volume metadata | |
| compute.volume.revert | Revert volume to snapshot | |
| compute.volume_transfer.create | Create volume transfer to another project | |
| compute.volume_transfer.delete | Delete volume transfer to another project | |
| compute.volume_transfer.update | Accept volume transfer to another project | |
| compute.volume.create_image | Create image from volume | |
| compute.volume.create | Create volume | |
| compute.volume.delete | Delete volume | |
| compute.volume.read_image_metadata | Read image metadata for volume | |
| compute.volume.update | Edit volume attributes (e.g., rename) | |
| compute.volume.attach | Attach volume to virtual machine | |
| compute.volume.detach | Detach volume from virtual machine | |
| compute.volume.extend | Extend volume size | |
| compute.volume.reimage | Rebuild volume from image | |
| compute.volume.detach_abort | Change volume status to IN-USE | |
| compute.volume.detach_init | Change volume status to DETACHING | |
| compute.volume.attach_init | Initiate volume attachment to cloud server | |
| compute.volume.reserve | Reserve volume for attachment to cloud server | |
| compute.volume.unreserve | Unreserve volume for attachment to cloud server | |
| compute.volume.update_readonly_mark | Toggle volume read-only mode | |
| compute.volume.update_bootable_mark | Change bootable flag on volume | |
| compute.volume.update_image_metadata | Add image metadata to volume | |
| compute.volume.attach_terminate | Force detach network volume from cloud server | |
| compute.volume.delete_image_metadata | Delete image metadata from volume by key | |
| Snapshots | compute.snapshot.create | Create volume snapshot |
| compute.snapshot.delete | Delete volume snapshot | |
| compute.snapshot.update | Edit snapshot parameters (rename) | |
| compute.snapshot.update_status | Change snapshot status | |
| compute.snapshot_metadata.delete | Delete snapshot metadata | |
| compute.snapshot_metadata.update_key | Update snapshot metadata by key | |
| compute.snapshot_metadata.create | Create snapshot metadata | |
| compute.snapshot_metadata.update | Update snapshot metadata | |
| Backups | compute.backup.create | Create backup |
| compute.backup.create_ondemand | Create on-demand backup (on_demand) | |
| compute.backup.delete | Delete backup | |
| compute.backup.restore | Restore from backup | |
| compute.backup.update | Update backup | |
| Images | compute.image.create_metadata | Create image metadata |
| compute.image.update_metadata | Update image metadata | |
| compute.image.update_metadata_item | Update image metadata item | |
| compute.image.delete_metadata_item | Delete image metadata item | |
| compute.image.create | Create image | |
| compute.image.delete | Delete image | |
| compute.image.update | Update image | |
| compute.image.upload | Upload image from file | |
| compute.image.deactivate | Deactivate image | |
| compute.image.reactivate | Reactivate image | |
| compute.image.import | Import image (e.g. via URL) | |
| compute.image_member.create | Request image access for another project | |
| compute.image_member.delete | Revoke image access for another project | |
| compute.image_member.update | Update image access status for another project | |
| compute.image_tag.create | Create image tag | |
| compute.image_tag.delete | Delete image tag | |
| compute.image.validate_url | Validate image before importing via URL | |
| compute.image.validate_file | Validate image before uploading from file | |
| Security groups | compute.security_group.create | Create security group |
| compute.security_group.update | Update security group | |
| compute.security_group.delete | Delete security group | |
| compute.security_group_rule.create | Create rule in security group | |
| compute.security_group_rule.delete | Delete rule in security group |
filestorage service
Responsible for operations with File Storage.
| Event name (event_type) | Description | |
|---|---|---|
| File storage | filestorage.access_rule_metadata.update | Edit file storage access rule metadata |
| filestorage.access_rule_metadata.delete | Delete file storage access rule metadata | |
| filestorage.share_network.create | Create share network for file storage | |
| filestorage.share_network.delete | Delete share network for file storage | |
| filestorage.share_network.update | Edit share network for file storage | |
| filestorage.share_network_subnet.create | Create share network subnet for file storage | |
| filestorage.share_network_subnet.delete | Delete share network subnet for file storage | |
| filestorage.metadata.create | Add file storage metadata | |
| filestorage.metadata.update | Edit file storage metadata | |
| filestorage.metadata.delete | Delete file storage metadata attribute | |
| filestorage.share.allow | Add access rule for file storage | |
| filestorage.share.deny | Delete access rule for file storage | |
| filestorage.share.create | Create file storage | |
| filestorage.share.delete | Delete file storage | |
| filestorage.share.update | Edit file storage attributes (e.g. rename) | |
| filestorage.share.extend | Extend file storage size | |
| filestorage.share.reload_network | Update file storage network settings | |
| filestorage.message.delete | Delete message |
secrets service
Responsible for secrets in Secrets Manager. You can manage secrets via the Secrets API.
| Event name (event_type) | Description | |
|---|---|---|
| Secrets | secrets.secret.create | Create secret |
| secrets.secret.update | Update secret description | |
| secrets.secret.get | Get secret | |
| secrets.secret.delete | Delete all secrets in project | |
| secrets.secret.delete | Delete secret | |
| Secret versions | secrets.secret_version.get | Get secret version value |
| secrets.secret_version.create | Create new secret version | |
| secrets.secret_version.activate | Set version as current |
certificates service
Responsible for certificates in Certificate Manager. You can manage custom certificates via the User Certificates API, and Let’s Encrypt® certificates via the Let’s Encrypt® Certificates API.
| Event name (event_type) | Description | |
|---|---|---|
| Certificates | certificates.certificate.upload | Upload certificate |
| certificates.certificate.p12.get | Get key pair | |
| certificates.certificate.private_key.get | Get private key | |
| certificates.certificate.ca_chain.get | Get CA bundle certificate chain | |
| certificates.certificate.delete | Delete certificate | |
| certificates.certificate_name.update | Update certificate | |
| certificates.le_certificate.issue | Issue Let’s Encrypt® certificate | |
| certificates.le_certificate.delete | Delete Let’s Encrypt® certificate |
logs service
Responsible for operations in logs.
| Event name (event_type) | Description | |
|---|---|---|
| Logs | logs.group.create | Create log group |
| logs.group.delete | Delete log group | |
| logs.stream.create | Create event stream | |
| logs.stream.delete | Delete event stream |
audit_logs service
Responsible for operations with audit logs.
| Event name (event_type) | Description | |
|---|---|---|
| Audit logs | audit_logs.log.download | Export audit logs |
| Audit log automated export | audit_logs.autoexport.create | Create automated export |
| audit_logs.autoexport.update | Edit automated export | |
| audit_logs.autoexport.execution | Generate automated export file | |
| audit_logs.autoexport.delete | Delete automated export |
domains service
Responsible for operations with domains.
| Event name (event_type) | Description | |
|---|---|---|
| Domain | domains.domain.create | Create domain |
| domains.domain.update | Update domain (e.g. project, hosts, contacts) | |
| domains.domain.delete | Delete domain | |
| domains.domain.autoextend | Automatic registration renewal | |
| domains.domain_authinfo.create | Generate new authorization code (authInfo) | |
| domains.domain.extend | Renew domain for one year | |
| domains.domain_transfer.request | Initiate domain transfer from another registrar | |
| domains.domain_transfer.approve | Confirm domain transfer to Selectel | |
| domains.contact_change.request | Request domain owner change (within Selectel) | |
| domains.contact_change.approve | Confirm domain owner change | |
| domains.contact_change.cancel | Cancel domain owner change request | |
| domains.domain_hosts.update | Update domain DNS hosts list | |
| Domain administrator | domains.contact.create | Create new contact person |
| domains.contact.update | Update contact details (email, phone) | |
| domains.contact.admin_update | Update contact via technical support | |
| domains.contact.delete | Delete contact person |
dns service
Responsible for operations with DNS hosting.
| Event name (event_type) | Description | |
|---|---|---|
| DNS zone | dns.zone.create | Create DNS zone |
| dns.zone.update | Edit DNS zone | |
| dns.zone.delete | Delete DNS zone | |
| dns.zone_owner.update | Change DNS zone project | |
| dns.zone.protection | Enable or disable DNS zone deletion protection | |
| dns.zone.activation | Activate DNS zone | |
| Resource record set | dns.rrset.create | Create resource record set |
| dns.rrset.update | Edit resource record set | |
| dns.rrset.delete | Delete resource record set | |
| dns.rrset.managed | Resource record set managed by external service |
global_router service
Responsible for operations with Global Router.
| Event name (event_type) | Description | |
|---|---|---|
| Global router | global_router.router.create | Create router |
| global_router.router.update | Edit router | |
| global_router.router.delete_init | Initiate router deletion | |
| global_router.router.delete | Delete router | |
| global_router.network.create | Create global router network | |
| global_router.network.update | Edit global router network | |
| global_router.network.delete_init | Initiate global router network deletion | |
| global_router.network.delete | Delete global router network | |
| global_router.subnet.create | Create global router subnet | |
| global_router.subnet.update | Edit global router subnet | |
| global_router.subnet.delete_init | Initiate global router subnet deletion | |
| global_router.subnet.delete | Delete global router subnet | |
| global_router.static_route.create | Create global router static route | |
| global_router.static_route.update | Edit global router static route | |
| global_router.static_route.delete_init | Initiate global router static route deletion | |
| global_router.static_route.delete | Delete global router static route |
mks service
Responsible for operations with the cluster, nodegroups, and nodes of Managed Kubernetes.
| Event name (event_type) | Description | |
|---|---|---|
| Cluster | mks.cluster.init_create | Create cluster (event started) |
| mks.cluster.create | Create cluster (event finished) | |
| mks.cluster.init_delete | Delete cluster (event started) | |
| mks.cluster.delete | Delete cluster (event finished) | |
| mks.cluster.init_update | Update cluster (event started) | |
| mks.cluster.update | Update cluster (event finished) | |
| mks.cluster.init_upgrade_minor | Upgrade cluster minor version (event started) | |
| mks.cluster.upgrade_minor | Upgrade cluster minor version (event finished) | |
| mks.cluster.init_upgrade_patch | Upgrade cluster patch version (event started) | |
| mks.cluster.upgrade_patch | Upgrade cluster patch version (event finished) | |
| mks.cluster_certs.init_rotate | Rotate cluster certificates (event started) | |
| mks.cluster_certs.rotate | Rotate cluster certificates (event finished) | |
| Nodegroup | mks.cluster_nodegroup.init_create | Create nodegroup (event started) |
| mks.cluster_nodegroup.create | Create nodegroup (event finished) | |
| mks.cluster_nodegroup.init_delete | Delete nodegroup (event started) | |
| mks.cluster_nodegroup.delete | Delete nodegroup (event finished) | |
| mks.cluster_nodegroup.init_update | Update nodegroup (event started) | |
| mks.cluster_nodegroup.update | Update nodegroup (event finished) | |
| mks.cluster_nodegroup.init_resize | Resize nodegroup (event started) | |
| mks.cluster_nodegroup.resize | Resize nodegroup (event finished) | |
| mks.cluster_nodegroup.update_autoscale | Edit nodegroup Autoscaler parameters | |
| Node | mks.cluster_nodegroup_node.init_delete | Delete node (event started) |
| mks.cluster_nodegroup_node.delete | Delete node (event finished) | |
| mks.cluster_nodegroup_node.init_reinstall | Reinstall node (event started) | |
| mks.cluster_nodegroup_node.reinstall | Reinstall node (event finished) | |
| Managed Kubernetes integration with Container Registry | mks.cluster_registries_integration.init_create | Create cluster integration (event started) |
| mks.cluster_registries_integration.create | Create cluster integration (event finished) | |
| mks.cluster_registries_integration.init_delete_all | Delete all cluster integrations (event started) | |
| mks.cluster_registries_integration.delete_all | Delete all cluster integrations (event finished) | |
| mks.cluster_registries_integration.init_delete | Delete one cluster integration (event started) | |
| mks.cluster_registries_integration.delete | Delete one cluster integration (event finished) | |
| mks.cluster_registries_integration.init_update | Update cluster integration (event started) | |
| mks.cluster_registries_integration.update | Update cluster integration (event finished) | |
| Envoy Gateway application | mks.cluster_addon_envoy_gateway.init_create | Install Envoy Gateway cluster application (event started) |
| mks.cluster_addon_envoy_gateway.create | Install Envoy Gateway cluster application (event finished) | |
| mks.cluster_addon_envoy_gateway.init_delete | Delete Envoy Gateway cluster application (event started) | |
| mks.cluster_addon_envoy_gateway.delete | Delete Envoy Gateway cluster application (event finished) | |
| NGINX Ingress Controller application | mks.cluster_addon_ingress_nginx.init_delete | Delete NGINX Ingress Controller application (event started) |
| mks.cluster_addon_ingress_nginx.delete | Delete NGINX Ingress Controller application (event finished) |
s3 service
Responsible for operations with S3. You can manage S3 via the Object Storage API, S3 API, and Swift API.
| Event name (event_type) | Description | |
|---|---|---|
| Buckets | s3.bucket.create | Create bucket |
| s3.bucket.delete | Delete bucket | |
| s3.bucket_meta.update | Edit bucket metadata | |
| s3.bucket_expiring.update | Edit Default-Delete-After header | |
| s3.bucket_limits.update | Edit bucket limits | |
| s3.bucket_publicity.enable | Change bucket type to public | |
| s3.bucket_publicity.disable | Change bucket type to private | |
| s3.bucket_versioning.enable | Enable bucket versioning | |
| s3.bucket_versioning.suspend | Suspend bucket versioning | |
| s3.bucket_cors.set | Apply bucket CORS rules | |
| s3.bucket_cors.delete | Delete bucket CORS rules | |
| s3.bucket_custom_domain.add | Add custom domain | |
| s3.bucket_custom_domain.delete | Delete custom domain | |
| s3.bucket_website.update | Configure bucket website | |
| s3.bucket_policy.set | Create access policy | |
| s3.bucket_policy.delete | Delete access policy | |
| s3.bucket_cache_control.set | Add Cache-Сontrol header | |
| s3.bucket_cache_control.delete | Delete Cache-Сontrol header | |
| s3.bucket_addressing.update | Change bucket addressing from Path-Style to vHosted | |
| s3.bucket_object_lock.enable | Enable Object Lock in bucket | |
| s3.bucket_object_lock.update | Edit default retention configuration in bucket | |
| TLS (SSL) certificates | s3.certificate.upload | Upload certificate |
| s3.certificate.update | Update certificate | |
| s3.certificate.delete | Delete certificate | |
| Public bucket domains | s3.public_domain.create | Create domain |
| s3.public_domain.delete | Delete domain | |
| s3.public_domain.bind | Bind domain to bucket | |
| s3.public_domain.unbind | Unbind domain from bucket | |
| Purge cache | s3.cache.flush | Request cache purge |
| Logs | s3.logs.dump | Create storage log export |
| s3.logs.cancel | Cancel storage log export creation |
dbaas service
Responsible for operations with cloud databases.
| Event name (event_type) | Description | |
|---|---|---|
| Cluster | dbaas.cluster.create | Create cluster |
| dbaas.cluster.update | Update cluster | |
| dbaas.cluster.delete | Delete cluster | |
| dbaas.cluster.resize | Resize cluster | |
| dbaas.cluster_readonly_mode.enable | Set read-only mode | |
| dbaas.cluster_readwrite_mode.enable | Set read-write mode | |
| dbaas.cluster.lock | Lock cluster | |
| dbaas.cluster.unlock | Unlock cluster | |
| Backups | dbaas.cluster_backup.update | Update backup settings |
| DBMS settings | dbaas.cluster_config.update | Update DBMS settings |
| Database | dbaas.cluster_database.create | Create a database |
| dbaas.cluster_database.update | Update a database | |
| dbaas.cluster_database.delete | Delete a database | |
| Connection pooler | dbaas.cluster_pooler.update | Update a connection pooler |
| Prometheus token | dbaas.prometheus_token.create | Create a token |
| dbaas.prometheus_token.update | Update a token | |
| dbaas.prometheus_token.delete | Delete a token | |
| Node group | dbaas.cluster_node_group.create | Create a node group |
| dbaas.cluster_node_group.update | Update a node group | |
| dbaas.cluster_node_group.delete | Delete a node group | |
| dbaas.cluster_node_group.resize | Resize a node group | |
| Public floating IP address | dbaas.cluster_floating_ip.create | Create an IP address |
| dbaas.cluster_floating_ip.delete | Delete an IP address | |
| Allowed IP list | dbaas.cluster_firewall_rule.update | Update allowed IP list |
| Kafka topic | dbaas.cluster_database_topic.create | Create a topic |
| dbaas.cluster_database_topic.update | Update a topic | |
| dbaas.cluster_database_topic.delete | Delete a topic | |
| User | dbaas.cluster_database_user.create | Create a user |
| dbaas.cluster_database_user.update | Update a user | |
| dbaas.cluster_database_user.delete | Delete a user | |
| dbaas.cluster_database_user_password.update | Change user password | |
| User permissions | dbaas.cluster_database_permission.create | Grant permissions |
| dbaas.cluster_database_permission.delete | Revoke permissions | |
| Access Control Lists (ACLs) | dbaas.cluster_acl.create | Create an Access Control List |
| dbaas.cluster_acl.update | Update an Access Control List | |
| dbaas.cluster_acl.delete | Delete an Access Control List | |
| Security groups | dbaas.cluster_security_group.update | Update security groups |
| Logical replication slot | dbaas.cluster_database_logical_replication_slot.create | Create a logical replication slot |
| dbaas.cluster_database_logical_replication_slot.delete | Delete a logical replication slot | |
| Extension | dbaas.cluster_database_extension.create | Add an extension |
| dbaas.cluster_database_extension.delete | Delete an extension | |
| Logs | dbaas.cluster_log_platform.enable | Enable logging |
| dbaas.cluster_log_platform.disable | Disable logging |
ses service
Responsible for operations with the email service. You can manage the email service via the Email Service API.
| Event name (event_type) | Description | |
|---|---|---|
| Resources | ses.resource.create | Create a resource |
| ses.resource.transfer | Transfer a resource | |
| ses.resource.delete | Delete a resource | |
| ses.resource_name.update | Update a resource name | |
| ses.resource_password.update | Update a resource password | |
| ses.resource_quota.update | Update resource quotas | |
| Domains | ses.resource_domain.create | Create a domain |
| ses.resource_domain.delete | Delete a domain | |
| Stop lists | ses.resource_stop_list_email.add | Add an entry to the stop list |
| ses.resource_stop_list_email.delete | Delete an entry from the stop list | |
| Projects | ses.project_quota.update | Update resource quotas in a project |
| ses.project.delete | Delete all resources in a project | |
| ses.project.cleanup | Automatic deletion of all resources in a project when a user is deleted or an account is blocked |