Auditing

You can use Cloud Trace Service (CTS) to trace operations in CBR.

Prerequisites

CTS has been enabled.

Key Operations Recorded by CTS

Table 1 CBR operations that can be recorded by CTS

Operation

Resource Type

Trace Name

Creating a policy

policy

createPolicy

Updating a policy

policy

updatePolicy

Deleting a policy

policy

deletePolicy

Setting a vault policy

vault

associatePolicy

Removing a policy from a vault

vault

dissociatePolicy

Creating a vault

vault

createVault

Modifying a vault

vault

updateVault

Deleting a vault

vault

deleteVault

Removing resources

vault

removeResources

Adding resources

vault

addResources

Performing a backup

vault

createVaultBackup

Creating a backup

backup

createBackup

Deleting a backup

backup

deleteBackup

Restoring a backup

backup

restoreBackup

Viewing Audit Logs

For how to view audit logs, see section "Querying Real-Time Traces" in the Cloud Trace Service User Guide.

Disabling or Enabling a Tracker

The following procedure illustrates how to disable an existing tracker on the CTS console. After the tracker is disabled, the system will stop recording operations, but you can still view existing operation records.

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select your desired region and project.
  3. Click Service List and choose Management & Deployment > Cloud Trace Service.
  4. Click Trackers in the left navigation pane. See Figure 1.

    Figure 1 Viewing trackers

  5. In the tracker list, click Disable in the Operation column.
  6. Click Yes.
  7. After the tracker is disabled, the available operation changes from Disable to Enable. To enable the tracker again, click Enable and then click Yes. The system will start recording operations again.