Contact UsGet started

Yandex Audit Trails release notes

Written by
Updated at May 5, 2025

Q1 2025

  • Added new events for the services:

    BareMetal

    Management events:

    Event Description
    BatchCreateServer Leasing several BareMetal servers at the same time
    CreateExternalConnection Creating a private connection to subnets in a VPC or on-prem infrastructure
    CreatePrivateSubnet Creating a private subnet
    CreateServer Leasing a BareMetal server
    CreateVRF Creating a virtual network segment (VRF)
    DeleteExternalConnection Deleting a private connection to subnets in a VPC or on-prem infrastructure
    DeletePrivateSubnet Deleting a private subnet
    DeleteVRF Deleting a virtual network segment (VRF)
    PowerOffServer Powering off a BareMetal server
    PowerOnServer Powering on a BareMetal server
    RebootServer Restarting a BareMetal server
    RegisterServerBackupAgent Registering a Yandex Cloud Backup agent on a BareMetal server
    ReinstallServer Reinstalling a BareMetal server OS
    StartServerProlongation Enabling auto-renewal of BareMetal server lease
    StopServerProlongation Disabling auto-renewal of BareMetal server lease
    UpdatePrivateSubnet Updating a private subnet
    UpdateServer Updating a BareMetal server
    UpdateVRF Updating a virtual routing and forwarding (VRF) segment
    Cloud Backup

    Management events:

    Event Description
    DeleteArchive Deleting a backup archive
    Cloud CDN

    Management events:

    Event Description
    gcore.ResourceDelete Deleting a resource
    gcore.ResourceRuleCreate Creating a Rewrite rule
    gcore.ResourceRuleDelete Deleting a Rewrite rule
    gcore.ResourceRuleUpdate Updating a Rewrite rule
    DataSphere

    Management events:

    Event Description
    CreateFilestore Create file storage
    CreateModel Creating a model
    CreateS3Connector Creating an S3 connector
    CreateSecret Creating a secret
    CreateSparkConnector Creating a Spark connector
    CreateYandexDataProcessing Creating a Yandex Data Processing template
    DeleteFilestore Delete file storage
    DeleteModel Delete model
    DeleteS3Connector Deleting an S3 connector
    DeleteSecret Destroying a secret
    DeleteSparkConnector Deleting a Spark connector
    DeleteYandexDataProcessing Deleting a Yandex Data Processing template
    UpdateFilestore Updating a file storage
    UpdateModel Edit model
    UpdateS3Connector Updating an S3 connector
    UpdateSecret Updating a secret
    UpdateSparkConnector Updating a Spark connector
    UpdateYandexDataProcessing Updating a Yandex Data Processing template
    Cloud Desktop

    Management events:

    Event Description
    CreateDesktop Creating a desktop
    CreateDesktopGroup Creating a desktop group
    DeleteDesktop Deleting a desktop
    DeleteDesktopGroup Deleting a desktop group
    RestartDesktop Restarting a desktop
    Cloud Video

    Management events:

    Event Description
    BatchDeleteChannels Deleting a channel group
    BatchDeleteEpisodes Deleting an episode group
    BatchDeletePlaylists Deleting a playlist group
    BatchDeleteStreamLines Deleting a group of stream lines
    BatchDeleteStreams Deleting a stream group
    BatchDeleteVideos Deleting a video group
    CreateChannel Creating a channel
    CreateEpisode Creating an episode
    CreatePlaylist Creating a playlist
    CreateStream Creating a stream
    CreateStreamLine Creating a stream line
    CreateSubtitle Subtitling
    CreateThumbnail Creating a thumbnail
    CreateVideo Creating a video
    DeleteChannel Deleting a channel
    DeleteEpisode Deleting an episode
    DeletePlaylist Deleting a playlist
    DeleteStream Deleting a stream
    DeleteStreamLine Deleting a stream line
    DeleteSubtitle Deleting subtitles
    DeleteThumbnail Deleting a thumbnail
    DeleteVideo Deleting a video
    EpisodePerformAction Performing actions with an episode
    SetChannelAccessBindings Assigning access permissions for a channel
    StreamLinePerformAction Performing actions with a stream line
    StreamLineUpdateStreamKey Updating a stream key of a stream line
    StreamPerformAction Performing actions with a stream
    TranscodeVideo Transcoding a video
    UpdateChannel Updating a channel
    UpdateChannelAccessBindings Updating access permissions for a channel
    UpdateEpisode Updating an episode
    UpdatePlaylist Updating a playlist
    UpdateStream Updating a stream
    UpdateStreamLine Updating a stream line
    UpdateVideo Updating a video
    VideoPerformAction Performing actions with a video
    Compute Cloud

    Management events:

    Event Description
    CreateReservedInstancePool Creating a pool of reserved VMs
    DeleteReservedInstancePool Deleting a pool of reserved VMs
    UpdateReservedInstancePool Updating a pool of reserved VMs
    Identity and Access Management

    Data events:

    Event Description
    RevokeLeakedCredential Revoking a compromised secret
    workload.oidc.SetFederationAccessBindings Assigning access permissions to a workload identity federation
    workload.oidc.UpdateFederationAccessBindings Modifying access permissions of a workload identity federation
    Managed Service for ClickHouse®

    Management events:

    Event Description
    RestartClusterHosts Restarting cluster hosts
    Managed Service for GitLab

    Management events:

    Event Description
    CreateRunner Creating GitLab Runner
    DeleteRunner Deleting GitLab Runner
    StartRunner Starting GitLab Runner
    StopRunner Stopping GitLab Runner
    UpdateRunner Updating GitLab Runner
    Managed Service for Kubernetes

    Management events:

    Event Description
    AutoUpgradeCluster Performing cluster auto-updates
    AutoUpgradeNodeGroup Performing node group auto-updates
    CreateCluster Creating a cluster
    CreateNodeGroup Creating a node group
    DeleteCluster Deleting a cluster
    DeleteNodeGroup Deleting a node group
    DeleteStoppedCluster Deleting a stopped cluster
    InstallHelmRelease Installing a Helm version
    SetClusterAccessBindings Assigning access permissions for a cluster
    StartCluster Starting a cluster
    StopCluster Stopping a cluster
    UninstallHelmRelease Destroying a Helm version
    UpdateCluster Updating a cluster
    UpdateClusterAccessBindings Updating access permissions for a cluster
    UpdateHelmRelease Updating a Helm version
    UpdateNodeGroup Updating a node group

    Data events:

    Event Description
    apiserver.ApiServerApprove Confirming a request
    apiserver.ApiServerBind Linking a role
    apiserver.ApiServerCreate Creating a resource
    apiserver.ApiServerDelete Deleting a resource
    apiserver.ApiServerDeleteCollection Deleting a resource collection
    apiserver.ApiServerEscalate Escalating privileges
    apiserver.ApiServerGet Getting information about a resource
    apiserver.ApiServerHead Getting resource metadata
    apiserver.ApiServerImpersonate Impersonation
    apiserver.ApiServerList Getting information about a resource collection
    apiserver.ApiServerNonstandardVerb The event is generated if the Managed Service for Kubernetes audit log contains a non-standard value in the verb field
    apiserver.ApiServerOptions Configuring a resource
    apiserver.ApiServerPatch Changing a resource
    apiserver.ApiServerPost Creating a resource
    apiserver.ApiServerPut Updating a resource
    apiserver.ApiServerUpdate Updating a query
    apiserver.ApiServerWatch Tracking resources
    Managed Service for OpenSearch

    Management events:

    Event Description
    RestartOpenSearch Restarting a cluster
    SwitchMaster Changing the host quorum leader with the MANAGER role
    Yandex Managed Service for Valkey™

    Management events:

    Event Description
    DeleteBackup Deleting backups

    Data events:

    Event Description
    CreateUser Creating a user in a cluster
    DeleteUser Deleting a user from a cluster
    UpdateUser Updating a user in a cluster
    Virtual Private Cloud

    Management events:

    Event Description
    CreatePrivateEndpoint Creating a service connection
    DeletePrivateEndpoint Deleting a service connection
    UpdatePrivateEndpoint Updating a service connection
    Yandex Cloud Billing

    Management events:

    Event Description
    BillingAccountCreate Creating a billing account
    BillingAccountUpdate Updating a billing account
    Yandex Lockbox

    Data events:

    Event Description
    GetPayload Accessing the contents of a secret
    GetPayloadEx Accessing the contents of a secret by folder or name
    Yandex MetaData Hub

    Data events:

    Event Description
    CreateCluster Creating a Hive Metastore cluster
    DeleteCluster Deleting a Hive Metastore cluster
    StartCluster Starting a Hive Metastore cluster
    StopCluster Stopping a Hive Metastore cluster
    UpdateCluster Updating an Hive Metastore cluster

  • Deleted events for:

    Managed Service for Kubernetes

    Data events:

    Event name Description
    ApiServerAuditEvent Managed Service for Kubernetes cluster audit event

Q4 2024

  • Added new events for the services:

    Cloud Organization

    Management events:

    Event Description
    AttachRegion Connecting a region
    DataSphere

    Management events:

    Event Description
    ActivateDataset Activating a dataset
    ActivateDocker Applying a Docker image to a project
    CreateDataset Creating a dataset
    CreateDocker Creating a Docker image
    DeactivateDataset Deactivating a dataset
    DeleteDataset Deleting a dataset
    DeleteDocker Deleting a Docker image
    Managed Service for OpenSearch

    Management events:

    Event Description
    DeleteBackup Deleting backups
    Object Storage

    Data events:

    Event Description
    PresignURLCreate Creating a signed link

Q3 2024

  • Added the option of filtering by event type. For more information, see Trail settings.

  • Added new events for the services:

    Certificate Manager

    Data events:

    Event name Description
    GetCertificateContent Getting the contents of an SSL certificate
    Cloud Organization

    Management events:

    Event Description
    DeleteFederatedUserAccounts Deleting a user from a federation
    DataSphere

    Management events:

    Event Description
    CloseProject Closing a project
    CreateNode Creating a node
    DeleteNode Deleting a node
    OpenProject Opening a project
    ResumeNode Resuming a node
    SuspendNode Suspending a node
    UpdateNode Updating a node
    Identity and Access Management

    Management events:

    Event Description
    workload.CreateFederatedCredential Creating a link in a service account federation
    workload.DeleteFederatedCredential Deleting a link from a service account federation
    workload.oidc.CreateFederation Creating a workload identity federation
    workload.oidc.DeleteFederation Deleting a workload identity federation
    workload.oidc.UpdateFederation Updating a workload identity federation

    Data events:

    Event Description
    RevokeIamToken Revoking an IAM token
    Load Testing

    Management events:

    Event Description
    CreateRegressionDashboard Creating a regression dashboard
    DeleteRegressionDashboard Deleting a regression dashboard
    UpdateRegressionDashboard Editing a regression dashboard
    Managed Service for Apache Airflow™

    Management events:

    Event name Description
    CreateCluster Creating a cluster
    DeleteCluster Deleting a cluster
    StartCluster Starting a cluster
    StopCluster Stopping a cluster
    UpdateCluster Updating a cluster
    Managed Service for ClickHouse®

    Management events:

    Event Description
    AddClusterShard Adding a shard to a cluster
    DeleteClusterShard Deleting a shard from a cluster
    Managed Service for Greenplum®

    Management events:

    Event name Description
    MoveCluster Moving a cluster
    Managed Service for Kubernetes

    Data events:

    Event name Description
    ApiServerAuditEvent Managed Service for Kubernetes cluster audit event
    Managed Service for MySQL®

    Data events:

    Event name Description
    DatabaseUserSQLRequest User SQL query to a database
    Security Deck

    Data events:

    Event name Description
    ComputeNodeAccess Connecting the Access Transparency module to the Yandex Data Processing subcluster
    MDBClusterAccess Connecting the Access Transparency module to a database cluster
    Smart Web Security

    Management events:

    Event Description
    CreateArlProfile Creating an ARL profile
    CreateSecurityProfile Creating a security profile
    CreateWafProfile Creating a WAF profile
    DeleteArlProfile Deleting an ARL profile
    DeleteSecurityProfile Deleting a security profile
    DeleteWafProfile Deleting a WAF profile
    UpdateArlProfile Updating an ARL profile
    UpdateSecurityProfile Updating a security profile
    UpdateWafProfile Updating a WAF profile

    Data events:

    Event Description
    ArlMatchedRequest Request according to the ARL rules
    WafMatchedExclusionRule Applied WAF exclusion rule
    WafMatchedRule Applied WAF rule
    Yandex Cloud Postbox

    Management events:

    Event name Description
    CreateConfigurationSet Creating a configuration
    CreateIdentity Creating an address
    DeleteConfigurationSet Deleting a configuration
    DeleteIdentity Deleting an address
    UpdateConfigurationSet Updating a configuration
    UpdateIdentity Updating an address

Q2 2024

  • Added new events for the services:

    API Gateway

    Management events:

    Event Description
    SetApiGatewayAccessBindings Setting access bindings for an API gateway
    UpdateApiGatewayAccessBindings Updating access bindings for an API gateway
    Cloud Backup

    Data events:

    Event Description
    InitResource Initializing a VM connection to Cloud Backup
    UpdateResource Updating the status of VM connection to Cloud Backup
    Certificate Manager

    Management events:

    Event Description
    SetCertificateAccessBindings Setting access bindings for a certificate
    SetDomainPrimaryCertificate Assigning a primary certificate to a domain
    Compute Cloud

    Management events:

    Event Description
    AttachInstanceNetworkInterface Connecting a network interface
    DetachInstanceNetworkInterface Disconnecting a network interface
    DataSphere

    Management events:

    Event Description
    CloneJob Cloning a job
    UpdateJobDataTtl Updating job data lifetime
    Cloud Functions

    Management events:

    Event Description
    mdbproxy.SetProxyAccessBindings Setting access bindings for a managed database
    mdbproxy.UpdateProxyAccessBindings Updating access bindings for a managed database
    triggers.PauseTrigger Pausing a trigger
    triggers.ResumeTrigger Resuming a trigger
    Identity and Access Management

    Management events:

    Event Description
    SetServiceAccountAccessBindings Setting access bindings for a service account

    Data events:

    Event Description
    CreateIamToken Creating an IAM token
    oslogin.CheckSshPolicy Checking permissions to connect via SSH with OS Login access
    oslogin.GenerateSshCertificate Generating an SSH certificate for OS Login access
    Managed Service for ClickHouse®

    Management events:

    Event Description
    DeleteBackup Deleting backups
    Managed Service for GitLab

    Management events:

    Event Description
    FinishMigration Completing migration of an instance to another availability zone
    PrepareBackupUpload Preparing for recovery from a backup
    RollbackMigration Canceling migration of an instance to another availability zone
    StartMigration Starting migration of an instance to another availability zone
    Managed Service for PostgreSQL

    Data events:

    Event Description
    DatabaseUserSQLRequest User SQL query to a database
    Yandex Managed Service for Valkey™

    Management events:

    Event Description
    EnableClusterSharding Enabling cluster sharding
    Cloud Marketplace

    Management events:

    Event Description
    ActivateSubscriptionAutoRenewal Activating automatic subscription renewal
    CancelSubscriptionAutoRenewal Canceling automatic subscription renewal
    SpeechSense

    Management events:

    Event Description
    CreateProject Creating a project
    CreateSpace Creating a space
    DeleteProject Deleting a project
    DeleteSpace Deleting a space
    SetProjectAccessBindings Setting access bindings for a project
    SetSpaceAccessBindings Setting access bindings for a space
    UpdateProject Updating a project
    UpdateProjectAccessBindings Updating access bindings for a project
    UpdateSpace Editing a space
    UpdateSpaceAccessBindings Updating access bindings for a space

    Data events:

    Event Description
    CreateTalksReport Creating a dialog report
    GetTalk Getting a dialog
    GetTalkAudio Getting an audio recording of a dialog
    SearchTalks Searching for a dialog
    UploadTalkToConnection Uploading a dialog to a connection
    WebSQL

    Management events:

    Event Description
    CreateSavedQuery Saving a query
    DeleteExecutedQuery Deleting an executed query
    DeleteSavedQuery Deleting a saved query
    EditSavedQuery Editing a saved query
    PublishExecutedQuery Publishing an executed query
    PublishSavedQuery Publishing a saved query

    Data events:

    Event Description
    Execute Running a query
    GenerateSql Generating a query
    GetDatabaseStructure Getting database structure
    Wiki

    Data events:

    Event Description
    AccessRequestCreate Creating a page access request
    AccessRequestProcess Processing a page access request
    AttachmentCreate Uploading a file to a page
    AttachmentDelete Deleting a file from a page
    AuthorRoleRequestCreate Creating a request for adding to page authors
    AuthorRoleRequestProcess Processing a request for adding to page authors
    BookmarkCreate Adding to favorites
    BookmarkDelete Deleting from favorites
    BookmarkTagsCreate Creating tags for favorites
    BookmarkTagsDelete Deleting tags for favorites
    BookmarkUpdate Updating tags for a page in favorites
    ClusterMove Moving a page cluster
    CommentCreate Creating a comment
    CommentDelete Deleting a comment
    CommentUpdate Updating a comment
    GridAddColumns Adding columns to a dynamic table
    GridAddRows Adding rows to a dynamic table
    GridClone Creating a dynamic table copy
    GridCreate Creating a new dynamic table
    GridDelete Deleting a dynamic table
    GridImport Importing a dynamic table from a file
    GridMoveColumns Moving a dynamic table column
    GridMoveRows Moving a dynamic table row
    GridRemoveColumns Deleting dynamic table columns
    GridRemoveRows Deleting dynamic table rows
    GridRollback Undoing changes in a dynamic table
    GridUpdate Updating a dynamic table
    GridUpdateCells Updating cells in a dynamic table
    GridUpdateColumn Updating a dynamic table column
    GridUpdateRow Updating a dynamic table row
    PageChangeOrder Changing page order
    PageChangeToYFM Converting a page to a new editor
    PageClone Creating a page copy
    PageCreate Creating a page
    PageDelete Deleting a page
    PageImport Importing a page from a file
    PageRecover Recovering a deleted page
    PageUpdate Updating a page
    RecoveryTokenDelete Deleting a page recovery token
    SubscriberDelete Deleting a subscriber
    SubscribersAdd Adding subscribers
    SubscriptionAdd Adding a subscription
    SubscriptionDelete Deleting a subscription

  • Replaced the impersonator_info field with token_info in the authentication section.

Q1 2024

  • Added new events for the services:

    Certificate Manager

    Management events:

    Event Description
    UpdateDomainAccessBindings Updating access permissions for a domain
    Cloud Apps

    Management events:

    Event Description
    CreateCloudApplication Creating an application
    DeleteCloudApplication Deleting an application
    UpdateCloudApplication Updating an application
    Cloud DNS

    Management events:

    Event Description
    UpdatePrivateNetworks Updating private networks
    Cloud Logging

    Management events:

    Event Description
    ChangeLogGroupAccessBindings Updating access permissions for a log group
    CreateExport Creating a log export
    CreateLogGroup Creating a log group
    CreateSink Creating a log sink
    UpdateLogGroup Updating a log group
    DeleteExport Deleting a log export
    DeleteLogGroup Deleting a log group
    DeleteSink Deleting a log sink
    SetExportAccessBindings Assigning access permissions for a log export
    SetLogGroupAccessBindings Assigning access permissions for a log group
    SetSinkAccessBindings Assigning access permissions for a log sink
    UpdateExport Updating a log export
    UpdateExportAccessBindings Updating access permissions for a log export
    UpdateLogGroupAccessBindings Updating access permissions for a log group
    UpdateSink Updating a log sink
    UpdateSinkAccessBindings Updating access permissions for a log sink
    Cloud Organization

    Management events:

    Event Description
    CreateOsLoginProfile Creating a profile OS Login
    CreateUserSshKey Creating an SSH user key
    UpdateOsLoginProfile Updating an OS Login profile
    UpdateOsLoginSettings Editing OS Login settings
    UpdateUserSshKey Updating an SSH user key
    SetDefaultProfile Setting the default profile
    DeleteOsLoginProfile Deleting an OS Login profile
    DeleteUserSshKey Deleting an SSH user key
    Compute Cloud

    Management events:

    Event Description
    CreateHostGroup Creating a group of dedicated hosts
    DeleteHostGroup Deleting a group of dedicated hosts
    UpdateHostGroup Updating a group of dedicated hosts
    serialssh.ConnectSerialPort Connecting to an instance serial port
    Key Management Service

    Management events:

    Event Description
    asymmetricencryption.CancelAsymmetricEncryptionKeyDeletion Canceling the deletion of an asymmetric encryption key pair
    asymmetricsignature.CancelAsymmetricSignatureKeyDeletion Canceling the deletion of a digital signature key pair
    Load Testing

    Management events:

    Event Description
    CreateAgent Creating an agent
    CreateConfig Creating a configuration
    CreateMigration Creating a migration
    CreateTest Creating a test
    DeleteAgent Deleting an agent
    DeleteConfig Deleting a configuration
    DeleteTest Deleting a test
    RestartAgent Restarting an agent
    StartAgent Running an agent
    StopAgent Stopping an agent
    StopTest Stopping a test
    UpdateAgent Updating an agent
    UpdateTest Updating a test
    UpgradeImageAgent Updating an agent image
    Managed Service for GitLab

    Management events:

    Event Description
    CreateInstanceBackup Creating an instance backup
    ReconfigureGitlab Editing the GitLab configuration
    RescheduleMaintenance Changing scheduled maintenance date and time
    ScheduleUpgrade Setting the instance upgrade time
    Managed Service for ClickHouse®

    Management events:

    Event Description
    UpdateClusterExternalDictionary Editing an external dictionary
    Managed Service for Greenplum®

    Management events:

    Event Description
    CreateHBARule Creating a user authentication rule
    CreatePXFDatasource Creating a connection to an external table
    DeleteBackup Deleting backups
    DeleteHBARule Deleting a user authentication rule
    DeletePXFDatasource Deleting an external table connection
    UpdateHBARule Updating a user authentication rule
    UpdatePXFDatasource Updating an external table connection
    Managed Service for MongoDB

    Management events:

    Event Description
    DeleteBackup Deleting backups
    Managed Service for MySQL®

    Data events:

    Event Description
    DatabaseUserLogin Connecting a user to a database
    DatabaseUserLogout Disconnecting a user from a database
    Managed Service for OpenSearch

    Management events:

    Event Description
    MoveCluster Moving a cluster
    UpdateDashboardsNodeGroup Updating a Dashboards type host group
    Managed Service for PostgreSQL

    Data events:

    Event Description
    DatabaseUserLogin Connecting a user to a database
    DatabaseUserLogout Disconnecting a user from a database
    StartClusterFailover Launching master switching for a cluster
    Virtual Private Cloud

    Management events:

    Event Description
    RelocateSubnet Moving a cloud subnet to a different availability zone

  • Fixed an error that delayed event delivery with the trail in the Error status.

  • Modified the mechanism for delivering database management events and database user management events from Yandex Managed Service for PostgreSQL, Yandex Managed Service for MySQL®, and Yandex Managed Service for MongoDB. Now they are considered data events.

Previous
Data event reference