Yandex Audit Trails event reference
Written by
Updated at March 18, 2024
Audit Trails supports tracking of management (control plane) events and data (data plane) events for Yandex Key Management Service.
The general view of the event_type field value is as follows:
yandex.cloud.audit.kms.<event_name>
Management event reference
| Event name | Description |
|---|---|
CancelDeleteSymmetricKey |
Canceling a previously scheduled key destruction |
CancelSymmetricKeyVersionDestruction |
Canceling a previously planned destruction of a symmetric key version |
CreateAsymmetricEncryptionKey |
Creating an asymmetric encryption key pair |
CreateAsymmetricSignatureKey |
Creating a digital signature key pair |
CreateSymmetricKey |
Creating a symmetric key |
DeleteAsymmetricEncryptionKey |
Updating an asymmetric encryption key pair |
DeleteAsymmetricSignatureKey |
Updating a digital signature key pair |
DeleteSymmetricKey |
Deleting a symmetric key |
RotateSymmetricKey |
Rotating a symmetric key |
ScheduleSymmetricKeyVersionDestruction |
Scheduling the destruction of a symmetric key version |
SetAsymmetricEncryptionKeyAccessBindings |
Selecting access bindings for an asymmetric encryption key pair |
SetAsymmetricSignatureKeyAccessBindings |
Selecting access bindings for a digital signature key pair |
SetPrimarySymmetricKeyVersion |
Selecting the primary version of a symmetric key |
SetSymmetricKeyAccessBindings |
Selecting access bindings for a symmetric key |
UpdateAsymmetricEncryptionKey |
Updating an asymmetric encryption key pair |
UpdateAsymmetricSignatureKey |
Updating a digital signature key pair |
UpdateSymmetricKey |
Changing a symmetric key |
UpdateSymmetricKeyAccessBindings |
Updating access bindings for a symmetric key |
UpdateAsymmetricEncryptionKeyAccessBindings |
Updating access bindings for an asymmetric encryption key pair |
asymmetricencryption.CancelAsymmetricEncryptionKeyDeletion |
Canceling the deletion of an asymmetric encryption key pair |
asymmetricsignature.CancelAsymmetricSignatureKeyDeletion |
Canceling the deletion of a digital signature key pair |
Data event reference
| Event name | Description |
|---|---|
Decrypt |
Decrypting ciphertext with a key |
Encrypt |
Encrypting a text string with a key |
GenerateDataKey |
Generating a high-entropy key for Envelope Encryption |
ReEncrypt |
Decrypting ciphertext with a previous-version key and re-encrypting the decrypted text with a new version of the same key |