Yandex Audit Trails event reference
Written by
Audit Trails supports tracking control plane (management) and data plane (data) events for Yandex Key Management Service.
The general format of the event_type field value is as follows:
yandex.cloud.audit.kms.<event_name>
Management event reference
| Event name | Description |
|---|---|
asymmetricencryption.CancelAsymmetricEncryptionKeyDeletion |
Canceling the deletion of an asymmetric encryption key pair |
asymmetricsignature.CancelAsymmetricSignatureKeyDeletion |
Canceling the deletion of a digital signature key pair |
asymmetricsignature.UpdateAsymmetricSignatureKeyAccessBindings |
Updating access permissions for an asymmetric signature key |
CancelDeleteSymmetricKey |
Canceling a previously scheduled key destruction |
CancelSymmetricKeyVersionDestruction |
Canceling a previously planned destruction of a symmetric key version |
CreateAsymmetricEncryptionKey |
Creating an asymmetric encryption key pair |
CreateAsymmetricSignatureKey |
Creating a digital signature key pair |
CreateSymmetricKey |
Creating a symmetric key |
DeleteAsymmetricEncryptionKey |
Updating an asymmetric encryption key pair |
DeleteAsymmetricSignatureKey |
Updating a digital signature key pair |
DeleteSymmetricKey |
Deleting a symmetric key |
RotateSymmetricKey |
Rotating a symmetric key |
ScheduleSymmetricKeyVersionDestruction |
Scheduling the destruction of a symmetric key version |
SetAsymmetricEncryptionKeyAccessBindings |
Assigning access permissions for an asymmetric encryption key pair |
SetAsymmetricSignatureKeyAccessBindings |
Assigning access permissions for a digital signature key pair |
SetPrimarySymmetricKeyVersion |
Selecting the primary version of a symmetric key |
SetSymmetricKeyAccessBindings |
Assigning access permissions for a symmetric key |
UpdateAsymmetricEncryptionKey |
Updating an asymmetric encryption key pair |
UpdateAsymmetricSignatureKey |
Updating a digital signature key pair |
UpdateSymmetricKey |
Changing a symmetric key |
UpdateSymmetricKeyAccessBindings |
Updating access permissions for a symmetric key |
UpdateAsymmetricEncryptionKeyAccessBindings |
Updating access permissions for an asymmetric encryption key pair |
Data event reference
| Event name | Description |
|---|---|
asymmetricencryption.AsymmetricDecrypt |
Decrypting data with an asymmetric key |
asymmetricencryption.AsymmetricGetPublicKey |
Getting a public key |
asymmetricsignature.AsymmetricGetPublicKey |
Getting a public key |
asymmetricsignature.AsymmetricSign |
Signing data with an asymmetric key |
asymmetricsignature.AsymmetricSignHash |
Signing a hash with an asymmetric key |
Decrypt |
Decrypting ciphertext with a key |
Encrypt |
Encrypting a text string with a key |
GenerateDataKey |
Generating a high-entropy key for Envelope Encryption |
ReEncrypt |
Decrypting ciphertext with a previous-version key and re-encrypting the decrypted text with a new version of the same key |