Security Deck KSPM Audit Trails Events: UpdateException

Статья создана

Обновлена 24 апреля 2026 г.

Event JSON schema
Field description
IamAuthentication
IamTokenInfo
Authorization
ResourceMetadata
Resource
RequestMetadata
Status
ExceptionEventDetails
ExceptionScope
Location
Organization
Cloud
Folder
Cluster
ClusterOptions
Namespace
WorkloadName
WorkloadType
WorkloadLabel
Control

Event JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "authentication": {
    "authenticated": "boolean",
    // Includes only one of the fields `subjectType`
    "subjectType": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectId`
    "subjectId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectName`
    "subjectName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationId`
    "federationId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationName`
    "federationName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationType`
    "federationType": "string",
    // end of the list of possible fields
    "tokenInfo": {
      "maskedIamToken": "string",
      // Includes only one of the fields `iamTokenId`
      "iamTokenId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorId`
      "impersonatorId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorType`
      "impersonatorType": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorName`
      "impersonatorName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationId`
      "impersonatorFederationId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationName`
      "impersonatorFederationName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationType`
      "impersonatorFederationType": "string"
      // end of the list of possible fields
    }
  },
  "authorization": {
    "authorized": "boolean"
  },
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "requestMetadata": {
    "remoteAddress": "string",
    "userAgent": "string",
    "requestId": "string",
    // Includes only one of the fields `remotePort`
    "remotePort": "string"
    // end of the list of possible fields
  },
  "eventStatus": "string",
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "details": {
    "id": "string",
    "projectId": "string",
    "description": "string",
    "active": "boolean",
    "author": "string",
    "scope": {
      "locations": [
        {
          // Includes only one of the fields `organization`, `cloud`, `folder`, `cluster`
          "organization": {
            "organizationId": "string"
          },
          "cloud": {
            "cloudId": "string"
          },
          "folder": {
            "folderId": "string"
          },
          "cluster": {
            "clusterId": "string"
          }
          // end of the list of possible fields
        }
      ],
      "clusterOptions": {
        "namespaces": [
          {
            "name": "string"
          }
        ],
        "workloadNames": [
          {
            "name": "string"
          }
        ],
        "workloadTypes": [
          {
            "type": "string"
          }
        ],
        "workloadLabels": [
          {
            "label": "string"
          }
        ]
      }
    },
    "createdAt": "string",
    "modifiedAt": "string",
    "controls": [
      {
        "id": "string"
      }
    ],
    "resourcesCount": "string",
    "projectName": "string"
  },
  "requestParameters": "object",
  "response": "object"
}

Field description

Field	Description
eventId	string
eventSource	string
eventType	string
eventTime	string (date-time) String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
authentication	IamAuthentication
authorization	Authorization
resourceMetadata	ResourceMetadata
requestMetadata	RequestMetadata
eventStatus	enum (SynchronousEventStatus) `ERROR` `DONE`
error	Status The error result of the operation in case of failure or cancellation.
details	ExceptionEventDetails
requestParameters	object
response	object

IamAuthentication

Field	Description
authenticated	boolean
subjectType	enum (IamSubjectType) Includes only one of the fields `subjectType`. `YANDEX_PASSPORT_USER_ACCOUNT` `SERVICE_ACCOUNT` `FEDERATED_USER_ACCOUNT` `SSH_USER` `KUBERNETES_USER`
subjectId	string Includes only one of the fields `subjectId`.
subjectName	string Includes only one of the fields `subjectName`.
federationId	string Includes only one of the fields `federationId`.
federationName	string Includes only one of the fields `federationName`.
federationType	enum (FederationType) Includes only one of the fields `federationType`. `GLOBAL_FEDERATION` `PRIVATE_FEDERATION`
tokenInfo	IamTokenInfo

IamTokenInfo

Field	Description
maskedIamToken	string
iamTokenId	string Includes only one of the fields `iamTokenId`.
impersonatorId	string Includes only one of the fields `impersonatorId`.
impersonatorType	enum (IamSubjectType) Includes only one of the fields `impersonatorType`. `YANDEX_PASSPORT_USER_ACCOUNT` `SERVICE_ACCOUNT` `FEDERATED_USER_ACCOUNT` `SSH_USER` `KUBERNETES_USER`
impersonatorName	string Includes only one of the fields `impersonatorName`.
impersonatorFederationId	string Includes only one of the fields `impersonatorFederationId`.
impersonatorFederationName	string Includes only one of the fields `impersonatorFederationName`.
impersonatorFederationType	enum (FederationType) Includes only one of the fields `impersonatorFederationType`. `GLOBAL_FEDERATION` `PRIVATE_FEDERATION`

Authorization

Field	Description
authorized	boolean

ResourceMetadata

Field	Description
path[]	Resource

Resource

Field	Description
resourceType	string
resourceId	string
resourceName	string Includes only one of the fields `resourceName`.

RequestMetadata

Field	Description
remoteAddress	string
userAgent	string
requestId	string
remotePort	string (int64) Includes only one of the fields `remotePort`.

Status

The error result of the operation in case of failure or cancellation.

Field	Description
code	integer (int32) Error code. An enum value of google.rpc.Code.
message	string An error message.
details[]	object A list of messages that carry the error details.

ExceptionEventDetails

Field	Description
id	string
projectId	string
description	string
active	boolean
author	string
scope	ExceptionScope
createdAt	string (date-time) String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
modifiedAt	string (date-time) String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
controls[]	Control
resourcesCount	string (int64)
projectName	string

ExceptionScope

Field	Description
locations[]	Location
clusterOptions	ClusterOptions

Location

Field	Description
organization	Organization Includes only one of the fields `organization`, `cloud`, `folder`, `cluster`.
cloud	Cloud Includes only one of the fields `organization`, `cloud`, `folder`, `cluster`.
folder	Folder Includes only one of the fields `organization`, `cloud`, `folder`, `cluster`.
cluster	Cluster Includes only one of the fields `organization`, `cloud`, `folder`, `cluster`.

Organization

Field	Description
organizationId	string

Cloud

Field	Description
cloudId	string

Folder

Field	Description
folderId	string

Cluster

Field	Description
clusterId	string

ClusterOptions

Field	Description
namespaces[]	Namespace The number of elements must be in the range 0-255.
workloadNames[]	WorkloadName The number of elements must be in the range 0-255.
workloadTypes[]	WorkloadType The number of elements must be in the range 0-255.
workloadLabels[]	WorkloadLabel The number of elements must be in the range 0-255.

Namespace

Field

Description

name

string

The maximum string length in characters is 63.

WorkloadName

Field

Description

name

string

The maximum string length in characters is 63.

WorkloadType

Field

Description

type

string

The maximum string length in characters is 63.

WorkloadLabel

Field

Description

label

string

The maximum string length in characters is 127.

Control

Field	Description
id	string

Security Deck KSPM Audit Trails Events: UpdateException

Event JSON schemaEvent JSON schema

Field descriptionField description

IamAuthenticationIamAuthentication

IamTokenInfoIamTokenInfo

AuthorizationAuthorization

ResourceMetadataResourceMetadata

ResourceResource

RequestMetadataRequestMetadata

StatusStatus

ExceptionEventDetailsExceptionEventDetails

ExceptionScopeExceptionScope

LocationLocation

OrganizationOrganization

CloudCloud

FolderFolder

ClusterCluster

ClusterOptionsClusterOptions

NamespaceNamespace

WorkloadNameWorkloadName

WorkloadTypeWorkloadType

WorkloadLabelWorkloadLabel

ControlControl

Была ли статья полезна?

Event JSON schema

Field description

IamAuthentication

IamTokenInfo

Authorization

ResourceMetadata

Resource

RequestMetadata

Status

ExceptionEventDetails

ExceptionScope

Location

Organization

Cloud

Folder

Cluster

ClusterOptions

Namespace

WorkloadName

WorkloadType

WorkloadLabel

Control