Supported endpoints for Audit Trail

Account supported endpoints

The following Account endpoints are supported and will be logged in Audit Trail:

• SendPhoneValidation (POST /account/v3/phone-validations)
• ConfirmPhoneValidation (POST /account/v3/phone-validations/{phone_validation_id}/confirm)
• UpdateUserPreferences (PATCH /account/v3/users/{user_id}/preferences)
• CreateMFAOTP (POST /account/v3/mfa/otps)
• DeleteMFAOTP (DELETE /account/v3/mfa/otps/{mfa_otp_id})
• ValidateMFAOTP (POST /account/v3/mfa/otps/{mfa_otp_id}/validate)
• UpdateUser (PATCH /account/v3/users/{user_id})
• ChangeUserEmail (POST /account/v3/users/{user_id}/change-email)
• ChangeUserPassword (POST /account/v3/users/{user_id}/change-password)
• ChangeSupportPlan (POST /account/v3/organizations/{organization_id}/support-plans)
• CloseOrganization (POST /account/v3/organizations/{organization_id}/close)
• SetPicture (PUT /account/v3/organizations/{organization_id}/picture)

Apple silicon supported endpoints

The following Apple silicon endpoints are supported and will be logged in Audit Trail:

• CreateServer (POST /apple-silicon/v1alpha1/zones/{zone}/servers)
• DeleteServer (DELETE /apple-silicon/v1alpha1/zones/{zone}/servers/{server_id})
• RebootServer (POST /apple-silicon/v1alpha1/zones/{zone}/servers/{server_id}/reboot)
• ReinstallServer (POST /apple-silicon/v1alpha1/zones/{zone}/servers/{server_id}/reinstall)
• UpdateServer (PATCH /apple-silicon/v1alpha1/zones/{zone}/servers/{server_id})
• BatchCreateServers (POST /apple-silicon/v1alpha1/zones/{zone}/batch-create-servers)

Edge Services supported endpoints

The following Edge Services endpoints are supported and will be logged in Audit Trail:

• CreatePipeline (POST /edge-services/v1beta1/pipelines)
• UpdatePipeline (PATCH /edge-services/v1beta1/pipelines/{pipeline_id})
• DeletePipeline (DELETE /edge-services/v1beta1/pipelines/{pipeline_id})
• SetHeadStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/set-head-stage)
• CreateDNSStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/dns-stages)
• UpdateDNSStage (PATCH /edge-services/v1beta1/dns-stages/{dns_stage_id})
• DeleteDNSStage (DELETE /edge-services/v1beta1/dns-stages/{dns_stage_id})
• CreateTLSStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/tls-stages)
• UpdateTLSStage (PATCH /edge-services/v1beta1/tls-stages/{tls_stage_id})
• DeleteTLSStage (DELETE /edge-services/v1beta1/tls-stages/{tls_stage_id})
• CreateCacheStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/cache-stages)
• UpdateCacheStage (PATCH /edge-services/v1beta1/cache-stages/{cache_stage_id})
• DeleteCacheStage (DELETE /edge-services/v1beta1/cache-stages/{cache_stage_id})
• CreateBackendStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/backend-stages)
• UpdateBackendStage (PATCH /edge-services/v1beta1/backend-stages/{backend_stage_id})
• DeleteBackendStage (DELETE /edge-services/v1beta1/backend-stages/{backend_stage_id})
• CreateWafStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/waf-stages)
• UpdateWafStage (PATCH /edge-services/v1beta1/waf-stages/{waf_stage_id})
• DeleteWafStage (DELETE /edge-services/v1beta1/waf-stages/{waf_stage_id})
• CreateRouteStage (POST /edge-services/v1beta1/pipelines/{pipeline_id}/route-stages)
• UpdateRouteStage (PATCH /edge-services/v1beta1/route-stages/{route_stage_id})
• DeleteRouteStage (DELETE /edge-services/v1beta1/route-stages/{route_stage_id})
• AddRouteRules (POST /edge-services/v1beta1/route-stages/{route_stage_id}/route-rules)
• SetRouteRules (PUT /edge-services/v1beta1/route-stages/{route_stage_id}/route-rules)
• SelectPlan (PATCH /edge-services/v1beta1/current-plan)
• DeleteCurrentPlan (DELETE /edge-services/v1beta1/current-plan/{project_id})

Elastic Metal supported endpoints

The following Elastic Metal endpoints are supported and will be logged in Audit Trail:

• AddOptionServer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/options/{option_id})
• CreateServer (POST /baremetal/v1/zones/{zone}/servers)
• DeleteOptionServer (DELETE /baremetal/v1/zones/{zone}/servers/{server_id}/options/{option_id})
• DeleteServer (DELETE /baremetal/v1/zones/{zone}/servers/{server_id})
• InstallServer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/install)
• MigrateServerToMonthlyOffer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/migrate-offer-monthly)
• RebootServer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/reboot)
• StartBMCAccess (POST /baremetal/v1/zones/{zone}/servers/{server_id}/bmc-access)
• StartServer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/start)
• StopBMCAccess (DELETE /baremetal/v1/zones/{zone}/servers/{server_id}/bmc-access)
• StopServer (POST /baremetal/v1/zones/{zone}/servers/{server_id}/stop)
• UpdateIP (PATCH /baremetal/v1/zones/{zone}/servers/{server_id}/ips/{ip_id})
• UpdateServer (PATCH /baremetal/v1/zones/{zone}/servers/{server_id})
• UpdateSetting (PATCH /baremetal/v1/zones/{zone}/settings/{setting_id})

IAM supported endpoints

The following IAM endpoints are supported and will be logged in Audit Trail:

• CreateSSHKey (POST /iam/v1alpha1/ssh-keys)
• UpdateSSHKey (PATCH /iam/v1alpha1/ssh-keys/{ssh_key_id})
• DeleteSSHKey (DELETE /iam/v1alpha1/ssh-keys/{ssh_key_id})
• CreateGroup (POST /iam/v1alpha1/groups)
• UpdateGroup (PATCH /iam/v1alpha1/groups/{group_id})
• DeleteGroup (DELETE /iam/v1alpha1/groups/{group_id})
• AddGroupMember (POST /iam/v1alpha1/groups/{group_id}/add-member)
• AddGroupMembers (POST /iam/v1alpha1/groups/{group_id}/add-members)
• SetGroupMembers (PUT /iam/v1alpha1/groups/{group_id}/members)
• RemoveGroupMember (POST /iam/v1alpha1/groups/{group_id}/remove-member)
• CreateAPIKey (POST /iam/v1alpha1/api-keys)
• UpdateAPIKey (PATCH /iam/v1alpha1/api-keys/{access_key})
• DeleteAPIKey (DELETE /iam/v1alpha1/api-keys/{access_key})
• CreateUser (POST /iam/v1alpha1/users)
• UpdateUser (PATCH /iam/v1alpha1/users/{user_id})
• DeleteUser (DELETE /iam/v1alpha1/users/{user_id})
• LockMember (POST /iam/v1alpha1/users/{user_id}/lock)
• CreateMFAOTP (POST /iam/v1alpha1/users/{user_id}/mfa-otp)
• DeleteMFAOTP (DELETE /iam/v1alpha1/users/{user_id}/mfa-otp)
• UnlockMember (POST /iam/v1alpha1/users/{user_id}/unlock)
• UpdateUserPassword (POST /iam/v1alpha1/users/{user_id}/update-password)
• UpdateUserUsername (POST /iam/v1alpha1/users/{user_id}/update-username)
• ValidateMFAOTP (POST /iam/v1alpha1/users/{user_id}/validate-mfa-otp)
• CreateApplication (POST /iam/v1alpha1/applications)
• UpdateApplication (PATCH /iam/v1alpha1/applications/{application_id})
• DeleteApplication (DELETE /iam/v1alpha1/applications/{application_id})
• CreatePolicy (POST /iam/v1alpha1/policies)
• UpdatePolicy (PATCH /iam/v1alpha1/policies/{policy_id})
• DeletePolicy (DELETE /iam/v1alpha1/policies/{policy_id})
• ClonePolicy (POST /iam/v1alpha1/policies/{policy_id}/clone)
• SetRules (PUT /iam/v1alpha1/rules)

If SCIM is enabled in your Organization, all calls performed by the Identity Provider will also appear on Audit Trail, using the same APIs as regular actions.

Instances supported endpoints

The following Instances endpoints are supported and will be logged in Audit Trail:

• AttachServerFileSystem (POST /instance/v1/zones/{zone}/servers/{server_id}/attach-filesystem)
• AttachServerVolume (POST /instance/v1/zones/{zone}/servers/{server_id}/attach-volume)
• CreateImage (POST /instance/v1/zones/{zone}/images)
• CreateIp (POST /instance/v1/zones/{zone}/ips)
• CreatePlacementGroup (POST /instance/v1/zones/{zone}/placement_groups)
• CreatePrivateNIC (POST /instance/v1/zones/{zone}/servers/{server_id}/private_nics)
• CreateSecurityGroup (POST /instance/v1/zones/{zone}/security_groups)
• CreateSecurityGroupRule (PUT /instance/v1/zones/{zone}/security_groups/{security_group_id}/rules/{security_group_rule_id})
• CreateServer (POST /instance/v1/zones/{zone}/servers)
• CreateSnapshot (POST /instance/v1/zones/{zone}/snapshots)
• CreateVolume (POST /instance/v1/zones/{zone}/volumes)
• DeleteImage (DELETE /instance/v1/zones/{zone}/images/{image_id})
• DeleteIp (DELETE /instance/v1/zones/{zone}/ips/{ip})
• DeletePlacementGroup (DELETE /instance/v1/zones/{zone}/placement_groups/{placement_group_id})
• DeletePrivateNIC (DELETE /instance/v1/zones/{zone}/servers/{server_id}/private_nics/{private_nic_id})
• DeleteSecurityGroup (DELETE /instance/v1/zones/{zone}/security_groups/{security_group_id})
• DeleteSecurityGroupRule (DELETE /instance/v1/zones/{zone}/security_groups/{security_group_id}/rules/{security_group_rule_id})
• DeleteServer (DELETE /instance/v1/zones/{zone}/servers/{server_id})
• DeleteServerUserData (DELETE /instance/v1/zones/{zone}/servers/{server_id}/user_data/{key})
• DeleteSnapshot (DELETE /instance/v1/zones/{zone}/snapshots/{snapshot_id})
• DeleteVolume (DELETE /instance/v1/zones/{zone}/volumes/{volume_id})
• DetachServerFileSystem (POST /instance/v1/zones/{zone}/servers/{server_id}/detach-filesystem)
• DetachServerVolume (POST /instance/v1/zones/{zone}/servers/{server_id}/detach-volume)
• ExportSnapshot (POST /instance/v1/zones/{zone}/snapshots/{snapshot_id}/export)
• ReleaseIpToIpam (POST /instance/v1/zones/{zone}/ips/{ip_id}/release-to-ipam)
• ServerAction (POST /instance/v1/zones/{zone}/servers/{server_id}/action)
• SetServerUserData (PATCH /instance/v1/zones/{zone}/servers/{server_id}/user_data/{key})
• UpdateImage (PUT /instance/v1/zones/{zone}/images/{id})
• UpdateIp (PATCH /instance/v1/zones/{zone}/ips/{ip})
• UpdatePlacementGroup (PATCH /instance/v1/zones/{zone}/placement_groups/{placement_group_id})
• UpdatePlacementGroupServers (PATCH /instance/v1/zones/{zone}/placement_groups/{placement_group_id}/servers)
• UpdatePrivateNIC (PATCH /instance/v1/zones/{zone}/servers/{server_id}/private_nics/{private_nic_id})
• UpdateSecurityGroup (PUT /instance/v1/zones/{zone}/security_groups/{id})
• UpdateSecurityGroupRule (PATCH /instance/v1/zones/{zone}/security_groups/{security_group_id}/rules/{security_group_rule_id})
• UpdateServer (PATCH /instance/v1/zones/{zone}/servers/{server_id})
• UpdateSnapshot (PATCH /instance/v1/zones/{zone}/snapshots/{snapshot_id})
• UpdateVolume (PUT /instance/v1/zones/{zone}/volumes/{id})

Key Manager supported endpoints

The following Key Manager endpoints are supported and will be logged in Audit Trail:

• CreateKey (POST /key-manager/v1alpha1/regions/{region}/keys)
• UpdateKey (PATCH /key-manager/v1alpha1/regions/{region}/keys/{key_id})
• DeleteKey (DELETE /key-manager/v1alpha1/regions/{region}/keys/{key_id})
• ProtectKey (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/protect)
• UnprotectKey (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/unprotect)
• RotateKey (Manual rotation) (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/rotate)
• DisableKey (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/disable)
• EnableKey (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/enable)
• ImportKeyMaterial (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/import-key-material)
• DeleteKeyMaterial (POST /key-manager/v1alpha1/regions/{region}/keys/{key_id}/delete-key-material)

Kubernetes supported endpoints

The following Kubernetes endpoints are supported and will be logged in Audit Trail:

• Create a new cluster (POST /k8s/v1/regions/{region}/clusters)
• Update a cluster (PATCH /k8s/v1/regions/{region}/clusters/{cluster_id})
• Delete a cluster (DELETE /k8s/v1/regions/{region}/clusters/{cluster_id})
• Migrate a cluster to SBS CSI (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/migrate-to-sbs-csi)
• Reset the admin token of a cluster (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/reset-admin-token)
• Change the cluster type (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/set-type)
• Upgrade a cluster (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/upgrade)
• Create a new pool in a cluster (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/pools)
• Update a pool in a cluster (PATCH /k8s/v1/regions/{region}/pools/{pool_id})
• Delete a pool in a cluster (DELETE /k8s/v1/regions/{region}/pools/{pool_id})
• Upgrade a pool in a cluster (POST /k8s/v1/regions/{region}/pools/{pool_id}/upgrade)
• Delete a node in a cluster (DELETE /k8s/v1/regions/{region}/nodes/{node_id})
• Reboot a node in a cluster (POST /k8s/v1/regions/{region}/nodes/{node_id}/reboot)
• Create a Kosmos node (POST /k8s/v1/regions/{region}/pools/{pool_id}/external-nodes)
• Delete an existing ACL (DELETE /k8s/v1/regions/{region}/acls/{acl_id})
• Add new ACLs (POST /k8s/v1/regions/{region}/clusters/{cluster_id}/acls)
• Set new ACLs (PUT /k8s/v1/regions/{region}/clusters/{cluster_id}/acls)

Additional information

IP addresses are not logged in Audit Trail for Kubernetes events due to security considerations.

Load Balancers supported endpoints

The following Load Balancers endpoints are supported and will be logged in Audit Trail:

• AddBackendServers (POST /lb/v1/zones/{zone}/backends/{backend_id}/servers)
• CreateAcl (POST /lb/v1/zones/{zone}/frontends/{frontend_id}/acls)
• CreateBackend (POST /lb/v1/zones/{zone}/lbs/{lb_id}/backends)
• CreateCertificate (POST /lb/v1/zones/{zone}/lbs/{lb_id}/certificates)
• CreateFrontend (POST /lb/v1/zones/{zone}/lbs/{lb_id}/frontends)
• CreateIp (POST /lb/v1/zones/{zone}/ips)
• CreateRoute (POST /lb/v1/zones/{zone}/routes)
• DeleteAcl (DELETE /lb/v1/zones/{zone}/acls/{acl_id})
• DeleteBackend (DELETE /lb/v1/zones/{zone}/backends/{backend_id})
• DeleteCertificate (DELETE /lb/v1/zones/{zone}/certificates/{certificate_id})
• DeleteFrontend (DELETE /lb/v1/zones/{zone}/frontends/{frontend_id})
• DeleteLb (DELETE /lb/v1/zones/{zone}/lbs/{lb_id})
• ReleaseIp (DELETE /lb/v1/zones/{zone}/ips/{ip_id})
• RemoveBackendServers (DELETE /lb/v1/zones/{zone}/backends/{backend_id}/servers)
• SetAcls (PUT /lb/v1/zones/{zone}/frontends/{frontend_id}/acls)
• SetBackendServers (PUT /lb/v1/zones/{zone}/backends/{backend_id}/servers)
• UpdateAcl (PUT /lb/v1/zones/{zone}/acls/{acl_id})
• UpdateBackend (PUT /lb/v1/zones/{zone}/backends/{backend_id})
• UpdateCertificate (PUT /lb/v1/zones/{zone}/certificates/{certificate_id})
• UpdateFrontend (PUT /lb/v1/zones/{zone}/frontends/{frontend_id})
• UpdateHealthCheck (PUT /lb/v1/zones/{zone}/backends/{backend_id}/healthcheck)
• UpdateIp (PATCH /lb/v1/zones/{zone}/ips/{ip_id})
• UpdateLb (PUT /lb/v1/zones/{zone}/lbs/{lb_id})
• UpdateRoute (PUT /lb/v1/zones/{zone}/routes/{route_id})

Secret Manager supported endpoints

The following Secret Manager endpoints are supported and will be logged in Audit Trail:

• Create a secret (POST /secret-manager/v1beta1/regions/{region}/secrets)
• Update metadata of a secret (PATCH /secret-manager/v1beta1/regions/{region}/secrets/{secret_id})
• Delete a secret (DELETE /secret-manager/v1beta1/regions/{region}/secrets/{secret_id})
• Allow a product to use the secret (POST /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/add-owner)
• Enable secret protection (POST /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/protect)
• Disable secret protection (POST /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/unprotect)
• Create a version (/secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions)
• Update metadata of a version (PATCH /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions/{revision})
• Delete a version (DELETE /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions/{revision})
• Disable a version (POST /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions/{revision}/disable)
• Enable a version (POST /secret-manager/v1beta1/regions/{region}/secrets/{secret_id}/versions/{revision}/enable)

Site-to-Site VPN supported endpoints

The following Site-to-Site VPN endpoints are supported and will be logged in Audit Trail:

• CreateConnection (POST /s2s-vpn/v1alpha1/regions/{region}/connections)
• CreateCustomerGateway (POST /s2s-vpn/v1alpha1/regions/{region}/customer-gateways)
• CreateRoutingPolicy (POST /s2s-vpn/v1alpha1/regions/{region}/routing-policies)
• CreateVpnGateway (POST /s2s-vpn/v1alpha1/regions/{region}/vpn-gateways)
• DeleteConnection (DELETE /s2s-vpn/v1alpha1/regions/{region}/connections/{connection_id})
• DeleteCustomerGateway (DELETE /s2s-vpn/v1alpha1/regions/{region}/customer-gateways/{gateway_id})
• DeleteRoutingPolicy (DELETE /s2s-vpn/v1alpha1/regions/{region}/routing-policies/{routing_policy_id})
• DeleteVpnGateway (DELETE /s2s-vpn/v1alpha1/regions/{region}/vpn-gateways/{gateway_id})
• DetachRoutingPolicy (POST /s2s-vpn/v1alpha1/regions/{region}/connections/{connection_id}/detach-routing-policy)
• RenewConnectionPsk (POST /s2s-vpn/v1alpha1/regions/{region}/connections/{connection_id}/renew-psk)
• SetRoutingPolicy (POST /s2s-vpn/v1alpha1/regions/{region}/connections/{connection_id}/set-routing-policy)
• UpdateConnection (PATCH /s2s-vpn/v1alpha1/regions/{region}/connections/{connection_id})
• UpdateCustomerGateway (PATCH /s2s-vpn/v1alpha1/regions/{region}/customer-gateways/{gateway_id})
• UpdateRoutingPolicy (PATCH /s2s-vpn/v1alpha1/regions/{region}/routing-policies/{routing_policy_id})
• UpdateVpnGateway (PATCH /s2s-vpn/v1alpha1/regions/{region}/vpn-gateways/{gateway_id})

VPC supported endpoints

The following VPC endpoints are supported and will be logged in Audit Trail:

• CreateVPC (POST /vpc/v2/regions/{region}/vpcs)
• UpdateVPC (PATCH /vpc/v2/regions/{region}/vpcs/{vpc_id})
• DeleteVPC (DELETE /vpc/v2/regions/{region}/vpcs/{vpc_id})
• CreatePrivateNetwork (POST /vpc/v2/regions/{region}/private-networks)
• UpdatePrivateNetwork (PATCH /vpc/v2/regions/{region}/private-networks/{private_network_id})
• DeletePrivateNetwork (DELETE /vpc/v2/regions/{region}/private-networks/{private_network_id})
• EnableDHCP (POST /vpc/v2/regions/{region}/private-networks/{private_network_id}/enable-dhcp)
• EnableCustomRoutesPropagation (POST /vpc/v2/regions/{region}/vpcs/{vpc_id}/enable-custom-routes-propagation)
• CreateRoute (POST /vpc/v2/regions/{region}/routes)
• UpdateRoute (PATCH /vpc/v2/regions/{region}/routes/{route_id})
• DeleteRoute (DELETE /vpc/v2/regions/{region}/routes/{route_id})
• SetAcl (PUT /vpc/v2/regions/{region}/vpcs/{vpc_id}/acl-rules)