민감한 작업은 항상 민감한 작업 서비스 플랫폼 로그에 기록됩니다.
또한 Google Cloud 는 권고 알림을 통해 민감한 작업의 요약을 제공합니다.
플랫폼 로그에서 각 유형의 처음 세 가지 개별 작업을 볼 수 있는 링크가 알림에 제공됩니다. Cloud Logging 로그를 보려면 roles/logs.viewer와 같은 적절한 Identity and Access Management 역할이 필요합니다.
특정 유형의 민감한 작업이 3개를 초과하는 경우 알림에 로깅에서 모든 작업을 볼 수 있는 링크가 제공될 수도 있습니다. 하지만 이 링크는 모든 경우에 제공되지는 않습니다. 프로젝트 수준 SSH 키 추가와 같은 일부 민감한 작업은 조직의 여러 프로젝트에서 발생할 수 있습니다. 이 경우 Logging은 항상 특정 리소스(프로젝트, 폴더 또는 조직)로 범위가 지정되므로 Google에서 모든 민감한 작업을 볼 수 있는 단일 로깅 링크를 제공할 수 없습니다.
조직의 모든 민감한 작업 로그 보기
조직의 모든 민감한 작업 로그를 보려면 이러한 로그를 집계하도록 Logging 버킷을 설정하면 됩니다.
다음 쿼리를 사용하여 버킷에 모든 민감한 작업 로그를 포함합니다.
logName:sensitiveaction.googleapis.com%2Faction
AND "add_ssh_key"와 같은 특정 유형의 민감한 작업 로그만 원하는 경우 추가 조건을 추가할 수 있습니다.
민감한 작업 로그에 대한 알림 설정
민감한 작업에 대한 알림을 더 자주 받으려면 로그 기반 알림을 구성하면 됩니다. 예를 들어 다음 쿼리를 사용하여 모든 민감한 작업 로그를 일치시킵니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-10(UTC)"],[[["\u003cp\u003ePre-GA features are subject to the "Pre-GA Offerings Terms," are provided "as is," and may have limited support.\u003c/p\u003e\n"],["\u003cp\u003eSensitive actions are always logged in the Sensitive Actions Service platform logs and summarized in Advisory Notifications by Google Cloud.\u003c/p\u003e\n"],["\u003cp\u003eAdvisory Notifications may provide links to view the first three sensitive actions in platform logs, requiring an appropriate Identity and Access Management role.\u003c/p\u003e\n"],["\u003cp\u003eTo view all Sensitive Actions logs in your organization, you can set up a Logging bucket using the provided query: \u003ccode\u003elogName:sensitiveaction.googleapis.com%2Faction\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eYou can configure log-based alerts to receive frequent notifications about sensitive actions using the query: \u003ccode\u003elogName:sensitiveaction.googleapis.com%2Faction\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Work with Sensitive Actions logs\n\n| **Preview**\n|\n|\n| This feature is subject to the \"Pre-GA Offerings Terms\" in the General Service Terms section\n| of the [Service Specific Terms](/terms/service-terms#1).\n|\n| Pre-GA features are available \"as is\" and might have limited support.\n|\n| For more information, see the\n| [launch stage descriptions](/products#product-launch-stages).\n\nSensitive actions are always written to\n[Sensitive Actions Service platform logs](/logging/docs/api/platform-logs#sensitive_actions_service).\nAdditionally, Google Cloud provides a summary of sensitive actions through\nAdvisory Notifications.\n\nLinks to view the first three individual actions of each type in the platform\nlogs are provided in the notification. You need an appropriate\n[Identity and Access Management role](/logging/docs/access-control#considerations), such as\n`roles/logs.viewer`, to be able to view Cloud Logging logs.\n\nIf there are more than three sensitive actions of a particular type, the\nnotification might also provide a link to view all actions in\nLogging. However, this link is not provided in all cases. Some\nsensitive actions, such as adding a project-level SSH key, can occur in several\ndifferent projects in your organization. In this case, Google can't provide you\nwith a single Logging link to view all the sensitive actions,\nbecause Logging is always scoped to a particular resource\n(project, folder, or organization).\n\nView all Sensitive Actions logs in the organization\n---------------------------------------------------\n\nIf you want to see all Sensitive Actions logs in your organization, you can\n[set up a Logging bucket](/logging/docs/central-log-storage) to\naggregate these logs.\n\nUse the following query to include all Sensitive Actions logs in the bucket: \n\n logName:sensitiveaction.googleapis.com%2Faction\n\nYou can add additional terms if you only want certain types of Sensitive Actions\nlogs, such as `AND \"add_ssh_key\"`.\n\nSet up alerts for Sensitive Actions logs\n----------------------------------------\n\nIf you want to get more frequent alerts about sensitive actions, you can\nconfigure a [log-based alert](/logging/docs/alerting/log-based-alerts). For\nexample, use the following query to match all Sensitive Actions logs: \n\n logName:sensitiveaction.googleapis.com%2Faction\n\nWhat's next\n-----------\n\n- Learn about [audit logging](/advisory-notifications/docs/audit-logging)."]]
