此页面由 Cloud Translation API 翻译。

Progressive Rollout API 审核日志记录

本文档介绍了 Progressive Rollout API 的审核日志记录。Google Cloud 服务会生成审核日志，以记录 Google Cloud 资源中的管理和访问活动。如需详细了解 Cloud Audit Logs，请参阅以下内容：

服务名称

Progressive Rollout API 审核日志使用服务名称 progressiverollout.googleapis.com。针对此服务的过滤条件：

    protoPayload.serviceName="progressiverollout.googleapis.com"

方法（按权限类型）

每个 IAM 权限都有一个 type 属性，该属性的值是一个枚举，可以是以下四个值之一：ADMIN_READ、ADMIN_WRITE、DATA_READ 或 DATA_WRITE。在您调用某个方法时，Progressive Rollout API 会生成一个审核日志，其类别取决于执行该方法所需权限的 type 属性。需要 IAM 权限且 type 属性值为 DATA_READ、DATA_WRITE 或 ADMIN_READ 的方法会生成数据访问审核日志。需要 IAM 权限且 type 属性值为 ADMIN_WRITE 的方法会生成管理员活动审核日志。

权限类型方法

DATA_READ google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRollout
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForOrganization
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlan
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForOrganization
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRollouts
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForOrganization

DATA_WRITE google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRollout
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForOrganization
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlan
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForOrganization
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRollout
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForOrganization
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlan
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForFolder
google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForOrganization

权限类型	方法
`DATA_READ`	`google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRollout` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForOrganization` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlan` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForOrganization` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRollouts` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForOrganization`
`DATA_WRITE`	`google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRollout` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForOrganization` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlan` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForOrganization` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRollout` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForOrganization` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlan` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForFolder` `google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForOrganization`

API 接口审核日志

如需了解如何评估每种方法的权限以及评估哪些权限，请参阅 Progressive Rollout API 的 Identity and Access Management 文档。

`google.cloud.progressiverollout.api.v1beta.ProgressiveRollout`

以下审核日志与属于 google.cloud.progressiverollout.api.v1beta.ProgressiveRollout 的方法相关联。

`CancelRollout`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRollout
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.cancel - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRollout"

`CancelRolloutForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.cancel - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForFolder"

`CancelRolloutForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.cancel - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CancelRolloutForOrganization"

`CreateRolloutPlan`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlan
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.create - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlan"

`CreateRolloutPlanForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.create - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForFolder"

`CreateRolloutPlanForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.create - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.CreateRolloutPlanForOrganization"

`DeleteRollout`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRollout
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRollout"

`DeleteRolloutForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForFolder"

`DeleteRolloutForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutForOrganization"

`DeleteRolloutPlan`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlan
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlan"

`DeleteRolloutPlanForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForFolder"

`DeleteRolloutPlanForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.delete - DATA_WRITE
方法是长时间运行的操作或流式传输操作：长时间运行的操作
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.DeleteRolloutPlanForOrganization"

`GetRollout`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRollout
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRollout"

`GetRolloutForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForFolder"

`GetRolloutForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutForOrganization"

`GetRolloutPlan`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlan
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlan"

`GetRolloutPlanForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForFolder"

`GetRolloutPlanForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rolloutPlans.get - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.GetRolloutPlanForOrganization"

`ListRollouts`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRollouts
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.list - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRollouts"

`ListRolloutsForFolder`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForFolder
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.list - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForFolder"

`ListRolloutsForOrganization`

方法：google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForOrganization
审核日志类型：数据访问
权限：
- progressiverollout.rollouts.list - DATA_READ
方法是长时间运行的操作或流式传输操作：否。
此方法的过滤条件：protoPayload.methodName="google.cloud.progressiverollout.api.v1beta.ProgressiveRollout.ListRolloutsForOrganization"

系统事件

系统事件审核日志是 GCP 系统生成的，而不是通过直接用户操作生成的。如需了解详情，请参阅系统事件审核日志。

方法名称	过滤此事件	备注
progressiverollout.orchestration.OperationCall	`protoPayload.methodName="progressiverollout.orchestration.OperationCall"`
progressiverollout.orchestration.ProductCall	`protoPayload.methodName="progressiverollout.orchestration.ProductCall"`