此页面由 Cloud Translation API 翻译。

Cloud Deployment Manager 审核日志记录

本文档介绍 Cloud Deployment Manager 的审核日志记录。Google Cloud 服务会写入审核日志，这些日志用于记录 Google Cloud 资源中的管理活动和访问情况。如需了解详情，请参阅 Cloud Audit Logs 概览。

此页面的上次生成时间为世界协调时间 (UTC) 2024 年 5 月 21 日 19:58:08。

服务名称

Cloud Deployment Manager 审核日志使用服务名称 deploymentmanager.googleapis.com。

方法（按权限类型）

检查 DATA_READ、DATA_WRITE 和 ADMIN_READ 权限类型的方法是数据访问审核日志。检查 ADMIN_WRITE 权限类型的方法为管理员活动审核日志。

权限类型	方法
ADMIN_READ	v2.deploymentmanager.deployments.get v2.deploymentmanager.deployments.getIamPolicy v2.deploymentmanager.deploymentmanager.deployments.list v2.deploymentmanager.manifests.get v2.deploymentmanager.manifests.list v2.deploymentmanager.operations.list v2.deploymentmanager.operations.list v2.deploymentmanager.resources.get v2 deploymentmanager.manifest2deploymentmanager.beta2deploymentmanager.resources.list2 v2 deploymentmanager.deploymentmanager.resources.list2
ADMIN_WRITE	alpha.deploymentmanager.deployments.insert alpha.deploymentmanager.deployments.update v2.deploymentmanager.deployment.betadeployments.cancelPreview v2.deploymentmanager.deployments.delete v2.deploymentmanager.deployments.insert v2.deploymentmanager.deployments.patch v2.deploymentmanager.deployments.patch v2.deploymentmanager.deployments.stop v2.deploymentmanager.deployments.stop v2. v2. v2. deploymentmanager.deploymentmanager.deploymentmanagers.cancelPreview.

权限类型

方法

ADMIN_READ

v2.deploymentmanager.deployments.get
v2.deploymentmanager.deployments.getIamPolicy
v2.deploymentmanager.deploymentmanager.deployments.list
v2.deploymentmanager.manifests.get
v2.deploymentmanager.manifests.list
v2.deploymentmanager.operations.list
v2.deploymentmanager.operations.list
v2.deploymentmanager.resources.get
v2
deploymentmanager.manifest2deploymentmanager.beta2deploymentmanager.resources.list2
v2
deploymentmanager.deploymentmanager.resources.list2

ADMIN_WRITE

alpha.deploymentmanager.deployments.insert
alpha.deploymentmanager.deployments.update
v2.deploymentmanager.deployment.betadeployments.cancelPreview
v2.deploymentmanager.deployments.delete
v2.deploymentmanager.deployments.insert
v2.deploymentmanager.deployments.patch
v2.deploymentmanager.deployments.patch
v2.deploymentmanager.deployments.stop
v2.deploymentmanager.deployments.stop
v2.
v2.
v2.
deploymentmanager.deploymentmanager.deploymentmanagers.cancelPreview.

每个 API 接口的审核日志

如需了解系统会评估哪些权限以及如何评估每种方法，请参阅 Cloud Deployment Manager 的 Identity and Access Management 文档。

alpha.deploymentmanager.deployments

与属于 alpha.deploymentmanager.deployments 的方法关联的审核日志的详细信息。

alpha.deploymentmanager.deployments.insert

方法：alpha.deploymentmanager.deployments.insert
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.create - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="alpha.deploymentmanager.deployments.insert"

alpha.deploymentmanager.deployments.update

方法：alpha.deploymentmanager.deployments.update
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.update - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="alpha.deploymentmanager.deployments.update"

v2.deploymentmanager.deployments

与属于 v2.deploymentmanager.deployments 的方法关联的审核日志的详细信息。

v2.deploymentmanager.deployments.cancelPreview

方法：v2.deploymentmanager.deployments.cancelPreview
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.cancelPreview - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.cancelPreview"

v2.deploymentmanager.deployments.delete

方法：v2.deploymentmanager.deployments.delete
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.delete - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.delete"

v2.deploymentmanager.deployments.get

方法：v2.deploymentmanager.deployments.get
审核日志类型：数据访问
权限：
- deploymentmanager.deployments.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.get"

v2.deploymentmanager.deployments.getIamPolicy

方法：v2.deploymentmanager.deployments.getIamPolicy
审核日志类型：数据访问
权限：
- deploymentmanager.deployments.getIamPolicy - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.getIamPolicy"

v2.deploymentmanager.deployments.insert

方法：v2.deploymentmanager.deployments.insert
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.create - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.insert"

v2.deploymentmanager.deployments.list

方法：v2.deploymentmanager.deployments.list
审核日志类型：数据访问
权限：
- deploymentmanager.deployments.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.list"

v2.deploymentmanager.deployments.patch

方法：v2.deploymentmanager.deployments.patch
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.get - ADMIN_READ
- deploymentmanager.deployments.update - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.patch"

v2.deploymentmanager.deployments.setIamPolicy

方法：v2.deploymentmanager.deployments.setIamPolicy
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.setIamPolicy - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.setIamPolicy"

v2.deploymentmanager.deployments.stop

方法：v2.deploymentmanager.deployments.stop
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.stop - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.stop"

v2.deploymentmanager.deployments.update

方法：v2.deploymentmanager.deployments.update
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.update - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.deployments.update"

v2.deploymentmanager.manifests

与属于 v2.deploymentmanager.manifests 的方法关联的审核日志的详细信息。

v2.deploymentmanager.manifests.get

方法：v2.deploymentmanager.manifests.get
审核日志类型：数据访问
权限：
- deploymentmanager.manifests.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.manifests.get"

v2.deploymentmanager.manifests.list

方法：v2.deploymentmanager.manifests.list
审核日志类型：数据访问
权限：
- deploymentmanager.manifests.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.manifests.list"

v2.deploymentmanager.operations

与属于 v2.deploymentmanager.operations 的方法关联的审核日志的详细信息。

v2.deploymentmanager.operations.get

方法：v2.deploymentmanager.operations.get
审核日志类型：数据访问
权限：
- deploymentmanager.operations.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.operations.get"

v2.deploymentmanager.operations.list

方法：v2.deploymentmanager.operations.list
审核日志类型：数据访问
权限：
- deploymentmanager.operations.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.operations.list"

v2.deploymentmanager.resources

与属于 v2.deploymentmanager.resources 的方法关联的审核日志的详细信息。

v2.deploymentmanager.resources.get

方法：v2.deploymentmanager.resources.get
审核日志类型：数据访问
权限：
- deploymentmanager.resources.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.resources.get"

v2.deploymentmanager.resources.list

方法：v2.deploymentmanager.resources.list
审核日志类型：数据访问
权限：
- deploymentmanager.resources.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.resources.list"

v2.deploymentmanager.types

与属于 v2.deploymentmanager.types 的方法关联的审核日志的详细信息。

v2.deploymentmanager.types.list

方法：v2.deploymentmanager.types.list
审核日志类型：数据访问
权限：
- deploymentmanager.types.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2.deploymentmanager.types.list"

v2beta.deploymentmanager.deployments

与属于 v2beta.deploymentmanager.deployments 的方法关联的审核日志的详细信息。

v2beta.deploymentmanager.deployments.cancelPreview

方法：v2beta.deploymentmanager.deployments.cancelPreview
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.cancelPreview - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.cancelPreview"

v2beta.deploymentmanager.deployments.delete

方法：v2beta.deploymentmanager.deployments.delete
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.delete - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.delete"

v2beta.deploymentmanager.deployments.get

方法：v2beta.deploymentmanager.deployments.get
审核日志类型：数据访问
权限：
- deploymentmanager.deployments.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.get"

v2beta.deploymentmanager.deployments.insert

方法：v2beta.deploymentmanager.deployments.insert
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.create - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.insert"

v2beta.deploymentmanager.deployments.list

方法：v2beta.deploymentmanager.deployments.list
审核日志类型：数据访问
权限：
- deploymentmanager.deployments.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.list"

v2beta.deploymentmanager.deployments.patch

方法：v2beta.deploymentmanager.deployments.patch
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.get - ADMIN_READ
- deploymentmanager.deployments.update - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.patch"

v2beta.deploymentmanager.deployments.stop

方法：v2beta.deploymentmanager.deployments.stop
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.stop - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.stop"

v2beta.deploymentmanager.deployments.update

方法：v2beta.deploymentmanager.deployments.update
审核日志类型：管理员活动
权限：
- deploymentmanager.deployments.update - ADMIN_WRITE
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.deployments.update"

v2beta.deploymentmanager.manifests

与属于 v2beta.deploymentmanager.manifests 的方法关联的审核日志的详细信息。

v2beta.deploymentmanager.manifests.get

方法：v2beta.deploymentmanager.manifests.get
审核日志类型：数据访问
权限：
- deploymentmanager.manifests.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.manifests.get"

v2beta.deploymentmanager.manifests.list

方法：v2beta.deploymentmanager.manifests.list
审核日志类型：数据访问
权限：
- deploymentmanager.manifests.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.manifests.list"

v2beta.deploymentmanager.operations

与属于 v2beta.deploymentmanager.operations 的方法关联的审核日志的详细信息。

v2beta.deploymentmanager.operations.get

方法：v2beta.deploymentmanager.operations.get
审核日志类型：数据访问
权限：
- deploymentmanager.operations.get - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.operations.get"

v2beta.deploymentmanager.resources

与属于 v2beta.deploymentmanager.resources 的方法关联的审核日志的详细信息。

v2beta.deploymentmanager.resources.list

方法：v2beta.deploymentmanager.resources.list
审核日志类型：数据访问
权限：
- deploymentmanager.resources.list - ADMIN_READ
方法是长时间运行的操作或流式传输：否。
此方法的过滤条件：protoPayload.methodName="v2beta.deploymentmanager.resources.list"