Google services with Access Transparency logs

The table below lists the Google Cloud services that write Access Transparency logs.

GA indicates that a log type is generally available for a service. Beta indicates that a log type is available, but might be changed in backward-incompatible ways and is not subject to any SLA or deprecation policy.

If you want to enable Access Transparency logs, see Enabling Access Transparency.

The following Google services are supported by Access Transparency:

Google Cloud services with Access Transparency support Availability
AI Platform Notebooks GA
App Engine1 GA
BigQuery2 GA
Cloud Bigtable GA
Cloud Data Loss Prevention GA
Cloud Healthcare API3 Beta
Cloud Key Management Service (KMS) GA
Cloud Logging GA
Cloud Spanner GA
Cloud SQL GA
Cloud Storage GA
Cloud Vision GA
Compute Engine GA
Container Registry Beta
Dataflow GA
Dataproc GA
GKE on-prem GA
Google Kubernetes Engine Beta
Identity and Access Management GA
Persistent Disk GA
Pub/Sub4 GA
Text-to-Speech GA

1 Cloud Storage and Cloud SQL are the only compatible storage backends for App Engine currently supported by Access Transparency.

2 Some information about your queries, tables, and datasets might not generate an Access Transparency log entry if viewed by Google Cloud Support. Viewing query text, table names, dataset names, and dataset access control lists might not generate Access Transparency log entries; this access pathway gives read-only access. Viewing query results and table or dataset data generates Access Transparency log entries.

3 Features within Cloud Healthcare API that are not yet generally available may not generate Access Transparency logs. For more information, see the Cloud Healthcare API documentation.

4 Some information about your topics and subscriptions might not generate an Access Transparency log entry if viewed by Google Cloud Support. Viewing topic names, subscription names, message attributes, and timestamps might not generate Access Transparency log entries; this access pathway gives read-only access. Viewing message payloads generates Access Transparency log entries.