Google services with audit logs

This page provides information about the Google Cloud and Google Workspace services that write audit logs.

For an overview of what audit logs are and what each type of audit log means, see Cloud Audit Logs.

For an overview of Google Workspace audit logs, see Audit logs for Google Workspace.

In the following tables, GA indicates that a log type is Generally Available for a service; Beta or Preview indicate that a log type is available, but might be changed in backward-incompatible ways and isn't subject to any SLA or deprecation policy. For more information, see the product launch stages.

To indicate that a log type isn't available, n/a (not applicable) is used.

Google Cloud services producing audit logs

Google Cloud services
with audit logs
Admin Activity
logs
Data Access
logs
System Event
logs
Policy Denied
logs
Notes
Access Approval GA n/a n/a n/a
Access Context Manager GA GA n/a n/a
API Gateway GA GA n/a n/a
Notebooks GA GA n/a n/a
AI Platform Vizier Beta Beta n/a n/a
AI Platform Prediction Beta Beta n/a n/a
AI Platform Training Beta Beta n/a n/a
Anthos clusters on AWS GA GA n/a n/a
Anthos on Azure GA GA n/a n/a
Anthos Service Mesh GA GA n/a n/a
App Engine GA n/a n/a n/a
Application Identity Beta n/a n/a n/a Audits OAuth 2.0 client IDs and brands.
Artifact Registry GA GA n/a n/a Logs are only available for Docker repositories.
Assured Workloads GA GA n/a n/a
AutoML Beta Beta n/a n/a
Bare Metal Solution n/a GA n/a n/a
BigQuery GA GA GA n/a BigQuery Data Access audit logs are enabled by default and don't count against your logs allotment.
BigQuery Data Transfer Service GA GA n/a n/a
Cloud Bigtable GA GA n/a n/a
Cloud Billing Beta n/a n/a n/a
Cloud Build GA GA n/a n/a
Cloud CDN GA GA n/a n/a
Certificate Authority Service Beta Beta n/a n/a
Cloud Composer GA GA n/a n/a
Cloud Data Fusion Beta Beta n/a n/a
Database Migration Service GA n/a n/a n/a
Cloud Data Loss Prevention GA GA n/a n/a
Cloud Debugger GA GA n/a n/a
Cloud Deployment Manager GA GA n/a n/a
Cloud DNS GA GA n/a n/a
Cloud Domains GA GA n/a n/a
Cloud Functions GA GA n/a n/a
Workflows GA GA n/a n/a
Cloud Healthcare API GA GA n/a n/a
Identity and Access Management (IAM) GA GA n/a n/a
Cloud IDS Preview Preview n/a n/a
Cloud Key Management Service GA GA n/a n/a
Cloud Life Sciences Beta Beta n/a n/a
Cloud Load Balancing GA GA n/a n/a
Cloud Logging GA GA n/a n/a
Cloud Monitoring GA GA n/a n/a
Cloud NAT GA GA n/a n/a
Cloud Profiler n/a GA n/a n/a
Cloud Run Beta Beta n/a n/a
Cloud Source Repositories GA GA n/a n/a
Cloud Spanner GA GA n/a n/a
Cloud SQL GA GA n/a n/a
Cloud Storage GA GA n/a n/a Does not include request/response information.
If an object ACL is set to public, audit logs are not generated for reads or writes to that object or its ACL.
Cloud Trace n/a GA n/a n/a
Cloud Translation GA GA n/a n/a
Cloud Vision GA n/a n/a n/a
Compute Engine GA GA GA n/a
Connectivity Tests GA GA n/a n/a
Contact Center AI Insights n/a Beta n/a n/a
Container Analysis GA GA n/a n/a
Dataflow GA n/a n/a n/a
Dataproc GA GA n/a n/a
Dataproc Metastore GA GA n/a n/a
Datastore GA GA n/a n/a
Data Catalog Beta Beta n/a n/a
Dialogflow GA GA n/a n/a
Early Access Center n/a GA n/a n/a
Error Reporting GA GA n/a n/a
Essential Contacts n/a GA n/a n/a
Eventarc Beta Beta n/a n/a
Firebase App Check Preview Preview n/a n/a
Firebase Management Beta Beta n/a n/a
Firebase Notifications Console n/a GA n/a n/a
Firebase Security Rules GA GA n/a n/a
Firestore GA GA n/a n/a
Game Servers GA GA n/a n/a
Google Cloud Armor GA GA n/a n/a
Google Kubernetes Engine GA GA n/a n/a
Google Workspace Add-ons API GA n/a n/a n/a
Identity Platform GA GA n/a n/a
Identity-Aware Proxy n/a GA n/a n/a
IoT Core GA GA n/a n/a
KRM API Hosting GA GA n/a n/a
Managed Service for Microsoft Active Directory Beta Beta n/a n/a
Memorystore Beta Beta n/a n/a
Migrate for Compute Engine Beta Beta n/a n/a
Organization Policy GA GA n/a n/a
Pub/Sub GA GA GA n/a Pub/Sub does not currently write Data Access audit logs for message operations, such as Publish, Subscribe, and Acknowledge.
Pub/Sub Lite GA GA n/a n/a
reCAPTCHA Enterprise GA GA n/a n/a
Recommendations AI Beta Beta n/a n/a
Recommender Preview Preview n/a n/a
Resource Manager GA GA n/a n/a
Resource Settings GA GA n/a n/a
Secret Manager GA GA n/a n/a
Security Command Center GA GA n/a n/a Security Command Center Settings API Admin, Data Access audit logs, and Container Threat Detection are in Beta.
Serverless VPC Access Beta Beta n/a n/a
Service Directory GA GA n/a n/a
Service Management GA n/a GA n/a
Service Metadata API n/a Preview n/a n/a
Speaker ID GA GA n/a n/a The Speaker ID service is in restricted GA.
Transcoder API n/a GA n/a n/a
Transparency and Control Center GA GA n/a n/a
Traffic Director GA GA n/a n/a
Vertex AI GA GA n/a n/a
Virtual Private Cloud (VPC) GA GA n/a n/a
VPC Service Controls n/a n/a n/a GA VPC Service Controls is managed through Access Context Manager, which produces Admin Activity and Data Access audit logs.

Google Workspace services producing audit logs

Google Workspace services
with audit logs
Admin Activity
logs
Data Access
logs
System Event
logs
Policy Denied
logs
Notes
Google Workspace Admin Audit GA n/a n/a n/a
Google Workspace Enterprise Groups Audit GA n/a n/a n/a
Google Workspace Login Audit n/a GA n/a n/a
Google Workspace OAuth Token Audit GA GA n/a n/a
Google Workspace SAML Audit n/a GA n/a n/a