Google services with audit logs

The tables below list the Google Cloud services that write Admin Activity or Data Access audit logs. GA indicates that a log type is Generally Available for a service; Beta indicates that a log type is available, but might be changed in backward-incompatible ways and isn't subject to any SLA or deprecation policy.

For an overview of how audit logs are formatted, see the AuditLog page.

Google Cloud services producing audit logs

GCP services with audit logs Admin
Activity
logs
Data
Access
logs
Access Approval GA n/a1
Access Context Manager GA GA
API Gateway Beta Beta
AI Platform Notebooks Beta Beta
AI Platform Vizier Beta Beta
AI Platform Prediction Beta Beta
AI Platform Training Beta Beta
Anthos Service Mesh GA n/a1
App Engine GA n/a1
Application Identity2 Beta n/a1
Assured Workloads for Government Beta Beta
AutoML Beta Beta
BigQuery3 GA GA4
Cloud Bigtable GA n/a1
Cloud Billing Beta n/a1
Cloud Build GA GA
Cloud CDN GA GA
Certificate Authority Service Beta Beta
Cloud Composer GA GA
Cloud Data Fusion Beta Beta
Cloud Data Loss Prevention GA GA
Cloud Debugger GA GA
Cloud Deployment Manager GA GA
Cloud DNS GA GA
Cloud Domains Beta Beta
Cloud Functions GA GA
Cloud Healthcare API GA GA
Identity and Access Management (IAM) GA GA
Cloud Key Management Service GA GA
Cloud Life Sciences Beta Beta
Cloud Load Balancing GA GA
Cloud Logging GA GA
Cloud Monitoring GA GA
Cloud NAT GA GA
Cloud Profiler n/a7 GA
Cloud Run Beta Beta
Cloud Source Repositories GA GA
Cloud Spanner GA GA
Cloud SQL GA GA
Cloud Storage5 8 GA GA
Cloud Trace n/a7 GA
Cloud Translation GA GA
Cloud Vision GA n/a1
Compute Engine3 GA GA
Compute Engine Serial Port Access GA n/a1
Connectivity Tests GA GA
Container Analysis GA GA
Dataflow GA n/a1
Dataproc GA GA
Datastore GA GA6
Data Catalog Beta Beta
Dialogflow GA GA
Error Reporting GA GA
Firebase Management Beta Beta
Firebase Notifications Console n/a7 GA
Firestore GA GA6
Game Servers GA GA
Google Cloud Armor GA GA
Google Kubernetes Engine GA GA
Identity Platform GA GA
Identity-Aware Proxy n/a7 GA
IoT Core GA GA
Managed Service for Microsoft Active Directory Beta Beta
Memorystore Beta Beta
Pub/Sub3 GA n/a1
Pub/Sub Lite Beta Beta
reCAPTCHA Enterprise GA GA
Recommendations AI Beta Beta
Resource Manager GA GA
Secret Manager Beta Beta
Security Command Center GA9 GA9
Serverless VPC Access Beta Beta
Service Directory Beta Beta
Service Management3 GA n/a1
Transparency and Control Center GA GA
Virtual Private Cloud (VPC) GA GA

Google Workspace services producing audit logs

Google Workspace services with audit logs Admin
Activity
logs
Data
Access
logs
Google Workspace Admin Activities GA n/a1
Google Workspace Login Audit Activities n/a7 GA
Google Workspace Enterprise Groups Audit Activities GA n/a1

For additional context, review the Google Workspace Admin Help article.

1: Data Access audit logs are not written for this service.
2: Audits OAuth 2.0 client IDs and brands.
3: System Event audit logs are also available for this service.
4: BigQuery Data Access audit logs are enabled by default and don't count against your logs allotment.
5: Does not include request/response information.
6: Audits requests to start managed import or export operations. Audit does not include entity-specific read/write logs for those operations.
7: Admin Activity audit logs are not written for this service.
8: If an object ACL is set to public, audit logs are not generated for reads or writes to that object or its ACL.
9: Security Command Center Settings API Admin, Data access Audit logs, and Container Threat Detection are in Beta.