Google services with audit logs

The tables below list the Google services that write Admin Activity or Data Access audit logs. GA indicates that a log type is Generally Available for a service; Beta indicates that a log type is available, but might be changed in backward-incompatible ways and is not subject to any SLA or deprecation policy.

GCP services producing audit logs

Note: Compute Engine is the only GCP service that generates System Event audit logs.

GCP services with audit logs	Admin Activity logs	Data Access logs
Access Approval API	Beta	n/a^1
App Engine	GA	n/a^1
Application Identity^4	Beta	n/a^1
BigQuery	GA	GA^2
Cloud AutoML	Beta	Beta
Cloud Bigtable	Beta	n/a^1
Cloud Billing	Beta	n/a^1
Cloud Composer	GA	n/a^1
Cloud Dataflow	GA	n/a^1
Cloud Dataproc	GA	GA
Cloud Datastore	GA	GA^6
Cloud Deployment Manager	GA	GA
Cloud Data Loss Prevention	GA	GA
Cloud DNS	GA	GA
Cloud Functions	GA	GA
Cloud Genomics	Beta	Beta
Cloud Healthcare	Beta	Beta
Cloud Identity and Access Management	GA	GA
Cloud Identity-Aware Proxy	n/a^3	GA
Cloud IoT Core	GA	GA
Cloud Key Management Service	GA	GA
Cloud Memorystore	Beta	Beta
AI Platform	Beta	Beta
Cloud Pub/Sub	GA	GA
Cloud Run	Beta	Beta
Cloud Source Repositories	GA	GA
Cloud Spanner	GA	GA
Cloud SQL	GA	GA
Cloud Storage^5	GA	GA
Cloud Vision	GA	n/a^1
Compute Engine^7	GA	GA
Compute Engine Serial Port Access	GA	n/a^1
Container Analysis	Beta	Beta
Cloud Build	GA	GA
Dialogflow	GA	GA
Google Kubernetes Engine	GA	GA
Serverless VPC Access	Beta	Beta
Service Management	GA	n/a^1
Resource Manager	GA	GA
Stackdriver Debugger	GA	GA
Stackdriver Error Reporting	GA	GA
Stackdriver Logging	GA	GA
Stackdriver Monitoring	GA	GA
Stackdriver Trace	n/a^3	GA
Stackdriver Profiler	n/a^3	GA

G Suite services producing audit logs

G Suite services with audit logs	Admin Activity logs	Data Access logs
Enterprise Groups	GA	n/a^1

The G Suite audit log name is organizations/[ORGANIZATION_ID]/logs/cloudaudit.googleapis.com%2Factivity. G Suite audit logs use the resource type audited_resource.

For additional context, review the G Suite Admin Help article.

¹: This service does not produce Data Access audit logs.
²: BigQuery Data Access audit logs are enabled by default and do not count against your logs allotment.
³: This service does not produce Admin Activity audit logs.
⁴: Audits OAuth 2.0 client IDs and brands.
⁵: Does not yet include request/response information.
⁶: Audits requests to start managed import or export operations. Audit does not include entity-specific read/write logs for those operations.
⁷: Compute Engine also generates System Event audit logs.