Memorystore for Memcached audit logging

This document describes audit logging performed on Memorystore for Memcached. It describes which methods are audited and details about the audit log each method produces. It describes which methods generate audit logs and the content of each log. It also identifies methods that don't produce audit logs. Google Cloud generates audit logs that record administrative activities and access events within your Google Cloud resources. For more information, see Cloud Audit Logs overview.

Service name

Memorystore for Memcached audit logs use the service name memcache.googleapis.com.

Methods by permission type

Methods that check DATA_READ, DATA_WRITE, and ADMIN_READ permissions generate logs categorized as Data Access audit logs. Methods that check ADMIN_WRITE permissions generate logs categorized as Admin Activity audit logs.

Permission type Methods

ADMIN_READ google.cloud.memcache.v1.CloudMemcache.GetInstance
google.cloud.memcache.v1.CloudMemcache.ListInstances
google.cloud.memcache.v1beta2.CloudMemcache.GetInstance
google.cloud.memcache.v1beta2.CloudMemcache.ListInstances
google.longrunning.Operations.GetOperation
google.longrunning.Operations.ListOperations

ADMIN_WRITE google.cloud.memcache.v1.CloudMemcache.ApplyParameters
google.cloud.memcache.v1.CloudMemcache.CreateInstance
google.cloud.memcache.v1.CloudMemcache.DeleteInstance
google.cloud.memcache.v1.CloudMemcache.UpdateInstance
google.cloud.memcache.v1.CloudMemcache.UpdateParameters
google.cloud.memcache.v1.CloudMemcache.UpgradeInstance
google.cloud.memcache.v1beta2.CloudMemcache.ApplyParameters
google.cloud.memcache.v1beta2.CloudMemcache.ApplySoftwareUpdate
google.cloud.memcache.v1beta2.CloudMemcache.CreateInstance
google.cloud.memcache.v1beta2.CloudMemcache.DeleteInstance
google.cloud.memcache.v1beta2.CloudMemcache.UpdateInstance
google.cloud.memcache.v1beta2.CloudMemcache.UpdateParameters
google.cloud.memcache.v1beta2.CloudMemcache.UpgradeInstance
google.longrunning.Operations.CancelOperation
google.longrunning.Operations.DeleteOperation

Permission type	Methods
`ADMIN_READ`	`google.cloud.memcache.v1.CloudMemcache.GetInstance` `google.cloud.memcache.v1.CloudMemcache.ListInstances` `google.cloud.memcache.v1beta2.CloudMemcache.GetInstance` `google.cloud.memcache.v1beta2.CloudMemcache.ListInstances` `google.longrunning.Operations.GetOperation` `google.longrunning.Operations.ListOperations`
`ADMIN_WRITE`	`google.cloud.memcache.v1.CloudMemcache.ApplyParameters` `google.cloud.memcache.v1.CloudMemcache.CreateInstance` `google.cloud.memcache.v1.CloudMemcache.DeleteInstance` `google.cloud.memcache.v1.CloudMemcache.UpdateInstance` `google.cloud.memcache.v1.CloudMemcache.UpdateParameters` `google.cloud.memcache.v1.CloudMemcache.UpgradeInstance` `google.cloud.memcache.v1beta2.CloudMemcache.ApplyParameters` `google.cloud.memcache.v1beta2.CloudMemcache.ApplySoftwareUpdate` `google.cloud.memcache.v1beta2.CloudMemcache.CreateInstance` `google.cloud.memcache.v1beta2.CloudMemcache.DeleteInstance` `google.cloud.memcache.v1beta2.CloudMemcache.UpdateInstance` `google.cloud.memcache.v1beta2.CloudMemcache.UpdateParameters` `google.cloud.memcache.v1beta2.CloudMemcache.UpgradeInstance` `google.longrunning.Operations.CancelOperation` `google.longrunning.Operations.DeleteOperation`

Audit logs for each API interface

For more information about which permissions are evaluated for each method, see the Identity and Access Management documentation for Memorystore for Memcached.

`google.cloud.memcache.v1.CloudMemcache`

The following section contains details about audit logs associated with methods belonging to google.cloud.memcache.v1.CloudMemcache.

`google.cloud.memcache.v1.CloudMemcache.ApplyParameters`

Method: google.cloud.memcache.v1.CloudMemcache.ApplyParameters
Audit log type: Admin activity
Permissions:
- memcache.instances.applyParameters - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.ApplyParameters"

`google.cloud.memcache.v1.CloudMemcache.CreateInstance`

Method: google.cloud.memcache.v1.CloudMemcache.CreateInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.create - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.CreateInstance"

`google.cloud.memcache.v1.CloudMemcache.DeleteInstance`

Method: google.cloud.memcache.v1.CloudMemcache.DeleteInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.delete - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.DeleteInstance"

`google.cloud.memcache.v1.CloudMemcache.GetInstance`

Method: google.cloud.memcache.v1.CloudMemcache.GetInstance
Audit log type: Data access
Permissions:
- memcache.instances.get - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.GetInstance"

`google.cloud.memcache.v1.CloudMemcache.ListInstances`

Method: google.cloud.memcache.v1.CloudMemcache.ListInstances
Audit log type: Data access
Permissions:
- memcache.instances.list - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.ListInstances"

`google.cloud.memcache.v1.CloudMemcache.UpdateInstance`

Method: google.cloud.memcache.v1.CloudMemcache.UpdateInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.update - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.UpdateInstance"

`google.cloud.memcache.v1.CloudMemcache.UpdateParameters`

Method: google.cloud.memcache.v1.CloudMemcache.UpdateParameters
Audit log type: Admin activity
Permissions:
- memcache.instances.updateParameters - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.UpdateParameters"

`google.cloud.memcache.v1.CloudMemcache.UpgradeInstance`

Method: google.cloud.memcache.v1.CloudMemcache.UpgradeInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.upgrade - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1.CloudMemcache.UpgradeInstance"

`google.cloud.memcache.v1beta2.CloudMemcache`

The following section contains details about audit logs associated with methods belonging to google.cloud.memcache.v1beta2.CloudMemcache.

`google.cloud.memcache.v1beta2.CloudMemcache.ApplyParameters`

Method: google.cloud.memcache.v1beta2.CloudMemcache.ApplyParameters
Audit log type: Admin activity
Permissions:
- memcache.instances.applyParameters - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.ApplyParameters"

`google.cloud.memcache.v1beta2.CloudMemcache.ApplySoftwareUpdate`

Method: google.cloud.memcache.v1beta2.CloudMemcache.ApplySoftwareUpdate
Audit log type: Admin activity
Permissions:
- memcache.instances.applySoftwareUpdate - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.ApplySoftwareUpdate"

`google.cloud.memcache.v1beta2.CloudMemcache.CreateInstance`

Method: google.cloud.memcache.v1beta2.CloudMemcache.CreateInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.create - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.CreateInstance"

`google.cloud.memcache.v1beta2.CloudMemcache.DeleteInstance`

Method: google.cloud.memcache.v1beta2.CloudMemcache.DeleteInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.delete - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.DeleteInstance"

`google.cloud.memcache.v1beta2.CloudMemcache.GetInstance`

Method: google.cloud.memcache.v1beta2.CloudMemcache.GetInstance
Audit log type: Data access
Permissions:
- memcache.instances.get - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.GetInstance"

`google.cloud.memcache.v1beta2.CloudMemcache.ListInstances`

Method: google.cloud.memcache.v1beta2.CloudMemcache.ListInstances
Audit log type: Data access
Permissions:
- memcache.instances.list - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.ListInstances"

`google.cloud.memcache.v1beta2.CloudMemcache.UpdateInstance`

Method: google.cloud.memcache.v1beta2.CloudMemcache.UpdateInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.update - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.UpdateInstance"

`google.cloud.memcache.v1beta2.CloudMemcache.UpdateParameters`

Method: google.cloud.memcache.v1beta2.CloudMemcache.UpdateParameters
Audit log type: Admin activity
Permissions:
- memcache.instances.updateParameters - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.UpdateParameters"

`google.cloud.memcache.v1beta2.CloudMemcache.UpgradeInstance`

Method: google.cloud.memcache.v1beta2.CloudMemcache.UpgradeInstance
Audit log type: Admin activity
Permissions:
- memcache.instances.upgrade - ADMIN_WRITE
Method is a long-running or streaming operation: Long running operation
Filter for this method: protoPayload.methodName="google.cloud.memcache.v1beta2.CloudMemcache.UpgradeInstance"

`google.longrunning.Operations`

The following section contains details about audit logs associated with methods belonging to google.longrunning.Operations.

`google.longrunning.Operations.CancelOperation`

Method: google.longrunning.Operations.CancelOperation
Audit log type: Admin activity
Permissions:
- memcache.operations.cancel - ADMIN_WRITE
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.longrunning.Operations.CancelOperation"

`google.longrunning.Operations.DeleteOperation`

Method: google.longrunning.Operations.DeleteOperation
Audit log type: Admin activity
Permissions:
- memcache.operations.delete - ADMIN_WRITE
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.longrunning.Operations.DeleteOperation"

`google.longrunning.Operations.GetOperation`

Method: google.longrunning.Operations.GetOperation
Audit log type: Data access
Permissions:
- memcache.operations.get - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.longrunning.Operations.GetOperation"

`google.longrunning.Operations.ListOperations`

Method: google.longrunning.Operations.ListOperations
Audit log type: Data access
Permissions:
- memcache.operations.list - ADMIN_READ
Method is a long-running or streaming operation: No.
Filter for this method: protoPayload.methodName="google.longrunning.Operations.ListOperations"