---
title: Audit Logs
url: /docs/administration/guides/audit-logs/
---
> This [Pulumi Cloud](/docs/iac/concepts/pulumi-cloud/) feature is available in the [Enterprise and Business Critical editions](/pricing/#audit-logs).



Pulumi Cloud retains [audit logs](/docs/administration/concepts/audit-logs/) for a limited window. Exporting them to a system you control gives you long-term retention and lets you correlate Pulumi activity with the rest of your security tooling.

There are two ways to get events out.

## Manual export

Pull a range of events on demand from the console, the CLI, or the REST API. Useful for an ad hoc investigation or a one-time archive.

- [Manual export](/docs/administration/guides/audit-logs/manual-export/)

## Automated export

> This [Pulumi Cloud](/docs/iac/concepts/pulumi-cloud/) feature is available in the [Business Critical edition](/pricing/#audit-log-export).

Configure a destination once, and Pulumi Cloud delivers new events to it continuously — no manual downloads or API polling. Neither destination backfills history, so events are delivered forward from the time you enable the export.

- [Export to AWS S3](/docs/administration/guides/audit-logs/aws-s3/)
- [Export to Microsoft Sentinel](/docs/administration/guides/audit-logs/azure-sentinel/)

## Learn more

- [Audit log formats](/docs/administration/reference/audit-log-formats/) — the fields each of the JSON, CSV, and CEF export formats carries.
- [Audit logs](/docs/administration/concepts/audit-logs/) — what audit logs record and how to view them in the console.