Pulumi Cloud audit logs

Overview

Audit logs enable you to track the activity of users within an organization. They display what a user did, when they did it and where by recording user actions.

Pulumi’s audit logs allow you to account for the activity your users are taking within your organization. The logs are immutable and record all user actions. Auditing makes the activity of members in an organization attributable. The logs capture the UNIX timestamp of the event, the user who invoked the action, the event that took place, and the source IP of the call the user made.

View audit logs

Only organization admins can view audit logs.

To view audit logs:

1. Navigate to the organization’s Settings.
2. Navigate to Audit Logs.

This will show the most recent events in descending order. You can also filter logs by a particular user by selecting their profile picture.

Export audit logs

Pulumi Cloud can download audit log events on demand from the console, the CLI, or the REST API, and can continuously deliver them to Amazon S3 or Microsoft Sentinel. See the audit log guides for every procedure, and Audit log formats for the fields each export format carries.

Learn more

• Audit log events — the complete catalog of the 150+ events Pulumi Cloud records, grouped by product area.
• pulumi org audit-log — list and export audit log entries from the command line.
• Audit logs REST API — the endpoints behind the console’s export, for scripted retrieval.
• Audit log guides — downloading a log on demand, or delivering it continuously to Amazon S3 or Microsoft Sentinel.
• Audit log formats — the fields carried by the JSON, CSV, and CEF exports.
• Pulumi ESC audit logs — how environment activity is recorded.
• RBAC scopes — the permissions behind the “requires organization admin” note on individual events.
• Least privilege — using audit logs to review and tighten the access your organization grants.