Package audit

google/cloud/audit/audit_log.proto

AuditLog
AuthenticationInfo
AuthorizationInfo
RequestMetadata

type AuditLog ¶

Common audit log format for Google Cloud Platform API operations.

type AuditLog struct {
    // The name of the API service performing the operation. For example,
    // `"datastore.googleapis.com"`.
    ServiceName string `protobuf:"bytes,7,opt,name=service_name,json=serviceName" json:"service_name,omitempty"`
    // The name of the service method or operation.
    // For API calls, this should be the name of the API method.
    // For example,
    //
    //     "google.datastore.v1.Datastore.RunQuery"
    //     "google.logging.v1.LoggingService.DeleteLog"
    MethodName string `protobuf:"bytes,8,opt,name=method_name,json=methodName" json:"method_name,omitempty"`
    // The resource or collection that is the target of the operation.
    // The name is a scheme-less URI, not including the API service name.
    // For example:
    //
    //     "shelves/SHELF_ID/books"
    //     "shelves/SHELF_ID/books/BOOK_ID"
    ResourceName string `protobuf:"bytes,11,opt,name=resource_name,json=resourceName" json:"resource_name,omitempty"`
    // The number of items returned from a List or Query API method,
    // if applicable.
    NumResponseItems int64 `protobuf:"varint,12,opt,name=num_response_items,json=numResponseItems" json:"num_response_items,omitempty"`
    // The status of the overall operation.
    Status *google_rpc.Status `protobuf:"bytes,2,opt,name=status" json:"status,omitempty"`
    // Authentication information.
    AuthenticationInfo *AuthenticationInfo `protobuf:"bytes,3,opt,name=authentication_info,json=authenticationInfo" json:"authentication_info,omitempty"`
    // Authorization information. If there are multiple
    // resources or permissions involved, then there is
    // one AuthorizationInfo element for each {resource, permission} tuple.
    AuthorizationInfo []*AuthorizationInfo `protobuf:"bytes,9,rep,name=authorization_info,json=authorizationInfo" json:"authorization_info,omitempty"`
    // Metadata about the operation.
    RequestMetadata *RequestMetadata `protobuf:"bytes,4,opt,name=request_metadata,json=requestMetadata" json:"request_metadata,omitempty"`
    // The operation request. This may not include all request parameters,
    // such as those that are too large, privacy-sensitive, or duplicated
    // elsewhere in the log record.
    // It should never include user-generated data, such as file contents.
    // When the JSON object represented here has a proto equivalent, the proto
    // name will be indicated in the `@type` property.
    Request *google_protobuf2.Struct `protobuf:"bytes,16,opt,name=request" json:"request,omitempty"`
    // The operation response. This may not include all response elements,
    // such as those that are too large, privacy-sensitive, or duplicated
    // elsewhere in the log record.
    // It should never include user-generated data, such as file contents.
    // When the JSON object represented here has a proto equivalent, the proto
    // name will be indicated in the `@type` property.
    Response *google_protobuf2.Struct `protobuf:"bytes,17,opt,name=response" json:"response,omitempty"`
    // Other service-specific data about the request, response, and other
    // activities.
    ServiceData *google_protobuf1.Any `protobuf:"bytes,15,opt,name=service_data,json=serviceData" json:"service_data,omitempty"`
}

func (*AuditLog) Descriptor ¶

func (*AuditLog) Descriptor() ([]byte, []int)

func (*AuditLog) GetAuthenticationInfo ¶

func (m *AuditLog) GetAuthenticationInfo() *AuthenticationInfo

func (*AuditLog) GetAuthorizationInfo ¶

func (m *AuditLog) GetAuthorizationInfo() []*AuthorizationInfo

func (*AuditLog) GetMethodName ¶

func (m *AuditLog) GetMethodName() string

func (*AuditLog) GetNumResponseItems ¶

func (m *AuditLog) GetNumResponseItems() int64

func (*AuditLog) GetRequest ¶

func (m *AuditLog) GetRequest() *google_protobuf2.Struct

func (*AuditLog) GetRequestMetadata ¶

func (m *AuditLog) GetRequestMetadata() *RequestMetadata

func (*AuditLog) GetResourceName ¶

func (m *AuditLog) GetResourceName() string

func (*AuditLog) GetResponse ¶

func (m *AuditLog) GetResponse() *google_protobuf2.Struct

func (*AuditLog) GetServiceData ¶

func (m *AuditLog) GetServiceData() *google_protobuf1.Any

func (*AuditLog) GetServiceName ¶

func (m *AuditLog) GetServiceName() string

func (*AuditLog) GetStatus ¶

func (m *AuditLog) GetStatus() *google_rpc.Status

func (*AuditLog) ProtoMessage ¶

func (*AuditLog) ProtoMessage()

func (*AuditLog) Reset ¶

func (m *AuditLog) Reset()

func (*AuditLog) String ¶

func (m *AuditLog) String() string

type AuthenticationInfo ¶

Authentication information for the operation.

type AuthenticationInfo struct {
    // The email address of the authenticated user making the request.
    PrincipalEmail string `protobuf:"bytes,1,opt,name=principal_email,json=principalEmail" json:"principal_email,omitempty"`
}

func (*AuthenticationInfo) Descriptor ¶

func (*AuthenticationInfo) Descriptor() ([]byte, []int)

func (*AuthenticationInfo) GetPrincipalEmail ¶

func (m *AuthenticationInfo) GetPrincipalEmail() string

func (*AuthenticationInfo) ProtoMessage ¶

func (*AuthenticationInfo) ProtoMessage()

func (*AuthenticationInfo) Reset ¶

func (m *AuthenticationInfo) Reset()

func (*AuthenticationInfo) String ¶

func (m *AuthenticationInfo) String() string

type AuthorizationInfo ¶

Authorization information for the operation.

type AuthorizationInfo struct {
    // The resource being accessed, as a REST-style string. For example:
    //
    //     bigquery.googlapis.com/projects/PROJECTID/datasets/DATASETID
    Resource string `protobuf:"bytes,1,opt,name=resource" json:"resource,omitempty"`
    // The required IAM permission.
    Permission string `protobuf:"bytes,2,opt,name=permission" json:"permission,omitempty"`
    // Whether or not authorization for `resource` and `permission`
    // was granted.
    Granted bool `protobuf:"varint,3,opt,name=granted" json:"granted,omitempty"`
}

func (*AuthorizationInfo) Descriptor ¶

func (*AuthorizationInfo) Descriptor() ([]byte, []int)

func (*AuthorizationInfo) GetGranted ¶

func (m *AuthorizationInfo) GetGranted() bool

func (*AuthorizationInfo) GetPermission ¶

func (m *AuthorizationInfo) GetPermission() string

func (*AuthorizationInfo) GetResource ¶

func (m *AuthorizationInfo) GetResource() string

func (*AuthorizationInfo) ProtoMessage ¶

func (*AuthorizationInfo) ProtoMessage()

func (*AuthorizationInfo) Reset ¶

func (m *AuthorizationInfo) Reset()

func (*AuthorizationInfo) String ¶

func (m *AuthorizationInfo) String() string

type RequestMetadata ¶

Metadata about the request.

type RequestMetadata struct {
    // The IP address of the caller.
    CallerIp string `protobuf:"bytes,1,opt,name=caller_ip,json=callerIp" json:"caller_ip,omitempty"`
    // The user agent of the caller.
    // This information is not authenticated and should be treated accordingly.
    // For example:
    //
    // +   `google-api-python-client/1.4.0`:
    //     The request was made by the Google API client for Python.
    // +   `Cloud SDK Command Line Tool apitools-client/1.0 gcloud/0.9.62`:
    //     The request was made by the Google Cloud SDK CLI (gcloud).
    // +   `AppEngine-Google; (+http://code.google.com/appengine; appid: s~my-project`:
    //     The request was made from the `my-project` App Engine app.
    CallerSuppliedUserAgent string `protobuf:"bytes,2,opt,name=caller_supplied_user_agent,json=callerSuppliedUserAgent" json:"caller_supplied_user_agent,omitempty"`
}

func (*RequestMetadata) Descriptor ¶

func (*RequestMetadata) Descriptor() ([]byte, []int)

func (*RequestMetadata) GetCallerIp ¶

func (m *RequestMetadata) GetCallerIp() string

func (*RequestMetadata) GetCallerSuppliedUserAgent ¶

func (m *RequestMetadata) GetCallerSuppliedUserAgent() string

func (*RequestMetadata) ProtoMessage ¶

func (*RequestMetadata) ProtoMessage()

func (*RequestMetadata) Reset ¶

func (m *RequestMetadata) Reset()

func (*RequestMetadata) String ¶

func (m *RequestMetadata) String() string