Investigating incidents
All information about actions with key resources is available in one place. Quickly get all the information there is about actions with specific resources.
Delphi Audit Trails
A service for collecting and exporting audit logs about events in Delphi Cloud resources.
Flexible audit log collection settings
Choose which resources to collect logs from: an organization and all of its clouds, a specific cloud, or certain folders within a cloud.
Exporting logs to various systems
Export audit logs to an encrypted Object Storage bucket. Store logs for further analysis or export them to a third-party system.
Functions triggered by security events
Integration with Cloud Logging and Cloud Functions lets you set up triggers for events collected by Audit Trails to promptly respond to these events or notify users.
Online monitoring
Use the Delphi Monitoring service dashboard to display the frequency of events by service or event type and create alerts for them.
Integration with Cloud Logging
Export events to Cloud Logging to view and analyze events from the last few days.
Service-level events
You can enable collection of events from the service level (data plane) and get information about what is happening with the contents of the resources.
Use Audit Trails in your projects
Investigating incidents
Audits and certification
User action control
Which events does Delphi Audit Trails log?
Event type
✓Logins by federated users
✓Creation/deletion of service accounts
✓Creation/deletion of service account keys
✓Changing user roles and service accounts
✓Creation/deletion of resources
✓Changing to resource settings
✓Stopping/restarting of a resource
✓Changes to access policies
✓Creation/changing of security groups
✓Actions with encryption keys and secrets
Getting started
Create an audit log and check its status and indicators in the monitoring system.
Get started
FAQ
A trail is the main Delphi Audit Trails resource responsible for collecting and delivering audit logs of Delphi Cloud resources to Object Storage buckets or Cloud Logging log groups. In the trail settings, you can choose where to collect audit logs from: Organization: Audit logs from all of an organization’s resources in all of its clouds. Cloud: Audit logs from resources in all the folders of a specific cloud. Individual folders: Audit logs from resources in a specific folder in one cloud.
Events from the configuration level (control plane) are available for a wide range of services including API Gateway, Application Load Balancer, Audit Trails, Certificate Manager, Cloud CDN, Cloud DNS, Cloud Functions, Cloud Logging, Compute Cloud, Container Registry, IAM, IoT Core, KMS, Lockbox, Managed Service for ClickHouse, GitLab, Greenplum, Kubernetes, StoreDoc, MySQL, PostgreSQL, Valkey, and more.
You need to create a separate service account for a trail under which all actions for exporting logs to other services will be performed. You can grant access to this service account and manage it in IAM.
We have created a solution library with instructions you can use to continuously transfer Audit Trails logs to external monitoring systems, databases, and SIEM systems.