Auditable Event Methods for Apache Flink on Confluent Cloud¶
Auditable event methods for Confluent Cloud for Apache Flink are triggered by operations on Apache Flink® in Confluent Cloud and send event messages about the operations to the audit log cluster, where they are stored as event records in a Kafka topic. The resource types for which auditable event methods are triggered include:
- Flink region (FLINK_REGION)
- Flink compute pool (COMPUTE_POOL)
- Flink workspace (FLINK_WORKSPACE)
- Flink statement (STATEMENT)
The following sections provide details about the auditable event methods for each of these resource types.
Flink region¶
Auditable event methods for the resource type FLINK_REGION are
triggered by operations on Flink compute pool and generate event messages
that are sent to the audit log cluster, where they are stored as event
records in a Kafka topic.
| Method name | Action triggering an auditable event message |
|---|---|
| ListFlinkRegions | A request to list the Flink regions in the organization. |
ListFlinkRegions¶
The ListFlinkRegions event method is triggered by a request to get a
a list of the Flink regions in the organization and sends an event message
that is saved in the audit log as an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "ListFlinkRegions",
"cloud_resources": [
{
"resource": {
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "READ_ONLY",
"data": {
"BypassCache": false,
"Cloud": 0,
"PageSize": 10,
"PageToken": "",
"RegionName": ""
}
},
"result": {
"status": "SUCCESS",
"data": {
"elements": [
{
"fcpm_v_2_region": {
"id": "aws.af-south-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-east-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-3",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-south-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-south-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-3",
"metadata": null
}
}
]
}
}
}
}
Flink compute pool¶
Auditable event methods for the resource type COMPUTE_POOL are
triggered by operations on a Flink compute pool and generate event messages
that are sent to the audit log cluster, where they are stored as event
records in a Kafka topic.
| Method name | Action triggering an auditable event message |
|---|---|
| CreateComputePool | A request to create a Flink compute pool. |
| DeleteComputePool | A request to delete a Flink compute pool. |
| GetComputePool | A request for a query of a Flink compute pool details. |
| ListComputePools | A request for a list of Flink compute pools. |
| UpdateComputePool | A request to update a Flink compute pool. |
CreateComputePool¶
The CreateComputePool event method is triggered by a request to create a
Flink compute pool and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "ListRegions",
"cloud_resources": [
{
"resource": {
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "READ_ONLY",
"data": {
"BypassCache": false,
"Cloud": 0,
"PageSize": 10,
"PageToken": "",
"RegionName": ""
}
},
"result": {
"status": "SUCCESS",
"data": {
"elements": [
{
"fcpm_v_2_region": {
"id": "aws.af-south-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-east-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-northeast-3",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-south-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-south-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-1",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-2",
"metadata": null
}
},
{
"fcpm_v_2_region": {
"id": "aws.ap-southeast-3",
"metadata": null
}
}
]
}
}
}
}
DeleteComputePool¶
The DeleteComputePool event method is triggered by a request to delete a
Flink compute pool and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/environment=env-j30y0iqp/flink-region=azure.uksouth/compute-pool=lfcp-1",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "DeleteComputePool",
"cloud_resources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
},
{
"type": "ENVIRONMENT",
"resource_id": "env-j30y0iqp"
},
{
"type": "FLINK_REGION",
"resource_id": "azure.uksouth"
}
]
},
"resource": {
"type": "COMPUTE_POOL",
"resource_id": "lfcp-1"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "MODIFICATION",
"data": {
"environment_id": "env-j30y0iqp",
"id": "lfcp-1"
}
},
"result": {
"status": "SUCCESS"
}
}
}
GetComputePool¶
The GetComputePool event method is triggered by a request to get the details
for a Flink compute pool and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/environment=env-j30y0iqp/flink-region=azure.uksouth/compute-pool=lfcp-1",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "DeleteComputePool",
"cloud_resources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
},
{
"type": "ENVIRONMENT",
"resource_id": "env-j30y0iqp"
},
{
"type": "FLINK_REGION",
"resource_id": "azure.uksouth"
}
]
},
"resource": {
"type": "COMPUTE_POOL",
"resource_id": "lfcp-1"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "MODIFICATION",
"data": {
"environment_id": "env-j30y0iqp",
"id": "lfcp-1"
}
},
"result": {
"status": "SUCCESS"
}
}
}
ListComputePools¶
The ListComputePools event method is triggered by a request for a list of
Flink compute pools and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/environment=env-j30y0iqp/flink-region=azure.uksouth/compute-pool=lfcp-1",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "DeleteComputePool",
"cloud_resources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
},
{
"type": "ENVIRONMENT",
"resource_id": "env-j30y0iqp"
},
{
"type": "FLINK_REGION",
"resource_id": "azure.uksouth"
}
]
},
"resource": {
"type": "COMPUTE_POOL",
"resource_id": "lfcp-1"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "MODIFICATION",
"data": {
"environment_id": "env-j30y0iqp",
"id": "lfcp-1"
}
},
"result": {
"status": "SUCCESS"
}
}
}
UpdateComputePool¶
The UpdateComputePool event method is triggered by a request to update a
Flink compute pool and sends an event message that is saved in the audit log as
an event record.
Examples¶
SUCCESS
{
"specversion": "1.0",
"id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"source": "crn://confluent.cloud/",
"type": "io.confluent.cloud/request",
"subject": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/environment=env-j30y0iqp/flink-region=azure.uksouth/compute-pool=lfcp-1",
"datacontenttype": "application/json",
"dataschema": "https://confluent.io/internal/events/AuditLog.v2",
"data": {
"service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"internal_service_name": "crn://confluent.cloud/service=cc-ksql-api-service",
"method_name": "DeleteComputePool",
"cloud_resources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resource_id": "6c2e1a25-2292-483b-9c76-79982e3dc005"
},
{
"type": "ENVIRONMENT",
"resource_id": "env-j30y0iqp"
},
{
"type": "FLINK_REGION",
"resource_id": "azure.uksouth"
}
]
},
"resource": {
"type": "COMPUTE_POOL",
"resource_id": "lfcp-1"
}
}
],
"authentication_info": {
"exposure": "CUSTOMER",
"principal": {
"confluent_user": {
"resource_id": "user-1",
"internal_id": "99"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=6c2e1a25-2292-483b-9c76-79982e3dc005/identity-provider=Confluent/identity=user-1"
},
"request_metadata": {
"request_id": [
"74726163656964303132333435363738"
],
"client_address": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"access_type": "MODIFICATION",
"data": {
"environment_id": "env-j30y0iqp",
"id": "lfcp-1"
}
},
"result": {
"status": "SUCCESS"
}
}
}
Flink workspace¶
Auditable event methods for the resource type FLINK_WORKSPACE are
triggered by operations on a Flink workspace and generate event messages
that are sent to the audit log cluster, where they are stored as event
records in a Kafka topic.
| Method name | Action triggering an auditable event message |
|---|---|
| CreateWorkspace | A request to create a Flink workspace. |
| DeleteWorkspace | A request to delete a Flink workspace. |
| GetWorkspace | A request for a query of a Flink workspace details. |
| ListWorkspaces | A request for a list of Flink workspaces. |
| UpdateWorkspace | A request to update a Flink workspace. |
CreateWorkspace¶
The CreateWorkspace event method is triggered by a request to create a Flink workspace
and sends an event message that is saved in the audit log as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "CreateWorkspace",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-rzhxp2"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-east-1"
}
]
},
"resource": {
"type": "FLINK_WORKSPACE",
"resourceId": "workspace-2023-09-22-162414"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-123456"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-123456"
},
"requestMetadata": {
"requestId": [
"8b4f7ec5693a01fb4a1ae0a24240f944"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "MODIFICATION",
"data": {
"workspace_name": "workspace-2023-09-22-162414",
"environment_id": "env-rzhxp2",
"org_resource_id": "a56cf537-ab71-480e-b272-43e71531798b",
"spec": {
"compute_pool": {
"id": "lfcp-stgcc30xr80"
},
"service_account": null
}
}
},
"result": {
"status": "SUCCESS",
"data": {
"environment_id": "env-rzhxp2",
"name": "workspace-2023-09-22-162414",
"org_id": "a56cf537-ab71-480e-b272-43e71531798b",
"spec": {
"compute_pool": {
"id": "lfcp-stgcc30xr80"
},
"service_account": null
}
}
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414",
"specversion": "1.0",
"id": "b76bee22-7678-49ea-8902-67519b0d4133",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:24:15.007233032Z",
"type": "io.confluent.cloud/request"
}
DeleteWorkspace¶
The DeleteWorkspace event method is triggered by a request to delete a Flink workspace
and sends an event message that is saved in the audit log as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "DeleteWorkspace",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-rzhxp2"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-east-1"
}
]
},
"resource": {
"type": "FLINK_WORKSPACE",
"resourceId": "workspace-2023-09-22-162414"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-123456"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-123456"
},
"requestMetadata": {
"requestId": [
"6a4dd657fe6fc5241360983cbf8dc8ce"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "MODIFICATION",
"data": {
"workspace_name": "workspace-2023-09-22-162414",
"environment_id": "env-rzhxp2",
"org_resource_id": "a56cf537-ab71-480e-b272-43e71531798b"
}
},
"result": {
"status": "SUCCESS"
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414",
"specversion": "1.0",
"id": "36791901-6bd6-4057-8820-9d6860d56d0c",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:24:41.773914645Z",
"type": "io.confluent.cloud/request"
}
GetWorkspace¶
The GetWorkspace event method is triggered by a request to get the details
for a Flink workspace and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "GetWorkspace",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-rzhxp2"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-east-1"
}
]
},
"resource": {
"type": "FLINK_WORKSPACE",
"resourceId": "workspace-2023-09-22-162414"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-123456"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-123456"
},
"requestMetadata": {
"requestId": [
"ae0fe8164a496916ba2494a4f5cef447"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "READ_ONLY",
"data": {
"environment_id": "env-rzhxp2",
"org_resource_id": "a56cf537-ab71-480e-b272-43e71531798b",
"workspace_name": "workspace-2023-09-22-162414"
}
},
"result": {
"status": "SUCCESS",
"data": {
"environment_id": "env-rzhxp2",
"name": "workspace-2023-09-22-162414",
"org_id": "a56cf537-ab71-480e-b272-43e71531798b",
"spec": {
"service_account": null,
"compute_pool": {
"id": "lfcp-stgcc30xr80"
}
}
}
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414",
"specversion": "1.0",
"id": "ae935a4b-bcc6-4359-9149-3c31e728877a",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:24:15.666686762Z",
"type": "io.confluent.cloud/request"
}
ListWorkspaces¶
The ListWorkspaces event method is triggered by a request for a list of
Flink workspaces and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "ListWorkspace",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-rzhxp2"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-east-1"
}
]
},
"resource": {
"type": "FLINK_WORKSPACE",
"resourceId": "workspace-2023-09-22-162414"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-123456"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-123456"
},
"requestMetadata": {
"requestId": [
"5e926b0c56f3131f8fb350f228ad9b11"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "READ_ONLY",
"data": {
"environment_id": "env-rzhxp2",
"org_resource_id": "a56cf537-ab71-480e-b272-43e71531798b",
"page_size": 100
}
},
"result": {
"status": "SUCCESS",
"data": {
"data": [
{
"name": "workspace-2023-09-22-162414",
"org_id": "a56cf537-ab71-480e-b272-43e71531798b",
"spec": {
"compute_pool": {
"id": "lfcp-stgcc30xr80"
},
"service_account": null
},
"environment_id": "env-rzhxp2"
}
]
}
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162414",
"specversion": "1.0",
"id": "f1f9c92e-f3b8-425e-971f-c0206b0eadc0",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:24:29.707277883Z",
"type": "io.confluent.cloud/request"
}
UpdateWorkspace¶
The UpdateWorkspace event method is triggered by a request to update a
Flink workspace and sends an event message that is saved in the audit log as
an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "UpdateWorkspace",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-rzhxp2"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-east-1"
}
]
},
"resource": {
"type": "FLINK_WORKSPACE",
"resourceId": "workspace-2023-09-22-162803"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-123456"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-123456"
},
"requestMetadata": {
"requestId": [
"8dd4507a31c9fa9f7ca08fdad18020c5"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "MODIFICATION",
"data": {
"spec": {
"compute_pool": null,
"service_account": null
},
"workspace_name": "workspace-2023-09-22-162803",
"environment_id": "env-rzhxp2",
"org_resource_id": "a56cf537-ab71-480e-b272-43e71531798b"
}
},
"result": {
"status": "SUCCESS",
"data": {
"environment_id": "env-rzhxp2",
"name": "workspace-2023-09-22-162803",
"org_id": "a56cf537-ab71-480e-b272-43e71531798b",
"spec": {
"compute_pool": null,
"service_account": null
}
}
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162803"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-rzhxp2/flink-region=aws.us-east-1/flink-workspace=workspace-2023-09-22-162803",
"specversion": "1.0",
"id": "b59d471f-3da3-41e2-847a-8363ab4f9077",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:29:09.323947120Z",
"type": "io.confluent.cloud/request"
}
Flink statement¶
Auditable event methods for the resource type STATEMENT are
triggered by operations on a Flink statement and generate event messages
that are sent to the audit log cluster, where they are stored as event
records in a Kafka topic.
| Method name | Action triggering an auditable event message |
|---|---|
| CreateStatement | A request to create a Flink statement. |
| DeleteStatement | A request to delete a Flink statement. |
| GetStatement | A request for a query of a Flink statement details. |
| ListStatements | A request for a list of Flink statements. |
CreateStatement¶
The CreateStatement event method is triggered by a request to create a Flink statement
and sends an event message that is saved in the audit log as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "CreateStatement",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-xx5q1x"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-west-2"
}
]
},
"resource": {
"type": "STATEMENT",
"resourceId": "d730eb03-d3b5-412d"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-5q0mkq"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/identity-provider=Confluent/identity=u-5q0mkq"
},
"requestMetadata": {
"requestId": [
"38cf3bb10d833c36d7b022c633522153"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "MODIFICATION",
"data": {
"environment_id": "env-xx5q1x",
"org_resource_id": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5",
"spec": {
"compute_pool_id": "lfcp-devccxwdpvk",
"name": "d730eb03-d3b5-412d",
"principal": "u-5q0mkq"
}
}
},
"result": {
"status": "SUCCESS",
"data": {
"metadata": {
"environment_id": "env-xx5q1x"
},
"spec": {
"compute_pool_id": "lfcp-devccxwdpvk",
"name": "d730eb03-d3b5-412d",
"principal": "u-5q0mkq"
}
}
},
"resourceName": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-xx5q1x/flink-region=aws.us-west-2/statement=d730eb03-d3b5-412d"
},
"subject": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-xx5q1x/flink-region=aws.us-west-2/statement=d730eb03-d3b5-412d",
"specversion": "1.0",
"id": "d1fbc567-e5bb-4728-bf54-de88a1aba84e",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:45:13.689395512Z",
"type": "io.confluent.cloud/request"
}
DeleteStatement¶
The DeleteStatement event method is triggered by a request to delete a Flink statement
and sends an event message that is saved in the audit log as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "DeleteStatement",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-v6x7j0"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-west-2"
}
]
},
"resource": {
"type": "STATEMENT",
"resourceId": "workspace-2023-09-19-024944-b9c724de-c284-486e-a45f-e7dc1100e181"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-devccq71mwp"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/identity-provider=Confluent/identity=u-devccq71mwp"
},
"requestMetadata": {
"requestId": [
"7e9362e01607ffacb08fa80dd2241db2"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "MODIFICATION",
"data": {
"StatementName": "workspace-2023-09-19-024944-b9c724de-c284-486e-a45f-e7dc1100e181",
"OrgResourceId": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5",
"EnvironmentId": "env-v6x7j0"
}
},
"result": {
"status": "SUCCESS"
},
"resourceName": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-v6x7j0/flink-region=aws.us-west-2/statement=workspace-2023-09-19-024944-b9c724de-c284-486e-a45f-e7dc1100e181"
},
"subject": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-v6x7j0/flink-region=aws.us-west-2/statement=workspace-2023-09-19-024944-b9c724de-c284-486e-a45f-e7dc1100e181",
"specversion": "1.0",
"id": "de07cd1b-ec0f-4d0e-abce-050a993e7532",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:48:05.106656163Z",
"type": "io.confluent.cloud/request"
}
GetStatement¶
The GetStatement event method is triggered by a request to get the details
for a Flink statement and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "GetStatement",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "a56cf537-ab71-480e-b272-43e71531798b"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-9pjxk0"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.us-west-2"
}
]
},
"resource": {
"type": "STATEMENT",
"resourceId": "928c8647-582b-4d3b"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-21r8oo"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/identity-provider=Confluent/identity=u-21r8oo"
},
"requestMetadata": {
"requestId": [
"a688f8810ba426f39511c04f7b511a0a"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "READ_ONLY",
"data": {
"statement_name": "928c8647-582b-4d3b",
"environment_id": "env-9pjxk0"
}
},
"result": {
"status": "SUCCESS",
"data": {
"metadata": {
"environment_id": "env-9pjxk0"
},
"spec": {
"compute_pool_id": "lfcp-stgccgjvgr1",
"name": "928c8647-582b-4d3b",
"principal": "u-21r8oo"
}
}
},
"resourceName": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-9pjxk0/flink-region=aws.us-west-2/statement=928c8647-582b-4d3b"
},
"subject": "crn://confluent.cloud/organization=a56cf537-ab71-480e-b272-43e71531798b/environment=env-9pjxk0/flink-region=aws.us-west-2/statement=928c8647-582b-4d3b",
"specversion": "1.0",
"id": "f6f45075-3d85-4e41-8677-c06a80ef903e",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:35:20.968310060Z",
"type": "io.confluent.cloud/request"
}
ListStatements¶
The ListStatements event method is triggered by a request for a list of
Flink statements and sends an event message that is saved in the audit log
as an event record.
Examples¶
SUCCESS
{
"datacontenttype": "application/json",
"data": {
"serviceName": "crn://confluent.cloud/",
"methodName": "ListStatements",
"cloudResources": [
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-xx3gwz"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.eu-west-1"
}
]
},
"resource": {
"type": "STATEMENT",
"resourceId": "3ab9a756-4bcf-475b"
}
},
{
"scope": {
"resources": [
{
"type": "ORGANIZATION",
"resourceId": "e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5"
},
{
"type": "ENVIRONMENT",
"resourceId": "env-xx3gwz"
},
{
"type": "FLINK_REGION",
"resourceId": "aws.eu-west-1"
}
]
},
"resource": {
"type": "STATEMENT",
"resourceId": "e264b999-269c-46d6"
}
}
],
"authenticationInfo": {
"principal": {
"confluentUser": {
"resourceId": "u-devccq71mwp"
}
},
"result": "SUCCESS",
"identity": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/identity-provider=Confluent/identity=u-devccq71mwp"
},
"requestMetadata": {
"requestId": [
"7cec6a84ab0b05ccb38ecf14981da31b"
],
"clientAddress": [
{
"ip": "1.2.3.4"
}
]
},
"request": {
"accessType": "READ_ONLY",
"data": {
"compute_pool_id": "",
"environment_id": "env-xx3gwz",
"page_size": 100
}
},
"result": {
"status": "SUCCESS",
"data": {
"data": [
{
"metadata": {
"environment_id": "env-xx3gwz"
},
"spec": {
"compute_pool_id": "lfcp-devcc36z5jj",
"name": "3ab9a756-4bcf-475b",
"principal": "u-rk1gy7"
}
},
{
"metadata": {
"environment_id": "env-xx3gwz"
},
"spec": {
"principal": "u-rk1gy7",
"compute_pool_id": "lfcp-devcc36z5jj",
"name": "e264b999-269c-46d6"
}
}
]
}
},
"resourceName": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-xx3gwz/flink-region=aws.eu-west-1"
},
"subject": "crn://confluent.cloud/organization=e9eb4f2c-ef73-475c-ba7f-6b37a4ff00e5/environment=env-xx3gwz/flink-region=aws.eu-west-1",
"specversion": "1.0",
"id": "5e6bc2d3-9881-442b-af0c-a0a6aa127867",
"source": "crn://confluent.cloud/",
"time": "2023-09-22T16:47:00.894461118Z",
"type": "io.confluent.cloud/request"
}