OAuth/OIDC Identity Provider and Identity Pool Auditable Event Methods¶

Auditable event methods for Confluent Cloud ORGANIZATION resources are triggered by actions, or operations, on an OAuth/OIDC identity rovider (IDENTITY_PROVIDER) or an associated identity pool (IDENTITY_POOL) in the same organization. For details about identity providers, see Add an identity provider. For details about identity pools, see Use Identity Pools with Your OAuth/OIDC Identity Provider for Confluent Cloud.

Auditable event methods by resource¶

Identity provider (`IDENTITY_PROVIDER`)¶

Your OAuth/OIDC identity provider (resource type: IDENTITY_PROVIDER) describes an external identity provider that supports OAuth 2.0 and OIDC standards to establish trust between your OAuth/OIDC identity provider and Confluent Cloud resources. An OAuth/OIDC identity provider can exist without an identity pool (resource type: IDENTITY_POOL), but you use identity pools to assign access based on policies you create using pool filter expressions.

Method name	Action triggering an auditable event message
CreateIdentityProvider	A request to create an identity provider.
DeleteIdentityProvider	A request to delete an identity provider.
GetIdentityProvider	A request to get the details of an identity provider.
ListIdentityProvider	A request to get a list of identity providers.
UpdateIdentityProvider	A request to update an identity provider.

CreateIdentityProvider¶

The CreateIdentityProvider event is generated by a request to create an identity provider.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "CreateIdentityProvider",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_PROVIDER",
                    "resourceId": "op-V7vN"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "53313aa8109a583e0ae800a57004c2eb"
            ]
        },
        "request":
        {
            "accessType": "MODIFICATION",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-providers",
                "kind": "CreateIdentityProvider"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
    "specversion": "1.0",
    "id": "6a407325-7496-4291-8f37-8b58922470d6",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:11.159Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "CreateIdentityProvider",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "53313aa8109a583e0ae800a57004c2eb"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "CreateIdentityProvider"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
  "specversion": "1.0",
  "id": "6a407325-7496-4291-8f37-8b58922470d6",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:11.159Z",
  "type": "io.confluent.cloud/request"
}

DeleteIdentityProvider¶

The DeleteIdentityProvider event is generated by a request to delete an identity provider.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "DeleteIdentityProvider",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_PROVIDER",
                    "resourceId": "op-V7vN"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "11b11b82eba1b682c3550298e061e647"
            ]
        },
        "request":
        {
            "accessType": "MODIFICATION",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-providers",
                "kind": "DeleteIdentityProvider"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
    "specversion": "1.0",
    "id": "2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:13.640Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "DeleteIdentityProvider",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_PROVIDER",
          "resourceId": "op-V7vN"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "11b11b82eba1b682c3550298e061e647"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "DeleteIdentityProvider"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.640Z",
  "type": "io.confluent.cloud/request"
}

GetIdentityProvider¶

The GetIdentityProvider event is generated by a request to get the details of an identity provider.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "GetIdentityProvider",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_PROVIDER",
                    "resourceId": "op-V7vN"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "bd2fb8f33296a97989216ba63d8fd811"
            ]
        },
        "request":
        {
            "accessType": "READ_ONLY",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-providers",
                "kind": "GetIdentityProvider"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
    "specversion": "1.0",
    "id": "7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:11.435Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "GetIdentityProvider",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_PROVIDER",
          "resourceId": "op-V7vN"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "bd2fb8f33296a97989216ba63d8fd811"
      ]
    },
    "request": {
      "accessType": "READ_ONLY",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "GetIdentityProvider"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:11.435Z",
  "type": "io.confluent.cloud/request"
}

ListIdentityProvider¶

The ListIdentityProvider event is generated by a request to get a list of the identity providers.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "ListIdentityProvider",
        "cloudResources":
        [
            {
                "resource":
                {
                    "type": "ORGANIZATION",
                    "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "2e3a74dda1b483a526174971a86b34c8"
            ]
        },
        "request":
        {
            "accessType": "READ_ONLY",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-providers",
                "kind": "ListIdentityProvider"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
    "specversion": "1.0",
    "id": "9c569e55-3e9d-4326-9948-a5e2962aab5f",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:11.673Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "ListIdentityProvider",
    "cloudResources": [
      {
        "resource": {
          "type": "ORGANIZATION",
          "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "2e3a74dda1b483a526174971a86b34c8"
      ]
    },
    "request": {
      "accessType": "READ_ONLY",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "ListIdentityProvider"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
  "specversion": "1.0",
  "id": "9c569e55-3e9d-4326-9948-a5e2962aab5f",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:11.673Z",
  "type": "io.confluent.cloud/request"
}

UpdateIdentityProvider¶

The UpdateIdentityProvider event is generated by a request to update an identity provider.

Examples¶

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "UpdateIdentityProvider",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_PROVIDER",
          "resourceId": "op-V7vN"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "11b11b82eba1b682c3550298e061e647"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "UpdateIdentityProvider"
      }
    },
    "result": {
      "status": "SUCCESS"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.640Z",
  "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "UpdateIdentityProvider",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_PROVIDER",
          "resourceId": "op-V7vN"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "11b11b82eba1b682c3550298e061e647"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-providers",
        "kind": "UpdateIdentityProvider"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.640Z",
  "type": "io.confluent.cloud/request"
}

Identity pool (`IDENTITY_POOL`)¶

An identity pool is associated with an identity provider (IDENTITY_PROVIDER).

Method name	Action triggering an auditable event message
CreateIdentityPool	A request to create an identity pool.
DeleteIdentityPool	A request to delete an identity pool.
GetIdentityPool	A request to get the details of an identity pool.
ListIdentityPool	A request to get a list of identity pools.
UpdateIdentityPool	A request to update an identity pool.

CreateIdentityPool¶

The CreateIdentityPool event is generated by a request to create an identity pool.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "CreateIdentityPool",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        },
                        {
                            "type": "IDENTITY_PROVIDER",
                            "resourceId": "op-V7vN"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_POOL",
                    "resourceId": "pool-RpDd"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "60b6f72e84b00b77dc639ffd46959f60"
            ]
        },
        "request":
        {
            "accessType": "MODIFICATION",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-pools",
                "kind": "CreateIdentityPool"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
    "specversion": "1.0",
    "id": "f77b6a40-744f-4315-9088-ac7a586f326b",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:12.201Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "CreateIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            },
            {
              "type": "IDENTITY_PROVIDER",
              "resourceId": "op-V7vN"
            }
          ]
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "60b6f72e84b00b77dc639ffd46959f60"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "CreateIdentityPool"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "f77b6a40-744f-4315-9088-ac7a586f326b",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:12.201Z",
  "type": "io.confluent.cloud/request"
}

DeleteIdentityPool¶

The DeleteIdentityPool event is generated by a request to delete an identity pool.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "DeleteIdentityPool",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        },
                        {
                            "type": "IDENTITY_PROVIDER",
                            "resourceId": "op-V7vN"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_POOL",
                    "resourceId": "pool-RpDd"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "23782e56d67685006094e2e792340eb9"
            ]
        },
        "request":
        {
            "accessType": "MODIFICATION",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-pools",
                "kind": "DeleteIdentityPool"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
    "specversion": "1.0",
    "id": "eb89c440-4efc-48cd-b927-ff0ec061a206",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:13.393Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "DeleteIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            },
            {
              "type": "IDENTITY_PROVIDER",
              "resourceId": "op-V7vN"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_POOL",
          "resourceId": "pool-RpDd"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "23782e56d67685006094e2e792340eb9"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "DeleteIdentityPool"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
  "specversion": "1.0",
  "id": "eb89c440-4efc-48cd-b927-ff0ec061a206",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.393Z",
  "type": "io.confluent.cloud/request"
}

GetIdentityPool¶

The GetIdentityPool event is generated by a request to get the details of an identity pool.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "GetIdentityPool",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        },
                        {
                            "type": "IDENTITY_PROVIDER",
                            "resourceId": "op-V7vN"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_POOL",
                    "resourceId": "pool-RpDd"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "e53cd6b6f5ee8fb355d4260a5d5527ab"
            ]
        },
        "request":
        {
            "accessType": "READ_ONLY",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-pools",
                "kind": "GetIdentityPool"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
    "specversion": "1.0",
    "id": "e332d272-8839-4e48-ad1e-5b06b10cb66a",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:12.579Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "GetIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            },
            {
              "type": "IDENTITY_PROVIDER",
              "resourceId": "op-V7vN"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_POOL",
          "resourceId": "pool-RpDd"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "e53cd6b6f5ee8fb355d4260a5d5527ab"
      ]
    },
    "request": {
      "accessType": "READ_ONLY",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "GetIdentityPool"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
  "specversion": "1.0",
  "id": "e332d272-8839-4e48-ad1e-5b06b10cb66a",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:12.579Z",
  "type": "io.confluent.cloud/request"
}

ListIdentityPool¶

The ListIdentityPool event is generated by a request to get a list of the identity pools.

Examples¶

SUCCESS

{
    "datacontenttype": "application/json",
    "data":
    {
        "serviceName": "crn://confluent.cloud/",
        "methodName": "ListIdentityPool",
        "cloudResources":
        [
            {
                "scope":
                {
                    "resources":
                    [
                        {
                            "type": "ORGANIZATION",
                            "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                        }
                    ]
                },
                "resource":
                {
                    "type": "IDENTITY_PROVIDER",
                    "resourceId": "op-V7vN"
                }
            }
        ],
        "authenticationInfo":
        {
            "principal":
            {
                "confluentUser":
                {
                  "resourceId": "User:u-nxd3q3"
                }
            },
            "result": "SUCCESS"
        },
        "requestMetadata":
        {
            "requestId":
            [
                "afc978427a382556b7309f3979cb9e42"
            ]
        },
        "request":
        {
            "accessType": "READ_ONLY",
            "data":
            {
                "api_version": "iam/v2",
                "display_name": "identity-pools",
                "kind": "ListIdentityPool"
            }
        },
        "result":
        {
            "status": "SUCCESS"
        },
        "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
    },
    "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
    "specversion": "1.0",
    "id": "40ae0052-e4de-4815-933d-de53af795ddb",
    "source": "crn://confluent.cloud/",
    "time": "2022-09-27T04:51:13.034Z",
    "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "ListIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_PROVIDER",
          "resourceId": "op-V7vN"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "afc978427a382556b7309f3979cb9e42"
      ]
    },
    "request": {
      "accessType": "READ_ONLY",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "ListIdentityPool"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
  "specversion": "1.0",
  "id": "40ae0052-e4de-4815-933d-de53af795ddb",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.034Z",
  "type": "io.confluent.cloud/request"
}

UpdateIdentityPool¶

The UpdateIdentityPool event is generated by a request to update an identity ppol.

Examples¶

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "UpdateIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            },
            {
              "type": "IDENTITY_PROVIDER",
              "resourceId": "op-V7vN"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_POOL",
          "resourceId": "pool-RpDd"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "23782e56d67685006094e2e792340eb9"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "UpdateIdentityPool"
      }
    },
    "result": {
      "status": "SUCCESS"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
  "specversion": "1.0",
  "id": "eb89c440-4efc-48cd-b927-ff0ec061a206",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.393Z",
  "type": "io.confluent.cloud/request"
}

FAILURE

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "UpdateIdentityPool",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            },
            {
              "type": "IDENTITY_PROVIDER",
              "resourceId": "op-V7vN"
            }
          ]
        },
        "resource": {
          "type": "IDENTITY_POOL",
          "resourceId": "pool-RpDd"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "User:u-nxd3q3"
        }
      },
      "result": "SUCCESS"
    },
    "requestMetadata": {
      "requestId": [
        "23782e56d67685006094e2e792340eb9"
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "api_version": "iam/v2",
        "display_name": "identity-pools",
        "kind": "UpdateIdentityPool"
      }
    },
    "result": {
      "status": "FAILURE"
    },
    "resourceName": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
  },
  "subject": "crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
  "specversion": "1.0",
  "id": "eb89c440-4efc-48cd-b927-ff0ec061a206",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-27T04:51:13.393Z",
  "type": "io.confluent.cloud/request"
}

OAuth/OIDC Identity Provider and Identity Pool Auditable Event Methods¶

Auditable event methods by resource¶

Identity provider (IDENTITY_PROVIDER)¶

CreateIdentityProvider¶

Examples¶

DeleteIdentityProvider¶

Examples¶

GetIdentityProvider¶

Examples¶

ListIdentityProvider¶

Examples¶

UpdateIdentityProvider¶

Examples¶

Identity pool (IDENTITY_POOL)¶

CreateIdentityPool¶

Examples¶

DeleteIdentityPool¶

Examples¶

GetIdentityPool¶

Examples¶

ListIdentityPool¶

Examples¶

UpdateIdentityPool¶

Examples¶

Identity provider (`IDENTITY_PROVIDER`)¶

Identity pool (`IDENTITY_POOL`)¶