OAuth-OIDC Identity Provider and Identity Pool Auditable Event Methods on Confluent Cloud¶

Auditable event methods for Confluent Cloud ORGANIZATION resources are triggered by actions, or operations, on an OAuth-OIDC identity rovider (IDENTITY_PROVIDER) or an associated identity pool (IDENTITY_POOL) in the same organization. For details about identity providers, see Add an identity provider. For details about identity pools, see Use Identity Pools with Your OAuth/OIDC Identity Provider on Confluent Cloud.

Auditable event methods by resource¶

Identity provider (`IDENTITY_PROVIDER`)¶

Your OAuth/OIDC identity provider (resource type: IDENTITY_PROVIDER) describes an external identity provider that supports OAuth 2.0 and OIDC standards to establish trust between your OAuth/OIDC identity provider and Confluent Cloud resources. An OAuth-OIDC identity provider can exist without an identity pool (resource type: IDENTITY_POOL), but you use identity pools to assign access based on policies you create using pool filter expressions.

Method name	Action triggering an auditable event message
CreateIdentityProvider	A request to create an identity provider.
DeleteIdentityProvider	A request to delete an identity provider.
GetIdentityProvider	A request to get the details of an identity provider.
ListIdentityProvider	A request to get a list of identity providers.
UpdateIdentityProvider	A request to update an identity provider.

CreateIdentityProvider¶

The CreateIdentityProvider event is generated by a request to create an identity provider.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityProvider¶

The DeleteIdentityProvider event is generated by a request to delete an identity provider.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityProvider¶

The GetIdentityProvider event is generated by a request to get the details of an identity provider.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityProvider¶

The ListIdentityProvider event is generated by a request to get a list of the identity providers.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityProvider¶

The UpdateIdentityProvider event is generated by a request to update an identity provider.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

Identity pool (`IDENTITY_POOL`)¶

An identity pool is associated with an identity provider (IDENTITY_PROVIDER).

Method name	Action triggering an auditable event message
CreateIdentityPool	A request to create an identity pool.
DeleteIdentityPool	A request to delete an identity pool.
GetIdentityPool	A request to get the details of an identity pool.
ListIdentityPool	A request to get a list of identity pools.
UpdateIdentityPool	A request to update an identity pool.

CreateIdentityPool¶

The CreateIdentityPool event is generated by a request to create an identity pool.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityPool¶

The DeleteIdentityPool event is generated by a request to delete an identity pool.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityPool¶

The GetIdentityPool event is generated by a request to get the details of an identity pool.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityPool¶

The ListIdentityPool event is generated by a request to get a list of the identity pools.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityPool¶

The UpdateIdentityPool event is generated by a request to update an identity ppol.

Examples¶

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

OAuth-OIDC Identity Provider and Identity Pool Auditable Event Methods on Confluent Cloud¶

Auditable event methods by resource¶

Identity provider (IDENTITY_PROVIDER)¶

CreateIdentityProvider¶

Examples¶

DeleteIdentityProvider¶

Examples¶

GetIdentityProvider¶

Examples¶

ListIdentityProvider¶

Examples¶

UpdateIdentityProvider¶

Examples¶

Identity pool (IDENTITY_POOL)¶

CreateIdentityPool¶

Examples¶

DeleteIdentityPool¶

Examples¶

GetIdentityPool¶

Examples¶

ListIdentityPool¶

Examples¶

UpdateIdentityPool¶

Examples¶

Identity provider (`IDENTITY_PROVIDER`)¶

Identity pool (`IDENTITY_POOL`)¶