IP Filter Management Auditable Event Methods on Confluent Cloud

IP filter and IP group management auditable events record create, update, and delete operations on IP filters with resource type IP_FILTER and IP groups with resource type IP_GROUP in Confluent Cloud. The following auditable event methods generate auditable event messages for the io.confluent.cloud/request event type. An auditable event method sends a message to the audit log when the corresponding auditable event occurs; the message is stored as an audit log record.

For details about the IP filtering feature and the use of IP filters and IP groups, see IP filtering. For the procedures that generate these events, see Manage IP Filters on Confluent Cloud. For the event generated when an IP filter denies a request, see IP filter authorization. For more information about audit log records, see Audit log event records.

For IP filter events, the request.data field contains only the IP filter fields submitted in the request, such as filter_name, operation_groups, ip_groups, and resource_group. For IP group events, request.data contains only the IP group fields submitted in the request, such as group_name and cidr_blocks. Confluent Cloud does not log API envelope fields, such as kind, api_version, metadata, and resource_scope.

IP filter event methods

An IP filter (IP_FILTER) associates one or more IP groups with the operation groups that the filter governs. An IP group (IP_GROUP) is a named set of Classless Inter-Domain Routing (CIDR) blocks that you attach to one or more IP filters to control network access. The following actions, or operations, on an IP filter or an IP group generate auditable event messages.

Method name	Action triggering an auditable event message
CreateIPFilter	A request to create an IP filter.
UpdateIPFilter	A request to update an IP filter.
DeleteIPFilter	A request to delete an IP filter.
CreateIPGroup	A request to create an IP group.
UpdateIPGroup	A request to update an IP group.
DeleteIPGroup	A request to delete an IP group.

CreateIPFilter

The CreateIPFilter method creates an IP filter that associates IP groups with operation groups. A request to create an IP filter generates the CreateIPFilter event.

To view example event messages, expand the Success or Failure dropdown:

UpdateIPFilter

The UpdateIPFilter method modifies the name, the IP groups, or the operation groups of an existing IP filter. A request to update an IP filter generates the UpdateIPFilter event.

To view example event messages, expand the Success or Failure dropdown:

DeleteIPFilter

The DeleteIPFilter method removes an IP filter from the organization. A request to delete an IP filter generates the DeleteIPFilter event.

To view an example event message, expand the following dropdown:

CreateIPGroup

The CreateIPGroup method creates an IP group from a set of CIDR blocks. A request to create an IP group generates the CreateIPGroup event.

To view an example event message, expand the following dropdown:

UpdateIPGroup

The UpdateIPGroup method modifies the name or the CIDR blocks of an existing IP group. A request to update an IP group generates the UpdateIPGroup event.

To view an example event message, expand the following dropdown:

DeleteIPGroup

The DeleteIPGroup method removes an IP group from the organization. A request to delete an IP group generates the DeleteIPGroup event.

To view an example event message, expand the following dropdown: