Tableflow Control Plane Auditable Event Methods on Confluent Cloud

Confluent Cloud audit logs contain records of auditable events for Tableflow operations. An auditable event is an action, such as creating, updating, or deleting a Tableflow resource, that generates a message that Confluent Cloud stores as a record in the audit log.

The following sections describe the auditable event methods for the Tableflow control plane. Use them to identify and monitor Tableflow operations, such as enabling and disabling Tableflow on a topic, and enabling or disabling catalog integration.

Tableflow topic auditable events

The following operations on Tableflow topics generate auditable event messages for the io.confluent.cloud/request event type.

Method name	Action triggering an auditable event message
TableflowCreateTable	A request to create a Tableflow topic.
TableflowDeleteTable	A request to delete a Tableflow topic.
TableflowGetTable	A request to get the details of a Tableflow topic.
TableflowListTables	A request to list Tableflow topics.
TableflowUpdateTable	A request to update a Tableflow topic.

TableflowCreateTable

The TableflowCreateTable event is generated by a request to create a Tableflow topic. The following examples of the TableflowCreateTable event method are for Bring Your Own Bucket (BYOB) and Confluent Managed AWS Storage.

To view example event messages, expand the following dropdowns:

Failure: Internal server error

{
  "specversion": "1.0",
  "id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
  "source": "crn://confluent.cloud/",
  "type": "io.confluent.cloud/request",
  "subject": "crn://confluent.cloud/organization=org-22/environment=env-1/cloud-cluster=lkc-1/kafka-cluster=lkc-1/topic=topic-1",
  "datacontenttype": "application/json",
  "dataschema": "https://confluent.io/internal/events/AuditLog.v2",
  "data": {
    "serviceName": "crn://confluent.cloud/service=cc-cts-api-service",
    "methodName": "TableflowCreateTable",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "org-22"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-1"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-1"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-1"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topic-1"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-abc123",
          "internal_id": "99"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=org-22/identity-provider=Confluent/identity=u-abc123"
    },
    "requestMetadata": {
      "requestId": [
        "30303030303030303030303030303030"
      ],
      "clientAddress": [
        {
          "ip": "127.0.0.1"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "config": {
          "refresh_interval_ms": 21600000,
          "retention_ms": 7776000000
        },
        "environment_id": {
          "id": "env-1"
        },
        "lkc_id": {
          "environment": "env-1",
          "id": "lkc-1"
        },
        "name": "topic-1",
        "storage_config": {
          "bucket_name": "bucket",
          "bucket_region": "us-west-2",
          "kind": "ByobAws",
          "provider_integration_id": "provider-integration-id"
        }
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "errors": [
          {
            "code": "server_error",
            "detail": "Internal Server Error: oops, something went wrong",
            "id": "30303030303030303030303030303030",
            "source": {},
            "status": "500"
          }
        ]
      }
    }
  }
}

TableflowDeleteTable

The TableflowDeleteTable event is generated by a request to delete a Tableflow topic.

To view example event messages, expand the following dropdowns:

TableflowGetTable

The TableflowGetTable event is generated by a request to get the details of a Tableflow topic.

To view example event messages, expand the following dropdowns:

TableflowUpdateTable

The TableflowUpdateTable event is generated by a request to update a Tableflow topic.

To view an example event message, expand the following dropdown:

TableflowListTables

The TableflowListTables event is generated by a request to list Tableflow topics.

To view an example event message, expand the following dropdown:

Tableflow catalog integration auditable events

The following operations generate auditable event messages for the io.confluent.cloud/request event type.

Method name	Action triggering an auditable event message
CreateTableFlowCatalog	A request to create a Tableflow catalog integration.
DeleteTableFlowCatalog	A request to delete a Tableflow catalog integration.
GetTableFlowCatalog	A request to get the details of a Tableflow catalog integration.
ListTableFlowCatalog	A request to list Tableflow catalog integrations.
UpdateTableFlowCatalog	A request to update a Tableflow catalog integration.

CreateTableFlowCatalog

The CreateTableFlowCatalog event is generated by a request to create a Tableflow catalog integration. The event captures the mapping between a provider integration and the catalog integration.

To view example event messages, expand the following dropdowns:

DeleteTableFlowCatalog

The DeleteTableFlowCatalog event is generated by a request to delete a Tableflow catalog integration, with the provider integration deactivated.

To view example event messages, expand the following dropdowns:

GetTableFlowCatalog

The GetTableFlowCatalog event is generated by a request to get the details of a Tableflow catalog integration.

To view example event messages, expand the following dropdowns:

ListTableFlowCatalog

The ListTableFlowCatalog event is generated by a request to list Tableflow catalog integrations.

To view an example event message, expand the following dropdown:

UpdateTableFlowCatalog

The UpdateTableFlowCatalog event is generated by a request to update a Tableflow catalog integration.

To view example event messages, expand the following dropdowns:

Success: New provider integration

{
  "specversion": "1.0",
  "id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
  "source": "crn://confluent.cloud/",
  "type": "io.confluent.cloud/request",
  "subject": "crn://confluent.cloud/organization=org-22/environment=env-1",
  "datacontenttype": "application/json",
  "dataschema": "https://confluent.io/internal/events/AuditLog.v2",
  "data": {
    "serviceName": "crn://confluent.cloud/service=cc-cts-api-service",
    "methodName": "UpdateTableFlowCatalog",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "org-22"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-1"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-1"
            }
          ]
        },
        "resource": {
          "type": "TABLEFLOW_CATALOG",
          "resourceId": "tci-1"
        }
      },
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "org-22"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-1"
            }
          ]
        },
        "resource": {
          "type": "PROVIDER_INTEGRATION",
          "resourceId": "cspi-stgce1233"
        }
      },
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "org-22"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-1"
            }
          ]
        },
        "resource": {
          "type": "PROVIDER_INTEGRATION",
          "resourceId": "cspi-stgce89r7"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-abc123",
          "internal_id": "99"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=org-22/identity-provider=Confluent/identity=u-abc123"
    },
    "requestMetadata": {
      "requestId": [
        "30303030303030303030303030303030"
      ],
      "clientAddress": [
        {
          "ip": "127.0.0.1"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "id": "tci-1",
        "spec": {
          "cluster_lkc": {
            "id": "lkc-1"
          },
          "config": {
            "client_id": "",
            "kind": "AwsGlue",
            "provider_integration_id": "cspi-stgce1233"
          },
          "environment": {
            "id": "env-1"
          }
        }
      }
    },
    "result": {
      "status": "SUCCESS"
    }
  }
}