CTS Auditing

With CTS, you can log operations related to LakeFormation, making it easier to search, audit, and trace in the future.

Operations Recorded by CTS

**Table 1** Operations recorded by CTS
Operation	Resource Type	Trace Name
Creating a catalog	Catalog	createCatalog
Deleting a catalog	Catalog	dropCatalog
Modifying a catalog	Catalog	alterCatalog
Creating a database	Database	createDatabase
Deleting a database	Database	dropDatabase
Modifying a database	Database	alterDatabase
Creating a data table	Table	createTable
Deleting a data table.	Table	dropTable
Modifying a data table.	Table	alterTable
Clearing the data in a table	Table	truncateTable
Creating a function	Function	createFunction
Modifying the attributes of a function	Function	alterFunction
Deleting a function	Function	dropFunction
Creating an instance	instance	createInstance
Modifying an instance	instance	updateInstance
Deleting an instance	instance	deleteInstance
Granting permissions	Access	grantAccess
Revoking authorization	Access	revokeAccess
Updating statistics about a specified column in a table	TableColumnStatistic	setTableColumnStatistics
Deleting statistics about a specified column in a table	TableColumnStatistic	deleteTableColumnStatistics
Adding column restrictions for creating tables in batches	TableConstraint	addConstraints
Deleting a column restriction	TableConstraint	deleteConstraints
Adding partition information in batches	Partition	addPartitions
Modifying partition information in batches	Partition	alterPartitions
Deleting partition information in batches	Partition	dropPartitions
Clearing list information in batches	Partition	truncatePartitions
Setting partition column statistics in batches	PartitionColumnStatistic	setPartitionColumnStatistics
Deleting partition column statistics	PartitionColumnStatistic	deletePartitionColumnStatistics

For details about how to enable CTS and view real-time traces, see Cloud Trace Service Getting Started.

Viewing an Audit Log

You can query the LakeFormation traces on the CTS console.

For details about the restrictions and more operations, see Querying Real-Time Traces.

Log in to the CTS console.
In the navigation pane, choose Trace List.
Above the list, select a time and search for LakeFormation by trace source. You can view all audit traces of LakeFormation in the corresponding time period.

You can also combine one or more filter criteria as required.
- Click the trace name to view its details.
- Click Export above the list to export all traces of the query result.
- For details about key fields in a trace, see Trace Structure and Example Traces.
Figure 1 Viewing LakeFormation audit traces