ALTER AUDIT POLICY

Modifies the unified audit policy.

Only the poladmin, sysadmin, or initial user can perform this operation.
The unified audit policy takes effect only after enable_security_policy is set to on.

Add or delete an operation type in the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name { ADD | REMOVE } { privilege_audit_clause | access_audit_clause };

Modify the filter criteria in the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name MODIFY ( filter_group_clause );

Delete the filter criteria from the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name DROP FILTER;

Modify the description of the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name COMMENTS policy_comments;

Enable or disable the audit policy.

ALTER AUDIT POLICY [ IF EXISTS ] policy_name { ENABLE | DISABLE };

privilege_audit_clause

DDL operation type and target resource label in the audit policy.

       
            PRIVILEGES ({ DDL | ALL } [ ON LABEL ( resource_label_name [, ... ] ) ])

access_audit_clause
DML operation type and target resource label in the audit policy.
```
ACCESS ({ DML | ALL } [ ON LABEL ( resource_label_name [, ... ] ) ])
```

filter_group_clause

Filter criteria in the audit policy.

       
            FILTER ON { filter_type ( filter_value [, ... ] ) } [, ... ]

policy_name
Specifies the audit policy name, which must be unique.

Value range: a string. It must comply with the naming convention.
DDL
Specifies the operations that are audited in the database: CREATE, ALTER, DROP, ANALYZE, COMMENT, GRANT, REVOKE, SET, and SHOW.
ALL
Specifies all operations supported by the specified DDL statements in the database.
DML
Specifies the operations that are audited in the database: SELECT, COPY, DEALLOCATE, DELETE, EXECUTE, INSERT, PREPARE, REINDEX, TRUNCATE, and UPDATE.

FILTER_TYPE
Specifies a type of information to be filtered by the audit policy. The value can be IP, ROLES, or APP.
filter_value
Specifies the detailed information to be filtered.