Querying Audit Logs

Cloud Trace Service (CTS) is a log audit service in Huawei Cloud's security solution. It is used in common scenarios such as security analysis, compliance audit, resource tracing, and troubleshooting.

After you enable CTS, it starts to record operations on your CodeArts. You can view the operation records of the last seven days on the CTS console.

For details, see Querying Traces in CTS.

Operations Recorded by CTS

**Table 1** Operations recorded by CTS
Operation	Resource Type	Event
Creating a permission template	privilege_template	addPrivilegeTemplate
Deleting a permission template	privilege_template	deletePrivilegeTemplate
Modifying the name or description of a permission template	privilege_template	updatePrivilegeTemplateNameOrDescription
Modifying specific permissions in a permission template	privilege_template	updatePrivilegeTemplate
Applying a permission template on a project	privilege_template	applyPrivilegeTemplate
Adding a user to a role	role_user	addUsersToRole
Removing a user from a role	role_user	deleteUsersFromRole
Modifying a role's permissions	role_privilege	updatePrivilegeOfRole
Adding users to a project	project	batchAddRoleUserRelation
Modifying users in a project	project	batchUpdateRoleUserRelation
Removing users from a project	project	batchDeleteRoleUserRelation
Creating a project	project	createProject
Updating a project name	project	updateProjectName
Updating a project creator	project	updateProjectCreator
Updating a project description	project	updateProjectDescription
Deleting a project	project	deleteProject
Archiving a project	project	archiveProject
Unarchiving a project	project	unArchiveProject
Configuring member joining request review	member	setAuditSwitchOfInvitateMember
Adding a project member	member	addProjectMember
Removing a project member	member	deleteProjectMember
Updating a project member's role	member	updateProjectMemberRole
Creating a role	role	createProjectRole
Updating a custom role's name	role	updateProjectRoleName
Deleting a custom role	role	deleteProjectRole
Updating a custom role's permissions	role	updateProjectRolePermission
Purchasing a CodeArts package Purchasing a build concurrency extension Purchasing a check concurrency extension Purchasing a pipeline concurrency extension Purchasing a deployment concurrency extension Purchasing an artifact storage extension Purchasing a code repo storage extension Purchasing a traffic extension for artifact download Purchasing an execution duration extension for pipeline resource-consuming tasks Purchasing a CodeCheck enhanced package	periodicResource	order
Modifying a CodeArts package Modifying a check concurrency extension Modifying a pipeline concurrency extension Modifying a deployment concurrency extension Modifying an artifact storage extension Modifying a code repo storage extension Modifying a traffic extension for artifact download Modifying an execution duration extension for pipeline resource-consuming tasks	periodicResource	update
Enterprise account authorization - Changing to manually or automatically receiving authorizations	enterpriseAuthorization	updateSwitch
Enterprise account authorization - Authorizing an account	enterpriseAuthorization	create
Enterprise account authorization - Canceling or removing an authorization	enterpriseAuthorization	delete
Enterprise account authorization - Accepting or rejecting an authorization	enterpriseAuthorization	update

**Table 2** Whitelist operations recorded by CTS
Operation	Resource Type	Event
Purchasing an exclusive agent pool (available in AP-Singapore)	periodicResource	order
Modifying an exclusive agent pool (available in AP-Singapore)	periodicResource	update

**Table 3** Old billing method operations recorded by CTS
Operation	Resource Type	Event
Purchasing a package Purchasing a CodeCheck enhanced package Purchasing a capacity package Purchasing a concurrency package Purchasing a CloudTest basic package	periodicResource	order
Modifying a package Modifying a CloudTest basic package	periodicResource	update