Updated on 2025-07-31 GMT+08:00

CTS Auditing

With CTS, you can log operations related to LakeFormation, making it easier to search, audit, and trace in the future.

Operations Recorded by CTS

Table 1 Operations recorded by CTS

Operation

Resource Type

Trace Name

Creating a catalog

Catalog

createCatalog

Deleting a catalog

Catalog

dropCatalog

Modifying a catalog

Catalog

alterCatalog

Creating a database

Database

createDatabase

Deleting a database

Database

dropDatabase

Modifying a database

Database

alterDatabase

Creating a data table

Table

createTable

Deleting a data table.

Table

dropTable

Modifying a data table.

Table

alterTable

Clearing the data in a table

Table

truncateTable

Creating a function

Function

createFunction

Modifying the attributes of a function

Function

alterFunction

Deleting a function

Function

dropFunction

Creating an instance

instance

createInstance

Modifying an instance

instance

updateInstance

Deleting an instance

instance

deleteInstance

Granting permissions

Access

grantAccess

Revoking authorization

Access

revokeAccess

Updating statistics about a specified column in a table

TableColumnStatistic

setTableColumnStatistics

Deleting statistics about a specified column in a table

TableColumnStatistic

deleteTableColumnStatistics

Adding column restrictions for creating tables in batches

TableConstraint

addConstraints

Deleting a column restriction

TableConstraint

deleteConstraints

Adding partition information in batches

Partition

addPartitions

Modifying partition information in batches

Partition

alterPartitions

Deleting partition information in batches

Partition

dropPartitions

Clearing list information in batches

Partition

truncatePartitions

Setting partition column statistics in batches

PartitionColumnStatistic

setPartitionColumnStatistics

Deleting partition column statistics

PartitionColumnStatistic

deletePartitionColumnStatistics

For details about how to enable CTS and view real-time traces, see Cloud Trace Service Getting Started.

Viewing an Audit Log

You can query the LakeFormation traces on the CTS console.

For details about the restrictions and more operations, see Querying Real-Time Traces.

  1. Log in to the CTS console.
  2. In the navigation pane, choose Trace List.
  3. Above the list, select a time and search for LakeFormation by trace source. You can view all audit traces of LakeFormation in the corresponding time period.

    You can also combine one or more filter criteria as required.

    • Click the trace name to view its details.
    • Click Export above the list to export all traces of the query result.
    • For details about key fields in a trace, see Trace Structure and Example Traces.
    Figure 1 Viewing LakeFormation audit traces