Neste documento, descrevemos a geração de registros de auditoria do Cloud Next Generation Firewall.Os serviços do Google Cloud geram registros de auditoria das atividades administrativas e de acesso nos recursos do Google Cloud . Para mais informações sobre os Registros de Auditoria do Cloud, confira:
- Tipos de registros de auditoria
- Estrutura da entrada de registro de auditoria
- Como armazenar e rotear registros de auditoria
- Resumo dos preços do Cloud Logging
- Ativar registros de auditoria de acesso aos dados
Nome do serviço
Os registros de auditoria do Cloud Next Generation Firewall usam o nome de serviço networksecurity.googleapis.com.
Filtrar por este serviço:
protoPayload.serviceName="networksecurity.googleapis.com"
Métodos por tipo de permissão
Cada permissão do IAM tem uma propriedade type, que tem o valor de um tipo enumerado
que pode ser um dos quatro valores: ADMIN_READ, ADMIN_WRITE,
DATA_READ ou DATA_WRITE. Quando você chama um método,
o Cloud Next Generation Firewall gera um registro de auditoria com categoria dependente da propriedade
type da permissão necessária para executar o método.
Métodos que exigem uma permissão do IAM com o valor da propriedade type
de DATA_READ, DATA_WRITE ou ADMIN_READ geram
registros de auditoria de acesso aos dados.
Métodos que exigem uma permissão do IAM com o valor da propriedade type
de ADMIN_WRITE geram
registros de auditoria de atividade do administrador.
| Tipo de permissão | Métodos |
|---|---|
ADMIN_READ |
google.cloud.networksecurity.v1.AddressGroupService.GetAddressGroupgoogle.cloud.networksecurity.v1.AddressGroupService.ListAddressGroupReferencesgoogle.cloud.networksecurity.v1.AddressGroupService.ListAddressGroupsgoogle.cloud.networksecurity.v1.FirewallActivation.GetFirewallEndpointgoogle.cloud.networksecurity.v1.FirewallActivation.GetFirewallEndpointAssociationgoogle.cloud.networksecurity.v1.FirewallActivation.ListFirewallEndpointAssociationsgoogle.cloud.networksecurity.v1.FirewallActivation.ListFirewallEndpointsgoogle.cloud.networksecurity.v1.Intercept.GetInterceptDeploymentgoogle.cloud.networksecurity.v1.Intercept.GetInterceptDeploymentGroupgoogle.cloud.networksecurity.v1.Intercept.GetInterceptEndpointGroupgoogle.cloud.networksecurity.v1.Intercept.GetInterceptEndpointGroupAssociationgoogle.cloud.networksecurity.v1.Intercept.ListInterceptDeploymentGroupsgoogle.cloud.networksecurity.v1.Intercept.ListInterceptDeploymentsgoogle.cloud.networksecurity.v1.Intercept.ListInterceptEndpointGroupAssociationsgoogle.cloud.networksecurity.v1.Intercept.ListInterceptEndpointGroupsgoogle.cloud.networksecurity.v1.Mirroring.GetMirroringDeploymentgoogle.cloud.networksecurity.v1.Mirroring.GetMirroringDeploymentGroupgoogle.cloud.networksecurity.v1.Mirroring.GetMirroringEndpointGroupgoogle.cloud.networksecurity.v1.Mirroring.GetMirroringEndpointGroupAssociationgoogle.cloud.networksecurity.v1.Mirroring.ListMirroringDeploymentGroupsgoogle.cloud.networksecurity.v1.Mirroring.ListMirroringDeploymentsgoogle.cloud.networksecurity.v1.Mirroring.ListMirroringEndpointGroupAssociationsgoogle.cloud.networksecurity.v1.Mirroring.ListMirroringEndpointGroupsgoogle.cloud.networksecurity.v1.NetworkSecurity.GetAuthorizationPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetAuthzPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetBackendAuthenticationConfiggoogle.cloud.networksecurity.v1.NetworkSecurity.GetClientTlsPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetGatewaySecurityPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetGatewaySecurityPolicyRulegoogle.cloud.networksecurity.v1.NetworkSecurity.GetServerTlsPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetTlsInspectionPolicygoogle.cloud.networksecurity.v1.NetworkSecurity.GetUrlListgoogle.cloud.networksecurity.v1.NetworkSecurity.ListAuthorizationPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListAuthzPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListBackendAuthenticationConfigsgoogle.cloud.networksecurity.v1.NetworkSecurity.ListClientTlsPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListGatewaySecurityPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListGatewaySecurityPolicyRulesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListServerTlsPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListTlsInspectionPoliciesgoogle.cloud.networksecurity.v1.NetworkSecurity.ListUrlListsgoogle.cloud.networksecurity.v1.OrganizationAddressGroupService.GetAddressGroupgoogle.cloud.networksecurity.v1.OrganizationAddressGroupService.ListAddressGroupsgoogle.cloud.networksecurity.v1.OrganizationSecurityProfileGroupService.GetSecurityProfilegoogle.cloud.networksecurity.v1.OrganizationSecurityProfileGroupService.GetSecurityProfileGroupgoogle.cloud.networksecurity.v1.OrganizationSecurityProfileGroupService.ListSecurityProfileGroupsgoogle.cloud.networksecurity.v1.OrganizationSecurityProfileGroupService.ListSecurityProfilesgoogle.cloud.networksecurity.v1alpha1.Intercept.GetInterceptDeploymentgoogle.cloud.networksecurity.v1alpha1.Intercept.GetInterceptDeploymentGroupgoogle.cloud.networksecurity.v1alpha1.Intercept.GetInterceptEndpointGroupgoogle.cloud.networksecurity.v1alpha1.Intercept.GetInterceptEndpointGroupAssociationgoogle.cloud.networksecurity.v1alpha1.Intercept.ListInterceptDeploymentGroupsgoogle.cloud.networksecurity.v1alpha1.Intercept.ListInterceptDeploymentsgoogle.cloud.networksecurity.v1alpha1.Intercept.ListInterceptEndpointGroupAssociationsgoogle.cloud.networksecurity.v1alpha1.Intercept.ListInterceptEndpointGroupsgoogle.cloud.networksecurity.v1alpha1.Mirroring.GetMirroringDeploymentgoogle.cloud.networksecurity.v1alpha1.Mirroring.GetMirroringDeploymentGroupgoogle.cloud.networksecurity.v1alpha1.Mirroring.GetMirroringEndpointGroupgoogle.cloud.networksecurity.v1alpha1.Mirroring.GetMirroringEndpointGroupAssociationgoogle.cloud.networksecurity.v1alpha1.Mirroring.ListMirroringDeploymentGroupsgoogle.cloud.networksecurity.v1alpha1.Mirroring.ListMirroringDeploymentsgoogle.cloud.networksecurity.v1alpha1.Mirroring.ListMirroringEndpointGroupAssociationsgoogle.cloud.networksecurity.v1alpha1.Mirroring.ListMirroringEndpointGroupsgoogle.cloud.networksecurity.v1alpha1.SSEGatewayService.GetPartnerSSEGatewaygoogle.cloud.networksecurity.v1alpha1.SSERealmService.ListSACAttachmentsgoogle.cloud.networksecurity.v1beta1.Intercept.GetInterceptDeploymentgoogle.cloud.networksecurity.v1beta1.Intercept.GetInterceptDeploymentGroupgoogle.cloud.networksecurity.v1beta1.Intercept.GetInterceptEndpointGroupgoogle.cloud.networksecurity.v1beta1.Intercept.GetInterceptEndpointGroupAssociationgoogle.cloud.networksecurity.v1beta1.Intercept.ListInterceptDeploymentGroupsgoogle.cloud.networksecurity.v1beta1.Intercept.ListInterceptDeploymentsgoogle.cloud.networksecurity.v1beta1.Intercept.ListInterceptEndpointGroupAssociationsgoogle.cloud.networksecurity.v1beta1.Intercept.ListInterceptEndpointGroupsgoogle.cloud.networksecurity.v1beta1.Mirroring.GetMirroringDeploymentgoogle.cloud.networksecurity.v1beta1.Mirroring.GetMirroringDeploymentGroupgoogle.cloud.networksecurity.v1beta1.Mirroring.GetMirroringEndpointGroupgoogle.cloud.networksecurity.v1beta1.Mirroring.GetMirroringEndpointGroupAssociationgoogle.cloud.networksecurity.v1beta1.Mirroring.ListMirroringDeploymentGroupsgoogle.cloud.networksecurity.v1beta1.Mirroring.ListMirroringDeploymentsgoogle.cloud.networksecurity.v1beta1.Mirroring.ListMirroringEndpointGroupAssociationsgoogle.cloud.networksecurity.v1beta1.Mirroring.ListMirroringEndpointGroupsgoogle.cloud.networksecurity.v1beta1.SSERealmService.ListSACAttachmentsgoogle.cloud.networksecurity.v1beta1.SSERealmService.ListSACRealmsGetIamPolicygoogle.longrunning.Operations.GetOperationgoogle.longrunning.Operations.ListOperations |
ADMIN_WRITE |
google.cloud.networksecurity.v1.AddressGroupService.AddAddressGroupItems (LRO)google.cloud.networksecurity.v1.AddressGroupService.CloneAddressGroupItems (LRO)google.cloud.networksecurity.v1.AddressGroupService.CreateAddressGroup (LRO)google.cloud.networksecurity.v1.AddressGroupService.DeleteAddressGroup (LRO)google.cloud.networksecurity.v1.AddressGroupService.RemoveAddressGroupItems (LRO)google.cloud.networksecurity.v1.AddressGroupService.UpdateAddressGroup (LRO)google.cloud.networksecurity.v1.FirewallActivation.CreateFirewallEndpoint (LRO)google.cloud.networksecurity.v1.FirewallActivation.CreateFirewallEndpointAssociation (LRO)google.cloud.networksecurity.v1.FirewallActivation.DeleteFirewallEndpoint (LRO)google.cloud.networksecurity.v1.FirewallActivation.DeleteFirewallEndpointAssociation (LRO)google.cloud.networksecurity.v1.FirewallActivation.UpdateFirewallEndpoint (LRO)google.cloud.networksecurity.v1.FirewallActivation.UpdateFirewallEndpointAssociation (LRO)google.cloud.networksecurity.v1.Intercept.CreateInterceptDeployment (LRO)google.cloud.networksecurity.v1.Intercept.CreateInterceptDeploymentGroup (LRO)google.cloud.networksecurity.v1.Intercept.CreateInterceptEndpointGroup (LRO)google.cloud.networksecurity.v1.Intercept.CreateInterceptEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.Intercept.DeleteInterceptDeployment (LRO)google.cloud.networksecurity.v1.Intercept.DeleteInterceptDeploymentGroup (LRO)google.cloud.networksecurity.v1.Intercept.DeleteInterceptEndpointGroup (LRO)google.cloud.networksecurity.v1.Intercept.DeleteInterceptEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.Intercept.UpdateInterceptDeployment (LRO)google.cloud.networksecurity.v1.Intercept.UpdateInterceptDeploymentGroup (LRO)google.cloud.networksecurity.v1.Intercept.UpdateInterceptEndpointGroup (LRO)google.cloud.networksecurity.v1.Intercept.UpdateInterceptEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.Mirroring.CreateMirroringDeployment (LRO)google.cloud.networksecurity.v1.Mirroring.CreateMirroringDeploymentGroup (LRO)google.cloud.networksecurity.v1.Mirroring.CreateMirroringEndpointGroup (LRO)google.cloud.networksecurity.v1.Mirroring.CreateMirroringEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.Mirroring.DeleteMirroringDeployment (LRO)google.cloud.networksecurity.v1.Mirroring.DeleteMirroringDeploymentGroup (LRO)google.cloud.networksecurity.v1.Mirroring.DeleteMirroringEndpointGroup (LRO)google.cloud.networksecurity.v1.Mirroring.DeleteMirroringEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.Mirroring.UpdateMirroringDeployment (LRO)google.cloud.networksecurity.v1.Mirroring.UpdateMirroringDeploymentGroup (LRO)google.cloud.networksecurity.v1.Mirroring.UpdateMirroringEndpointGroup (LRO)google.cloud.networksecurity.v1.Mirroring.UpdateMirroringEndpointGroupAssociation (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateAuthorizationPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateAuthzPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateBackendAuthenticationConfig (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateClientTlsPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateGatewaySecurityPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateGatewaySecurityPolicyRule (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateServerTlsPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.CreateUrlList (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteAuthorizationPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteAuthzPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteBackendAuthenticationConfig (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteClientTlsPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteGatewaySecurityPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteGatewaySecurityPolicyRule (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteServerTlsPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.DeleteUrlList (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateAuthorizationPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateAuthzPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateBackendAuthenticationConfig (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateClientTlsPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateGatewaySecurityPolicy (LRO)google.cloud.networksecurity.v1.NetworkSecurity.UpdateGatewaySecurityPolicyRule (LRO) |