Skip to content

Add audit log query API #101

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
david049 wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Add audit log query API #101

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
110afb2
Add audit log query API
david049 Jan 8, 2026
dd41d8d
descope account
david049 Jan 8, 2026
292135d
add openapi tag
david049 Jan 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions temporal/api/cloud/cloudservice/v1/request_response.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ import "temporal/api/cloud/region/v1/message.proto";
import "temporal/api/cloud/account/v1/message.proto";
import "temporal/api/cloud/usage/v1/message.proto";
import "temporal/api/cloud/connectivityrule/v1/message.proto";
import "temporal/api/cloud/auditlog/v1/message.proto";

message GetUsersRequest {
// The requested size of the page to retrieve - optional.
Expand Down Expand Up @@ -949,6 +950,25 @@ message DeleteConnectivityRuleResponse {
temporal.api.cloud.operation.v1.AsyncOperation async_operation = 1;
}

message GetAuditLogsRequest {
// The requested size of the page to retrieve - optional.
// Cannot exceed 1000. Defaults to 100.
int32 page_size = 1;
// The page token if this is continuing from another response - optional.
string page_token = 2;
// Filter for UTC time >= (defaults to 30 days ago) - optional.
google.protobuf.Timestamp start_time_inclusive = 3;
// Filter for UTC time < (defaults to current time) - optional.
google.protobuf.Timestamp end_time_exclusive = 4;
}

message GetAuditLogsResponse {
// The list of audit logs ordered by inserted time, emit time, log_id
repeated temporal.api.cloud.auditlog.v1.LogRecord logs = 1;
// The next page's token.
string next_page_token = 2;
}

message ValidateAccountAuditLogSinkRequest {
// The audit log sink spec that will be validated
temporal.api.cloud.account.v1.AuditLogSinkSpec spec = 1;
Expand Down
16 changes: 16 additions & 0 deletions temporal/api/cloud/cloudservice/v1/service.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -976,6 +976,22 @@ service CloudService {
};
}

// Get audit logs
rpc GetAuditLogs(GetAuditLogsRequest) returns (GetAuditLogsResponse) {
option (google.api.http) = {
get: "/cloud/audit-logs",
};
option (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_operation) = {
tags: ["Account"];
summary: "Get audit logs"
description: "Gets a list of audit logs."
external_docs: {
url: "https://docs.temporal.io/cloud/audit-logging";
description: "Audit logging documentation";
};
};
}

// Validate customer audit log sink is accessible from Temporal's workflow by delivering an empty file to the specified sink.
// The operation verifies that the sink is correctly configured, accessible and ready to receive audit logs.
rpc ValidateAccountAuditLogSink(ValidateAccountAuditLogSinkRequest) returns (ValidateAccountAuditLogSinkResponse) {
Expand Down
Loading