turbot/steampipecloud
steampipe plugin install steampipecloud

Table: steampipecloud_audit_log

Audit logs record series of events performed on the identity.

Note: You must specify an organization or user ID, or an organization or user handle, in the where or join clause using the identity_id or identity_handle columns respectively.

Examples

List audit logs for a user handle

select
id,
action_type,
jsonb_pretty(data) as data
from
steampipecloud_audit_log
where
identity_handle = 'myuser';

List audit logs for a user ID

select
id,
action_type,
jsonb_pretty(data) as data
from
steampipecloud_audit_log
where
identity_id = 'u_c6fdjke232example';

List audit logs for an organization handle

select
id,
action_type,
jsonb_pretty(data) as data
from
steampipecloud_audit_log
where
identity_handle = 'myorg';

List audit logs for an organization ID

select
id,
action_type,
jsonb_pretty(data) as data
from
steampipecloud_audit_log
where
identity_id = 'o_c6qjjsaa6guexample';

Schema for steampipecloud_audit_log

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
action_typetextThe action performed on the resource.
actor_avatar_urltextThe avatar of an actor who has performed the action.
actor_display_nametextThe display name of an actor.
actor_handletextThe handle name of an actor.
actor_idtextThe unique identifier of an actor.
actor_iptextThe IP address of the actor.
created_attimestamp with time zoneThe time when the action was performed.
datajsonbThe data which has been modified on the entity.
idtextThe unique identifier for an audit log.
identity_handletext=The handle name for an identity where the action has been performed.
identity_idtext=The unique identifier for an identity where the action has been performed.
process_idtextThe process id which this entry is a part of.
target_handletextThe handle name of the entity where the action has been performed.
target_idtextThe unique identifier of the entity where the action has been performed.