View operations on managed zones

Cloud DNS records managed zone updates that you make (modifying descriptionsor configuring DNSSEC state) as operations. Managed zone creation anddeletion are not recorded; deletion of a managed zone also deletes recordedoperations on the zone.

These operations are independent ofchanges that you make to the resourceswithin the managed zone. You can use the Google Cloud CLI or the REST API to seethe history of these updates.

Permissions required for this task

To perform this task, you must have been granted the following permissionsor the following IAM roles.

Permissions

  • dns.managedZoneOperations.list
  • dns.managedZoneOperations.get

Roles

  • roles/dns.admin

Display audit log of operations

gcloud

Run the following command:

gcloud dns operations list --zones="ZONE_NAME"

ReplaceZONE_NAME with the name of a DNS zone inyour project.

This command prints the JSON formatted resource record sets forthe first 100 records. You can specify an additional parameter:

  • --limit: maximum number of operations to list

Python

from apiclient import errorsfrom apiclient.discovery import buildPROJECT_NAME='PROJECT_NAME'ZONE_NAME='ZONE_NAME'try:  service = build('dns', 'v1')  response = service.operations().list(project=PROJECT_NAME,                                       managedZone=ZONE_NAME).execute()  print(response)except errors.HttpError, error:  print('An error occurred: %s' % error)

Replace the following:

  • PROJECT_NAME: the name of your project
  • ZONE_NAME: the name of a DNS zone in your project

What's next

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.