Cloud Load Balancing audit logging

This document describes audit logging for Cloud Load Balancing. Google Cloud servicesgenerate audit logs that record administrative and access activities within your Google Cloud resources.For more information about Cloud Audit Logs, see the following:

Service name

Cloud Load Balancing audit logs use the service namecompute.googleapis.com.Filter for this service:

protoPayload.serviceName="compute.googleapis.com"

Methods by permission type

For the following API methods, there is also abeta andalpha version available that is not listed here. When thebeta oralpha version of the API is called the method name will startwithbeta oralpha respectively.

Each IAM permission has atype property, whose value is an enumthat can be one of four values:ADMIN_READ,ADMIN_WRITE,DATA_READ, orDATA_WRITE. When you call a method,Cloud Load Balancing generates an audit log whose category is dependent on thetype property of the permission required to perform the method.Methods that require an IAM permission with thetype property valueofDATA_READ,DATA_WRITE, orADMIN_READ generateData Access audit logs.Methods that require an IAM permission with thetype property valueofADMIN_WRITE generateAdmin Activity audit logs.

Permission typeMethods
ADMIN_READv1.compute.backendServices.aggregatedList
v1.compute.backendServices.get
v1.compute.backendServices.getHealth
v1.compute.backendServices.getIamPolicy
v1.compute.backendServices.list
v1.compute.backendServices.testIamPermissions
v1.compute.forwardingRules.aggregatedList
v1.compute.forwardingRules.get
v1.compute.forwardingRules.list
v1.compute.targetHttpProxies.aggregatedList
v1.compute.targetHttpProxies.get
v1.compute.targetHttpProxies.list
v1.compute.targetPools.aggregatedList
v1.compute.targetPools.get
v1.compute.targetPools.getHealth
v1.compute.targetPools.list
v1.compute.urlMaps.aggregatedList
v1.compute.urlMaps.get
v1.compute.urlMaps.list
ADMIN_WRITEv1.compute.backendServices.addSignedUrlKey
v1.compute.backendServices.delete
v1.compute.backendServices.deleteSignedUrlKey
v1.compute.backendServices.insert
v1.compute.backendServices.patch
v1.compute.backendServices.setEdgeSecurityPolicy
v1.compute.backendServices.setIamPolicy
v1.compute.backendServices.setSecurityPolicy
v1.compute.backendServices.update
v1.compute.forwardingRules.delete
v1.compute.forwardingRules.insert
v1.compute.forwardingRules.patch
v1.compute.forwardingRules.setLabels
v1.compute.forwardingRules.setTarget
v1.compute.targetHttpProxies.delete
v1.compute.targetHttpProxies.insert
v1.compute.targetHttpProxies.patch
v1.compute.targetHttpProxies.setUrlMap
v1.compute.targetPools.addHealthCheck
v1.compute.targetPools.addInstance
v1.compute.targetPools.delete
v1.compute.targetPools.insert
v1.compute.targetPools.removeHealthCheck
v1.compute.targetPools.removeInstance
v1.compute.targetPools.setBackup
v1.compute.targetPools.setSecurityPolicy
v1.compute.urlMaps.delete
v1.compute.urlMaps.insert
v1.compute.urlMaps.invalidateCache
v1.compute.urlMaps.patch
v1.compute.urlMaps.update
v1.compute.urlMaps.validate

API interface audit logs

For information about how and which permissions are evaluated for each method,see the Identity and Access Management documentation for Cloud Load Balancing.

compute.v1.BackendServicesService

The following audit logs are associated with methods belonging tocompute.v1.BackendServicesService.

addSignedUrlKey

  • Method:v1.compute.backendServices.addSignedUrlKey
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.addSignedUrlKey - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.addSignedUrlKey"

aggregatedList

  • Method:v1.compute.backendServices.aggregatedList
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.aggregatedList"

delete

  • Method:v1.compute.backendServices.delete
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.delete - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.delete"

deleteSignedUrlKey

  • Method:v1.compute.backendServices.deleteSignedUrlKey
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.deleteSignedUrlKey - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.deleteSignedUrlKey"

get

  • Method:v1.compute.backendServices.get
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.get"

getHealth

  • Method:v1.compute.backendServices.getHealth
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.getHealth"

getIamPolicy

  • Method:v1.compute.backendServices.getIamPolicy
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.getIamPolicy - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.getIamPolicy"

insert

  • Method:v1.compute.backendServices.insert
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.create - ADMIN_WRITE
    • compute.instanceGroups.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.insert"

list

  • Method:v1.compute.backendServices.list
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.list"

patch

  • Method:v1.compute.backendServices.patch
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.get - ADMIN_READ
    • compute.backendServices.update - ADMIN_WRITE
    • compute.healthChecks.useReadOnly - ADMIN_READ
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.patch"

setEdgeSecurityPolicy

  • Method:v1.compute.backendServices.setEdgeSecurityPolicy
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.setSecurityPolicy - ADMIN_WRITE
    • compute.securityPolicies.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.setEdgeSecurityPolicy"

setIamPolicy

  • Method:v1.compute.backendServices.setIamPolicy
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.setIamPolicy - ADMIN_WRITE
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.setIamPolicy"

setSecurityPolicy

  • Method:v1.compute.backendServices.setSecurityPolicy
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.setSecurityPolicy - ADMIN_WRITE
    • compute.securityPolicies.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.setSecurityPolicy"

testIamPermissions

  • Method:v1.compute.backendServices.testIamPermissions
  • Audit log type:Data access
  • Permissions:
    • compute.backendServices.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.testIamPermissions"

update

  • Method:v1.compute.backendServices.update
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.update - ADMIN_WRITE
    • compute.healthChecks.useReadOnly - ADMIN_READ
    • compute.instanceGroups.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.backendServices.update"

compute.v1.RegionForwardingRulesService

The following audit logs are associated with methods belonging tocompute.v1.RegionForwardingRulesService.

aggregatedList

  • Method:v1.compute.forwardingRules.aggregatedList
  • Audit log type:Data access
  • Permissions:
    • compute.forwardingRules.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.aggregatedList"

delete

  • Method:v1.compute.forwardingRules.delete
  • Audit log type:Admin activity
  • Permissions:
    • compute.forwardingRules.delete - ADMIN_WRITE
    • compute.forwardingRules.pscDelete - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.delete"

get

  • Method:v1.compute.forwardingRules.get
  • Audit log type:Data access
  • Permissions:
    • compute.forwardingRules.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.get"

insert

  • Method:v1.compute.forwardingRules.insert
  • Audit log type:Admin activity
  • Permissions: See IAM documentation for permissions.
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.insert"

list

  • Method:v1.compute.forwardingRules.list
  • Audit log type:Data access
  • Permissions:
    • compute.forwardingRules.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.list"

patch

  • Method:v1.compute.forwardingRules.patch
  • Audit log type:Admin activity
  • Permissions:
    • compute.forwardingRules.update - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.patch"

setLabels

  • Method:v1.compute.forwardingRules.setLabels
  • Audit log type:Admin activity
  • Permissions:
    • compute.forwardingRules.setLabels - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.setLabels"

setTarget

  • Method:v1.compute.forwardingRules.setTarget
  • Audit log type:Admin activity
  • Permissions:
    • compute.forwardingRules.setTarget - ADMIN_WRITE
    • compute.regionBackendServices.use - ADMIN_WRITE
    • compute.regionTargetHttpsProxies.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.forwardingRules.setTarget"

compute.v1.TargetHttpProxiesService

The following audit logs are associated with methods belonging tocompute.v1.TargetHttpProxiesService.

aggregatedList

  • Method:v1.compute.targetHttpProxies.aggregatedList
  • Audit log type:Data access
  • Permissions:
    • compute.targetHttpProxies.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.aggregatedList"

delete

  • Method:v1.compute.targetHttpProxies.delete
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetHttpProxies.delete - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.delete"

get

  • Method:v1.compute.targetHttpProxies.get
  • Audit log type:Data access
  • Permissions:
    • compute.targetHttpProxies.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.get"

insert

  • Method:v1.compute.targetHttpProxies.insert
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetHttpProxies.create - ADMIN_WRITE
    • compute.urlMaps.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.insert"

list

  • Method:v1.compute.targetHttpProxies.list
  • Audit log type:Data access
  • Permissions:
    • compute.targetHttpProxies.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.list"

patch

  • Method:v1.compute.targetHttpProxies.patch
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetHttpProxies.get - ADMIN_READ
    • compute.targetHttpProxies.update - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.patch"

setUrlMap

  • Method:v1.compute.targetHttpProxies.setUrlMap
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetHttpProxies.setUrlMap - ADMIN_WRITE
    • compute.urlMaps.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetHttpProxies.setUrlMap"

compute.v1.TargetPoolsService

The following audit logs are associated with methods belonging tocompute.v1.TargetPoolsService.

addHealthCheck

  • Method:v1.compute.targetPools.addHealthCheck
  • Audit log type:Admin activity
  • Permissions:
    • compute.httpHealthChecks.useReadOnly - ADMIN_READ
    • compute.targetPools.addHealthCheck - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.addHealthCheck"

addInstance

  • Method:v1.compute.targetPools.addInstance
  • Audit log type:Admin activity
  • Permissions:
    • compute.instances.use - ADMIN_WRITE
    • compute.targetPools.addInstance - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.addInstance"

aggregatedList

  • Method:v1.compute.targetPools.aggregatedList
  • Audit log type:Data access
  • Permissions:
    • compute.targetPools.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.aggregatedList"

delete

  • Method:v1.compute.targetPools.delete
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetPools.delete - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.delete"

get

  • Method:v1.compute.targetPools.get
  • Audit log type:Data access
  • Permissions:
    • compute.targetPools.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.get"

getHealth

  • Method:v1.compute.targetPools.getHealth
  • Audit log type:Data access
  • Permissions:
    • compute.targetPools.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.getHealth"

insert

  • Method:v1.compute.targetPools.insert
  • Audit log type:Admin activity
  • Permissions:
    • compute.httpHealthChecks.useReadOnly - ADMIN_READ
    • compute.instances.use - ADMIN_WRITE
    • compute.targetPools.create - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.insert"

list

  • Method:v1.compute.targetPools.list
  • Audit log type:Data access
  • Permissions:
    • compute.targetPools.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.list"

removeHealthCheck

  • Method:v1.compute.targetPools.removeHealthCheck
  • Audit log type:Admin activity
  • Permissions:
    • compute.httpHealthChecks.useReadOnly - ADMIN_READ
    • compute.targetPools.removeHealthCheck - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.removeHealthCheck"

removeInstance

  • Method:v1.compute.targetPools.removeInstance
  • Audit log type:Admin activity
  • Permissions:
    • compute.instances.use - ADMIN_WRITE
    • compute.targetPools.removeInstance - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.removeInstance"

setBackup

  • Method:v1.compute.targetPools.setBackup
  • Audit log type:Admin activity
  • Permissions:
    • compute.targetPools.update - ADMIN_WRITE
    • compute.targetPools.use - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.setBackup"

setSecurityPolicy

  • Method:v1.compute.targetPools.setSecurityPolicy
  • Audit log type:Admin activity
  • Permissions:
    • compute.regionSecurityPolicies.use - ADMIN_WRITE
    • compute.targetPools.setSecurityPolicy - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.targetPools.setSecurityPolicy"

compute.v1.UrlMapsService

The following audit logs are associated with methods belonging tocompute.v1.UrlMapsService.

aggregatedList

  • Method:v1.compute.urlMaps.aggregatedList
  • Audit log type:Data access
  • Permissions:
    • compute.urlMaps.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.aggregatedList"

delete

  • Method:v1.compute.urlMaps.delete
  • Audit log type:Admin activity
  • Permissions:
    • compute.urlMaps.delete - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.delete"

get

  • Method:v1.compute.urlMaps.get
  • Audit log type:Data access
  • Permissions:
    • compute.urlMaps.get - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.get"

insert

  • Method:v1.compute.urlMaps.insert
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.use - ADMIN_WRITE
    • compute.urlMaps.create - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.insert"

invalidateCache

  • Method:v1.compute.urlMaps.invalidateCache
  • Audit log type:Admin activity
  • Permissions:
    • compute.urlMaps.invalidateCache - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.invalidateCache"

list

  • Method:v1.compute.urlMaps.list
  • Audit log type:Data access
  • Permissions:
    • compute.urlMaps.list - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.list"

patch

  • Method:v1.compute.urlMaps.patch
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.use - ADMIN_WRITE
    • compute.urlMaps.update - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.patch"

update

  • Method:v1.compute.urlMaps.update
  • Audit log type:Admin activity
  • Permissions:
    • compute.backendServices.use - ADMIN_WRITE
    • compute.urlMaps.update - ADMIN_WRITE
  • Method is a long-running or streaming operation:Long-running operation
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.update"

validate

  • Method:v1.compute.urlMaps.validate
  • Audit log type:Data access
  • Permissions:
    • compute.backendBuckets.use - ADMIN_WRITE
    • compute.backendServices.use - ADMIN_WRITE
    • compute.urlMaps.validate - ADMIN_READ
  • Method is a long-running or streaming operation:No.
  • Filter for this method: protoPayload.methodName="v1.compute.urlMaps.validate"

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.