This document describes audit logging for Speech-to-Text. Google Cloud servicesgenerate audit logs that record administrative and access activities within your Google Cloud resources.For more information about Cloud Audit Logs, see the following:

• Types of audit logs
• Audit log entry structure
• Storing and routing audit logs
• Cloud Logging pricing summary
• Enable Data Access audit logs

Service name

Speech-to-Text audit logs use the service namespeech.googleapis.com.Filter for this service:

protoPayload.serviceName="speech.googleapis.com"

Methods by permission type

Each IAM permission has atype property, whose value is an enumthat can be one of four values:ADMIN_READ,ADMIN_WRITE,DATA_READ, orDATA_WRITE. When you call a method,Speech-to-Text generates an audit log whose category is dependent on thetype property of the permission required to perform the method.Methods that require an IAM permission with thetype property valueofDATA_READ,DATA_WRITE, orADMIN_READ generateData Access audit logs.Methods that require an IAM permission with thetype property valueofADMIN_WRITE generateAdmin Activity audit logs.

API interface audit logs

For information about how and which permissions are evaluated for each method,see the Identity and Access Management documentation for Speech-to-Text.

google.cloud.speech.v2.Speech

The following audit logs are associated with methods belonging togoogle.cloud.speech.v2.Speech.

BatchRecognize

• Method:google.cloud.speech.v2.Speech.BatchRecognize
  
• Audit log type:Data access
  
• Permissions:
  • speech.recognizers.recognize - DATA_READ
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.BatchRecognize"
  

CreateCustomClass

• Method:google.cloud.speech.v2.Speech.CreateCustomClass
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.create - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.CreateCustomClass"
  

CreatePhraseSet

• Method:google.cloud.speech.v2.Speech.CreatePhraseSet
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.create - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.CreatePhraseSet"
  

CreateRecognizer

• Method:google.cloud.speech.v2.Speech.CreateRecognizer
  
• Audit log type:Admin activity
  
• Permissions:
  • speech.recognizers.create - ADMIN_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.CreateRecognizer"
  

DeleteCustomClass

• Method:google.cloud.speech.v2.Speech.DeleteCustomClass
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.delete - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.DeleteCustomClass"
  

DeletePhraseSet

• Method:google.cloud.speech.v2.Speech.DeletePhraseSet
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.delete - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.DeletePhraseSet"
  

DeleteRecognizer

• Method:google.cloud.speech.v2.Speech.DeleteRecognizer
  
• Audit log type:Admin activity
  
• Permissions:
  • speech.recognizers.delete - ADMIN_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.DeleteRecognizer"
  

GetConfig

• Method:google.cloud.speech.v2.Speech.GetConfig
  
• Audit log type:Data access
  
• Permissions:
  • speech.config.get - ADMIN_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.GetConfig"
  

GetCustomClass

• Method:google.cloud.speech.v2.Speech.GetCustomClass
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.get - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.GetCustomClass"
  

GetPhraseSet

• Method:google.cloud.speech.v2.Speech.GetPhraseSet
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.get - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.GetPhraseSet"
  

GetRecognizer

• Method:google.cloud.speech.v2.Speech.GetRecognizer
  
• Audit log type:Data access
  
• Permissions:
  • speech.recognizers.get - ADMIN_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.GetRecognizer"
  

ListCustomClasses

• Method:google.cloud.speech.v2.Speech.ListCustomClasses
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.list - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.ListCustomClasses"
  

ListPhraseSets

• Method:google.cloud.speech.v2.Speech.ListPhraseSets
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.list - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.ListPhraseSets"
  

ListRecognizers

• Method:google.cloud.speech.v2.Speech.ListRecognizers
  
• Audit log type:Data access
  
• Permissions:
  • speech.recognizers.list - ADMIN_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.ListRecognizers"
  

Recognize

• Method:google.cloud.speech.v2.Speech.Recognize
  
• Audit log type:Data access
  
• Permissions:
  • speech.recognizers.recognize - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.Recognize"
  

StreamingRecognize

• Method:google.cloud.speech.v2.Speech.StreamingRecognize
  
• Audit log type:Data access
  
• Permissions:
  • speech.recognizers.recognize - DATA_READ
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.StreamingRecognize"
  

UndeleteCustomClass

• Method:google.cloud.speech.v2.Speech.UndeleteCustomClass
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.undelete - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UndeleteCustomClass"
  

UndeletePhraseSet

• Method:google.cloud.speech.v2.Speech.UndeletePhraseSet
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.undelete - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UndeletePhraseSet"
  

UndeleteRecognizer

• Method:google.cloud.speech.v2.Speech.UndeleteRecognizer
  
• Audit log type:Admin activity
  
• Permissions:
  • speech.recognizers.undelete - ADMIN_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UndeleteRecognizer"
  

UpdateConfig

• Method:google.cloud.speech.v2.Speech.UpdateConfig
  
• Audit log type:Admin activity
  
• Permissions:
  • speech.config.update - ADMIN_WRITE
• Method is a long-running or streaming operation:No.
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UpdateConfig"
  

UpdateCustomClass

• Method:google.cloud.speech.v2.Speech.UpdateCustomClass
  
• Audit log type:Data access
  
• Permissions:
  • speech.customClasses.update - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UpdateCustomClass"
  

UpdatePhraseSet

• Method:google.cloud.speech.v2.Speech.UpdatePhraseSet
  
• Audit log type:Data access
  
• Permissions:
  • speech.phraseSets.update - DATA_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UpdatePhraseSet"
  

UpdateRecognizer

• Method:google.cloud.speech.v2.Speech.UpdateRecognizer
  
• Audit log type:Admin activity
  
• Permissions:
  • speech.recognizers.update - ADMIN_WRITE
• Method is a long-running or streaming operation:Long-running operation
  
• Filter for this method: protoPayload.methodName="google.cloud.speech.v2.Speech.UpdateRecognizer"
  

Methods that don't produce audit logs

A method might not produce audit logs for one or more of the followingreasons:

• It is a high volume method involving significant log generation and storage costs.
• It has low auditing value.
• Another audit or platform log already provides method coverage.

The following methods don't produce audit logs:

• google.cloud.location.Locations.ListLocations
• google.cloud.speech.v1.Adaptation.CreateCustomClass
• google.cloud.speech.v1.Adaptation.CreatePhraseSet
• google.cloud.speech.v1.Adaptation.DeleteCustomClass
• google.cloud.speech.v1.Adaptation.DeletePhraseSet
• google.cloud.speech.v1.Adaptation.GetCustomClass
• google.cloud.speech.v1.Adaptation.GetPhraseSet
• google.cloud.speech.v1.Adaptation.ListCustomClasses
• google.cloud.speech.v1.Adaptation.ListPhraseSet
• google.cloud.speech.v1.Adaptation.UpdateCustomClass
• google.cloud.speech.v1.Adaptation.UpdatePhraseSet
• google.cloud.speech.v1.Speech.LongRunningRecognize
• google.cloud.speech.v1.Speech.Recognize
• google.cloud.speech.v1.Speech.StreamingRecognize
• google.cloud.speech.v1p1beta1.Adaptation.CreateCustomClass
• google.cloud.speech.v1p1beta1.Adaptation.CreatePhraseSet
• google.cloud.speech.v1p1beta1.Adaptation.DeleteCustomClass
• google.cloud.speech.v1p1beta1.Adaptation.DeletePhraseSet
• google.cloud.speech.v1p1beta1.Adaptation.GetCustomClass
• google.cloud.speech.v1p1beta1.Adaptation.GetPhraseSet
• google.cloud.speech.v1p1beta1.Adaptation.ListCustomClasses
• google.cloud.speech.v1p1beta1.Adaptation.ListPhraseSet
• google.cloud.speech.v1p1beta1.Adaptation.UpdateCustomClass
• google.cloud.speech.v1p1beta1.Adaptation.UpdatePhraseSet
• google.cloud.speech.v1p1beta1.Speech.LongRunningRecognize
• google.cloud.speech.v1p1beta1.Speech.Recognize
• google.cloud.speech.v1p1beta1.Speech.StreamingRecognize
• google.longrunning.Operations.GetOperation
• google.longrunning.Operations.ListOperations
• google.longrunning.Operations.WaitOperation