Most Cloud de Confiance by S3NS services write Cloud Audit Logs to record administrative activities and data access across your Cloud de Confiance resources. You can use the table in this document to find the audit logging reference documentation and API service name for each supported Cloud de Confiance service.
Google Cloud MCP servers write Data Access audit logs that are service-specific and
use the format SERVICE_NAME.googleapis.com/mcp. You can enable these Data
Access logs by turning on audit logging for mcp.googleapis.com in
the IAM AuditConfig object.
For more information about audit logging for Google Cloud MCP servers, see
Google Cloud MCP servers audit logging.
For an overview of audit logs and the different audit log types, see Cloud Audit Logs overview.
Cloud de Confiance services producing audit logs
| Cloud de Confiance by S3NS services with audit logs | Service Name |
|---|---|
| Access Context Manager | accesscontextmanager.googleapis.com |
| API keys | apikeys.googleapis.com |
| Artifact Registry | artifactregistry.googleapis.com |
| BigQuery | bigquery.googleapis.com |
| BigQuery Storage API | bigquerystorage.googleapis.com |
| BigQuery Migration Service | bigquerymigration.googleapis.com |
| BigQuery Reservation API | bigqueryreservation.googleapis.com |
| Cloud DNS | dns.googleapis.com |
| Cloud Key Management Service | cloudkms.googleapis.com |
| Cloud Load Balancing | compute.googleapis.com |
| Cloud NAT | compute.googleapis.com |
| Compute Engine | compute.googleapis.com |
| Cloud Logging | logging.googleapis.com |
| Cloud Monitoring | monitoring.googleapis.com |
| Cloud SQL | cloudsql.googleapis.com |
| Cloud Storage | storage.googleapis.com |
| Google Kubernetes Engine | k8s.io |
| Google Kubernetes Engine | container.googleapis.com |
| Container Security API | containersecurity.googleapis.com |
| Kubernetes Metadata API | kubernetesmetadata.googleapis.com |
| Identity and Access Management (IAM) | iam.googleapis.com |
| Service Account Credentials | iamcredentials.googleapis.com |
| Security Token Service | sts.googleapis.com |
| Network Connectivity Center | networkconnectivity.googleapis.com |
| Organization Policy | orgpolicy.googleapis.com |
| Pub/Sub | pubsub.googleapis.com |
| Resource Manager | cloudresourcemanager.googleapis.com |
| Service Directory | servicedirectory.googleapis.com |
| Service Extensions | serviceextensions.googleapis.com |
| Service Usage | serviceusage.googleapis.com |
| Virtual Private Cloud (VPC) | networkconnectivity.googleapis.comcompute.googleapis.com |
| Cloud Next Generation Firewall Enterprise | networksecurity.googleapis.com |
| Cloud Quotas | cloudquotas.googleapis.com |
| Google Cloud Managed Service for Apache Kafka | managedkafka.googleapis.com |
| Secure Source Manager | securesourcemanager.googleapis.com |