本頁面中的部分或全部資訊可能不適用於 Trusted Cloud by S3NS。
Storage 批次作業稽核記錄
本文說明 Storage 批次作業的稽核記錄。Google Cloud 服務會產生稽核記錄，記錄 Google Cloud 資源中的管理和存取活動。如要進一步瞭解 Cloud 稽核記錄，請參閱下列文章：
服務名稱
Storage Batch Operations 稽核記錄會使用服務名稱 storagebatchoperations.googleapis.com。篩選這項服務：
protoPayload.serviceName="storagebatchoperations.googleapis.com"
依權限類型劃分的方法
每個 IAM 權限都有 type 屬性，其值為列舉，可以是下列四個值之一：ADMIN_READ、ADMIN_WRITE、DATA_READ 或 DATA_WRITE。呼叫方法時，儲存空間批次作業會產生稽核記錄，記錄的類別取決於執行方法所需的權限 type 屬性。如果方法需要 IAM 權限，且 type 屬性值為 DATA_READ、DATA_WRITE 或 ADMIN_READ，就會產生「資料存取」稽核記錄。需要 IAM 權限且 type 屬性值為 ADMIN_WRITE 的方法會產生管理員活動稽核記錄。
| 權限類型 |
方法 |
ADMIN_READ |
google.cloud.storagebatchoperations.v1.StorageBatchOperations.GetJob
google.cloud.storagebatchoperations.v1.StorageBatchOperations.ListJobs
google.longrunning.Operations.GetOperation
google.longrunning.Operations.ListOperations |
ADMIN_WRITE |
google.cloud.storagebatchoperations.v1.StorageBatchOperations.CancelJob
google.cloud.storagebatchoperations.v1.StorageBatchOperations.CreateJob
google.cloud.storagebatchoperations.v1.StorageBatchOperations.DeleteJob
google.longrunning.Operations.CancelOperation
google.longrunning.Operations.DeleteOperation |
API 介面稽核記錄
如要瞭解系統如何評估每個方法的權限，以及評估哪些權限，請參閱 Storage Batch Operations 的 Cloud Identity and Access Management 說明文件。
google.cloud.storagebatchoperations.v1.StorageBatchOperations
下列稽核記錄與屬於 google.cloud.storagebatchoperations.v1.StorageBatchOperations 的方法相關聯。
CancelJob
- 方法：
google.cloud.storagebatchoperations.v1.StorageBatchOperations.CancelJob
- 稽核記錄類型：管理員活動
- 權限：
storagebatchoperations.jobs.cancel - ADMIN_WRITE
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.cloud.storagebatchoperations.v1.StorageBatchOperations.CancelJob"
CreateJob
- 方法：
google.cloud.storagebatchoperations.v1.StorageBatchOperations.CreateJob
- 稽核記錄類型：管理員活動
- 權限：
storagebatchoperations.jobs.create - ADMIN_WRITE
- 方法是長時間執行的作業或串流作業：
長時間執行的作業
- 篩選這個方法：
protoPayload.methodName="google.cloud.storagebatchoperations.v1.StorageBatchOperations.CreateJob"
DeleteJob
- 方法：
google.cloud.storagebatchoperations.v1.StorageBatchOperations.DeleteJob
- 稽核記錄類型：管理員活動
- 權限：
storagebatchoperations.jobs.delete - ADMIN_WRITE
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.cloud.storagebatchoperations.v1.StorageBatchOperations.DeleteJob"
GetJob
- 方法：
google.cloud.storagebatchoperations.v1.StorageBatchOperations.GetJob
- 稽核記錄類型：資料存取
- 權限：
storagebatchoperations.jobs.get - ADMIN_READ
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.cloud.storagebatchoperations.v1.StorageBatchOperations.GetJob"
ListJobs
- 方法：
google.cloud.storagebatchoperations.v1.StorageBatchOperations.ListJobs
- 稽核記錄類型：資料存取
- 權限：
storagebatchoperations.jobs.list - ADMIN_READ
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.cloud.storagebatchoperations.v1.StorageBatchOperations.ListJobs"
google.longrunning.Operations
下列稽核記錄與屬於 google.longrunning.Operations 的方法相關聯。
CancelOperation
- 方法：
google.longrunning.Operations.CancelOperation
- 稽核記錄類型：管理員活動
- 權限：
storagebatchoperations.operations.cancel - ADMIN_WRITE
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.longrunning.Operations.CancelOperation"
DeleteOperation
- 方法：
google.longrunning.Operations.DeleteOperation
- 稽核記錄類型：管理員活動
- 權限：
storagebatchoperations.operations.delete - ADMIN_WRITE
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.longrunning.Operations.DeleteOperation"
GetOperation
- 方法：
google.longrunning.Operations.GetOperation
- 稽核記錄類型：資料存取
- 權限：
storagebatchoperations.operations.get - ADMIN_READ
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.longrunning.Operations.GetOperation"
ListOperations
- 方法：
google.longrunning.Operations.ListOperations
- 稽核記錄類型：資料存取
- 權限：
storagebatchoperations.operations.list - ADMIN_READ
- 方法是長時間執行的作業或串流作業：
否。
- 篩選這個方法：
protoPayload.methodName="google.longrunning.Operations.ListOperations"
不會產生稽核記錄的方法
方法可能不會產生稽核記錄，原因如下：
- 這項方法會產生大量記錄，因此需要支付高昂的記錄產生和儲存費用。
- 稽核價值偏低。
- 其他稽核或平台記錄已提供方法涵蓋範圍。
下列方法不會產生稽核記錄：
google.cloud.location.Locations.GetLocationgoogle.cloud.location.Locations.ListLocationsgoogle.longrunning.Operations.WaitOperation
除非另有註明，否則本頁面中的內容是採用創用 CC 姓名標示 4.0 授權，程式碼範例則為阿帕契 2.0 授權。詳情請參閱《Google Developers 網站政策》。Java 是 Oracle 和/或其關聯企業的註冊商標。
上次更新時間：2025-07-29 (世界標準時間)。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["缺少我需要的資訊","missingTheInformationINeed","thumb-down"],["過於複雜/步驟過多","tooComplicatedTooManySteps","thumb-down"],["過時","outOfDate","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["示例/程式碼問題","samplesCodeIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-07-29 (世界標準時間)。"],[],[],null,["# Storage batch operations audit logging\n\nThis document describes audit logging for Storage Batch Operations. Google Cloud services\ngenerate audit logs that record administrative and access activities within your Google Cloud resources.\nFor more information about Cloud Audit Logs, see the following:\n\n- [Types of audit logs](/logging/docs/audit#types)\n- [Audit log entry structure](/logging/docs/audit#audit_log_entry_structure)\n- [Storing and routing audit logs](/logging/docs/audit#storing_and_routing_audit_logs)\n- [Cloud Logging pricing summary](/stackdriver/pricing#logs-pricing-summary)\n- [Enable Data Access audit logs](/logging/docs/audit/configure-data-access)\n\n\u003cbr /\u003e\n\nService name\n------------\n\nStorage Batch Operations audit logs use the service name `storagebatchoperations.googleapis.com`.\nFilter for this service: \n\n```gdscript\n protoPayload.serviceName=\"storagebatchoperations.googleapis.com\"\n \n```\n\n\u003cbr /\u003e\n\nMethods by permission type\n--------------------------\n\nEach IAM permission has a `type` property, whose value is an enum\nthat can be one of four values: `ADMIN_READ`, `ADMIN_WRITE`,\n`DATA_READ`, or `DATA_WRITE`. When you call a method,\nStorage Batch Operations generates an audit log whose category is dependent on the\n`type` property of the permission required to perform the method.\n\nMethods that require an IAM permission with the `type` property value\nof `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate\n[Data Access](/logging/docs/audit#data-access) audit logs.\n\nMethods that require an IAM permission with the `type` property value\nof `ADMIN_WRITE` generate\n[Admin Activity](/logging/docs/audit#admin-activity) audit logs.\n\nAPI interface audit logs\n------------------------\n\nFor information about how and which permissions are evaluated for each method,\nsee the Cloud Identity and Access Management documentation for Storage Batch Operations.\n\n### `google.cloud.storagebatchoperations.v1.StorageBatchOperations`\n\nThe following audit logs are associated with methods belonging to\n`google.cloud.storagebatchoperations.v1.StorageBatchOperations`.\n\n#### `CancelJob`\n\n- **Method** : `google.cloud.storagebatchoperations.v1.StorageBatchOperations.CancelJob` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `storagebatchoperations.jobs.cancel - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.storagebatchoperations.v1.StorageBatchOperations.CancelJob\"\n ` \n\n#### `CreateJob`\n\n- **Method** : `google.cloud.storagebatchoperations.v1.StorageBatchOperations.CreateJob` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `storagebatchoperations.jobs.create - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : [**Long-running operation**](/logging/docs/audit/understanding-audit-logs#lro) \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.storagebatchoperations.v1.StorageBatchOperations.CreateJob\"\n ` \n\n#### `DeleteJob`\n\n- **Method** : `google.cloud.storagebatchoperations.v1.StorageBatchOperations.DeleteJob` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `storagebatchoperations.jobs.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.storagebatchoperations.v1.StorageBatchOperations.DeleteJob\"\n ` \n\n#### `GetJob`\n\n- **Method** : `google.cloud.storagebatchoperations.v1.StorageBatchOperations.GetJob` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `storagebatchoperations.jobs.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.storagebatchoperations.v1.StorageBatchOperations.GetJob\"\n ` \n\n#### `ListJobs`\n\n- **Method** : `google.cloud.storagebatchoperations.v1.StorageBatchOperations.ListJobs` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `storagebatchoperations.jobs.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.cloud.storagebatchoperations.v1.StorageBatchOperations.ListJobs\"\n ` \n\n### `google.longrunning.Operations`\n\nThe following audit logs are associated with methods belonging to\n`google.longrunning.Operations`.\n\n#### `CancelOperation`\n\n- **Method** : `google.longrunning.Operations.CancelOperation` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `storagebatchoperations.operations.cancel - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.CancelOperation\"\n ` \n\n#### `DeleteOperation`\n\n- **Method** : `google.longrunning.Operations.DeleteOperation` \n- **Audit log type** : [Admin activity](/logging/docs/audit#admin-activity) \n- **Permissions** :\n - `storagebatchoperations.operations.delete - ADMIN_WRITE`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.DeleteOperation\"\n ` \n\n#### `GetOperation`\n\n- **Method** : `google.longrunning.Operations.GetOperation` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `storagebatchoperations.operations.get - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.GetOperation\"\n ` \n\n#### `ListOperations`\n\n- **Method** : `google.longrunning.Operations.ListOperations` \n- **Audit log type** : [Data access](/logging/docs/audit#data-access) \n- **Permissions** :\n - `storagebatchoperations.operations.list - ADMIN_READ`\n- **Method is a long-running or streaming operation** : No. \n- **Filter for this method** : `\n protoPayload.methodName=\"google.longrunning.Operations.ListOperations\"\n ` \n\nMethods that don't produce audit logs\n-------------------------------------\n\nA method might not produce audit logs for one or more of the following\nreasons:\n\n- It is a high volume method involving significant log generation and storage costs.\n- It has low auditing value.\n- Another audit or platform log already provides method coverage.\n\n\u003cbr /\u003e\n\nThe following methods don't produce audit logs:\n\n- `google.cloud.location.Locations.GetLocation`\n- `google.cloud.location.Locations.ListLocations`\n- `google.longrunning.Operations.WaitOperation`"]]
