Skip to content
Cloud Provider Benchmarks

Datasets

Cloud audit-logging capabilities

Nine audit-logging features — scope, identity, request metadata, data-plane events, search, retention, export, integrity, pricing — per provider.

Version
1.0
Updated
Rows
36
License
CC BY 4.0

JSONCSV

Documentation review; provider-supplied values are labelled by source_type.

Fields

FieldDescription
providerProvider id
productAudit-logging product
featureAudit feature id
valueyes | partial | planned | no | unverified
noteQualifying note (English)
source_typeofficial-docs | first-party | publisher-supplied
sourceSource URL

Preview

First 25 of 36 rows.

providerproductfeaturevaluenotesource_typesource
portvmind-cloudvTrailscopeyesCloud management API operations.publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailidentityyesUser ID, user name, project ID and auth scope.publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailrequest-metadatayesRequest ID, HTTP method, path, status, client IP, user agent, request time.publisher-suppliedhttps://portvmind.com
portvmind-cloudvTraildata-planeunverified—publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailsearchunverified—publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailretentionunverified—publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailexportunverified—publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailintegrityunverified—publisher-suppliedhttps://portvmind.com
portvmind-cloudvTrailpricingunverified—publisher-suppliedhttps://portvmind.com
awsAWS CloudTrailscopeyesManagement events recorded by default.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailidentityyesuserIdentity block (principal, account, session).official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailrequest-metadatayeseventTime, requestID, sourceIPAddress, userAgent, errorCode.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTraildata-planeyesData events (for example S3 object-level) are optional and charged.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailsearchyesEvent history lookup; SQL queries in CloudTrail Lake.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailretentionyes90-day event history; longer retention via trails to S3 or CloudTrail Lake.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailexportyesS3, CloudWatch Logs, EventBridge.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailintegrityyesLog file integrity validation with digest files.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
awsAWS CloudTrailpricingyesEvent history and one copy of management events free; data events and Lake charged.official-docshttps://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
microsoft-azureAzure Monitor Activity LogscopeyesAzure Resource Manager write/delete/action operations.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity LogidentityyesCaller and claims.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity Logrequest-metadatapartialCorrelation ID, operation, status and caller IP in HTTP request details where available.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity Logdata-planepartialVia resource logs and diagnostic settings, not the Activity Log itself.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity LogsearchyesPortal filtering and Log Analytics (KQL).official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity Logretentionyes90 days in the platform; longer through Log Analytics or Storage.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log
microsoft-azureAzure Monitor Activity LogexportyesDiagnostic settings to Log Analytics, Storage and Event Hubs.official-docshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/activity-log

Changelog

  • v1.0 · — Initial release.