Key Management Service (KMS) is integrated with ActionTrail. You can use ActionTrail to query the records of all events that are triggered by all users on KMS resources. The users include both Alibaba Cloud accounts and RAM users. This topic describes how to use ActionTrail to query KMS event logs.

Background information

ActionTrail records call events for all API operations of KMS, except for the DescribeRegions operation. For more information about the sample code of event logs, see KMS. For more information about the fields in event logs, see ActionTrail event log reference.


  1. Log on to the ActionTrail console.
  2. In the top navigation bar, select the region where the events that you want to query occurred.
  3. In the left-side navigation pane, choose ActionTrail > Query Event Details.
  4. On the Query Event Details page, select Service Name from the drop-down list.
    Service Name
  5. Enter Kms in the field and click the search icon icon.
  6. Move the pointer over the event name in the Event Name column to view the event details.
  7. To query the code of an event log, click the plus sign (+) to the left of the event record that you want to query. Then, click Event Detail.