Key Management Service (KMS) is integrated with ActionTrail. You can use ActionTrail to query the logs of all events that are triggered by all users on KMS resources. The users can be Alibaba Cloud accounts or Resource Access Management (RAM) users. This topic describes how to use ActionTrail to query KMS event logs.

Background information

ActionTrail records call events for all API operations of KMS, except for the DescribeRegions operation. For more information about the sample code to query event logs, see KMS. For more information about the fields in event logs, see ActionTrail event log reference.


  1. Log on to the ActionTrail console.
  2. In the left-side navigation pane, click Event Detail Query.
  3. In the top navigation bar, select the region of the events that you want to query.
  4. On the Event Detail Query page, select Service Name from the drop-down list.
  5. Enter Kms in the field and click the search icon.
  6. Move the pointer over an event name in the Event Name column to view the details of the event.
  7. Optional:If you want to query the code records of an event, click the plus sign (+) to the left of the event name. Then, click Event Detail.