Key Management Service (KMS) is integrated with ActionTrail. ActionTrail records API call events on KMS resources made by Alibaba Cloud accounts and Resource Access Management (RAM) users, so you can audit who did what and when.
What ActionTrail records
ActionTrail records call events for all KMS API operations, except DescribeRegions.
For sample event log entries, see KMS. For a full reference of event log fields, see Management event structure.
Query KMS event logs
Log on to the ActionTrail console.
In the left-side navigation pane, click Events > Event Query.
In the top navigation bar, select the region where the events occurred.
On the Event Query page, select Service Name from the drop-down list.
Enter Kms in the field and click the
icon.Note Enter Kms with an uppercase K and lowercase ms. This is the exact service name filter value for KMS events.Locate the event by time, then click View Details in the Actions column.