Key Management Service (KMS) is integrated with ActionTrail. You can use ActionTrail to query the logs of all events that are triggered by all users on KMS resources. The users can be Alibaba Cloud accounts or Resource Access Management (RAM) users. This topic describes how to use ActionTrail to query KMS event logs.
Background information
ActionTrail records call events for all API operations of KMS, except for the DescribeRegions operation. For more information about the sample code to query event logs, see KMS. For more information about the fields in event logs, see Management event structure.
Procedure
Log on to the ActionTrail console.
In the left-side navigation pane, click Query.
In the top navigation bar, select the region of the events that you want to query.
On the Event Query page, select Service Name from the drop-down list.
Enter Kms in the field and click the
icon. Find the required time and click View Event Details in the Actions column.