Logs in Key Management Service

Key Management Service (KMS) keeps logs of actions that are performed on symmetric and asymmetric keys. You can view and analyze these logs as events in the Audit Logs service. KMS only supports control plane logs. They describe key management and lifecycle events, such as creating, updating, deleting or rotating a key.

How to view logs

Web console
Nebius AI Cloud CLI

In the sidebar, go to Administration → Audit Logs.
Select Control plane.
Filter events by the KMS service. If this filter is not displayed, click Filters and then select Service.

Run nebius audit v2 audit-event list with the service filter: --filter "service.name='KMS'". To get control plane logs, add --event-type control_plane:

nebius audit v2 audit-event list \
   --parent-id <tenant_ID> \
   --start <time_in_ISO_8601> \
   --end <time_in_ISO_8601> \
   --filter "service.name='KMS'" \
   --event-type control_plane

For more details, see Viewing events in Audit Logs. Parameters of an action, such as creating a key, are returned in the .request.parameters field of the Audit Logs event. For example:

{
  "request": {
    "parameters": {
      "metadata": {
        "id": "<key_ID>",
        "parent_id": "<project_ID>",
        "name": "<key_name>",
        "resource_version": "0",
        "labels": {}
      },
      "spec": {
        "description": "<key_description>",
        "algorithm": "<key_algorithm>"
      }
    }
  }
}

For more details, see Structure and fields of events in Audit Logs.

​How to view logs

How to view logs