kmaas category

This category of logs contains all the business requests concerning key management as a service (KMaaS).

Encrypt and decrypt actions

  • The encrypt action means that an encrypt request has been made. This is the case whenever data is encrypted using the KMaaS service.

  • The decrypt action means that a decrypt request has been made. This is the case every time data is decrypted using the KMaaS service.

These actions generate an "info" severity log in the event of success, or a "crit" severity log in the event of an error.

The log fields for these actions are as follows:

Field

Description

Type

Mandatory/Optional

tenant_id

Tenant identifier.

Example: 025f02fe-bee2-444b-bf76-b5ead30327c0

String in uuid v4 format Mandatory

kek_id

Identifier of the KEK used.

Example: ed7e4c13-6199-30a3-7bce-1c82a9e31e21

String Mandatory