kas category

This category of logs contains all the business requests concerning the Key Access Management module (KAS).

setup action

The setup action means that the KAS configuration is checked. It generates an "info" severity log if it is configured properly, or an "err" severity log in the event of an error.

The log fields for this action are as follows:

Field

Description

 Type

Mandatory/Optional

tenant_id

Tenant identifier.

Example: 025f02fe-bee2-444b-bf76-b5ead30327c0

 String in uuid v4 format Mandatory
enabled Specify if the KAS module is enabled. Boolean Mandatory
errors

If the KAS module cannot be enabled due to an incorrect configuration, this JSON object contains an error list with an error code and a message:

  • If the severity level is "info", the error list is empty, the KAS module is enabled.

  • If the severity level is "err", the list contains at least one error.

Example: [

{

code: 2002010,

message: 'Module: Kas not enabled for tenantId bc337abd-0d4f-43f9-aaf6-54ef7268d2e5. Reason: Validation failed. Reasons are: [Wrong type error: <tenant>/kas/authentication property must be array]'

}

]

 Object

Mandatory if severitu is "err"

rewrap action

The rewrap action means that a rewrap request has been made. This is the case whenever data is decrypted using Key Access Management.

This action generates an "info" severity log in the event of success, or a "crit" severity log in the event of an error.

The log fields for this action are as follows:

Field

Description

 Type

Mandatory/Optional

tenant_id

Tenant identifier.

Example: 025f02fe-bee2-444b-bf76-b5ead30327c0

 String in uuid v4 format Mandatory
key

Identifier of the key used.

Example: ed7e4c13-6199-30a3-7bce-1c82a9e31e21

 String Mandatory

encrypt and decrypt actions

 

  • The encrypt action means that an encrypt request has been made. This is the case whenever data is encrypted using Key Access Management.

  • The encrypt action means that an encrypt request has been made. This is the case whenever data is decrypted using Key Access Management.

This action generates an "info" severity log in the event of success, or a "crit" severity log in the event of an error.

The log fields for this action are as follows:

Field

Description

 Type

Mandatory/Optional

tenant_id

Tenant identifier.

Example: 025f02fe-bee2-444b-bf76-b5ead30327c0

 String in uuid v4 format Mandatory
kek_id

Identifier of the KEK used.

Example: ed7e4c13-6199-30a3-7bce-1c82a9e31e21

 String Mandatory