예시 감사 이벤트
예시 감사 이벤트 (Example Audit Events)
아래는 HCP 플랫폼과 Vault Radar 서비스에서 볼 수 있는 일반적인 감사 이벤트의 예시 목록이에요. 이 예시들은 로그 집계 서비스에서 알림을 설정할 때 참고하면 좋아요.
출처: 문서
본문
예시 감사 이벤트
아래는 HCP 플랫폼과 Vault Radar 서비스에서 볼 수 있는 일반적인 감사 이벤트 목록이에요. 이 예시들은 로그 집계 서비스에 알림을 설정할 때 도움이 돼요.
[!NOTE] 이 목록은 완전하지 않으며 형식은 시간이 지남에 따라 바뀔 수 있어요.
이벤트 구조 (Event structure)
대부분의 HCP 감사 이벤트는 비슷한 구조를 가져요. 다음 항목들은 HCP 플랫폼과 HCP Vault Radar 감사 이벤트 양쪽에서 공통적으로 나타나요.
Stream
"stream": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
}
인증 (Authentication)
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
}
메타데이터 (Metadata)
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "4bffd1eb-ba4b-416e-ace9-f0f27a68b801",
"action_success": true
}
설명 (Description)
"description": "Radar - Create Connection",
"action": "CREATE",
"authorization_info": [
{
"project_id": "70d220a8-8647-47bf-99a9-b3xce3311nt",
"permissions": [
"vault-radar.integrations.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-8647-47bf-99a9-b3xce3311nt"
}
]
}
플랫폼 (Platform)
인증 (Authentication)
Authenticated successfully(인증 성공) 이벤트는 사용자가 HCP 계정에 성공적으로 로그인했음을 나타내요. 이 이벤트는 HCP Vault Radar에만 국한된 것이 아니에요.
{
"stream": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "[email protected]",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"email": "[email protected]"
}
}
},
"metadata": {
"event_type": "hcp_id_auth_success",
"user_id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"ip": "192.168.1.1",
"message": "Authenticated successfully",
"email": "[email protected]",
"timestamp": "2026-01-13 19:05:50 +0000 UTC"
},
"status_code": "OK",
"request_info": {
"http_path": "/consent/complete",
"http_verb": "GET"
},
"description": "Authenticated successfully",
"action": "CREATE"
},
"id": "019bb8c0-0811-7a53-9137-e88aaa514eaa",
"timestamp": "2026-01-13T19:05:51.377381296Z"
}
스트리밍 테스트 (Streaming test)
스트리밍 테스트(streaming test) 이벤트는 HCP와 로그 대상(log destination) 간의 연결이 성공적으로 이루어졌는지 확인해 줘요. 이 이벤트는 HCP Vault Radar에만 국한된 것이 아니에요.
{
"stream": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.log.streaming.DestinationTest"
},
"resource": {
"location": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d"
},
"id": "c6c4256d-57d1-4813-9b50-38e905f190b5",
"type": "hashicorp.streaming.test"
},
"service": "HCP",
"service_log_event": {
"json_payload": {
"time": "2026-01-13T19:53:33Z",
"message": "This is a test log from HCP, if you are reading this then the test for your log streaming integration was successful.",
"test_id": "3f6f5256-ab6a-40b7-a1fb-194710f6df04"
}
},
"id": "67b21bf4-4621-4d20-94d8-b1a57ffe7a41",
"timestamp": "2026-01-13T19:53:33.335116238Z"
}
감사 로그 스트리밍 대상 생성 (Create audit log streaming destination)
Created streaming destination(스트리밍 대상 생성) 이벤트는 HCP 계정에서 로그 집계 서비스로 스트리밍 연결을 추가했을 때를 나타내요. 이 이벤트는 HCP Vault Radar에만 국한된 것이 아니에요.
{
"stream": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"resource": {
"description": "asdf",
"location": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d"
},
"id": "c47343ab-0d05-4263-8d14-1898267a68e1",
"type": "hashicorp.streaming.destination"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"status_code": "OK",
"request_info": {
"http_path": "/logs/2021-03-30/organizations/s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d/destinations",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Created streaming destination",
"action": "CREATE",
"authorization_info": [
{
"permissions": [
"log.streaming.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d"
}
]
},
"id": "019bb8ec-cde9-7d64-96d0-9d4daa91af53",
"timestamp": "2026-01-13T19:54:45.609557740Z"
}
감사 로그 스트리밍 대상 삭제 (Delete audit log streaming destination)
Disabled streaming destination(스트리밍 대상 비활성화) 이벤트는 HCP 계정과 로그 집계 서비스 사이의 스트리밍 연결이 제거되었음을 나타내요. 이 이벤트는 HCP Vault Radar에만 국한된 것이 아니에요.
[!WARNING] 스트리밍 대상이 하나만 구성된 경우, 그 대상을 삭제하면 HCP에서 모든 감사 로그 스트리밍이 중지돼요. 이때 마지막 스트리밍 대상 제거 이벤트 자체도 전송되지 않아요.
{
"stream": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"resource": {
"description": "delete",
"location": {
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d"
},
"id": "f3064df9-0d59-40b6-a03a-7ee947a8b68c",
"type": "hashicorp.streaming.destination"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"status_code": "OK",
"request_info": {
"http_path": "/logs/2021-03-30/organizations/s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d/destinations/f3064df9-0d59-40b6-a03a-7ee947a8b68c",
"http_client_ip": "192.168.1.1",
"http_verb": "DELETE",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Disabled streaming destination",
"action": "DELETE",
"authorization_info": [
{
"permissions": [
"log.streaming.delete",
"log.streaming.delete-filter"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d"
}
]
},
"id": "019bb8f1-5fe2-7a8b-bf17-5c1d8cb0182a",
"timestamp": "2026-01-13T19:59:45.122111885Z"
}
데이터 소스 (Data source)
데이터 소스 연결 생성 (Create data source connection)
Radar - Create Connection(연결 생성) 이벤트는 HCP Vault Radar와 GitHub, GitLab 같은 데이터 소스 또는 Jira, Slack 같은 통합 간의 연결을 나타내요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "4bffd1eb-ba4b-416e-ace9-f0f27a68b801",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/integrations/connections",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Create Connection",
"action": "CREATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.integrations.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c4-0587-7a81-8778-da6f74219b90",
"timestamp": "2026-01-13T19:10:12.871977897Z"
}
데이터 소스 추가 (Add data source)
Radar - Create Data Source(데이터 소스 생성) 이벤트는 GitHub나 GitLab 조직 같은 특정 데이터 소스와 HCP Vault Radar를 추가했을 때를 나타내요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "58af2a91-8c80-41d6-8950-20d4b3c40b56",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/data-source-registrations",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Create Data Source",
"action": "CREATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.data-source-registrations.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c4-0bd0-7c9e-b603-dfb68ef07a41",
"timestamp": "2026-01-13T19:10:14.480940711Z"
}
데이터 소스 업데이트 (Update data source)
Radar - Update Data Source(데이터 소스 업데이트) 이벤트는 GitHub나 GitLab 조직과 HCP Vault Radar를 추가하거나 제거하는 등 특정 데이터 소스에 변화가 있을 때를 나타내요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "7a385dcc-8c54-4840-be56-0c44ed530da6",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/data-source-registrations",
"http_client_ip": "192.168.1.1",
"http_verb": "PUT",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Data Source",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.data-source-registrations.update"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c5-4952-7eaf-9ef6-ba3975c5fb12",
"timestamp": "2026-01-13T19:11:35.762970576Z"
}
이벤트 및 규칙 (Events and rules)
이벤트 규칙 업데이트 (Update event rules)
Radar - Update Rules(규칙 업데이트) 이벤트는 HCP Vault Radar 이벤트 규칙이 기본 설정에서 변경되었을 때를 나타내요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "cc54b524-7178-45ae-beac-7e057be5e24b",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/rules",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Rules",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.rules.update"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c7-2bd4-7eb1-9a36-789939c6672c",
"timestamp": "2026-01-13T19:13:39.284691110Z"
}
이벤트 규칙 삭제 (Delete event rule)
Radar - Delete Rule(규칙 삭제) 이벤트는 HCP Vault Radar 이벤트 규칙이 사용자 지정 설정에서 다시 기본 설정으로 변경되었을 때를 나타내요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "82cfd46a-4f65-4178-a446-0a1c8e2d9056",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/rules/1783",
"http_client_ip": "192.168.1.1",
"http_verb": "DELETE",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Delete Rule",
"action": "DELETE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.rules.delete"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c7-bbff-7a85-a91f-4d659f2095f9",
"timestamp": "2026-01-13T19:14:16.191709965Z"
}
무시 규칙 업데이트 (Update ignore rule)
Radar - Update Global Ignore Rules(전역 무시 규칙 업데이트) 이벤트는 HCP Vault Radar에서 무시 규칙(ignore rule)을 편집할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "b4676b2b-82aa-4cfd-a73a-2bebab35ac18",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/settings/blubracket-ignores",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Global Ignore Rules",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.admin-settings.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c8-edd0-7a85-aa0c-1729f14ee514",
"timestamp": "2026-01-13T19:15:34.480649486Z"
}
수정 안내 업데이트 (Update remediation)
Radar - Update Remediation(수정 안내 업데이트) 이벤트는 HCP Vault Radar의 수정 안내(remediation guidance) 설정을 변경할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "cbce45ab-b0a3-459b-929b-95d8c7cc8ac3",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/remediations",
"http_client_ip": "192.168.1.1",
"http_verb": "PUT",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Remediation",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.remediations.update"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8c9-c535-7ca3-a8ee-3b51d99271d4",
"timestamp": "2026-01-13T19:16:29.621530760Z"
}
사용자 지정 표현식 (Custom expressions)
사용자 지정 표현식 생성 (Create custom expression)
Radar - Create Custom Expression(사용자 지정 표현식 생성) 이벤트는 HCP Vault Radar에서 사용자 지정 정규 표현식 검사를 추가할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "f05f4b56-6521-4476-990e-e7ec5259de93",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/repo-scans/custom-regexes",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Create Custom Expression",
"action": "CREATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.custom-regexes.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8cb-46b7-7eb1-8586-0c0d01a4a950",
"timestamp": "2026-01-13T19:18:08.311571245Z"
}
사용자 지정 표현식 업데이트 (Update custom expression)
Radar - Update Custom Expression(사용자 지정 표현식 업데이트) 이벤트는 HCP Vault Radar의 기존 사용자 지정 정규 표현식 검사를 변경할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "e26b2b9f-7a3b-43e0-8541-df50c1134a2a",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/repo-scans/custom-regexes",
"http_client_ip": "192.168.1.1",
"http_verb": "PUT",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Custom Expression",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.custom-regexes.update"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8cb-f16e-7a87-a807-10b62a82bdc6",
"timestamp": "2026-01-13T19:18:52.014884996Z"
}
사용자 지정 표현식 삭제 (Delete custom expression)
Radar - Delete Custom Expression(사용자 지정 표현식 삭제) 이벤트는 HCP Vault Radar의 기존 사용자 지정 정규 표현식 검사를 삭제할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "0f1f0497-84df-42c5-9c5c-714c0f99a0f0",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/repo-scans/custom-regexes",
"http_client_ip": "192.168.1.1",
"http_verb": "DELETE",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Delete Custom Expression",
"action": "DELETE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.custom-regexes.delete"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8cc-8aa6-7ca4-8f2e-3416eb1edd7b",
"timestamp": "2026-01-13T19:19:31.238470110Z"
}
통합 (Integrations)
통합 연결 생성 (Create integration connection)
Radar - Create Connection(연결 생성) 이벤트는 HCP Vault Radar에 Jira, Slack, Teams 같은 새 통합을 추가할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "edc5b7b3-b71a-4697-93cf-e070a81650c9",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/integrations/connections",
"http_client_ip": "192.168.1.1",
"http_verb": "POST",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Create Connection",
"action": "CREATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.integrations.create"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8cf-c52a-7a87-8731-ba0f9953aec3",
"timestamp": "2026-01-13T19:23:02.826803173Z"
}
통합 연결 업데이트 (Update integration connection)
Radar - Update Connection(연결 업데이트) 이벤트는 HCP Vault Radar의 Jira, Slack, Teams 같은 기존 통합을 수정할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "6b98d12d-6f8f-43a0-8191-9305a9e0b923",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/integrations/connections",
"http_client_ip": "192.168.1.1",
"http_verb": "PUT",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Update Connection",
"action": "UPDATE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.integrations.update"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8d1-97fe-7ca5-bc3e-734e5325dba9",
"timestamp": "2026-01-13T19:25:02.334371138Z"
}
통합 연결 삭제 (Delete integration connection)
Radar - Delete Connection(연결 삭제) 이벤트는 HCP Vault Radar의 Jira, Slack, Teams 같은 기존 통합을 삭제할 때 발생해요.
{
"stream": {
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"topic": "hashicorp.platform.audit"
},
"service": "HCP",
"control_plane_event": {
"authentication_info": {
"principal": {
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"type": "PRINCIPAL_TYPE_USER",
"user": {
"full_name": "Bill Preson",
"subject": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"id": "3xc311lnet-adv3-tur3-a42b-afd5e8fd5bc8",
"identity_type": "SOCIAL_GITHUB",
"email": "[email protected]"
}
}
},
"metadata": {
"service_name": "Vault Radar",
"correlation_id": "2753ba30-d80b-46f7-aec3-439abec490a8",
"action_success": true
},
"status_code": "OK",
"request_info": {
"http_path": "/2023-05-01/vault-radar/projects/70d220a8-c83e-47bf-99a9-7a2ce0f98156/api/integrations/connections/ab5ec525-2679-4f27-95f7-337d998edb74",
"http_client_ip": "192.168.1.1",
"http_verb": "DELETE",
"http_user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
},
"description": "Radar - Delete Connection",
"action": "DELETE",
"authorization_info": [
{
"project_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156",
"permissions": [
"vault-radar.integrations.delete"
],
"organization_id": "s3sam3st0-b1g7-b1rd-a8a8-fcf8cacf750d",
"resource_id": "70d220a8-c83e-47bf-99a9-7a2ce0f98156"
}
]
},
"id": "019bb8cf-3383-7eb3-9f1e-5cfa6072d288",
"timestamp": "2026-01-13T19:22:25.539490049Z"
}