Audit log backups in Google Distributed Cloud (GDC) air-gapped preserve historical records in remote storage buckets for compliance, security analysis, and disaster recovery. To back up or restore platform audit logs, identify your source log bucket and share its endpoint and credentials with your infrastructure operator (IO). Your IO installs and configures the components required to transfer and recover historical audit logs from remote backups.
Identify the source bucket
You must identify the source GDC bucket that contains the original audit logs you want to secure.
To get the permissions you need to view platform audit logs buckets, ask your
IAM Org Admin to grant you the Audit Logs Platform Bucket Viewer
(audit-logs-platform-bucket-viewer) role in the Management API server in the
audit-logs-loki-pa-buckets namespace.
You must share with the IO the name and endpoint of the bucket that contains the logs you want to secure. To learn how to view bucket configurations, see List and view storage bucket configurations.
Contact your IO to create a backup and restore audit logs
To request a backup and restore process for audit logs, contact your Infrastructure Operator (IO) and provide them with the backup bucket's endpoint and access credentials. You are responsible for ensuring the IO gets these permissions upon request.
To learn how to grant access, see Grant and revoke access.