Audit logs - missing events - RBAC APIs

Incident Report for Confluent Cloud

Resolved

We have identified gaps in audit logging for some RBAC role binding operations when modified using specific tools. Audit logs may not have been emitted for events related to the creation and deletion of IAM role bindings.

The following use-cases have been identified as impacted:

1. Confluent.cloud web UI - Use of these APIs by the confluent.cloud UI began in November 2021.
2. Terraform and Pulumi - Use of these APIs by these platforms has been available since January 2022.
3. CLI - Use of these APIs by Confluent’s CLI utility began from version 3.0 release.

We have deployed a fix on Monday January 22 2024 at 11:35am PST which ensures audit logging is enabled for all IAM role binding events.

Posted Nov 01, 2021 - 00:00 UTC