decision_logs/decision_logs
The decision_logs
API provides a means of listing and retrieving decision logs objects.
#
URLGET .../api/v1/decision_logs/decision_logs
This form returns a list of names of available decision log storage objects, each of which can be provided to the second form of this API to retrieve a secure download location (URL):
GET .../api/v1/decision_logs/decision_logs/{name}
Where name
was previously retrieved using the list call. Note that storage object names must be
URL-encoded before using them to retrieve a download location.
#
ExampleGiven a hypothetical tenant with a policy with policy id 18d6580f-7fb0-11ec-bdd9-01c9e2c2068b
, the list call to
retrieve those decision log object names is:
GET .../api/v1/decision_logs/decision_logs?policies=18d6580f-7fb0-11ec-bdd9-01c9e2c2068b
Note that omitting the policies parameter would retrieve object names for all the policies.
The response would be similar to:
{ "page": { "next_token": "", "result_size": 3, "total_size": 0 }, "results": [ { "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-00" }, { "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-01" }, { "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-04" } ]}
Passing one of the resulting names to the retrieval call and taking care to URL-encode the name:
GET .../api/v1/decision_logs/decision_logs/18d6580f-7fb0-11ec-bdd9-01c9e2c2068b%2Fdecisions-2022-01-28-00
Yields a response similar to:
{ "log": { "url": "https://storage.googleapis.com/..." }}
url
can be used to download the object, which is a CSV file, using standard HTTP tools. The URL is signed
and valid for 15 minutes.