Skip to main content

decision_logs/decision_logs

The decision_logs API provides a means of listing and retrieving decision logs objects.

URL​

GET .../api/v1/decision_logs/decision_logs

This form returns a list of names of available decision log storage objects, each of which can be provided to the second form of this API to retrieve a secure download location (URL):

GET .../api/v1/decision_logs/decision_logs/{name}

Where name was previously retrieved using the list call. Note that storage object names must be URL-encoded before using them to retrieve a download location.

Example​

Given a hypothetical tenant with a policy with policy id 18d6580f-7fb0-11ec-bdd9-01c9e2c2068b, the list call to retrieve those decision log object names is:

GET .../api/v1/decision_logs/decision_logs?policies=18d6580f-7fb0-11ec-bdd9-01c9e2c2068b

Note that omitting the policies parameter would retrieve object names for all the policies.

The response would be similar to:

{
  "page": {
    "next_token": "",
    "result_size": 3,
    "total_size": 0
  },
  "results": [
    {
      "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-00"
    },
    {
      "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-01"
    },
    {
      "name": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b/decisions-2022-01-28-04"
    }
  ]
}

Passing one of the resulting names to the retrieval call and taking care to URL-encode the name:

GET .../api/v1/decision_logs/decision_logs/18d6580f-7fb0-11ec-bdd9-01c9e2c2068b%2Fdecisions-2022-01-28-00

Yields a response similar to:

{
  "log": {
    "url": "https://storage.googleapis.com/..."
  }
}

url can be used to download the object, which is a CSV file, using standard HTTP tools. The URL is signed and valid for 15 minutes.