Tracking your management activities
You can now track changes made to your provider account and agents using the Activity logs. The Activity logs aim to provide you with complete traceability and accountability for all authentication and identity-related operations by capturing both system-initiated and user-initiated events.
Navigate to the activity logs from the left-hand menu under Agent Control Tower.
The activity log auto-syncs every 30 minutes. Through it you can track account-related activities like creating a new account, updating an account name, and enabling/disabling account sync, as well as sync statuses.
On an agent level, you can track version level updates, tags, and trust level updates. Alias level changes (AWS Bedrock agents) are currently not being tracked through the activity log.
You can filter out the activity log by time. By default, the activity logs display activity occurred in the past 24 hours. You can only filter and view activity that has taken place in the past 30 days. You can filter out on the basis of:
- 12 hours
- 24 hours
- 7 days
- 30 days
- Custom: The chosen date range can only be selected within the last 30 days. Dates outside of the 30 days will be greyed out and not accessible.
You can also filter out your logs on the basis of:
- Provider
- Account
- Event type
The activity logs display the following:
| Field | Description |
|---|---|
| Timestamp | The timestamp indicates the time an event was completed. You can sort the timestamp in ascending and descending order. |
| Entity Type | Type of entity that has been modified/created. Entity types include Account and Agent. |
| Entity Name | Classifies the entity's name. In the case of an Account entity, the name includes the Account name and provider. In case of an Agent entity, the name includes the agent name, version and associated account. |
| Event | Specifies the updates that have occurred with a particular entity. Refer to Event types for more information on the different types of events recorded in the activity log. |
| Event Triggered By | This tracker tracks whether the entity had an auto or manual sync. Auto sync is depicted as “System_Scheduled.” For Manual sync, the userID will be visible. |
| Action | This option provides a detailed view of the update. Through View Details, you can view details such as the Account provider, account name, timestamp, who triggered the event and which fields and values are updated. Events such as Created, Deleted, Sync Enabled and Disabled will not have additional details available. |
Event types
For accounts the types include:
- Created
- Deleted
- Updated
- Sync Disabled
- Sync Enabled
- Sync Success
- Sync- Partially Synced
- Sync- Completed with Error
- Sync- Failed
For agents the types include:
- Tag Updated
- Trust Level Updated
- Enabled
- Disabled
For custom provider the event types include:
- Created
- Updated
- Deleted
For custom agents created through the AI-Catalog, the types include:
- Success
- Partially success
- Failed.
The Activity log also captures API related activity like creating of custom provider accounts and agents as well as agent updates.
