GET /audit-events
The organization's audit events, newest first. Organization admins and WarpBuild staff only.
In: header
Query Parameters
RFC 3339. Default: 30 days before end_date, or 30 days ago
RFC 3339. Default: no upper bound
Actor id
user, staff, service, runner or system
session or api_key, for user actors
Action name, e.g. runner_set.updated
Target type, e.g. runner_set
Target id
backend-core or auth
success or denied
Page number (default: 1)
Items per page (default: 20, max: 100)
json or csv (default: json). csv downloads every matching event, newest first, up to 10000 rows; page and per_page are ignored
Response Body
curl -X GET "https://example.com/audit-events"{ "items": [ { "action": "string", "actor": { "id": "string", "name": "string", "type": "string" }, "auth_method": "string", "changes": { "property1": { "from": null, "to": null }, "property2": { "from": null, "to": null } }, "id": "string", "ip": "string", "method": "string", "occurred_at": "string", "organization_id": "string", "outcome": "string", "path": "string", "request_id": "string", "schema_version": 0, "source": "string", "status_code": 0, "target": { "id": "string", "name": "string", "type": "string" }, "user_agent": "string" } ], "next": 0, "page": 0, "per_page": 0, "total_pages": 0, "total_rows": 0}GET /audit-events/actions
The distinct action names in the organization's audit log, sorted, for a filter menu. Organization admins and WarpBuild staff only.
POST /cloud/integrations
Creates a new cloud integration to connect WarpBuild to your cloud provider account. This enables WarpBuild to provision runner infrastructure in your cloud environment. Supported cloud providers: - **AWS**: Connect via IAM role with cross-account access - **GCP**: Connect via service account with Workload Identity Federation - **Azure**: Connect via service principal with federated credentials