I have audit log sinks set up for BigQuery tables, which I use to monitor access to the tables. I use filter logic similar to the query below in the sink.
protoPayload.metadata."@type" = "type.googleapis.com/google.cloud.audit.BigQueryAuditMetadata"
protoPayload.resourceName =~ "projects/${project}/datasets/${dataset}/tables/"
Is it possible to set up audit log sinks for BigQuery views as well? As in, being able to audit who has specifically accessed the view rather than only being able to audit who has accessed the tables underlying the view.
Here's my use case. At times I expose data to others via authorized views. These authorized views are used by a specific user base (external teams) that's very different than those who access the tables directly (internal teams). I would like to monitor the use of these authorized views directly, rather than monitoring the use of the underlying tables. Otherwise, assessing the use of the authorized views by external teams gets diluted and hard to differentiate from the direct use of the tables by internal teams.
Is there a solution to this?
LinkedIn
Twitter
