Events for Vaults, Keys, and Secrets

Learn about Key Management event notifications for success and failure scenarios.

For information on how to create automation using OCI events, see OCI Events.

Vault Event Types

Friendly Name Event Type
Backup Vault Begin
com.oraclecloud.keymanagementservice.backupvault.begin
Backup Vault End
com.oraclecloud.keymanagementservice.backupvault.end
Cancel Vault Deletion Begin
com.oraclecloud.keymanagementservice.cancelvaultdeletion.begin
Cancel Vault Deletion End
com.oraclecloud.keymanagementservice.cancelvaultdeletion.end
Change Vault Compartment Begin
com.oraclecloud.keymanagementservice.changevaultcompartment.begin
Change Vault Compartment End
com.oraclecloud.keymanagementservice.changevaultcompartment.end
Create Vault Begin
com.oraclecloud.keymanagementservice.createvault.begin
Create Vault End
com.oraclecloud.keymanagementservice.createvault.end
Create Vault Replica Begin
com.oraclecloud.KeyManagementService.CreateVaultReplica.begin
Create Vault Replica End
com.oraclecloud.KeyManagementService.CreateVaultReplica.end
Delete Vault Replica Begin
com.oraclecloud.KeyManagementService.DeleteVaultReplica.begin
Delete Vault Replica End
com.oraclecloud.KeyManagementService.DeleteVaultReplica.end
Restore Vault Begin
com.oraclecloud.keymanagementservice.restorevault.begin
Restore Vault End
com.oraclecloud.keymanagementservice.restorevault.end
Schedule Vault Deletion Begin
com.oraclecloud.keymanagementservice.schedulevaultdeletion.begin
Schedule Vault Deletion End
com.oraclecloud.keymanagementservice.schedulevaultdeletion.end

Vault Example

This is a reference event for vaults:

{
  "eventType" : "com.oraclecloud.keymanagementservice.createvault.end",
  "cloudEventsVersion" : "0.1",
  "eventTypeVersion" : "2.0",
  "source" : "KeyManagementService",
  "eventTime" : "2025-02-25T17:41:22Z",
  "contentType" : "application/json",
  "data" : {
  "compartmentId" : "ocid1.tenancy.oc1..<unique_ID>",
    "compartmentName" : "example_name",
    "resourceName" : "my_vault",
    "resourceId" : "ocid1.vault.oc1.iad.<unique_ID>",
    "availabilityDomain" : "AD3",

"additionalDetails": {

    "lsn": "14",  
    "state" : "CREATED",
    "lastModifiedTimestamp" : 1746008782950    
  },
  "eventID" : "<unique_ID>",
  "extensions" : {
    "compartmentId" : "ocid1.tenancy.oc1..<unique_ID>"
  }
}

Key Event Types

Friendly Name Event Type
Auto Key Rotate Begin
com.oraclecloud.keymanagementservice.autokeyrotate.begin
Auto Key Rotate End
com.oraclecloud.keymanagementservice.autokeyrotate.end
Cancel Key Deletion Begin
com.oraclecloud.keymanagementservice.cancelkeydeletion.begin
Cancel Key Deletion End
com.oraclecloud.keymanagementservice.cancelkeydeletion.end
Cancel Key Version Deletion Begin
com.oraclecloud.keymanagementservice.cancelkeyversiondeletion.begin
Cancel Key Version Deletion End
com.oraclecloud.keymanagementservice.cancelkeyversiondeletion.end
Change Key Compartment Begin
com.oraclecloud.keymanagementservice.changekeycompartment.begin
Change Key Compartment End
com.oraclecloud.keymanagementservice.changekeycompartment.begin
Create Key Begin
com.oraclecloud.keymanagementservice.createkey.begin
Create Key End
com.oraclecloud.keymanagementservice.createkey.end
Create Key Version Begin
com.oraclecloud.keymanagementservice.createkeyversion.begin
Create Key Version End
com.oraclecloud.keymanagementservice.createkeyversion.end
Disable Key Begin
com.oraclecloud.keymanagementservice.disablekey.begin
Disable Key End
com.oraclecloud.keymanagementservice.disablekey.end
Enable Key Begin
com.oraclecloud.keymanagementservice.enablekey.begin
Enable Key End
com.oraclecloud.keymanagementservice.enablekey.end

Key Version Limit

(emitted when key versions capacity reaches 80%)

com.oraclecloud.keymanagementservice.keyversionlimit
Schedule Key Deletion Begin
com.oraclecloud.keymanagementservice.schedulekeydeletion.begin
Schedule Key Deletion End
com.oraclecloud.keymanagementservice.schedulekeydeletion.end
Schedule Key Version Deletion Begin
com.oraclecloud.keymanagementservice.schedulekeyversiondeletion.begin
Schedule Key Version Deletion End
com.oraclecloud.keymanagementservice.schedulekeyversiondeletion.end

Key Example

This is a reference event for keys:

{
	"eventType": "com.oraclecloud.keymanagementservice.createkey.end",
	"cloudEventsVersion": "0.1",
	"eventTypeVersion": "2.0",
	"source": "KeyManagementService",
	"eventTime": "2019-08-01T15:44:31.792Z",
	"contentType": "application/json",
	"data": {
		"compartmentId": "ocid1.compartment.oc1..<unique_ID>",
		"compartmentName": "KMSCanaryPhoenix",
		"resourceName": "my_key<unique_ID>",
		"resourceId": "ocid1.key.oc1.phx.<unique_ID>",
		"availabilityDomain": "AD2",
		"additionalDetails": {
			"vaultId": "ocid1.vault.oc1.iad.<unique_ID>",			
			"lsn": 4,
			"state": "CREATED",
			"lastModifiedTimestamp": 1746008711128},
		}
	"eventID": "<unique_ID>",
	"extensions": {
		"compartmentId": "ocid1.compartment.oc1..<unique_ID>"
	}
}

Key Version Example

This is a reference event for key versions:

{
	"eventType": "com.oraclecloud.keymanagementservice.createkeyversion.end",
	"cloudEventsVersion": "0.1",
	"eventTypeVersion": "2.0",
	"source": "KeyManagementService",
	"eventTime": "2019-08-01T15:44:31.792Z",
	"contentType": "application/json",
	"data": {
		"compartmentId": "ocid1.compartment.oc1..<unique_ID>",
		"compartmentName": "KMSCanaryPhoenix",
		"resourceName": "my_key<unique_ID>",
		"resourceId": "ocid1.key.oc1.phx.<unique_ID>",
		"availabilityDomain": "AD2",
		"additionalDetails": {
			"vaultId": "ocid1.vault.oc1.iad.<unique_ID>",
			"keyversionId": "ocid1.keyversion.oc1.iad.<unique_ID>",
			"lsn": 4,
			"keyId": "ocid1.key.oc1.iad.<unique_ID>",
			"state": "ENABLED",
			"lastModifiedTimestamp": 1746008711128},
		}
	"eventID": "<unique_ID>",
	"extensions": {
		"compartmentId": "ocid1.compartment.oc1..<unique_ID>"
	}
}