Skip to main content
All events on this page are only available in Prefect Cloud.
These events use the prefect-cloud namespace and cover audit logging, security, managed execution, billing, webhooks, and incident management. For Cloud automation events, see Automation events.

Audit log events

Prefect Cloud emits audit events for all CRUD operations on account and workspace resources. These events follow the pattern prefect-cloud.{resource-type}.{action} and power the audit log.

Resource types

Resource typeDescription
accountAccount settings and configuration
account-membershipUser membership in an account
account-roleCustom account-level roles
account-invitationInvitations to join an account
account-domain-namesAccount domain name configuration
account-settingsAccount-level settings
userUser accounts
service-accountService accounts (bots)
api-keyAPI keys for users and service accounts
teamTeams within an account
team-membershipUser membership in a team
workspaceWorkspaces
workspace-roleCustom workspace-level roles
workspace-accessWorkspace access grants
workspace-invitationInvitations to join a workspace
workspace-settingsWorkspace-level settings
automationAutomation rules
webhookWebhook endpoints
incidentIncidents
support-accessSupport account access grants

Actions

ActionDescriptionExample event
createdResource was createdprefect-cloud.workspace.created
updatedResource was modifiedprefect-cloud.automation.updated
deletedResource was removedprefect-cloud.api-key.deleted
rotatedCredential was rotated (API keys)prefect-cloud.api-key.rotated
logged-inUser logged inprefect-cloud.user.logged-in
logged-outUser logged outprefect-cloud.user.logged-out
acceptedInvitation was acceptedprefect-cloud.account-invitation.accepted
rejectedInvitation was rejectedprefect-cloud.workspace-invitation.rejected
transferred-inWorkspace transferred into an accountprefect-cloud.workspace.transferred-in
transferred-outWorkspace transferred out of an accountprefect-cloud.workspace.transferred-out
All audit events use:
LabelDescription
prefect.resource.idprefect-cloud.{resource-type}.{uuid}
prefect.resource.nameResource name (when applicable)
Common related resources include the actor (user or service account that performed the action), the account, and the workspace (for workspace-scoped resources).

Security events

prefect-cloud.request.access-denied.ip-allowlist

Emitted when an API request is denied because the source IP address is not in the account’s IP allowlist.

Managed execution events

prefect-cloud.managed-execution.used

Emitted when managed execution compute is consumed against the account’s quota.

prefect-cloud.managed-execution.exceeded

Emitted when managed execution usage exceeds the account’s quota.

Billing and subscription events

prefect-cloud.subscription.updated

Emitted when an account’s subscription is updated.

Resource

LabelDescription
prefect.resource.idprefect-cloud.account.{uuid}

Payload

FieldTypeDescription
cancel_at_period_endbooleanWhether the subscription will cancel at the end of the billing period

Webhook events

prefect-cloud.webhook.received

Emitted when a webhook endpoint receives an HTTP request.

Resource

LabelDescription
prefect.resource.idprefect-cloud.webhook.{uuid}
prefect.resource.nameWebhook name

prefect-cloud.webhook.failed

Emitted when webhook processing fails (for example, the template could not be rendered or the resulting event was invalid).

Resource

Same as prefect-cloud.webhook.received.

Incident events

prefect-cloud.incident.declared

Emitted when an incident is declared.

Resource

LabelDescription
prefect.resource.idprefect-cloud.incident.{uuid}
prefect.resource.nameIncident name

Payload

FieldTypeDescription
idstringIncident ID
namestringIncident name
statusstringIncident status (for example, active)
severitystringIncident severity level
tagsarrayTags associated with the incident

prefect-cloud.incident.resolved

Emitted when an incident is resolved.

Resource

Same as prefect-cloud.incident.declared.

Payload

Same as prefect-cloud.incident.declared, with status reflecting the resolved state and end_time included.

prefect-cloud.incident.reopened

Emitted when a previously resolved incident is reopened.

Resource

Same as prefect-cloud.incident.declared.

prefect-cloud.incident.comment.added

Emitted when a comment is added to an incident.

Resource

Same as prefect-cloud.incident.declared.

prefect-cloud.incident.updated.{field}

Emitted when a specific incident field is updated. The {field} suffix identifies which field changed.

Field variants

Event nameDescription
prefect-cloud.incident.updated.nameIncident name changed
prefect-cloud.incident.updated.summaryIncident summary changed
prefect-cloud.incident.updated.severityIncident severity changed
prefect-cloud.incident.updated.start_timeIncident start time changed
prefect-cloud.incident.updated.related_resourcesIncident related resources changed
prefect-cloud.incident.updated.tagsIncident tags changed

Resource

Same as prefect-cloud.incident.declared.