Audit Logs | Spotify Portal for Backstage
Working in a regulated industry like finance, health, or gaming? Spotify Portal delivers enterprise-grade capabilities out of the box — like Audit Logs — to help you meet regulatory requirements while giving your teams the operational visibility they need to investigate incidents and maintain accountability.
Portal Audit Logs is a standardized, durable logging system that records who did what, when, and where across Portal. It captures critical user‑initiated actions — such as RBAC changes, configuration updates, and scaffolder executions — and makes them available through a secure, queryable API.
Learn how easy it is to set up Portal Audit Logs for your org. Stuart Clark, Senior Developer Advocate at Spotify, provides a complete walkthrough of configuring and querying audit logs through Portal's REST API.
In this video, you'll discover how to:
Configure API access tokens for audit log queries in Portal's admin settings
Query the audit log REST API using curl or your preferred HTTP client
Filter audit events by plugin, severity level (low/medium/high/critical), and pagination
Integrate audit logs into your compliance workflows and monitoring systems
Understand event structure and user attribution in audit trails
Learn more: https://backstage.spotify.com/docs/po...
Timestamps:
0:00 - Introduction: Why audit logs matter for enterprise platforms
0:25 - The compliance gap: SOC2 and regulated industry requirements
0:51 - Step 1: Navigating to API token configuration in Portal
1:17 - Understanding token permissions and security best practices
1:56 - Step 2: Querying the audit log REST API with curl
2:05 - Breaking down the API request structure and authentication
2:21 - Filtering options: plugin, severity, and pagination parameters
2:49 - Summary: A queryable, durable, and compliance-ready audit trail
2:56 - Wrap-up and documentation resources
Ready for a closer look at the enterprise-ready Spotify Portal? Talk with our team and start a free trial today: 👉 https://backstage.spotify.com/contact...