> ## Documentation Index
> Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Monitor activity with cloud audit logs

> How to configure data access audit logs.

This guide demonstrates how to use your cloud provider's native logging tools to get full transparency into how and when Labelbox accesses your data via IAM Delegated Access. By monitoring these logs, you can maintain a complete, unchangeable record of every interaction, which is essential for security compliance and internal audits.

## Gain visibility through logs

When you grant Labelbox access using the IAM Delegated Access method, every action our platform takes is authenticated by your cloud provider. Every time Labelbox temporarily assumes the IAM role to access a file for labeling, your cloud provider records that event in an audit log.

These logs answer critical security questions:

* **Who** made the request? (The specific Labelbox IAM role)
* **What** resource was accessed? (The specific file/object in your bucket)
* **When** did the access occur? (A precise timestamp)
* **From where** was the request made? (The source IP address, which will be one of Labelbox's servers)

By analyzing these logs, you can have complete confidence that Labelbox is only accessing data as needed for your users to perform their labeling tasks.

## Step-by-step monitoring guides

One of the benefits of using IAM delegated access is that security-conscious teams can choose to access audit logs of when their raw data is read by Labelbox through their cloud provider.

<CardGroup>
  <Card title="AWS S3" icon="aws" horizontal href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-s3-access-logs-to-identify-requests.html" />

  <Card title="Google GCS" icon="google" horizontal href="https://cloud.google.com/logging/docs/audit/configure-data-access" />

  <Card title="Azure Blob Storage" icon="microsoft" horizontal href="https://docs.microsoft.com/en-us/azure/storage/blobs/monitor-blob-storage?tabs=azure-portal" />
</CardGroup>
