本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 使用监控 b `edrock-mantle API 调用` CloudTrail
<a name="logging-cloudtrail-mantle"></a>

终`bedrock-mantle.{{region}}.api.aws`端节点与集成 AWS CloudTrail。 CloudTrail 将对 `bedrock-mantle` API 操作的调用记录为事件，包括来自、、OpenAI SDK AWS CLI、Anthropic SDK 的调用以及直接 HTTPS 调用。 AWS 管理控制台活动`eventSource`有`bedrock-mantle.amazonaws.com`.

如果您的应用程序通过调用推理`bedrock-runtime.{{region}}.amazonaws.com`，请参阅[使用监控 Amazon Bedrock API 调用 CloudTrail](logging-using-cloudtrail.md)。

有关其 CloudTrail 本身的背景信息，请参阅《[AWS CloudTrail 用户指南》](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)。

## 管理事件
<a name="mantle-cloudtrail-management-events"></a>

默认情况下，管理事件会记录到您的 CloudTrail **事件历史记录**中，无需支付额外费用。 `bedrock-mantle`将以下操作记录为管理事件。每个事件的`requestParameters`字段还包含`callWithBearerToken`（`bearerTokenType`如果适用），服务会为每个事件添加这些字段。


**  模型**  

| 事件名称 | HTTP 路由 | 其他请求参数 | 
| --- | --- | --- | 
| ListModels | GET /v1/models | none | 
| GetModel | GET /v1/models/{model} | model | 


**Fine-tuning**  

| 事件名称 | HTTP 路由 | 其他请求参数 | 
| --- | --- | --- | 
| ListFineTuningJobs | GET /v1/fine\_tuning/jobs | none | 
| CreateFineTuningJob | POST /v1/fine\_tuning/jobs | model、trainingFile、validationFilemetadata、method（结构化对象包括type和，用于钢筋运行，grader.lambda.function） | 
| GetFineTuningJob | GET /v1/fine\_tuning/jobs/{id}, /events, /checkpoints | fineTuningJob | 
| CancelFineTuningJob | POST /v1/fine\_tuning/jobs/{id}/cancel | fineTuningJob | 


**Projects**  

| 事件名称 | HTTP 路由 | 其他请求参数 | 
| --- | --- | --- | 
| ListProjects | GET /v1/organization/projects | none | 
| CreateProject | POST /v1/organization/projects | name, tags | 
| GetProject | GET /v1/organization/projects/{project\_id} | project\_id | 
| UpdateProject | POST /v1/organization/projects/{project\_id} | project\_id, name, add\_tags, remove\_tag\_keys, tags | 
| ArchiveProject | POST /v1/organization/projects/{project\_id}/archive | project\_id | 

## 数据事件
<a name="mantle-cloudtrail-data-events"></a>

默认情况下不记录数据事件，并且会产生额外 CloudTrail 费用。 `bedrock-mantle`将以下操作记录为数据事件。要捕获它们，请在跟踪或事件数据存储上配置高级事件选择器，如[记录数据事件](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html)中所述。


**推理**  

| 事件名称 | HTTP 路由 | 其他请求参数 | 
| --- | --- | --- | 
| CreateInference | POST /v1/responses | model, previousResponse, stream, service\_tier, metadata | 
| CreateInference | POST /v1/responses/compact | model, previous\_response\_id | 
| CreateInference | POST /v1/chat/completions | model, stream, service\_tier, metadata | 
| CreateInference | POST /v1/embeddings | model | 
| CreateInference | POST /anthropic/v1/messages | model, stream, max\_tokens | 
| GetInference | GET /v1/responses/{response\_id} | response, stream | 
| CancelInference | POST /v1/responses/{response\_id}/cancel | response | 
| DeleteInference | DELETE /v1/responses/{response\_id} | response | 
| CountTokens | POST /anthropic/v1/messages/count\_tokens | model | 


**文件**  

| 事件名称 | HTTP 路由 | 其他请求参数 | 
| --- | --- | --- | 
| ListFiles | GET /v1/files | limit, order, purpose, after | 
| CreateFile | POST /v1/files | purpose, filename, bytes | 
| GetFile | GET /v1/files/{file\_id}, /content | file | 
| DeleteFile | DELETE /v1/files/{file\_id} | file | 

**注意**  
Customer-supplied `metadata`on c `CreateInference` alls 是逐字记录的。 CloudTrail`metadata`如果要捕获数据事件，请勿在中包含机密、凭证或其他敏感值。

## 配置数据事件捕获
<a name="mantle-cloudtrail-configuring"></a>

以下示例将跟踪配置为捕获所有`bedrock-mantle`推理和文件数据事件：

```
aws cloudtrail put-event-selectors \
    --trail-name <trailName> \
    --advanced-event-selectors '[
      {
        "Name": "Log Bedrock Mantle inference and file events",
        "FieldSelectors": [
          { "Field": "eventCategory", "Equals": ["Data"] },
          { "Field": "resources.type", "Equals": [
            "AWS::BedrockMantle::Project",
            "AWS::BedrockMantle::CustomizedModel",
            "AWS::BedrockMantle::Reservation"
          ]}
        ]
      }
    ]'
```

此外，您还可以按`eventName`和进行筛选`resources.ARN`。有关高级事件选择器的详细信息，请参阅[AdvancedFieldSelector](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html)。

## 资源类型
<a name="mantle-cloudtrail-resource-types"></a>

`bedrock-mantle` CloudTrail 事件引用以下资源类型：
+ `AWS::BedrockMantle::Project`
+ `AWS::BedrockMantle::Reservation`
+ `AWS::BedrockMantle::CustomizedModel`
+ `AWS::BedrockMantle::Environment`
+ `AWS::BedrockMantle::Runtime`
+ `AWS::BedrockMantle::Skill`

## 示例日志条目
<a name="mantle-cloudtrail-example"></a>

```
{
    "eventVersion": "1.08",
    "userIdentity": {
        "type": "IAMUser",
        "principalId": "AROAICFHPEXAMPLE",
        "arn": "arn:aws:iam::111122223333:user/userxyz",
        "accountId": "111122223333",
        "accessKeyId": "AKIAIOSFODNN7EXAMPLE",
        "userName": "userxyz"
    },
    "eventTime": "2026-05-30T14:32:11Z",
    "eventSource": "bedrock-mantle.amazonaws.com",
    "eventName": "CreateInference",
    "awsRegion": "us-east-1",
    "sourceIPAddress": "192.0.2.0",
    "userAgent": "OpenAI/Python 1.50.0",
    "requestParameters": {
        "model": "anthropic.claude-opus-4-7",
        "stream": true,
        "service_tier": "default",
        "metadata": {"team": "platform"},
        "callWithBearerToken": true,
        "bearerTokenType": "ABSK"
    },
    "responseElements": null,
    "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "readOnly": false,
    "eventType": "AwsApiCall",
    "managementEvent": false,
    "recipientAccountId": "111122223333",
    "eventCategory": "Data",
    "resources": [
        {
            "accountId": "111122223333",
            "type": "AWS::BedrockMantle::Project",
            "ARN": "arn:aws:bedrock-mantle:us-east-1:111122223333:project/proj_abc123"
        }
    ],
    "tlsDetails": {
        "tlsVersion": "TLSv1.3",
        "cipherSuite": "TLS_AES_128_GCM_SHA256",
        "clientProvidedHostHeader": "bedrock-mantle.us-east-1.api.aws"
    }
}
```

## 与`基岩运行时日志` CloudTrail 的区别
<a name="mantle-cloudtrail-differences"></a>
+ **推理是开启的数据事件`bedrock-mantle`，开启的管理事件。`bedrock-runtime`**`bedrock-runtime`终端节点将 [Converse [ConverseStream[InvokeModel](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html)](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_ConverseStream.html)](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Converse.html)、、和记录[InvokeModelWithResponseStream](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModelWithResponseStream.html)为管理事件，无需支付额外费用。终`bedrock-mantle`端节点将`CreateInference`和其他推理操作记录为数据事件，这会产生 CloudTrail 数据事件费用。如果您需要对推理调用进行审计跟踪`bedrock-mantle`，则必须在跟踪或事件数据存储上明确启用数据事件捕获。
+ **不同的事件源和资源类型。** `bedrock-mantle`事件使用 o `eventSource` f `bedrock-mantle.amazonaws.com` 和引用`AWS::BedrockMantle::*`资源类型。 CloudTrail Lake 查询、Athena 视图和侦探控件，可以过滤`bedrock-runtime.amazonaws.com`或不`bedrock.amazonaws.com`捕获活动。`bedrock-mantle`