Enum AuditOperation 

pub enum AuditOperation {
    Get,
    Set,
    Delete,
    Rotate,
    Grant {
        to: String,
        permission: String,
    },
    Revoke {
        from: String,
    },
    List,
    RotateMasterKey {
        secrets_count: usize,
    },
    TransitEncrypt,
    TransitDecrypt,
    BreakGlass {
        justification: String,
        duration_secs: u64,
    },
    BatchGet {
        count: usize,
    },
    BatchSet {
        count: usize,
    },
    DynamicGenerate,
    Wrap,
    Unwrap,
    AddDependency,
    RemoveDependency,
    ImpactAnalysis,
    AutoRotate,
    SetQuota,
    RemoveQuota,
    AddPolicy,
    RemovePolicy,
    Seal,
    Unseal,
    CreateSnapshot,
    RestoreSnapshot,
    EngineGenerate,
    EngineRevoke,
    IssueCertificate,
    RevokeCertificate,
    SyncPush,
    SyncSubscribe,
    LegacyDecrypt,
    DiffVersions {
        version_a: u32,
        version_b: u32,
    },
    SaveTemplate {
        template_name: String,
    },
    DeleteTemplate {
        template_name: String,
    },
    FindSimilar {
        k: usize,
    },
    HeatKernelTrust {
        diffusion_time: f64,
    },
    BuildAccessTensor {
        num_buckets: usize,
    },
    AnalyzeTemporalPatterns,
    WeightedImpactAnalysis,
    RotationPlan,
    RecommendPlacement {
        region: String,
    },
}

Types of auditable operations.

Variants

Get

Read a secret value.

Set

Write or create a secret value.

Delete

Delete a secret.

Rotate

Rotate a secret to a new version.

Grant

Grant access to another entity.

Fields

to: String

Entity receiving the permission.

permission: String

Permission level granted (e.g. “read”, “write”, “admin”).

Revoke

Revoke access from an entity.

Fields

from: String

Entity whose access is being revoked.

List

List available secrets.

RotateMasterKey

Rotate the master encryption key, re-encrypting all secrets.

Fields

secrets_count: usize

Number of secrets re-encrypted during rotation.

TransitEncrypt

Encrypt data via the transit engine.

TransitDecrypt

Decrypt data via the transit engine.

BreakGlass

Emergency break-glass access bypassing normal ACLs.

Fields

justification: String

Human-readable reason for the emergency access.

duration_secs: u64

Duration in seconds the break-glass window remains open.

BatchGet

Batch retrieval of multiple secrets.

Fields

count: usize

Number of secrets retrieved.

BatchSet

Batch write of multiple secrets.

Fields

count: usize

Number of secrets written.

DynamicGenerate

Generate a dynamic (short-lived) secret.

Wrap

Wrap (envelope-encrypt) a key.

Unwrap

Unwrap (envelope-decrypt) a key.

AddDependency

Add a dependency edge between secrets.

RemoveDependency

Remove a dependency edge between secrets.

ImpactAnalysis

Analyze the impact of rotating or revoking a secret.

AutoRotate

Automatically rotate a secret based on policy.

SetQuota

Set a rate-limit or storage quota on a secret path.

RemoveQuota

Remove a quota from a secret path.

AddPolicy

Attach an access-control policy.

RemovePolicy

Remove an access-control policy.

Seal

Seal the vault, preventing further operations until unseal.

Unseal

Unseal the vault, resuming normal operations.

CreateSnapshot

Create a point-in-time snapshot of vault state.

RestoreSnapshot

Restore vault state from a snapshot.

EngineGenerate

Generate credentials via a secrets engine backend.

EngineRevoke

Revoke credentials via a secrets engine backend.

IssueCertificate

Issue a PKI certificate.

RevokeCertificate

Revoke a PKI certificate.

SyncPush

Push vault state to a replication peer.

SyncSubscribe

Subscribe to replication updates from a peer.

LegacyDecrypt

Decrypt a secret stored in a legacy format.

DiffVersions

Compare two versions of a secret.

Fields

version_a: u32

First version number to compare.

version_b: u32

Second version number to compare.

SaveTemplate

Save a secret template for reuse.

Fields

template_name: String

Name identifying the template.

DeleteTemplate

Delete a previously saved secret template.

Fields

template_name: String

Name of the template to remove.

FindSimilar

Find secrets with similar embeddings via k-NN search.

Fields

k: usize

Number of nearest neighbors to return.

HeatKernelTrust

Compute heat-kernel trust scores over the access graph.

Fields

diffusion_time: f64

Diffusion time parameter controlling trust propagation depth.

BuildAccessTensor

Build a temporal access tensor for pattern analysis.

Fields

num_buckets: usize

Number of time buckets in the tensor.

AnalyzeTemporalPatterns

Analyze temporal access patterns for anomaly detection.

WeightedImpactAnalysis

Run weighted impact analysis on secret dependencies.

RotationPlan

Generate a recommended rotation plan for secrets.

RecommendPlacement

Recommend geographic placement for a secret.

Fields

region: String

Target cloud region (e.g. “us-east-1”).

Trait Implementations

impl Clone for AuditOperation

fn clone(&self) -> AuditOperation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditOperation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditOperation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuditOperation

fn eq(&self, other: &AuditOperation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuditOperation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuditOperation