List audit logs for a user or resource

GET 
/resource-audit-logs/:resource/:id

Returns DynamoDB audit rows for the path resource and id. Pagination is in DynamoDB; last page when next_available is no. Viewing another user's logs or dwh requires users.fullaccess. Other types use ACL or creator/role-membership checks.

Request

Responses

200

AuditLogs plus next_available (yes/no), count (this page), and total_count. Continue with offset += limit until next_available is no. An empty result is still 200 with AuditLogs [] and total_count 0 (no Message).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Coded errors are {"Message": " - "}. Codes: AUTH-1001, AUTH-1003, AUTH-1030 (users.fullaccess for another user or dwh), GE-1028 (limit over 1000), GE-1047 (sortby), IPV-1002 (assets datasource or asset not found). No-code bodies: invalid resource path, and not authorized to view logs (datasets/roles/guard-rails/creator/ACL miss).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

This Lambda maps GenericFailureException and InconsistentMetadataException to HTTP 500. Uncaught errors (including non-numeric limit/offset) use {"Message": ""} with no RTE-1001 prefix. Offset past the last item is HTTP 500 with the IPV-1026 text and no code prefix.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers