Understanding your responsibilities when using Activity Tracker Event Routing

Learn about the management responsibilities and terms and conditions that you have when you use Activity Tracker Event Routing. For a high-level view of the service types in IBM Cloud and the breakdown of responsibilities between the customer and IBM for each type, see Shared responsibilities for IBM Cloud offerings.

Review the following sections for the specific responsibilities for you and for IBM when you use Activity Tracker Event Routing. For the overall terms of use, see IBM Cloud Terms of Use.

Incident and operations management

Responsibilities for incident and operations
Task	IBM Responsibilities	Your Responsibilities
Incident and operations management	Maintain service instances and infrastructure workloads.	Maintain incident and operations management of your data.
Monitor incidents	Provide notifications for planned maintenance, security bulletins, or unplanned outages.	Set preferences to receive emails about platform notifications. Monitor the IBM Cloud status page for general announcements.
Maintain IBM Cloud high availability SLA for Activity Tracker Event Routing	Provide Activity Tracker Event Routing functionality across availability zones in a Multi-Zone Region (MZR). Provide replication, fail-over features, and infrastructure maintenance and updates.	Keep your Activity Tracker Event Routing configuration in a version control system so that you can reconfigure a region if needed. Comply with Operational responsibilities when using IBM Cloud Logs. Comply with Operational responsibilities when using IBM Cloud Object Storage. Comply with Operational responsibilities when using Activity Tracker hosted event search. Comply with Operational responsibilities when using IBM® Event Streams for IBM Cloud®.
Monitor events for Activity Tracker Event Routing	Participating Cloud services publish relevant event data to their subscribing clients. Clients have the ability to receive this data once their account is configured.	Configure your account where Cloud service subscriptions publish events to receive the published events. Notice that Activity Tracker Event Routing can only route events that are generated in supported regions. Other regions, where Activity Tracker Event Routing is not available, continue to manage events by using Activity Tracker hosted event search.
Monitor Activity Tracker Event Routing targets		Check the health and status of the targets through Monitoring by configuring alerts to notify of problems writing events to a target, and generate notifications, for example, to the IBM Cloud Event Notifications service.

Change management

Responsibilities for change management
Task	IBM Responsibilities	Your Responsibilities
Updates to Activity Tracker Event Routing	Provide major, minor, and patch version updates for Activity Tracker Event Routing interfaces. Document changes in the IBM Cloud Support Center	`N/A`

Identity and access management

Responsibilities for identity and access management
Task	IBM Responsibilities	Your Responsibilities
Manage permissions for Activity Tracker Event Routing	Provide the ability to restrict access to resources. IBM is responsible for the security and compliance of the Activity Tracker Event Routing feature.	Restrict access to Activity Tracker Event Routing and supported destinations such as Cloud Object Storage resources by using Cloud IAM access policies. Define IAM policies to control which users within your account have access to manage the service and related resources in your account. Learn more about controlling access through IAM.
Validate targets for Activity Tracker Event Routing	Provide the ability to check if the credentials that are used by Activity Tracker Event Routing are valid and allow uploading of objects to the bucket or routing of events to an	Configure 1 or more targets with valid credentials to store auditing events. Validate the credentials that are used by Activity Tracker Event Routing.

Security and regulation compliance

Responsibilities for security and regulation compliance
Task	IBM Responsibilities	Your Responsibilities
Meet security and compliance objectives	Maintain controls that are commensurate to various industry compliance standards such the Financial Services specification. For more information, see Securing your data.	Set up and maintain security and regulation compliance for your apps and data. When using a `cloud_object_storage` target, ensure encryption of auditing data by configuring a COS bucket that has full control over the data encryption keys that are used. IBM Cloud® Object Storage provides several options to encrypt your data.

Disaster recovery

Responsibilities for disaster recovery
Task	IBM Responsibilities	Your Responsibilities
Restore functionality for Activity Tracker Event Routing	Automatically recover and restart Activity Tracker Event Routing components after any disaster event. In case of a regional disaster, IBM Cloud service teams, who are responsible for the operations of services that generate auditing events, will point their service to Activity Tracker Event Routing endpoints in their alternate region within the same regulatory boundaries.	Complete the disaster recovery (DR) steps for Activity Tracker Event Routing.
Backup Activity Tracker Event Routing components	Daily backup of the Activity Tracker Event Routing infrastructure and components.	`N/A`

[*] Recovered and restarted service components will not have customer data reloaded.