---
type: concept
x-llmwiki:
  schemaVersion: "0.1"
  contentHash: 3e723e6eed0ae07be73a9a3db93283ce833564475568b2d9dd504c09991e82a5
  pageDirectory: concepts
  sources:
    - restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md
  confidence: 1
  provenanceState: extracted
  freshnessStatus: unverified
  aliases:
    - opensharing-ip-access-list-audit-logging
    - OIALAL
  citations:
    - file: restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md
title: OpenSharing IP Access List Audit Logging
description: Audit events triggered by IP access list operations, including recipient create/update operations and denial of access to OpenSharing REST API, activation URL, and credential file download.
tags:
  - delta-sharing
  - audit-logging
  - security
timestamp: "2026-06-19T20:14:43.153Z"
---

# OpenSharing IP Access List Audit Logging

**OpenSharing IP Access List Audit Logging** refers to the audit trail generated by Databricks when IP access lists are used to control recipient access to shared data via the [Databricks-to-Open Sharing Protocol](/concepts/databricks-to-open-sharing-protocol.md). These audit logs record events related to the management of IP access lists and enforcement of access denials based on those lists. ^[restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md]

## Triggered Operations

The following operations generate audit log entries related to IP access lists: ^[restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md]

- Recipient management operations: **create** and **update** actions on recipients.
- Denial of access to any **OpenSharing OSS Protocol REST API** call.
- Denial of access to the **OpenSharing activation URL** (Databricks-to-Open sharing only).
- Denial of access to the **OpenSharing credential file download** (Databricks-to-Open sharing only).

Denial events occur when a request originates from an IP address that is not on the recipient's assigned allow list. The IP access list only supports allow lists; there are no deny lists. ^[restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md]

## Enabling Audit Logs

To learn how to enable and read audit logs for OpenSharing, including IP access list events, see the documentation on Audit and monitor data sharing. ^[restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md]

## Related Concepts

- [OpenSharing](/concepts/opensharing.md) – The Databricks-to-Open sharing protocol.
- [IP Access Lists for OpenSharing Recipients](/concepts/ip-access-lists-for-opensharing-recipients.md) – How to assign, view, and remove IP access lists.
- [Delta Sharing](/concepts/delta-sharing.md) – The underlying open protocol for data sharing.
- Audit Logs – General Databricks audit logging mechanism.
- [SecureConnect](/concepts/secureconnect.md) – When enabled, the IP access list also enforces access to shared storage.

## Sources

- restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md

# Citations

1. [restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws.md](/references/restrict-opensharing-recipient-access-using-ip-access-lists-databricks-to-open-sharing-databricks-on-aws-665da518.md)
