Carbon Black Cloud: Audit Log API Key with type "Custom" results in 403 permission errors

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

403 permissions error received while using the v3 audit log API key created with type "custom"

Environment

• Carbon Black Cloud: April '23 Release (1.13) and older
• Audit log API v3

Cause

This is due to a known issue where the v3 audit log only works with an API or LIVE_RESPONSE_API key type. 

Resolution

Create or use a different API key with type "API" instead of "Custom"