OptionalrequiredAuthorization token required to call getLogs(), queryLogs(),
clear(), and eraseByUser().
When absent, those methods are unrestricted (suitable for testing).
OptionalretentionMaximum age of log entries in milliseconds (data retention enforcement)
OptionalsensitiveTop-level parameter keys treated as PII and redacted to '[REDACTED]'.
Defaults to DEFAULT_SENSITIVE_KEYS.
OptionalsinksExtra write-only sinks (e.g. FileAuditSink, StructuredJsonSink).
Replaces the default StderrAuditSink when provided.
Constructor options for AuditLogger.