Techniques for defining a cloud Application Program Interface (API) event logging policy are described. A request is received to generate an organization-level event logging policy for an organization including a plurality of accounts within the cloud computing environment. Responsive to one or more inputs received through a provided graphical user interface, an organization-level event logging policy is generated defining conditions for logging cloud API events for one or more cloud APIs provided within the cloud computing environment. The organization-level event logging policy is applied to log cloud API events generated by the plurality of accounts. At least one cloud API event log entry is written to a data repository within the cloud computing environment, as specified by the organization-level event logging policy.