Patent ID: 8881256

Claim:
A computer-implemented method of providing a secure audit log for usage of a set of network-based computing resources accessible through an application programming interface (API) or other interface, comprising: under control of one or more computer systems configured with executable instructions, receiving, over a network, a first indication that a computing device has interacted with a portable physical object that includes a storage medium having stored thereon a set of credentials; receiving the set of credentials as a result of interaction between the computing device and the portable physical object; authenticating the portable physical object using the set of credentials; upon authenticating the portable physical object, enabling usage of the set of network-based computing resources of a service provider when the portable physical object is communicatively coupled with the computing device, wherein the portable physical object is communicatively coupled with the computing device when a signal is received upon the portable physical object being within a threshold distance with the user computer device; tracking user interaction with respect to the usage of the set of network-based computing resources; storing data recording the user interaction with respect to the set of network-based computing resources into a data store on the portable physical object in the secure audit log, the data stored in a tamper-evident data store, and the data being stored locally with the portable physical object such that the data may not be altered by an administrator of the set of network-based computing resources when the portable physical object is communicatively coupled with the computing device; and enabling access to the data recording the user interaction in the data store.