Is a type of ACL that controls what events are audited for an object. It contains ACEs that specify which operations (e.g. success or failure of a read/write) should generate audit logs.