When API keys are deleted is there an audit record?
There is not a public facing record of key deletion.
When setting up External Source Configuration for the Custom Data API should the CMS Instance field be populated?
No. When populating the Inbound/Outbound Sources associated with the API, do not populate the CMS Instance field in External Source Configuration.
If the external source is created manually in the platform (not through facility sync), leave the instanceId blank. Populating the instanceId in this case may cause the source to be deleted during the next facility sync with CMS.