资源快照投递到对象存储OSS的代码示例 - 配置审计

如果您设置了资源快照投递功能，配置审计将资源变更历史快照或资源定时配置快照以指定格式投递到对象存储OSS。通过本文您可以了解资源变更历史快照和资源定时配置快照的代码示例和主要参数说明。

资源变更历史快照

资源变更历史快照的主要参数说明如下表所示。


参数	说明
accountId	资源所属阿里云账号ID。
arn	资源ARN。各云服务资源类型对应的ARN格式，请参见ARN格式。
regionId	资源所在地域ID。
configuration	资源的详细配置。
configurationDiff	资源配置变更的具体变更项及变更前后信息。
captureTime	配置审计发现资源变更事件并生成日志的时间戳。时间戳转换方法，请参见Unix时间戳。
resourceCreateTime	创建资源的时间戳。时间戳转换方法，请参见Unix时间戳。
resourceId	资源ID。
resourceName	资源名称。
resourceType	资源类型。支持的资源类型请参见支持配置审计的云服务。
tags	资源标签。
resourceEventType	资源变更事件的类型。取值： DISCOVERED：新建资源事件。 MODIFY：修改资源事件。 REMOVE：删除资源事件。

新建、更新和删除资源的代码示例如下：

新建资源

阿里云账号在对象存储OSS的上海地域新建存储桶（Bucket） test123，在configurationDiff中显示变更前信息（null）和变更后信息。

{
    "configurationItems":[
        {
            "accountId":1208863178****,
            "arn":"acs:oss:cn-shanghai:120886317****:test123",
            "regionId":"cn-shanghai",
            "configuration":"{"AccessControlList":{"Grant":"private"},"ServerSideEncryptionRule":{"SSEAlgorithm":"None"},"Comment":"","CreationDate":"2020-11-16T06:50:36.000Z","Owner":{"DisplayName":"1208863178****","ID":"1208863178****"},"StorageClass":"Standard","DataRedundancyType":"LRS","AllowEmptyReferer":"true","Name":"test123","BucketPolicy":{"LogPrefix":"","LogBucket":""},"ExtranetEndpoint":"oss-cn-shanghai.aliyuncs.com","IntranetEndpoint":"oss-cn-shanghai-internal.aliyuncs.com","Location":"oss-cn-shanghai"}",
            "configurationDiff":"{"AccessControlList":[null,{"Grant":"private"}],"ServerSideEncryptionRule":[null,{"SSEAlgorithm":"None"}],"CreationDate":[null,"2020-11-16T06:50:36.000Z"],"Owner":[null,{"DisplayName":"1208863178****","ID":"1208863178****"}],"BucketPolicy":[null,{"LogPrefix":"","LogBucket":""}],"StorageClass":[null,"Standard"],"ExtranetEndpoint":[null,"oss-cn-shanghai.aliyuncs.com"],"DataRedundancyType":[null,"LRS"],"AllowEmptyReferer":[null,"true"],"IntranetEndpoint":[null,"oss-cn-shanghai-internal.aliyuncs.com"],"Name":[null,"test123"],"Location":[null,"oss-cn-shanghai"]}",
            "captureTime":1605509680560,
            "resourceCreateTime":1605509436000,
            "resourceId":"test123",
            "resourceName":"test123",
            "resourceType":"ACS::OSS::Bucket",
            "tags":"{}",
            "resourceEventType":"DISCOVERED"
        }
    ],
    "fileVersion":"1.0"
}

更新资源

阿里云账号在对象存储OSS的上海地域更新存储桶test666的Referer白名单，在configurationDiff中显示变更前信息（允许开启空Referer）和变更后信息（不允许开启空Referer）。

{
    "configurationItems":[
        {
            "accountId":1208863178****,
            "arn":"acs:oss:cn-shanghai:1208863178****:test666",
            "regionId":"cn-shanghai",
            "configuration":"{"AccessControlList":{"Grant":"private"},"ServerSideEncryptionRule":{"SSEAlgorithm":"AES256"},"Comment":"","CreationDate":"2020-03-16T08:34:49.000Z","Owner":{"DisplayName":"1208863178****","ID":"1208863178****"},"StorageClass":"Standard","DataRedundancyType":"LRS","RefererList":{"Referer":["https://www.*****.com"]},"AllowEmptyReferer":"false","Name":"testoss111","BucketPolicy":{"LogPrefix":"","LogBucket":""},"TagSet":{"Tag":[{"Value":"1","Key":"1"},{"Value":"2","Key":"2"},{"Value":"001","Key":"526"},{"Value":"612","Key":"612"},{"Value":"prod2","Key":"env"},{"Value":"v0","Key":"k0"}]},"ExtranetEndpoint":"oss-cn-shanghai.aliyuncs.com","Region":"cn-shanghai","IntranetEndpoint":"oss-cn-shanghai-internal.aliyuncs.com","Location":"oss-cn-shanghai"}",
            "configurationDiff":"{"AllowEmptyReferer":["true","false"]}",
            "captureTime":1605508188495,
            "resourceCreateTime":1584347689000,
            "resourceId":"test666",
            "resourceName":"test666",
            "resourceType":"ACS::OSS::Bucket",
            "tags":"",
            "resourceEventType":"MODIFY"
        }
    ],
    "fileVersion":"1.0"
}

删除资源

阿里云账号在对象存储OSS的上海地域删除存储桶test666，在configurationDiff中显示变更前信息和变更后信息（null）。

{
    "configurationItems":[
        {
            "accountId":1208863178****,
            "arn":"acs:oss:cn-shanghai:120886317****:"test666",
            "regionId":"cn-shanghai",
            "configuration":"{"AccessControlList":{"Grant":"private"},"ServerSideEncryptionRule":{"SSEAlgorithm":"None"},"Comment":"","CreationDate":"2020-11-16T06:50:36.000Z","Owner":{"DisplayName":"1208863178****","ID":"1208863178****"},"StorageClass":"Standard","DataRedundancyType":"LRS","AllowEmptyReferer":"true","Name":"test666","BucketPolicy":{"LogPrefix":"","LogBucket":""},"ExtranetEndpoint":"oss-cn-shanghai.aliyuncs.com","IntranetEndpoint":"oss-cn-shanghai-internal.aliyuncs.com","Location":"oss-cn-shanghai"}",
            "configurationDiff":"{"AccessControlList":[{"Grant":"private"},null],"ServerSideEncryptionRule":[{       "SSEAlgorithm":"None"},null],"CreationDate":["2020-11-16T06:50:36.000Z",null],"Owner":[
{"DisplayName":"1208863178****","ID":"1208863178****"},null],"BucketPolicy":[{       "LogPrefix":"","LogBucket":""},null],"StorageClass":["Standard",null], "ExtranetEndpoint":["oss-cn-shanghai.aliyuncs.com",null],"DataRedundancyType":["LRS",null],"AllowEmptyReferer":[
"true",null],"IntranetEndpoint":["oss-cn-shanghai-internal.aliyuncs.com",null],"Name":[      "test666",null],"Location":["oss-cn-shanghai",null]}",
            "captureTime":1605509680560,
            "resourceCreateTime":1605509436000,
            "resourceId":"test666",
            "resourceName":"test666",
            "resourceType":"ACS::OSS::Bucket",
            "tags":"{}",
            "resourceEventType":"REMOVE"
        }
    ],
    "fileVersion":"1.0"
}

资源定时配置快照

资源定时配置快照的参数说明如下表所示。


参数	说明
accountId	资源所属阿里云账号ID。
availabilityZone	资源可用区。
regionId	资源所在地域。
configuration	资源的详细配置。
resourceCreateTime	创建资源的时间戳。时间戳转换方法，请参见Unix时间戳。
resourceId	资源ID。
resourceName	资源名称。
resourceType	资源类型。支持的资源类型请参见支持配置审计的云服务。
tags	资源的标签。

阿里云账号将对象存储OSS上海地域的存储桶test123的定时配置快照投递到您指定的存储桶中。代码示例如下：

{
    "configurationItems":[
        {
            "accountId":12088631786*****,
            "availabilityZone":"",
            "regionId":"cn-shanghai",
            "configuration":"{"AccessControlList":{"Grant":"private"},"ServerSideEncryptionRule":{"SSEAlgorithm":"AES256"},"Comment":"","CreationDate":"2019-08-29T06:02:59.000Z","Owner":{"DisplayName":"12088631786*****","ID":"12088631786*****"},"StorageClass":"Standard","DataRedundancyType":"LRS","RefererList":{"Referer":["https://www.******.com"]},"AllowEmptyReferer":"false","Name":"test123","BucketPolicy":{"LogPrefix":"","LogBucket":""},"ExtranetEndpoint":"oss-cn-shanghai.aliyuncs.com","TagSet":{"Tag":[{"Value":"1","Key":"1"},{"Value":"2","Key":"2"},{"Value":"001","Key":"526"},{"Value":"612","Key":"612"},{"Value":"prod2","Key":"env"},{"Value":"v0","Key":"k0"}]},"Region":"cn-shanghai","IntranetEndpoint":"oss-cn-shanghai-internal.aliyuncs.com","Location":"oss-cn-shanghai"}",
            "resourceCreateTime":1567058579000,
            "resourceId":"test123",
            "resourceName":"test123",
            "resourceType":"ACS::OSS::Bucket",
            "tags":""
        }
    ],
    "fileVersion":"1.0"
}