DocsICP FilingConsole
Documentation
Home Page ActionTrail User Guide ActionTrail Event Log Reference Examples of common cloud service events CDN

CDN

Updated at:
Copy as MD
Product
My Favorites

ActionTrail records events related to Alibaba Cloud CDN. This topic provides four sample CDN event logs and describes the key fields, covering the main identity types that can trigger a CDN operation: an Alibaba Cloud account, a RAM user acting through the console, a RAM user calling the API directly with an AccessKey pair, and a RAM user acting under an assumed RAM role.

Add a domain name for CDN in the CDN console by using an Alibaba Cloud account

The following sample event log shows an Alibaba Cloud account adding the example.com domain name for CDN in the CDN console at 14:10:01 on August 05, 2021 (UTC+8).

{
  "eventId": "3F44719F-9858-5016-AC54-794BBEE449C3",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3"
  },
  "eventSource": "cdn-share.aliyuncs.com",
  "requestParameters": {
    "charset": "UTF-8",
    "AcsHost": "cdn-share.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3",
    "ResourceGroupId": "rg-acfmxl27ech****",
    "Scope": "domestic",
    "DomainName": "example.com",
    "AcceptLanguage": "zh-CN",
    "CdnType": "web",
    "HostId": "cdn-share.aliyuncs.com",
    "Sources": [
      {
        "Type": "oss",
        "Content": "hao-nan.oss-cn-shanghai.aliyuncs.com",
        "Priority": "20",
        "Port": 80,
        "index": 0,
        "Weight": "10"
      }
    ]
  },
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "cdnnext.console.aliyun.com",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "cdns.example.com"
    ]
  },
  "userIdentity": {
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-05T06:10:01Z"
      }
    },
    "accountId": "128022060925****",
    "principalId": "128022060925****",
    "type": "root-account",
    "userName": "root"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "3F44719F-9858-5016-AC54-794BBEE449C3",
  "eventTime": "2021-08-05T06:10:01Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

Key fields in this event log:

  • userIdentity.type: the identity type of the requester. root-account indicates an Alibaba Cloud account.

  • serviceName: the Alibaba Cloud service associated with the event. Cdn indicates CDN.

  • eventName: the name of the event. AddCdnDomain indicates that a domain name was added for CDN.

  • referencedResources: the CDN domain affected by the event. {"ACS::CDN::Domain": ["example.com"]} identifies the example.com domain.

  • eventTime: the time the event occurred, in UTC. 2021-08-05T06:10:01Z corresponds to 14:10:01 on August 05, 2021 (UTC+8).

Add a domain name for CDN in the CDN console as a RAM user

The following sample event log shows the RAM user dev adding the example.com domain name for CDN in the CDN console at 13:54:39 on August 05, 2021 (UTC+8). The operation failed because the domain already existed.

{
  "eventId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  },
  "eventSource": "cdn-share.aliyuncs.com",
  "requestParameters": {
    "charset": "UTF-8",
    "AcsHost": "cdn-share.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
    "Scope": "domestic",
    "DomainName": "example.com",
    "AcceptLanguage": "zh-CN",
    "CdnType": "web",
    "HostId": "cdn-share.aliyuncs.com",
    "Sources": [
      {
        "Type": "oss",
        "Content": "lxhy-h5-****.oss-cn-chengdu.aliyuncs.com",
        "Priority": "20",
        "Port": 80,
        "index": 0,
        "Weight": "10"
      }
    ]
  },
  "errorCode": "DomainAlreadyExist",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "cdn.console.aliyun.com",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-05T05:54:39Z"
      }
    },
    "accountId": "159702607145****",
    "principalId": "24749552624582****",
    "type": "ram-user",
    "userName": "dev"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  "eventTime": "2021-08-05T05:54:39Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

Key fields in this event log:

  • userIdentity.type: the identity type of the requester. ram-user indicates a RAM user.

  • userIdentity.userName: the username of the RAM user.

  • serviceName: the Alibaba Cloud service associated with the event. Cdn indicates CDN.

  • eventName: the name of the event. AddCdnDomain indicates that a domain name was added for CDN.

  • referencedResources: the CDN domain affected by the event. {"ACS::CDN::Domain": ["example.com"]} identifies the example.com domain.

  • eventTime: the time the event occurred, in UTC. 2021-08-05T05:54:39Z corresponds to 13:54:39 on August 05, 2021 (UTC+8).

Add a domain name for CDN by calling AddCdnDomain as a RAM user with an AccessKey pair

The following sample event log shows the RAM user Alice adding the example.com domain name for CDN by calling the AddCdnDomain operation at 19:07:28 on August 04, 2021 (UTC+8). The API call was authenticated using the AccessKey pair with ID LTAI. The operation failed because domain ownership verification did not pass.

{
  "eventId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
    "Message": "Owner verification of the root domain failed.",
    "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw",
    "HostId": "cdn.aliyuncs.com",
    "Code": "DomainOwnerVerifyFail"
  },
  "errorMessage": "Owner verification of the root domain failed.",
  "eventSource": "cdn.aliyuncs.com",
  "requestParameters": {
    "q": 0.9,
    "AcsHost": "cdn.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
    "DomainName": "example.com",
    "v": "b3",
    "CdnType": "web",
    "HostId": "cdn.aliyuncs.com",
    "Sources": [
      {
        "type": "domain",
        "content": "aliyundoc.com"
      }
    ]
  },
  "errorCode": "DomainOwnerVerifyFail",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "accessKeyId": "LTAI****************",
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-04T11:06:44Z"
      }
    },
    "accountId": "166878994059****",
    "principalId": "20223100810693****",
    "type": "ram-user",
    "userName": "Alice"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "https",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
  "eventTime": "2021-08-04T11:07:28Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

Key fields in this event log:

  • userIdentity.accessKeyId: the AccessKey ID used to authenticate the API call. The value is LTAI****************.

  • userIdentity.principalId: the ID of the account that owns the AccessKey pair. The value is 20223100810693****.

  • userIdentity.type: the identity type of the requester. ram-user indicates a RAM user.

  • serviceName: the Alibaba Cloud service associated with the event. Cdn indicates CDN.

  • eventName: the name of the event. AddCdnDomain indicates that a domain name was added for CDN.

  • referencedResources: the CDN domain affected by the event. {"ACS::CDN::Domain": ["example.com"]} identifies the example.com domain.

  • eventTime: the time the event occurred, in UTC. 2021-08-04T11:07:28Z corresponds to 19:07:28 on August 04, 2021 (UTC+8).

Add a domain name for CDN by assuming a RAM role as a RAM user

The following sample event log shows a RAM user of the Alibaba Cloud account 111526800165**** adding the example.com domain name for CDN at 14:15:46 on August 02, 2021 (UTC+8). The RAM user assumed the RAM role aliyunid-ag-ram-role-admin, which belongs to the Alibaba Cloud account 147048327155****. The operation failed because domain ownership verification did not pass.

{
  "eventId": "79229ED7-C2B6-45C5-B665-23AF88783660",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
    "Message": "Owner verification of the root domain failed.",
    "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw",
    "HostId": "cdn.aliyuncs.com",
    "Code": "DomainOwnerVerifyFail"
  },
  "errorMessage": "Owner verification of the root domain failed.",
  "eventSource": "cdn.aliyuncs.com",
  "requestParameters": {
    "stsTokenPrincipalName": "aliyunid-ag-ram-role-admin/BASEMENT",
    "AcsHost": "cdn.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
    "DomainName": "example.com",
    "CdnType": "web",
    "RegionId": "cn-zhangjiakou",
    "HostId": "cdn.aliyuncs.com",
    "stsTokenPlayerUid": 111526800165****,
    "Sources": [
      {
        "port": 443,
        "type": "domain",
        "content": "aliyundoc.com"
      }
    ]
  },
  "errorCode": "DomainOwnerVerifyFail",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "AlibabaCloud (Linux; amd64) Java/1.8.0_252-b09 Core/4.5.19 HTTPClient/ApacheHttpClient",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "accessKeyId": "STS.****************",
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-07-25T02:40:34Z"
      }
    },
    "accountId": "147048327155****",
    "principalId": "30304522804117****:BASEMENT",
    "type": "assumed-role",
    "userName": "aliyunid-ag-ram-role-admin:BASEMENT"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
  "eventTime": "2021-08-02T06:15:46Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

Key fields in this event log:

  • userIdentity.type: the identity type of the requester. assumed-role indicates that a RAM user is acting under an assumed RAM role.

  • userIdentity.userName: the identity of the requester, in the format {roleName}:{sessionName}. roleName is the name of the assumed RAM role; sessionName is the name specified when the role was assumed. In this example, aliyunid-ag-ram-role-admin:BASEMENT shows aliyunid-ag-ram-role-admin as the role name and BASEMENT as the session name.

  • requestParameters.stsTokenPlayerUid: the ID of the Alibaba Cloud account to which the originating RAM user belongs. The value is 111526800165****.

  • referencedResources: the CDN domain affected by the event. {"ACS::CDN::Domain": ["example.com"]} identifies the example.com domain.

  • serviceName: the Alibaba Cloud service associated with the event. Cdn indicates CDN.

  • eventName: the name of the event. AddCdnDomain indicates that a domain name was added for CDN.

  • eventTime: the time the event occurred, in UTC. 2021-08-02T06:15:46Z corresponds to 14:15:46 on August 02, 2021 (UTC+8).

Previous：Examples of common cloud service eventsNext：ECS