Inner-ActionTrail records and monitors management and maintenance events performed by Alibaba Cloud personnel on your cloud services. These events include system maintenance, service upgrades, and configuration changes. This topic describes how to enable Inner-ActionTrail.
Prerequisites
Obtain permission to use Inner-ActionTrail. You can request permission by submitting a ticket or by contacting your sales manager to be whitelisted.
Authorize ActionTrail to use the AliyunActionTrailDefaultRole role to deliver events to Simple Log Service.
Click Cloud Resource Access Authorization and follow the prompts to complete the authorization.
NoteThis one-time authorization must be performed by an Alibaba Cloud account.
If you use a RAM user, the RAM user must have the necessary permissions. For more information, see Granting permissions to RAM users.
Procedure
Log on to the ActionTrail console.
In the left-side navigation pane, choose Inner-ActionTrail > Trails.
NoteThe Inner-ActionTrail menu item is visible only after you are granted permission to use Inner-ActionTrail.
After you enable Inner-ActionTrail, it creates a dedicated Logstore named
innertrail_trail-nameby default.
Next steps
You can create a trail to deliver events to Simple Log Service for storage and analysis. For more information, see Common operations on logs of Alibaba Cloud services.
Related documents
You can also use the Simple Log Service console to collect, store, and analyze Inner-ActionTrail logs. For more information, see Enable Inner-ActionTrail.