OpenAPI operation audit

更新时间:
复制 MD 格式

The OpenAPI Operation Audit feature lets you comprehensively monitor and audit OpenAPI operations within your service mesh. It records and traces user operations, enhancing the security and traceability of your service mesh.

Prerequisites

An ASM instance is created.

Procedure

  1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

  2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Mesh Security Center > OpenAPI Operation Audit.

  3. In the left-side navigation pane of the ActionTrail console, choose Events > Event Query.

    By default, the Event Detail Query page records operational events from the last 90 days at no charge. You can select a query method based on your use case.

    Scenario

    Query method

    References

    Query events that were generated in the last 90 days

    Perform event detail queries.

    You can perform event detail queries to query management events that were generated in the last 90 days. You can specify only one filter condition for each event detail query.

    Query events in the ActionTrail console

    Query events that were generated more than 90 days ago

    Perform advanced event queries.

    If you enable the advanced event query feature for an existing trail, you can perform advanced event queries to query management events and Insights events that were generated more than 90 days ago. You can specify multiple filter conditions for each advanced event query.

    Perform custom event queries

    Query exceptional operations

    Perform Insights event queries.

    You can perform Insights event queries to query exceptional operations that were performed in specific scenarios in the last 90 days. You can specify only one filter condition for each Insights event query. For example, an IPInsight event helps you gain an insight into an operation that was performed from an unusual IP address and identify potential risks at the earliest opportunity. You can perform online queries of IPInsight events that were generated in the last 90 days.

    Query Insights events in the ActionTrail console