OpenAPI operation audit

Updated at:

The OpenAPI Operation Audit feature lets you comprehensively monitor and audit OpenAPI operations within your service mesh. It records and traces user operations, enhancing the security and traceability of your service mesh.

Prerequisites

An ASM instance is created.

Procedure

  1. Log on to the ASM console. In the left-side navigation pane, choose Service Mesh > Mesh Management.

  2. On the Mesh Management page, click the name of the ASM instance. In the left-side navigation pane, choose Mesh Security Center > OpenAPI Operation Audit.

  3. In the left-side navigation pane of the ActionTrail console, choose Events > Event Query.

    By default, the Event Detail Query page records operational events from the last 90 days at no charge. You can select a query method based on your use case.

    Use case

    Query method

    References

    Query management events from the last 90 days

    Event detail query

    You can use a single filter condition to query management events from the last 90 days.

    Query events in the ActionTrail console

    Query events older than 90 days

    Advanced event query

    After you enable advanced features on a trail, you can use multiple filter conditions to query management events, data events, and Insights events that are older than 90 days.

    Custom event queries

    Query exceptional events

    Insights event query

    You can use a single filter condition to query exceptional events in specific scenarios from the last 90 days. For example, an IPInsight event records access from an unusual IP address to help identify potential security risks. This query currently supports only management events.

    Query Insights events in the ActionTrail console