ActionTrail records operations on your cloud resources. You can query these operation records and save audit events to a specified Simple Log Service Logstore or Object Storage Service (OSS) bucket. The records saved by ActionTrail can be used for security analysis, resource change tracking, and compliance auditing. Mobile PaaS (mPaaS) is integrated with Alibaba Cloud ActionTrail.
mPaaS operation logs in ActionTrail
ActionTrail audit logs primarily consist of API events. mPaaS supports audit configurations for APIs that perform key operations.
Key API descriptions
Component | PopAPI name | Feature |
|---|---|---|
Data Synchronization (MSS) | UpdateMssSignStatus | Modify the status of the signature verification switch |
Data Synchronization (MSS) | UpdateMssConfigStatus | Update the bizType status |
Data Synchronization (MSS) | UpdateMssConfig | Update bizType |
Data Synchronization (MSS) | CreateMssGloblaSyncData | Push global sync messages |
Data Synchronization (MSS) | CreateMssSingleSyncData | Create single-push sync messages |
Message Push (MPS) | PushMpsBroadcast | Push broadcast messages |
Message Push (MPS) | PushMpsMultiple | Send batch messages |
Message Push (MPS) | PushMpsTemplate | Send template messages |
Message Push (MPS) | PushMpsSimple | Send simple messages |
Message Push (MPS) | UpdateMpsKeys | Update key information |
Message Push (MPS) | UpdateMpsCert | Update push certificates |
Real-time Release (MDS) | AddMdsMiniConfig | Add miniapp configuration information |
Real-time Release (MDS) | DeleteMdsMiniConfig | Delete miniapp configuration information |
Real-time Release (MDS) | UpdateMdsMiniConfig | Update miniapp configuration information |
Real-time Release (MDS) | DeleteMdsResourceConfig | Delete resource publishing rules |
Real-time Release (MDS) | UpdateMdsResourceConfig | Update resource publishing rules |
Real-time Release (MDS) | UpdateMdsWhitelist | Update the whitelist |
Real-time Release (MDS) | DeleteMdsWhitelist | Delete the whitelist |
Real-time Release (MDS) | ImportMdsClientSwitch | Import switch configurations |
Real-time Release (MDS) | CreateMdsClientSwitch | Create a switch |
Real-time Release (MDS) | UpdateMdsClientSwitch | Update a switch |
Real-time Release (MDS) | CreateMdsMiniprogramTask | Create a miniapp publishing task |
Real-time Release (MDS) | DeleteMdsMiniprogram | Delete a miniapp |
Real-time Release (MDS) | CreateMdsNebualTask | Create an offline package publishing task |
Real-time Release (MDS) | DeleteMdsNebula | Delete an offline package |
Real-time Release (MDS) | DeleteMdsHotpatchResource | Delete a hotpatching resource |
Real-time Release (MDS) | CreateMdsHotpatchTask | Create a hotpatching task |
Real-time Release (MDS) | UpdateMdsHotpatchTaskStatus | Update the status of a hotpatching task |
Real-time Release (MDS) | CreateMdsHotpatchRollbackTask | Create a hotpatching rollback task |
Real-time Release (MDS) | CreateMdsUpgradeTask | Create an upgrade package publishing task |
Real-time Release (MDS) | DeleteMdsUpgradePackage | Delete an upgrade package |
Real-time Release (MDS) | UpdateMdsUpgradeTaskStatus | Update the status of an upgrade package publishing task |
Real-time Release (MDS) | BatchDeleteMdsResourceConfig | Batch delete publishing rules |
Real-time Release (MDS) | UpdateMdsNebulaTask | Update an offline package publishing task |
mAppCenter | CreateMpaasApp | Create an app |
mAppCenter | DeleteMpaasApp | Delete an app |
Mobile Gateway (MGS) | SaveMgsApirest | Modify HTTP API configurations |
Mobile Gateway (MGS) | SaveMgsConfigencrypt | Modify encryption configurations |
Mobile Gateway (MGS) | SaveMgsConfigcors | Modify cross-domain configurations |
Mobile Gateway (MGS) | DeleteMgsApi | Delete API configurations |
Mobile Gateway (MGS) | SaveMgsSys | Modify API group configurations |
Mobile Gateway (MGS) | DeleteMgsSys | Delete API group configurations |
Mobile Gateway (MGS) | SaveMgsConfighandlerswitch | Modify general configurations |
Log example
The following example shows an ActionTrail log that is generated when an mPaaS application is created. The log provides details about the CreateMpaasApp operation.
{
"eventId": "108DF5F5-291D-4B4A-85B0-2D887B83CEF7",
"eventVersion": 1,
"responseElements": {
"RequestId": "108DF5F5-291D-4B4A-85B0-2D887B83CEF7",
"ResultCode": "OK",
"ResultContent": {
"RequestId": "",
"Data": {
"AppId": "ONEXPRE18c5509171455",
"Message": "success",
"Data": "success",
"Code": "",
"Success": true
}
}
},
"eventSource": "mpaas.cn-hangzhou.aliyuncs.com",
"requestParameters": {
"AcsHost": "mpaas.cn-hangzhou.aliyuncs.com",
"RequestId": "108DF5F5-291D-4B4A-85B0-2D887B83CEF7",
"WorkspaceId": "default",
"HostId": "mpaas.cn-hangzhou.aliyuncs.com",
"AppName": "action",
"CommonParamsJsonStr": {
"TenantId": "RXPCAMDL",
"AppId": "13FF079171113",
"WorkspaceId": "default",
"OnexFlag": true
},
"TenantId": "RXPCAMDL",
"AppId": "13FF079171113",
"AcsProduct": "mPaaS",
"AcceptLanguage": "zh-CN",
"RegionId": "cn-hangzhou",
"MpaasMappcenterAppCreateJsonStr": {
"OnexFlag": true,
"AppName": "action"
},
" charset": "UTF-8",
"OnexFlag": true
},
"sourceIpAddress": "Internal",
"userAgent": "pre-mpaaspub.console.aliyun.com",
"eventType": "ApiCall",
"userIdentity": {
"sessionContext": {
"attributes": {
"mfaAuthenticated": false,
"creationDate": "2020-12-17T06:55:12Z"
}
},
"accountId": "1103496162005321",
"principalId": "1103496162005321",
"type": "root-account",
"userName": "root"
},
"serviceName": "MobilePaaS",
"additionalEventData": {
"Scheme": "https"
},
"apiVersion": "2020-10-28",
"requestId": "108DF5F5-291D-4B4A-85B0-2D887B83CEF7",
"eventTime": "2020-12-17T06:55:12Z",
"isGlobal": false,
"acsRegion": "cn-hangzhou",
"eventName": "CreateMpaasApp"
}