View the compliance timeline of a resource

更新时间:
复制 MD 格式

Each resource in Cloud Config has a compliance timeline that records every rule evaluation. Over time, these evaluation records form a continuous history of the resource's compliance status.

Background information

A compliance timeline consists of evaluation records for a resource. The following table describes the key elements.

Element

Description

Points on the compliance timeline

  • Start point: The first time a rule evaluates the resource. An evaluation can be triggered by a scheduled task, a real-time configuration change, or a manual action.

  • Node: Each resource evaluation creates a node on the compliance timeline. An evaluation may involve one or more rules.

  • Breakpoint: If you remove a resource type from the monitoring scope, Cloud Config stops monitoring those resources and no new entries are added to their compliance timelines. Adding the resource type back resumes monitoring. Configuration changes that occur while a resource is unmonitored are not tracked.

Contents of the compliance timeline

  • Time: When the compliance evaluation occurred.

  • Trigger type: The mechanism that initiated the evaluation, such as a scheduled task, a real-time configuration change, or a manual action.

  • Compliance evaluation result: On the Compliance Timeline tab, the left navigation bar displays the evaluation result for each node, helping you quickly locate non-compliant resources.

  • Evaluation details for each node: Includes the Basic Information and Evaluation Result sections. If the evaluation was triggered by a configuration change or a scheduled task, the Change Details of Core Resource Configurations section is also displayed, showing the configuration changes of a non-compliant resource.

Procedure

  1. Log on to the Cloud Config console.

  2. Optional. In the upper-left corner, select an account group.

    This operation is required only if you are using a management account of a resource directory. Otherwise, you do not need to perform the operation.

  3. In the left-side navigation pane, choose Resources > Global Resources.

  4. On the Global Resources page, use filters or search to find the target resource.

    • Enter a resource ID to search for a specific resource.

    • Use the resource type, region, or resource status filters to narrow down results.

  5. Click the ID of the target resource.

  6. Click the Compliance Timeline tab to view the details of the resource's compliance timeline.

    • The Basic Info After Change section shows the resource ID, resource name, resource type, creation time, tags, region, and zone of the resource.

    • The Evaluation Result section shows the evaluation result for the resource.

    • The Change Details section displays the resource's configuration item in JSON format, showing its state before and after the change.