BaaS integrates with Alibaba Cloud monitoring and logging services to help you track resource usage, audit operations, and respond to anomalies in real time. The following table summarizes the available services:
| Service | Purpose |
|---|---|
| CloudMonitor | Collects metrics and generates alerts for resource usage and service performance |
| Cloud Config | Monitors resource configurations and compliance |
| ActionTrail | Records all operations performed on your Alibaba Cloud account for security analysis and auditing |
ActionTrail
ActionTrail gives you centralized management of your cloud resource operation logs across your BaaS resources. It captures logons and resource access operations performed through the Alibaba Cloud Management Console, API operations, and developer tools, and delivers them as audit logs.
Common use cases include:
Security analysis — identify suspicious access patterns or unauthorized operations
Intrusion detection — detect unauthorized access attempts and anomalous activity
Resource change tracking — trace who changed a resource and when
Compliance auditing — produce audit trails required by regulatory frameworks
For more information about the audit events, see Audit events of VPC.
Event retention
By default, ActionTrail retains events from the last 90 days. To keep events beyond 90 days, create a trail that delivers events to a Simple Log Service Logstore or an Object Storage Service (OSS) bucket. See Step 1: Create a trail.
After you create a trail, query or analyze the events in the Simple Log Service or OSS console. See Query events in the Simple Log Service or OSS console.
If you want to trace a historical event, submit a support ticket to request the required permissions.