Operation audit logs
EMAS is integrated with Alibaba Cloud ActionTrail. You can view and retrieve user behavioral logs in ActionTrail. You can also use ActionTrail to deliver logs to a Simple Log Service Logstore or a specified OSS Bucket for real-time auditing and issue troubleshooting.
EMAS operation logs in ActionTrail
EMAS operation audit logs consist primarily of API events. In ActionTrail, the EventType for OpenAPI events is ApiCall. For more information, see API overview.
Some API events are not yet included in the API overview. The following table describes these events.
Event name | Event definition |
QueryPackInfo | Queries the details of SDK packaging. |
BuildSDKConfig | Downloads the SDK configuration file for an application. |
DownloadPackage | Downloads an SDK package. |
PackSDK | Packages an SDK. |
QueryPackHistories | Queries the SDK packaging history. |
QueryPackInfo | Queries the details of SDK packaging. |
QueryVersionInfos | Queries the list of SDK versions. |
TestFlight | Uses a specified token to test the iOS push notification for an application. |
VerifyCert | Verifies or changes the iOS certificate for an application. |
EMAS operation audit log sample
{
"ApiVersion": "2017-08-25",
"RequestId": "62018D30-****-****-****-EC94B9BFD0FA",
"EventType": "ApiCall",
"UserIdentity": {
"sessionContext": {
"attributes": {
"mfaAuthenticated": "false"
}
},
"accountId": "1620********2193",
"principalId": "254522********5214",
"type": "ram-user",
"userName": "push"
},
"AcsRegion": "cn-shanghai",
"EventName": "QueryAppInfo",
"RequestParameters": {
"charset": "UTF-8",
"AcsHost": "mhub.cn-shanghai.aliyuncs.com",
"AcsProduct": "Mhub",
"RequestId": "62018D30-****-****-****-EC94B9BFD0FA",
"AppKey": 333****23,
"AcceptLanguage": "zh-CN",
"RegionId": "cn-shanghai",
"HostId": "mhub.cn-shanghai.aliyuncs.com"
},
"EventSource": "mhub.cn-shanghai.aliyuncs.com",
"ServiceName": "EMAS",
"EventTime": "2021-06-17T03:52:27Z",
"UserAgent": "cpsnext.console.aliyun.com",
"EventId": "62018D30-****-****-****-EC94B9BFD0FA",
"AdditionalEventData": {
"Scheme": "https"
},
"ErrorCode": "",
"ErrorMessage": "",
"EventVersion": "1",
"SourceIpAddress": "**9.**7.**2.**6"
}