Cloud Config integrates with ActionTrail to record management events generated by Cloud Config API calls and console operations. You can deliver these events to Log Service Logstores or OSS buckets for real-time auditing and root cause analysis.
ActionTrail records management events when you manage cloud resources through API operations or the Alibaba Cloud console. The following table lists the Cloud Config API operations whose events you can query in ActionTrail.
|
API operation name |
Description |
|
ActiveAggregateConfigRules |
Enables one or more rules in an account group. |
|
ActiveConfigRules |
Enables multiple rules at a time. |
|
AttachAggregateConfigRuleToCompliancePack |
Adds one or more rules in an account group to a compliance package. |
|
AttachConfigRuleToCompliancePack |
Adds one or more rules to a compliance package. |
|
CheckServiceLinkedRoleForDeleting |
Checks whether a service-linked role can be deleted. |
|
CopyCompliancePacks |
Clones compliance packages. |
|
CopyConfigRules |
Clones rules. |
|
CreateAdvancedSearchFile |
Generates and downloads a resource search result file. |
|
CreateAggregateAdvancedSearchFile |
Generates and downloads a resource search result file for an account group. |
|
CreateAggregateCompliancePack |
Creates a compliance package for an account group. |
|
CreateAggregateConfigDeliveryChannel |
Creates a delivery channel for an account group. |
|
CreateAggregateConfigRule |
Creates a rule for an account group. |
|
CreateAggregateRemediation |
Configures a remediation setting for an account group. |
|
CreateAggregator |
Creates an account group. |
|
CreateCompliancePack |
Creates a compliance package. |
|
CreateConfigDeliveryChannel |
Creates a delivery channel. |
|
CreateConfigRule |
Creates a rule. |
|
CreateDeliveryChannel |
Creates a delivery channel. |
|
CreateRemediation |
Creates a remediation setting. |
|
DeactiveAggregateConfigRules |
Disables one or more rules in an account group. |
|
DeactiveConfigRules |
Disables one or more rules. |
|
DeleteAggregateCompliancePacks |
Deletes one or more compliance packages from an account group. |
|
DeleteAggregateConfigDeliveryChannel |
Deletes a delivery channel from an account group. |
|
DeleteAggregateConfigRules |
Deletes one or more rules. |
|
DeleteAggregateRemediations |
Deletes one or more remediation settings from an account group. |
|
DeleteAggregators |
Deletes one or more account groups. |
|
DeleteCompliancePacks |
Deletes one or more compliance packages. |
|
DeleteConfigDeliveryChannel |
Deletes a delivery channel. |
|
DeleteConfigRules |
Deletes multiple rules at a time. |
|
DeleteRemediations |
Deletes one or more remediation settings. |
|
DescribeCompliance |
Queries the compliance evaluation results of resources. |
|
DescribeComplianceHistory |
Queries the compliance check history of a resource. |
|
DescribeComplianceReport |
Queries the details of a compliance report on resources. |
|
DescribeComplianceSummary |
Queries the statistics about compliance evaluation results. |
|
DescribeConfigRule |
Queries the details of a rule. |
|
DescribeConfigurationRecorder |
Queries the types of resources that are monitored by Cloud Config. |
|
DescribeDeliveryChannels |
Queries the details of delivery channels. |
|
DescribeDiscoveredResource |
Queries the configuration details of a resource. |
|
DescribeDiscoveredResourceBatch |
Queries the details of multiple resources at a time. |
|
DescribeEvaluationResults |
Queries compliance evaluation results. |
|
DescribeIntegratedServiceStatus |
Queries the authorization status of each integrated Alibaba Cloud service. |
|
DescribeProductComplianceSummary |
Queries the statistics about the compliance evaluation results of Alibaba Cloud services. |
|
DescribeRemediation |
Queries the details of a remediation setting. |
|
DetachAggregateConfigRuleToCompliancePack |
Removes one or more rules in an account group from a compliance package. |
|
DetachConfigRuleToCompliancePack |
Removes one or more rules from a compliance package. |
|
GenerateAggregateCompliancePackReport |
Generates a compliance evaluation report for a compliance package in an account group. |
|
GenerateAggregateConfigRulesReport |
Generates a compliance evaluation report for all rules in an account group. |
|
GenerateAggregateResourceInventory |
Generates a resource list for an account group. |
|
GenerateCompliancePackReport |
Generates a compliance evaluation report for a compliance package. |
|
GenerateConfigRulesReport |
Generates a compliance evaluation report on all existing rules. |
|
GenerateResourceInventory |
Generates a compliance evaluation report on resources. |
|
GetAdvancedSearchFile |
Downloads a resource search result file. |
|
GetAggregateAccountComplianceByPack |
Queries compliance results of member accounts in a compliance package for an account group. |
|
GetAggregateCompliancePack |
Queries the details of a compliance package in an account group. |
|
GetAggregateCompliancePackReport |
Queries a compliance evaluation report on a compliance package in an account group. |
|
GetAggregateConfigDeliveryChannel |
Queries the information about a delivery channel in an account group. |
|
GetAggregateConfigRule |
Queries the details of a rule in an account group. |
|
GetAggregateConfigRuleComplianceByPack |
Queries the compliance evaluation results of specified rules in a compliance package in an account group. |
|
GetAggregateConfigRulesReport |
Queries a compliance evaluation report on all existing rules in an account group. |
|
GetAggregateConfigRuleSummaryByRiskLevel |
Queries the summary of compliance evaluation results in an account group by rule risk level. |
|
GetAggregateDiscoveredResource |
Queries the details of a resource in an account group. |
|
GetAggregateResourceComplianceByConfigRule |
Queries the compliance evaluation results of a rule in an account group. |
|
GetAggregateResourceComplianceByPack |
Queries compliance statistics for resources in a compliance package for an account group. |
|
GetAggregateResourceComplianceGroupByRegion |
Queries the statistics about compliance evaluation results for rules in an account group by region. |
|
GetAggregateResourceComplianceGroupByResourceType |
Queries the statistics about compliance evaluation results for rules in an account group by resource. |
|
GetAggregateResourceComplianceTimeline |
Queries the compliance check history of a resource in an account group. |
|
GetAggregateResourceConfigurationTimeline |
Queries the configuration change history of a resource in an account group. |
|
GetAggregateResourceCountsGroupByRegion |
Queries the statistics about the resources in an account group by region. |
|
GetAggregateResourceCountsGroupByResourceType |
Queries the statistics about the resources in an account group by resource type. |
|
GetAggregateResourceInventory |
Queries a compliance evaluation report on the resources in an account group. |
|
GetAggregator |
Queries the details of an account group. |
|
GetCompliancePack |
Queries the details of a compliance package. |
|
GetCompliancePackReport |
Queries a compliance evaluation report on a compliance package. |
|
GetConfigDeliveryChannel |
Queries delivery channel details. |
|
GetConfigRule |
Queries the details of a rule. |
|
GetConfigRuleComplianceByPack |
Queries the statistics about the compliance evaluation results in a compliance package by rule. |
|
GetConfigRulesReport |
Queries a compliance evaluation report on all existing rules. |
|
GetConfigRuleSummaryByRiskLevel |
Queries the summary of compliance evaluation results by rule risk level. |
|
GetDiscoveredResource |
Queries the details of a resource. |
|
GetDiscoveredResourceCounts |
Queries the number of resources. |
|
GetDiscoveredResourceCountsGroupByRegion |
Queries the statistics about resources by region. |
|
GetDiscoveredResourceCountsGroupByResourceType |
Queries the statistics about resources by resource type. |
|
GetDiscoveredResourceSummary |
Queries the statistics about resources monitored by Cloud Config. |
|
GetManagedRule |
Queries the details of a managed rule. |
|
GetResourceComplianceByConfigRule |
Queries the statistics about compliance evaluation results for resources based on a rule. |
|
GetResourceComplianceByPack |
Queries the compliance evaluation results of resources monitored by a compliance package. |
|
GetResourceComplianceGroupByRegion |
Queries the statistics about compliance evaluation results for resources by region. |
|
GetResourceComplianceGroupByResourceType |
Queries the statistics about compliance evaluation results for resources by resource type. |
|
GetResourceComplianceTimeline |
Queries the compliance check history of a resource. |
|
GetResourceConfigHistory |
Queries the configuration change records of a resource. |
|
GetResourceConfigurationTimeline |
Queries the configuration change history of a resource. |
|
GetResourceInventory |
Queries a resource inventory report. |
|
GetServiceQuota |
Queries a specified quota of an Alibaba Cloud service. |
|
GetSupportedResourceTypes |
Queries the resource types that are supported by Cloud Config. |
|
GetSupportedResourceTypesForSpec |
Queries the resource types that are supported by Cloud Config. |
|
GetSupportedResourceTypesInfo |
Queries core configuration details of resource types supported by Cloud Config. |
|
IgnoreAggregateEvaluationResults |
Ignores non-compliant resources evaluated by a rule in an account group. |
|
IgnoreEvaluationResults |
Ignores non-compliant resources evaluated by a rule. |
|
ListAggregateCompliancePacks |
Queries the compliance packages in an account group. |
|
ListAggregateConfigDeliveryChannels |
Queries all delivery channels in an account group. |
|
ListAggregateConfigRuleEvaluationResults |
Queries compliance evaluation results for resources evaluated by rules in an account group. |
|
ListAggregateConfigRules |
Queries rules in an account group. |
|
ListAggregateDiscoveredResourceRelations |
Queries resource relationships in an account group. |
|
ListAggregateDiscoveredResources |
Queries resources in an account group. |
|
ListAggregateDiscoveredResourcesByAdvancedSearch |
Queries resources in an account group. |
|
ListAggregateRemediations |
Queries all remediation templates in an account group. |
|
ListAggregateResourceEvaluationResults |
Queries compliance evaluation results for resources in an account group. |
|
ListAggregators |
Queries account groups. |
|
ListCadtAppResource |
Queries resources in an application structure. |
|
ListCompliancePacks |
Queries compliance packages. |
|
ListCompliancePackTemplates |
Queries compliance package templates. |
|
ListConfigDeliveryChannels |
Queries delivery channels. |
|
ListConfigRuleEvaluationResults |
Queries compliance evaluation results for resources evaluated by rules. |
|
ListConfigRules |
Queries rules. |
|
ListDiscoveredResourceRelations |
Queries resource relationships. |
|
ListDiscoveredResourceRelationsBatch |
Queries multiple resource relationships at a time. |
|
ListDiscoveredResources |
Queries the details of resources. |
|
ListDiscoveredResourcesByAdvancedSearch |
Queries the details of resources. |
|
ListIntegratedService |
Queries Alibaba Cloud services integrated with Cloud Config. |
|
ListManagedRules |
Queries managed rules. |
|
ListRemediations |
Queries remediation settings. |
|
ListRemediationTemplates |
Queries remediation templates. |
|
ListResourceEvaluationResults |
Queries compliance evaluation results for resources. |
|
ListResourceOwnerInAllAggregator |
Queries account group members. |
|
ListServiceQuotas |
Queries the quotas of an Alibaba Cloud service. |
|
ListSupportedProducts |
Queries the Alibaba Cloud services that are supported by Cloud Config. |
|
ListTagResources |
Queries the tags of a resource. |
|
PutConfigRule |
Creates or modifies a rule. |
|
PutConfigurationRecorder |
Changes the types of resources that are monitored by Cloud Config. |
|
PutDeliveryChannel |
Creates or updates a delivery channel. |
|
PutEvaluations |
Submits compliance evaluation results. |
|
RevertAggregateEvaluationResults |
Re-evaluates non-compliant resources flagged by a rule in an account group. |
|
RevertEvaluationResults |
Re-evaluates non-compliant resources flagged by a rule. |
|
StartAggregateConfigRuleEvaluation |
Uses a rule in an account group to evaluate resources. |
|
StartAggregateRemediation |
Performs remediation using a rule in an account group. |
|
StartConfigRuleEvaluation |
Enables a rule. |
|
StartConfigurationRecorder |
Enables resource monitoring for your Alibaba Cloud account. |
|
StartRemediation |
Enables a remediation setting. |
|
StopConfigRules |
Disables multiple rules at a time. |
|
StopConfigurationRecorder |
Deactivates Cloud Config. |
|
TagResources |
Adds a tag to a resource. |
|
UntagResources |
Removes a tag from a resource. |
|
UpdateAggregateCompliancePack |
Modifies a compliance package in an account group. |
|
UpdateAggregateConfigDeliveryChannel |
Modifies a delivery channel in an account group. |
|
UpdateAggregateConfigRule |
Modifies a rule in an account group. |
|
UpdateAggregateRemediation |
Modifies a remediation setting. |
|
UpdateAggregator |
Modifies an account group. |
|
UpdateCompliancePack |
Modifies a compliance package. |
|
UpdateConfigDeliveryChannel |
Modifies a delivery channel. |
|
UpdateConfigRule |
Modifies a rule. |
|
UpdateDeliveryChannel |
Modifies a delivery channel. |
|
UpdateIntegratedServiceStatus |
Changes the status of an integrated Alibaba Cloud service. |
|
UpdateRemediation |
Modifies a remediation setting. |