Elastic Computing Service events

Event types

Elastic Computing Service (ECS) publishes the following types of events to EventBridge.

For more information about the parameters defined in the CloudEvents specification, see Overview.

Disk retention

When you release an ECS instance, its attached disks are retained and converted to pay-as-you-go data disks. The following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ConvertToPostpaidCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "diskName": "e2e-ecs-xxxxxxxx",
        "diskId": "d-gx3hn2vc0fxxxxxxxx"
    }
}

The following table describes the parameters in the data field.

Attach or detach a data disk

When you attach or detach a data disk, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:DiskOperationCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "operation": "AttachDisk",
        "diskId": "d-gx3hn2vc0fuxxxxxxxx"
    }
}

The following table describes the parameters in the data field.

Release of block storage due to an overdue payment

When block storage is released because of an overdue payment, the following sample event is sent to EventBridge.

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "result":"accomplished",
        "instanceId":"i-wz9e60ytsp3lspww****",
        "diskId":"d-wz9ad6x3sistd7fh****"
    },
    "subject":"acs:ecs:cn-shenzhen-st3-a01:123456789098****:disk/d-wz9ad6x3sistd7fh****",
    "source":"acs.ecs",
    "type":"ecs:Disk:OverduePaymentRelease",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters in the data field.

Performance restriction on a burstable instance

When the performance of a burstable instance is restricted, the following sample event is sent to EventBridge.

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "intervalEnd":"2021-01-18T05:00Z",
        "intervalStart":"2021-01-18T04:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:BurstablePerformanceRestricted",
    "aliyunpublishtime":"2021-01-18T04:06:45.441Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"be468204-6cac-4088-9e57-6455d749****",
    "time":"2021-01-18T12:06:45.238Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters in the data field.

Hot migration of an ECS instance on a Dedicated Host

When an ECS instance is hot migrated between dedicated hosts, the following sample event is sent to EventBridge.

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "sourceDedicatedHostId":"dh-2ze3lma1c2-3e343****",
        "destinationDedicatedHostId":"dh-2ze3lm********t8nr83",
        "startTime":"2018-06-08T01:25:37Z",
        "status":"started"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:LiveMigrationAcrossDDH",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters in the data field.

Performance mode switch for a burstable instance

When a burstable instance switches its performance mode, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PerformanceModeChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-bp1eojtvpmlraj13****",
        "intervalEnd": "2021-01-18T05:00Z",
        "intervalStart": "2021-01-18T04:00Z"
    }
}

The following table describes the parameters in the data field.

Release of a spot instance

Before a spot instance is automatically released because of factors such as market price changes or resource inventory adjustments, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PreemptibleInstanceInterruption",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "action": "delete",
        "instanceId": "i-bp17j2bvqa9xxxxxxxx"
    }
}

The following table describes the parameters in the data field.

Instance lifecycle state change

When the lifecycle state of an instance changes, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:StateChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceName": "iZ0jl0kyquo46hxxxxxxxx",
        "instanceType": "ecs.c6.large",
        "privateIpAddress": "172.21.48.37",
        "publicIpAddress": "8.xx.49.237",
        "resourceId": "i-0jl0kyquo46xxxxxxxx",
        "resourceType": "ALIYUN::ECS::Instance",
        "spotStrategy": "SpotWithPriceLimit",
        "state": "Running"
    }
}

The following table describes the parameters in the data field.

Extra charges for a burstable instance

When a burstable instance incurs extra charges, the following sample event is sent to EventBridge.

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-abc1792gcdoonr9a****",
        "creditSpecification":"Unlimited",
        "intervalStart":"2019-06-14T00:00:00Z",
        "intervalEnd":"2019-06-14T01:00:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-abc1792gcdoonr9a****",
    "source":"acs.ecs",
    "type":"ecs:Instance:SurplusCreditIncurCharge",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters in the data field.

Network interface operation

When a network interface operation occurs, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:NetworkInterfaceOperateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eniStatus": "Available",
        "result": "success",
        "eniId": "eni-bp1j9eoibxxxxxxxxxx",
        "operation": "CreateNetworkInterface",
        "requestId": "8D152511-XXXX-18E2-XXXX-8A1219DAD64F.i-bp1ffahxxxxxxxxxx",
        "primaryPrivateIp": "192.168.XX.XX",
        "secondaryPrivateIps": ["192.168.XX.XX","192.168.XX.XX"],
        "ipv4Prefixes": ["192.168.XX.XX/24"],
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCG:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters in the data field.

Snapshot creation completed

The following is a sample event that EventBridge receives when a snapshot is created.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "snapshotId": "s-bp151qed0khxxxxxxxxx",
        "snapshotType": "user",
        "snapshotName": "cust51119970_xxxxxxxx_20211117114015",
        "diskId": "d-bp18dnj7u1xxxxxxxxx",
        "startTime": "2020-11-19T21:02:16Z",
        "endTime": "2020-11-19T21:04:17Z"
    }
}

The following table describes the parameters in the data field.

Snapshot creation initiated

When the creation of a snapshot starts, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotInitiated",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "cust46638731_xxxxxxxxxxx_20211117114238",
        "diskId": "d-bp13j42n65xxxxxxxxxxx",
        "snapshotId": "s-bp1e4pf8dgxxxxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters in the data field.

Snapshot deletion

When a snapshot is deleted, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:SnapshotDeleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "Created from i-bp1dl6knxxxxxxxxx",
        "reason": "USER",
        "diskId": "d-bp15e8k1f48xxxxxxxxx",
        "snapshotId": "s-bp197a5b5txxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters in the data field.

Local disk corruption alert

When a local disk corruption alert occurs, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ErrorDetected",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72z******",
        "ecsInstanceId": "i-t4n8rbpfmzs******",
        "ecsInstanceName": "******-slave",
        "eventId": "e-t4nc86ziq4q6******",
        "eventType": "ErrorDetected",
        "executeFinishTime": "2022-09-02T01:55:41Z",
        "executeStartTime": "2022-09-02T01:55:41Z"
    }
}

The following table describes the parameters in the data field.

Critical disk performance impact

When the disk performance is critically impacted, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:Stalled",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-2zef8thfnbx*****",
        "ecsInstanceId": "i-2zehp4inhn*****",
        "ecsInstanceName": "iZ2zehp4inhnbvm*****",
        "eventId": "e-2zec86ziq4q6*****",
        "eventType": "Stalled",
        "executeFinishTime": "2022-09-01T13:54:07Z",
        "executeStartTime": "2022-09-01T13:53:07Z"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Automatic restart completed

When an automatic restart is completed, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:AutoReactivateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-hp339adxge******",
        "result": "failed"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Instance restart due to an instance fault

When an instance is restarted because of an instance fault, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:InstanceFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q*******",
        "eventStatus": "Executed",
        "eventType": "InstanceFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:23:39Z",
        "executeStartTime": "2022-09-01T13:23:39Z",
        "instanceId": "i-bp1gp1t778*******",
        "notBefore": "2022-09-01T13:23:39Z",
        "privateIpAddress":
        [
            "10.11.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T13:23:39Z"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

TPM security warning

When a Trusted Platform Module (TPM) security warning occurs, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:Security.TpmAlert",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6*****",
        "eventStatus": "Executed",
        "eventType": "Security.TpmAlert",
        "executeFinishTime": "2022-09-02T06:58:32Z",
        "executeStartTime": "2022-09-02T06:58:32Z",
        "instanceId": "i-uf66x7kyzdf0*****",
        "privateIpAddress":
        [
            "172.19.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.103.XX.XX"
        ],
        "publishTime": "2022-09-02T06:58:32Z",
        "reason": "Unauthorized or corrupted component detected in system boot. Component name is pcr9, and the measurement value is 7b888c4f4e28817d743660017*****"
    }
}

The following table describes the parameters in the data field.

Automatic instance release due to a creation failure

When an instance is automatically released because of a creation failure, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Delete",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp16vh3ff7t2******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Delete",
        "executeFinishTime": "2022-08-09T13:55:08Z",
        "executeStartTime": "2022-08-09T13:54:56Z",
        "instanceId": "i-bp1ez0hvdy5x******",
        "notBefore": "2022-08-09T13:54:56Z",
        "publishTime": "2022-08-09T13:54:56Z",
        "reason": "OperationDenied.NoStock"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Instance restart due to a system fault

When an instance is restarted because of a system fault, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:35:40Z",
        "executeStartTime": "2022-09-01T13:34:10Z",
        "instanceId": "i-bp18c3eakhaq******",
        "notBefore": "2022-09-01T13:34:10Z",
        "privateIpAddress":
        [
            "172.28.XX.XX"
        ],
        "publicIpAddress":
        [
            "120.27.XX.XX"
        ],
        "publishTime": "2022-09-01T13:34:10Z"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Instance redeployment due to a system fault

When an instance is redeployed because of a system fault, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q1d*****",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Redeploy",
        "executeFinishTime": "2022-08-23T09:04:03Z",
        "executeStartTime": "2022-08-23T09:02:49Z",
        "instanceId": "i-bp144npue7n*****",
        "notBefore": "2022-08-23T09:02:49Z",
        "privateIpAddress":
        [
            "172.29.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.97.XX.XX"
        ],
        "publishTime": "2022-08-23T09:02:49Z"
    }

}

For more information about the parameters in the data field, see Parameter parsing.

Instance stop due to a system fault

When an instance is stopped because of a system fault, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-f8zc86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Stop",
        "executeFinishTime": "2022-09-01T14:07:52Z",
        "executeStartTime": "2022-09-01T14:05:52Z",
        "instanceId": "i-f8z9datgf1m9******",
        "notBefore": "2022-09-01T14:05:52Z",
        "privateIpAddress":
        [
            "11.71.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:05:52Z"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Faulty disk fencing for system maintenance

When a faulty disk is fenced for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.IsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72zd*******",
        "eventId": "e-t4nc86ziq4*******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.IsolateErrorDisk",
        "instanceId": "i-t4n8rbpfmzsn*******",
        "privateIpAddress":
        [
            "10.62.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T09:47:26Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Faulty disk re-initialization for system maintenance

When a faulty disk is re-initialized for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.ReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdv",
        "diskId": "d-bp15esw9c01fh******",
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.ReInitErrorDisk",
        "instanceId": "i-bp1iwarx7zt1e******",
        "privateIpAddress":
        [
            "10.50.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-02T02:18:29Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Scheduled instance restart for system maintenance

When an instance is scheduled to restart for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2022-09-07T12:31:34Z",
    "type": "ecs:Instance:SystemMaintenance.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2022-09-07T12:31:34Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksaxxxxxxx",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Reboot",
        "instanceId": "i-8vbirq9ijhxxxxxxx",
        "privateIpAddress":
        [
            "192.168.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-07T12:31:34Z",
        "traceInfo": "c1352085-8678-4f23-a7cc-xxxx"
    }
}

The following table describes the parameters in the data field.

Instance restart and faulty disk fencing for system maintenance

When an instance is restarted and a faulty disk is fenced for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndIsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre******",
        "eventId": "e-0jlc86ziq4q******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndIsolateErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Instance restart and faulty disk re-initialization for system maintenance

When an instance is restarted and a faulty disk is re-initialized for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre1r******",
        "eventId": "e-0jlc86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndReInitErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Scheduled instance redeployment for system maintenance

When an instance is scheduled for redeployment for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Redeploy",
        "instanceId": "dh-uf64debetm******",
        "publishTime": "2022-09-01T08:49:23Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure;Critical error detected on hardware components;Disk error"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Scheduled instance stop for system maintenance

When an instance is scheduled to stop for system maintenance, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksackfxxxxxxx",
        "eventStatus": "Avoided",
        "eventType": "SystemMaintenance.Stop",
        "executeFinishTime": "2022-09-01T15:36:58Z",
        "instanceId": "i-uf62dv6w1oapxxxxxxx",
        "notBefore": "2022-04-02T02:07:59Z",
        "privateIpAddress":
        [
            "10.15.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-03-30T02:07:59Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For more information about the parameters in the data field, see Parameter parsing.

vSwitch change completed

When a vSwitch is changed, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:VSwitchChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "instanceId":"i-8vb1qo****cdeg2n",
        "vswitchId":"vsw-bp1s5fnvk4gn3tw12****",
        "privateIpAddress":"172.17.XX.XX",
        "vpcId":"vpc-bp1vwnn14rqpyiczj****",
        "secondaryPrivateIps": ["172.17.XX.XX"]
    }
}

The following table describes the parameters in the data field.

Private IP address assignment completed

This event is generated when a secondary private IPv4 address is assigned to a primary elastic network interface (ENI), or when a primary or secondary private IPv4 address is assigned to a secondary ENI.

Information about the private IP address of a created ENI is included in the Network interface operation event.

Changes to private IP address information in the following scenarios are included in the vSwitch change completed event.

• An ECS instance is migrated from the classic network to a VPC.

• The instance type is changed across zones.

• The VPC or vSwitch of an ECS instance is modified.

• An ECS instance is transferred to another account.

When this event occurs, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPAssigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

The following table describes the parameters in the data field.

Private IP address revocation completed

This event is generated when a secondary private IPv4 address is revoked from a primary ENI, or when a primary or secondary private IPv4 address is revoked from a secondary ENI.

Information about the private IP address of a deleted ENI is included in the Network interface operation event.

When this event occurs, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPUnassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

For more information about the parameters in the data field, see Parameter parsing.

IPv6 address assignment completed

When an IPv6 CIDR block is assigned, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Assigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters in the data field.

IPv6 address revocation completed

When an IPv6 CIDR block is revoked, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Unassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

For more information about the parameters in the data field, see Parameter parsing.

Cleanup event after a failed EBS hot plug

When a cleanup event occurs after a failed EBS hot plug, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41+08:00",
    "type": "ecs:Instance:SystemMaintenance.CleanReleasedDisks",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp15v0xj40ffy8****",
        "eventStatus": "Scheduled",
        "eventType": "SystemMaintenance.CleanReleasedDisks",
        "instanceId": "i-bp16ho3ovmvttwy*****",
        "notBefore": "2023-08-09T07:49:48Z",
        "publishTime": "2023-08-09T06:49:48Z",
        "reason": "A simulated event"
    }
}

The following table describes the parameters in the data field.

Slave network interface status change

When the status of a slave network interface changes, the following sample event is sent to EventBridge.

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:SlaveEniWorkStateChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "eniStatus":"enabled"
    }
}

The following table describes the parameters in the data field.