All Products
Search
Document Center

ActionTrail:Auditable events of CEN

Last Updated:Nov 21, 2022

Cloud Enterprise Network (CEN) is integrated with ActionTrail. In the ActionTrail console, you can query the user-initiated events that are generated when you manage CEN resources. ActionTrail can deliver user-initiated events to Logstores in Log Service or Object Storage Service (OSS) buckets. This way, you can audit the events in real time and troubleshoot issues.

ActionTrail records the user-initiated events that are generated when you manage cloud resources by calling API operations or in the Alibaba Cloud Management Console. The following table describes the user-initiated events of CEN that you can query in the ActionTrail console.

Event

Description

ActiveFlowLog

A flow log is enabled.

AddTrafficMatchRuleToTrafficMarkingPolicy

A traffic classification rule is added to a traffic marking policy.

AddTraficMatchRuleToTrafficMarkingPolicy

A traffic classification rule is added to a traffic marking policy.

AssociateCenBandwidthPackage

A bandwidth plan is associated with a CEN instance.

AssociateTransitRouterAttachmentWithRouteTable

An associated forwarding correlation is created.

AssociateTransitRouterMulticastDomain

A vSwitch in a virtual private cloud (VPC) is associated with a multicast domain.

AttachCenChildInstance

A network instance is attached to a CEN instance.

CancelTransitRouterUpgradeApplication

An application to upgrade an Enterprise Edition transit router is canceled.

CheckTransitRouterService

Whether the transit router feature is activated is queried.

Create

A CEN instance or a bandwidth plan is purchased on the buy page.

CreateCen

A CEN instance is created.

CreateCenBandwidthPackage

A bandwidth plan is created.

CreateCenChildInstanceRouteEntryToAttachment

A route is added to a network instance that is attached to an Enterprise Edition transit router.

CreateCenChildInstanceRouteEntryToCen

A route is added to a network instance that is attached to a CEN instance.

CreateCenInterRegionTrafficQosPolicy

A quality of service (QoS) policy is created.

CreateCenInterRegionTrafficQosQueue

A queue is created for a QoS policy.

CreateCenRouteMap

A routing policy is created for a CEN instance.

CreateFlowlog

A flow log is created.

CreateTrafficMarkingPolicy

A traffic marking policy is created.

CreateTransitRouter

An Enterprise Edition transit router is created.

CreateTransitRouterMulticastDomain

A multicast domain is created.

CreateTransitRouterPeerAttachment

A cross-region connection is created on an Enterprise Edition transit router.

CreateTransitRouterPrefixListAssociation

A route table of an Enterprise Edition transit router is associated with a prefix list.

CreateTransitRouterRouteEntry

A route is added to a route table of an Enterprise Edition transit router.

CreateTransitRouterRouteTable

A custom route table is created for an Enterprise Edition transit router.

CreateTransitRouterVbrAttachment

A virtual border router (VBR) connection is created on an Enterprise Edition transit router.

CreateTransitRouterVpcAttachment

A VPC connection is created on an Enterprise Edition transit router.

CreateTransitRouterVpnAttachment

A VPN connection is created on an Enterprise Edition transit router.

DeactiveFlowLog

A flow log is disabled.

DeleteCen

A CEN instance is deleted.

DeleteCenBandwidthPackage

A bandwidth plan is deleted.

DeleteCenChildInstanceRouteEntryToAttachment

A route is removed from a network instance that is attached to an Enterprise Edition transit router.

DeleteCenChildInstanceRouteEntryToCen

A route is removed from a network instance that is attached to a CEN instance.

DeleteCenInterRegionTrafficQosPolicy

A QoS policy is deleted.

DeleteCenInterRegionTrafficQosQueue

A queue is deleted from a QoS policy.

DeleteCenRouteMap

A routing policy is deleted.

DeleteFlowlog

A flow log is deleted.

DeleteRouteServiceInCen

A connection to a cloud service is deleted.

DeleteTrafficMarkingPolicy

A traffic marking policy is deleted.

DeleteTransitRouter

A transit router is deleted.

DeleteTransitRouterMulticastDomain

A multicast domain is deleted.

DeleteTransitRouterPeerAttachment

A cross-region connection is deleted from an Enterprise Edition transit router.

DeleteTransitRouterPrefixListAssociation

A route table of an Enterprise Edition transit router is disassociated from a prefix list.

DeleteTransitRouterRouteEntry

A static route is removed from a route table of an Enterprise Edition transit router.

DeleteTransitRouterRouteTable

A custom route table is deleted from an Enterprise Edition transit router.

DeleteTransitRouterVbrAttachment

A VBR connection is deleted from an Enterprise Edition transit router.

DeleteTransitRouterVpcAttachment

A VPC connection is deleted from an Enterprise Edition transit router.

DeleteTransitRouterVpnAttachment

A VPN connection is deleted from an Enterprise Edition transit router.

DeregisterTransitRouterMulticastGroupMembers

Multicast members are removed from a multicast group.

DeregisterTransitRouterMulticastGroupSources

A multicast source is deleted.

DescribeCenAttachedChildInstanceAttribute

The information about a network instance that is attached to a CEN instance is queried. The network instance may be a VPC, VBR, or Cloud Connect Network (CCN) instance.

DescribeCenAttachedChildInstanceRegions

The region in which a network instance that is attached to a CEN instance resides is queried.

DescribeCenAttachedChildInstances

The network instances that are attached to a CEN instance are queried.

DescribeCenBandwidthPackages

The details of bandwidth plans within your Alibaba Cloud account are queried.

DescribeCenBondVbrs

VBRs are queried.

DescribeCenChildInstanceRouteEntries

The routes of a network instance that is attached to a CEN instance are queried.

DescribeCenGeographicSpanRemainingBandwidth

The unused bandwidth of a bandwidth plan is queried.

DescribeCenGeographicSpans

The areas that are supported by CEN are queried.

DescribeCenInterRegionBandwidthLimits

The bandwidth limits of cross-region connections are queried.

DescribeCenPrivateZoneRoutes

The connections to Alibaba Cloud DNS PrivateZone are queried.

DescribeCenRegionDomainRouteEntries

The routes of a CEN instance in a region are queried.

DescribeCenRouteMaps

Routing policies are queried.

DescribeCens

The details of all CEN instances within your Alibaba Cloud account are queried.

DescribeCenVbrHealthCheck

The health check configurations of VBRs in a region are queried.

DescribeCenVpcFlowStatisticSwitch

The traffic statistics feature is enabled for a VPC that is attached to a CEN instance.

DescribeChildInstanceRegions

The regions in which network instances that can be attached to a CEN instance reside are queried.

DescribeFlowlogs

Flow logs are queried.

DescribeGeographicRegionMembership

All regions in an area are queried.

DescribeGrantRulesToCen

The network instances of other Alibaba Cloud accounts that have granted access permissions to a CEN instance are queried.

DescribePublishedRouteEntries

The network instances that have been attached to a CEN instance are queried.

DescribeRouteConflict

Overlapping routes on a network instance are queried.

DescribeRouteServicesInCen

The connections to a cloud service are queried.

DescribeTagKeys

The resources to which tags are added are queried.

DescribeTags

The tags that are added to resources are queried.

DetachCenChildInstance

A network instance is detached from a CEN instance.

DisableCenCrossBorderPackage

A cross-border bandwidth plan is disabled.

DisableCenVbrHealthCheck

The health check feature is disabled for a VBR.

DisableCenVpcFlowStatistic

The traffic statistics feature is disabled for a VPC that is attached to a CEN instance.

DisableTransitRouterRouteTablePropagation

A route learning correlation is deleted.

DisassociateTransitRouterMulticastDomain

A vSwitch in a VPC is disassociated from a multicast domain.

DissociateTransitRouterAttachmentFromRouteTable

An associated forwarding correlation is deleted.

EnableCenChildInstanceIpv6

IPV6 is enabled for a network instance that is attached to a CEN instance.

EnableCenCrossBorderPackage

A cross-border bandwidth plan is enabled.

EnableCenVbrHealthCheck

The health check feature is enabled for a VBR.

EnableCenVpcFlowStatistic

The traffic statistics feature is enabled for a VPC that is attached to a CEN instance.

EnableTransitRouterRouteTablePropagation

A route learning correlation is created.

GetTransitRouterUpgradeApplicationDetail

The details of an application to upgrade an Enterprise Edition transit router are queried.

GrantInstanceToTransitRouter

The permissions to connect to a network instance that belongs to another Alibaba Cloud account are granted to a transit router.

ListCenBandwidthPackageAllocationSummary

The details of bandwidth plan allocation of a CEN instance are queried.

ListCenCrossBorderPackageForCompliance

The cross-border bandwidth plans of a CEN instance are queried.

ListCenCrossBorderPackageForComplianceCheck

The cross-border bandwidth plans that require approval are queried.

ListCenCrossBorderPackageUsageDetail

The details of cross-border bandwidth plans of a CEN instance are queried.

ListCenInterRegionTrafficQosPolicies

The information about QoS policies is queried.

ListDataTransferBandwidthLimit

The bandwidth limits of data forwarding are queried.

ListGrantVSwitchEnis

The elastic network interfaces (ENIs) that can be used as multicast sources or members in a VPC are queried.

ListGrantVSwitchesToCen

The vSwitches in a VPC that belongs to another Alibaba Cloud account and is attached to a CEN instance are queried.

ListSupportTransitRegions

The regions that support Enterprise Edition transit routers are queried.

ListTagResources

The tags that are added to a CEN instance are queried.

ListTrafficMarkingPolicies

The information about a traffic marking policy is queried.

ListTransitRegionBandwidthLimits

The bandwidth limits of a transit router between two regions are queried.

ListTransitRouterAttachments

The information about connections on a transit router is queried.

ListTransitRouterAttachmentsForUpgrade

The information about connections on a transit router is queried.

ListTransitRouterAttachmentSummary

The number of connections of different types on an Enterprise Edition transit router is queried.

ListTransitRouterAvailableResource

The zones that support Enterprise Edition transit routers in a region are queried.

ListTransitRouterMulticastDomainAssociations

Whether vSwitches in VPCs are associated with a multicast domain is queried.

ListTransitRouterMulticastDomains

The information about multicast domains on a transit router is queried.

ListTransitRouterMulticastDomainVSwitches

The vSwitches that are associated with multicast domains in a VPC are queried.

ListTransitRouterMulticastGroups

The multicast sources and members in a multicast domain are queried.

ListTransitRouterPeerAttachments

The cross-region connections on an Enterprise Edition transit router are queried.

ListTransitRouterPrefixListAssociation

The prefix list that is associated with an Enterprise Edition transit router is queried.

ListTransitRouterRouteEntries

The routes in a route table of an Enterprise Edition transit router are queried.

ListTransitRouterRouteTableAssociations

The associated forwarding correlations of a route table of an Enterprise Edition transit router are queried.

ListTransitRouterRouteTablePropagations

The route learning correlations of an Enterprise Edition transit router are queried.

ListTransitRouterRouteTables

The route tables of an Enterprise Edition transit router are queried.

ListTransitRouters

The information about transit routers that are connected to a CEN instance is queried.

ListTransitRouterVbrAttachments

The information about VBR connections on an Enterprise Edition transit router is queried.

ListTransitRouterVpcAttachments

The information about VPC connections on an Enterprise Edition transit router is queried.

ListTransitRouterVpnAttachments

The information about VPN connections on an Enterprise Edition transit router is queried.

ListVpcRelatedTransitRouterAttachments

The details of VPC connections on a transit router are queried.

Modify

The specifications of a CEN instance or a bandwidth plan are modified on the buy page.

ModifyCenAttribute

The name and description of a CEN instance are modified.

ModifyCenBandwidthPackageAttribute

The name and description of a bandwidth plan are modified.

ModifyCenBandwidthPackageSpec

The bandwidth value of a bandwidth plan is modified.

ModifyCenRouteMap

A routing policy of a CEN instance is modified.

ModifyCenUserQuota

The quota of a CEN instance is modified.

ModifyFlowLogAttribute

The name and description of a flow log are modified.

MoveResourceGroup

The resource group to which a CEN instance or a bandwidth plan belongs is changed.

OpenTransitRouterService

The transit router feature is activated.

PublishRouteEntries

The routes of a VPC or a VBR are advertised to a CEN instance to which the VPC or VBR is attached.

RegisterTransitRouterMulticastGroupMembers

Multicast members are added to a multicast group.

RegisterTransitRouterMulticastGroupSources

A multicast source is created.

Release

A resource such as a CEN instance is released.

RemoveTraficMatchRuleFromTrafficMarkingPolicy

A traffic classification rule is removed from a traffic marking policy.

Renew

An instance or a resource plan is renewed.

ReplaceTransitRouterRouteTableAssociation

A network instance connection is associated with another route table of a transit router.

ResolveAndRouteServiceInCen

A connection to a cloud service is created.

RevokeInstanceFromTransitRouter

The permissions to connect to network instances that belong to another Alibaba Cloud account are revoked from a transit router.

RoutePrivateZoneInCenToVpc

A connection to Alibaba Cloud DNS PrivateZone is created.

SetCenInterRegionBandwidthLimit

The maximum bandwidth value of a cross-region connection is set in a bandwidth plan.

SubmitTransitRouterUpgradeApplication

An application to upgrade an Enterprise Edition transit router is submitted.

TagResources

Tags are created and added to specified instances.

TempUpgradeCenBandwidthPackageSpec

A temporary upgrade is performed for a subscription bandwidth plan of a CEN instance.

UnassociateCenBandwidthPackage

A bandwidth plan is disassociated from a CEN instance.

UnroutePrivateZoneInCenToVpc

A connection to Alibaba Cloud DNS PrivateZone is deleted.

UntagResources

Tags are removed from specified resources.

UpdateCenInterRegionTrafficQosPolicyAttribute

The name and description of a QoS policy are modified.

UpdateCenInterRegionTrafficQosQueueAttribute

A queue in a QoS policy is modified.

UpdateTrafficMarkingPolicyAttribute

The name and description of a traffic marking policy are modified.

UpdateTransitRouter

The name and description of a transit router are modified.

UpdateTransitRouterCcnAttachmentTransitRegion

The bandwidth multiplexing configuration of a CCN instance of a transit router is modified.

UpdateTransitRouterPeerAttachmentAttribute

The configuration of a cross-region connection on an Enterprise Edition transit router is modified.

UpdateTransitRouterRouteEntry

The name and description of a route in a route table of an Enterprise Edition transit router are modified.

UpdateTransitRouterRouteTable

The name and description of a route table that belongs to an Enterprise Edition transit router are modified.

UpdateTransitRouterVbrAttachmentAttribute

The name and description of a VBR connection on an Enterprise Edition transit router are modified.

UpdateTransitRouterVpcAttachmentAttribute

The name and description of a VPC connection on an Enterprise Edition transit router are modified.

UpdateTransitRouterVpcAttachmentZones

The zones and vSwitches of a VPC connection are modified.

UpdateTransitRouterVpnAttachmentAttribute

The configurations of a VPN connection on a transit router are modified.

UpgradeTransitRouter

An Enterprise Edition transit router is upgraded.

VerifyCenCrossBorderPackageForCompliance

A cross-border bandwidth plan is approved.

WithdrawPublishedRouteEntries

The routes of a VPC that are advertised to a CEN instance are withdrawn.