ActionTrail records the events that are related to Alibaba Cloud CDN (CDN). You can query the details of an event to obtain information such as the time when the event occurred, the region where the event occurred, and the domain name involved. This topic provides the logs of four sample CDN-related events and describes the key fields included in the event logs.

Add a domain name for CDN in the CDN console by using an Alibaba Cloud account

The following sample event log indicates that an Alibaba Cloud account added the example.com domain name for CDN in the CDN console at 14:10:01 on August 05, 2021, UTC+8. 

{
  "eventId": "3F44719F-9858-5016-AC54-794BBEE449C3",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3"
  },
  "eventSource": "cdn-share.aliyuncs.com",
  "requestParameters": {
    "charset": "UTF-8",
    "AcsHost": "cdn-share.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3",
    "ResourceGroupId": "rg-acfmxl27ech****",
    "Scope": "domestic",
    "DomainName": "example.com",
    "AcceptLanguage": "zh-CN",
    "CdnType": "web",
    "HostId": "cdn-share.aliyuncs.com",
    "Sources": [
      {
        "Type": "oss",
        "Content": "hao-nan.oss-cn-shanghai.aliyuncs.com",
        "Priority": "20",
        "Port": 80,
        "index": 0,
        "Weight": "10"
      }
    ]
  },
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "cdnnext.console.aliyun.com",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "cdns.example.com"
    ]
  },
  "userIdentity": {
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-05T06:10:01Z"
      }
    },
    "accountId": "128022060925****",
    "principalId": "128022060925****",
    "type": "root-account",
    "userName": "root"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "3F44719F-9858-5016-AC54-794BBEE449C3",
  "eventTime": "2021-08-05T06:10:01Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

The sample event log contains the following key fields:

  • userIdentity.type: the identity type of the requester. The value in the example is root-account, which indicates an Alibaba Cloud account.
  • serviceName: the name of the Alibaba Cloud service related to the event. The value in the example is Cdn, which indicates CDN.
  • eventName: the name of the event. The value in the example is AddCdnDomain, which indicates that a domain name for CDN was added.
  • referencedResources: the one or more resources that are related to the event. The value in the example is {"ACS::CDN::Domain": ["example.com"}, which indicates the example.com domain name.
  • eventTime: the time when the event occurred in UTC. The value in the example is 2021-08-05T06:10:01Z, which indicates 14:10:01 on August 05, 2021, UTC+8.

Add a domain name for CDN in the CDN console as a RAM user

The following sample event log indicates that the RAM user whose username is dev added the example.com domain name for CDN in the CDN console at 13:54:39 on August 05, 2021, UTC+8. 

{
  "eventId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  },
  "eventSource": "cdn-share.aliyuncs.com",
  "requestParameters": {
    "charset": "UTF-8",
    "AcsHost": "cdn-share.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
    "Scope": "domestic",
    "DomainName": "example.com",
    "AcceptLanguage": "zh-CN",
    "CdnType": "web",
    "HostId": "cdn-share.aliyuncs.com",
    "Sources": [
      {
        "Type": "oss",
        "Content": "lxhy-h5-****.oss-cn-chengdu.aliyuncs.com",
        "Priority": "20",
        "Port": 80,
        "index": 0,
        "Weight": "10"
      }
    ]
  },
  "errorCode": "DomainAlreadyExist",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "cdn.console.aliyun.com",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-05T05:54:39Z"
      }
    },
    "accountId": "159702607145****",
    "principalId": "24749552624582****",
    "type": "ram-user",
    "userName": "dev"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E",
  "eventTime": "2021-08-05T05:54:39Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

The sample event log contains the following key fields:

  • userIdentity.type: the identity type of the requester. The value in the example is ram-user, which indicates a RAM user.
  • userIdentity.userName: the username of the RAM user.
  • serviceName: the name of the Alibaba Cloud service related to the event. The value in the example is Cdn, which indicates CDN.
  • eventName: the name of the event. The value in the example is AddCdnDomain, which indicates that a domain name for CDN was added.
  • referencedResources: the one or more resources that are related to the event. The value in the example is {"ACS::CDN::Domain": ["example.com"}, which indicates the example.com domain name.
  • eventTime: the time when the event occurred in UTC. The value in the example is 2021-08-05T05:54:39Z, which indicates 13:54:39 on August 05, 2021, UTC+8.

Add a domain name for CDN by calling the AddCdnDomain operation as a RAM user with an AccessKey pair used

The following sample event log indicates that the RAM user whose username is Alice added the example.com domain name for CDN by calling the AddCdnDomain operation at 19:07:28 on August 04, 2021, UTC+8. The RAM user used the AccessKey pair whose ID is LTAI4GHbFgwYxAHRqcsr**** to initiate the API call. 

{
  "eventId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
    "Message": "Owner verification of the root domain failed.",
    "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw",
    "HostId": "cdn.aliyuncs.com",
    "Code": "DomainOwnerVerifyFail"
  },
  "errorMessage": "Owner verification of the root domain failed.",
  "eventSource": "cdn.aliyuncs.com",
  "requestParameters": {
    "q": 0.9,
    "AcsHost": "cdn.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
    "DomainName": "example.com",
    "v": "b3",
    "CdnType": "web",
    "HostId": "cdn.aliyuncs.com",
    "Sources": [
      {
        "type": "domain",
        "content": "aliyundoc.com"
      }
    ]
  },
  "errorCode": "DomainOwnerVerifyFail",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "accessKeyId": "LTAI4GHbFgwYxAHRqcsr****",
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-08-04T11:06:44Z"
      }
    },
    "accountId": "166878994059****",
    "principalId": "20223100810693****",
    "type": "ram-user",
    "userName": "Alice"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "https",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176",
  "eventTime": "2021-08-04T11:07:28Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

The sample event log contains the following key fields:

  • userIdentity.accessKeyId: the AccessKey ID that is used to initiate the API call. The value in the example is LTAI4GHbFgwYxAHRqcsr****.
  • userIdentity.principalId: the ID of the account to which the AccessKey pair belongs. The value in the example is 20223100810693****.
  • userIdentity.type: the identity type of the requester. The value in the example is ram-user, which indicates a RAM user.
  • serviceName: the name of the Alibaba Cloud service related to the event. The value in the example is Cdn, which indicates CDN.
  • eventName: the name of the event. The value in the example is AddCdnDomain, which indicates that a domain name for CDN was added.
  • referencedResources: the one or more resources that are related to the event. The value in the example is {"ACS::CDN::Domain": ["example.com"}, which indicates the example.com domain name.
  • eventTime: the time when the event occurred in UTC. The value in the example is 2021-08-04T11:07:28Z, which indicates 19:07:28 on August 04, 2021, UTC+8.

Add a domain name for CDN by assuming a RAM role as a RAM user

The following sample event log indicates that a RAM user of the Alibaba Cloud account whose ID is 111526800165**** added the example.com domain name for CDN at 14:15:46 on August 02, 2021, UTC+8. The RAM user assumed the RAM role whose name is aliyunid-ag-ram-role-admin of the Alibaba Cloud account whose ID is 147048327155**** to add the domain name. 

{
  "eventId": "79229ED7-C2B6-45C5-B665-23AF88783660",
  "eventVersion": 1,
  "responseElements": {
    "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
    "Message": "Owner verification of the root domain failed.",
    "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw",
    "HostId": "cdn.aliyuncs.com",
    "Code": "DomainOwnerVerifyFail"
  },
  "errorMessage": "Owner verification of the root domain failed.",
  "eventSource": "cdn.aliyuncs.com",
  "requestParameters": {
    "stsTokenPrincipalName": "aliyunid-ag-ram-role-admin/BASEMENT",
    "AcsHost": "cdn.aliyuncs.com",
    "AcsProduct": "Cdn",
    "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
    "DomainName": "example.com",
    "CdnType": "web",
    "RegionId": "cn-zhangjiakou",
    "HostId": "cdn.aliyuncs.com",
    "stsTokenPlayerUid": 111526800165****,
    "Sources": [
      {
        "port": 443,
        "type": "domain",
        "content": "aliyundoc.com"
      }
    ]
  },
  "errorCode": "DomainOwnerVerifyFail",
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "AlibabaCloud (Linux; amd64) Java/1.8.0_252-b09 Core/4.5.19 HTTPClient/ApacheHttpClient",
  "eventType": "ApiCall",
  "referencedResources": {
    "ACS::CDN::Domain": [
      "example.com"
    ]
  },
  "userIdentity": {
    "accessKeyId": "STS.NSrwtDuh5hbwR1gtWwZhS****",
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2021-07-25T02:40:34Z"
      }
    },
    "accountId": "147048327155****",
    "principalId": "30304522804117****:BASEMENT",
    "type": "assumed-role",
    "userName": "aliyunid-ag-ram-role-admin:BASEMENT"
  },
  "serviceName": "Cdn",
  "additionalEventData": {
    "Scheme": "http",
    "CallerBid": "26842"
  },
  "apiVersion": "2018-05-10",
  "requestId": "79229ED7-C2B6-45C5-B665-23AF88783660",
  "eventTime": "2021-08-02T06:15:46Z",
  "isGlobal": true,
  "acsRegion": "cn-shanghai",
  "eventName": "AddCdnDomain"
}

The sample event log contains the following key fields:

  • userIdentity.type: the identity type of the requester. The value in the example is assumed-role, which indicates a RAM role.
  • userIdentity.userName: the username of the requester. The value is in the format of {roleName}:{sessionName}. roleName indicates the name of the RAM role that was assumed. sessionName indicates the name that was specified when the RAM user assumed the RAM role. The value in the example is aliyunid-ag-ram-role-admin:BASEMENT, which indicates that the name of the RAM role that was assumed is aliyunid-ag-ram-role-admin, and the name that was specified when the RAM user assumed the RAM role is BASEMENT.
  • requestParameters.stsTokenPlayerUid: the ID of the Alibaba Cloud account to which the RAM user belongs. The value in the example is 111526800165****.
  • referencedResources: the one or more resources that are related to the event. The value in the example is {"ACS::CDN::Domain": ["example.com"}, which indicates the example.com domain name.
  • serviceName: the name of the Alibaba Cloud service related to the event. The value in the example is Cdn, which indicates CDN.
  • eventName: the name of the event. The value in the example is AddCdnDomain, which indicates that a domain name for CDN was added.
  • eventTime: the time when the event occurred in UTC. The value in the example is 2021-08-02T06:15:46Z, which indicates 14:15:46 on August 02, 2021, UTC+8.