The Inner-ActionTrail feature records and monitors the activities of the Alibaba Cloud O&M team that manages and maintains cloud services, including system maintenance, service upgrade, and configuration change activities. This topic describes how to enable the Inner-ActionTrail feature.
Prerequisites
The permissions to use the Inner-ActionTrail feature are obtained. To obtain the permissions, submit a ticket or ask your sales manager to add you to the whitelist of users who can use the Inner-ActionTrail feature.
The AliyunActionTrailDefaultRole role is created for ActionTrail. The role allows ActionTrail to deliver events to Simple Log Service.
You can go to the Cloud Resource Access Authorization page and follow the on-screen instructions to complete the authorization.
NoteThe first time you configure ActionTrail, authorization is required. You must complete the authorization by using your Alibaba Cloud account.
If you use a RAM user to log on to ActionTrail, you must grant the required permissions to the RAM user. For more information, see Common operations on logs of Alibaba Cloud services.
Procedure
Log on to the ActionTrail console.
In the left-side navigation pane, choose to view information about the Inner-ActionTrail feature.
NoteInner-ActionTrail appears only after you obtain the permissions to use the Inner-ActionTrail feature.
After the Inner-ActionTrail feature is enabled, a Logstore whose name is in the
innertrail_Trail nameformat is created.
What to do next
You can create a trail to deliver Alibaba Cloud-initiated events to Simple Log Service to store and analyze the events. For more information, see Common operations on logs of Alibaba Cloud services.
References
You can collect, store, and analyze Alibaba Cloud-initiated logs in the Simple Log Service console. For more information, see Enable the inner-ActionTrail feature.