All Products
Search
Document Center

Cloud Config:GetAggregateResourceConfigurationTimeline

Last Updated:Jun 17, 2024

Queries the configuration timeline of a resource in an account group.

Operation description

The sample request in this topic shows you how to query the configuration timeline of the new-bucket resource that resides in the cn-hangzhou region within the 100931896542**** member account of the ca-5885626622af0008**** account group. The new-bucket resource is an Object Storage Service (OSS) bucket. The return result shows that the timestamp when the resource configuration changes is 1624961112000. The timestamp indicates 18:05:12 on June 29, 2021 (UTC+8).

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
config:GetAggregateResourceConfigurationTimelineList
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
ResourceIdstringYes

The resource ID.

For more information about how to query the ID of a resource, see ListAggregateDiscoveredResources .

new-bucket
StartTimelongNo

The beginning of the time range to query. By default, Cloud Config retrieves the configuration changes in the last 30 days for the specified resource. Unit: milliseconds.

1623211156000
EndTimelongNo

The end of the time range to query. The default value indicates the time when the GetAggregateResourceConfigurationTimeline operation is called. Unit: milliseconds.

1625821156000
MaxResultsintegerNo

The maximum number of entries to return for a single request. Valid values: 1 to 100.

10
ResourceTypestringYes

The type of the resource.

For more information about how to obtain the type of a resource, see ListAggregateDiscoveredResources .

ACS::OSS::Bucket
RegionstringYes

The ID of the region in which the resource resides.

For more information about how to obtain the ID of a region, see ListAggregateDiscoveredResources .

cn-hangzhou
AggregatorIdstringYes

The ID of the account group.

For more information about how to obtain the ID of an account group, see ListAggregators .

ca-5885626622af0008****
NextTokenstringNo

The token that is used to initiate the next request if the response of the current request is truncated. You can use the token to initiate another request and obtain the remaining records.

IWBjqMYSy0is7zSMGu16****
ResourceAccountIdlongNo

The ID of the Alibaba Cloud account to which the resource in the account group belongs.

100931896542****

For more information about common request parameters, see API Reference.

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The request ID.

ED9CD1B3-286C-4E05-A765-5E1E0B9BC2AB
ResourceConfigurationTimelineobject

The configuration timeline of the resource.

NextTokenstring

The token that is used to initiate the next request.

IWBjqMYSy0is7zSMGu16****
MaxResultsinteger

The maximum number of entries returned for a single request.

10
ConfigurationListobject []

The resource name.

Tagsstring

The tags of the resource.

{\"\"hc\"\":[\"\"value2\"\"]}
AccountIdlong

The ID of the Alibaba Cloud account to which the resource belongs.

100931896542****
ResourceEventTypestring

The type of the resource change event involved. Valid values:

  • DISCOVERED: A resource is created.
  • DISCOVERED_REVISED: A resource is created by periodic remediation tasks.
  • MODIFY: A resource is modified.
  • MODIFY_REVISED: A resource is modified by periodic remediation tasks.
  • REMOVE: A resource is deleted.
Note
  • To ensure the integrity of resources, periodic remediation tasks are run to check data and generate events that indicate the creation of new resources. Such events are infrequent.
  • The time when a resource change event is generated by a periodic remediation task is considered as the detection time of Cloud Config. The detection time is later than the time when the resource is modified.
DISCOVERED
AvailabilityZonestring

The ID of the zone in which the resource resides.

cn-hangzhou-h
ResourceTypestring

The type of the resource.

ACS::OSS::Bucket
ResourceCreateTimestring

The timestamp when the resource was created. Unit: milliseconds.

1624961112000
Regionstring

The ID of the region in which the resource resides.

cn-hangzhou
CaptureTimestring

The timestamp when the resource change snapshot was recorded. Unit: milliseconds.

1624961156000
ConfigurationDiffstring

The details of the resource change that triggered the compliance evaluation.

{\"AccessControlList\":[null,{\"Grant\":\"private\"}],\"ServerSideEncryptionRule\":[null,{\"SSEAlgorithm\":\"None\"}],\"CreationDate\":[null,\"2021-06-29T10:05:12.000Z\"],\"Owner\":[null,{\"DisplayName\":\"100931896542****\",\"ID\":\"100931896542****\"}],\"BucketPolicy\":[null,{\"LogPrefix\":\"\",\"LogBucket\":\"\"}],\"StorageClass\":[null,\"Standard\"],\"ExtranetEndpoint\":[null,\"oss-cn-hangzhou.aliyuncs.com\"],\"DataRedundancyType\":[null,\"LRS\"],\"AllowEmptyReferer\":[null,\"true\"],\"IntranetEndpoint\":[null,\"oss-cn-hangzhou-internal.aliyuncs.com\"],\"Name\":[null,\"new-bucket\"],\"Location\":[null,\"oss-cn-hangzhou\"]}
ResourceIdstring

The ID of the resource.

new-bucket
ResourceNamestring

The name of the resource.

new-bucket

Examples

Sample success responses

JSONformat

{
  "RequestId": "ED9CD1B3-286C-4E05-A765-5E1E0B9BC2AB",
  "ResourceConfigurationTimeline": {
    "NextToken": "IWBjqMYSy0is7zSMGu16****",
    "MaxResults": 10,
    "ConfigurationList": [
      {
        "Tags": "{\\\"\\\"hc\\\"\\\":[\\\"\\\"value2\\\"\\\"]}",
        "AccountId": 0,
        "ResourceEventType": "DISCOVERED",
        "AvailabilityZone": "cn-hangzhou-h",
        "ResourceType": "ACS::OSS::Bucket",
        "ResourceCreateTime": "1624961112000",
        "Region": "cn-hangzhou",
        "CaptureTime": "1624961156000",
        "ConfigurationDiff": "{\\\"AccessControlList\\\":[null,{\\\"Grant\\\":\\\"private\\\"}],\\\"ServerSideEncryptionRule\\\":[null,{\\\"SSEAlgorithm\\\":\\\"None\\\"}],\\\"CreationDate\\\":[null,\\\"2021-06-29T10:05:12.000Z\\\"],\\\"Owner\\\":[null,{\\\"DisplayName\\\":\\\"100931896542****\\\",\\\"ID\\\":\\\"100931896542****\\\"}],\\\"BucketPolicy\\\":[null,{\\\"LogPrefix\\\":\\\"\\\",\\\"LogBucket\\\":\\\"\\\"}],\\\"StorageClass\\\":[null,\\\"Standard\\\"],\\\"ExtranetEndpoint\\\":[null,\\\"oss-cn-hangzhou.aliyuncs.com\\\"],\\\"DataRedundancyType\\\":[null,\\\"LRS\\\"],\\\"AllowEmptyReferer\\\":[null,\\\"true\\\"],\\\"IntranetEndpoint\\\":[null,\\\"oss-cn-hangzhou-internal.aliyuncs.com\\\"],\\\"Name\\\":[null,\\\"new-bucket\\\"],\\\"Location\\\":[null,\\\"oss-cn-hangzhou\\\"]}",
        "ResourceId": "new-bucket",
        "ResourceName": "new-bucket"
      }
    ]
  }
}

Error codes

HTTP status codeError codeError messageDescription
400NoPermissionYou are not authorized to perform this operation.You are not authorized to perform this operation.
400Invalid.AggregatorId.ValueThe specified AggregatorId is invalid.The specified aggregator ID does not exist or you are not authorized to use the aggregator.
400Invalid.ResourceOwnerId.ValueThe specified ResourceOwnerId is invalid.The specified ResourceOwnerId is invalid.
404AccountNotExistedYour account does not exist.The specified account does not exist.
503ServiceUnavailableThe request has failed due to a temporary failure of the server.The request has failed due to a temporary failure of the server.

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2023-04-12The Error code has changed. The request parameters of the API has changedsee changesets
Change itemChange content
Error CodesThe Error code has changed.
    delete Error Codes: 400
    delete Error Codes: 404
    delete Error Codes: 503
Input ParametersThe request parameters of the API has changed.
    Added Input Parameters: ResourceAccountId