You can deliver scheduled resource snapshots and resource change logs to an Object Storage Service (OSS) bucket. After resource data is delivered to the specified bucket, you can view and download the JSON files that contain the delivered data.
Prerequisites
OSS is activated. For more information, see Activate OSS.
You are not charged for activating OSS. You are charged when Cloud Config delivers resource data to an OSS bucket. For more information, see Billing overview.
Background information
If you do not want to incur fees for an OSS bucket, you can delete the OSS bucket in the OSS console. After you delete the OSS bucket, the delivery task in Cloud Config becomes invalid and the resource data is no longer delivered. For more information, see Delete buckets.
To achieve a balance between storage costs and scenario-specific requirements, we recommend that you select Standard (default storage class) for the Storage Class parameter when you create an OSS bucket. If you need to store only data that is infrequently accessed (once or twice each month) for a long period of time, we recommend that you select IA for the Storage Class parameter when you create an OSS bucket. For more information, see Create a bucket.
Procedure
Log on to the Cloud Config console.
Optional. In the upper-left corner, select an account group.
This operation is required only if you are using a management account of a resource directory. Otherwise, you do not need to perform the operation.
In the left-side navigation pane, click
.On the Deliveries page, click Create Delivery in the upper-left corner.
On the Create Delivery page, set the Delivery Name parameter, select Object Storage Service from the Channel Type drop-down list, and then set the parameters of OSS.
The following table describes the parameters for resource data delivery.
Parameter
Description
Content
The type of the resource data that you want to deliver to the OSS bucket. Valid values:
Historical Configuration Changes: resource change logs. When the configuration of a resource changes, Cloud Config delivers the resource change log to the OSS bucket.
Scheduled Snapshots: scheduled resource snapshots. Cloud Config delivers resource snapshots to the OSS bucket at 00:00:00 and 12:00:00 every day.
NoteIf you specify Daily Delivery Time, Cloud Config delivers resource data based on the specified time.
Bucket Source
The source of the OSS bucket. Valid values:
Create a bucket in the account: In the Cloud Config console, select a region, create an OSS bucket, and then configure log file encryption. The bucket name must be unique.
Select an existing bucket from the account: Select a region and an existing OSS bucket.
Select an existing bucket from other enterprise management accounts or delegated accounts: Specify the Alibaba Cloud Resource Name (ARN) of the OSS bucket in the destination account. The ARN contains the following information: region, member account, and bucket name.
You can deliver the resource data of your account and all member accounts in the resource directory to an OSS bucket of a specific member account. You can use only management accounts to configure the delivery settings of resource data. Member accounts do not have the permissions to configure the settings.
NoteIf a delegated administrator account is configured by using a management account, the administrator account can be used to configure resource data delivery. For more information, see Add a delegated administrator account.
Events Of Specified Resource Type
The resource type of the data that you want to deliver. For more information about the resource types supported by Cloud Config, see Alibaba Cloud services and resource types supported by Cloud Config.
Daily Delivery Time
The time when Cloud Config delivers scheduled resource snapshots every day.
NoteIf you do not specify this parameter, Cloud Config delivers resource snapshots to the OSS bucket at 00:00:00 and 12:00:00 every day.
Click OK.
(Optional) In the Confirm Operation dialog box, click OK.
This operation is required only if you are using a management account of a resource directory. Otherwise, you do not need to perform the operation.
NoteThe newly created delivery task takes effect only on all member accounts in the account group.
What to do next
View the delivery result of resource data and download the JSON file that contains the delivered data.
On the Deliveries page, click the newly created delivery ID.
In the Extended Information section, click the name of the bucket.
You are redirected to the destination bucket page in the OSS console.
In the left-side navigation pane, choose
.View or download the JSON file in the resource data path /ACSLogs/AccountId/Config/RegionId/yyyy/mm/dd/. For more information about the example files in the JSON format, see Example of scheduled resource snapshots and Examples of resource change logs.