:ECS events

Event types

The following table describes the types of ECS events that can be published to EventBridge.

For more information about the parameters defined in the CloudEvents specification, see Overview.

A disk is retained

The following example shows the event that EventBridge receives when an ECS is released but the cloud disk attached to it is retained as a pay-as-you-go data disk:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ConvertToPostpaidCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "diskName": "e2e-ecs-xxxxxxxx",
        "diskId": "d-gx3hn2vc0fxxxxxxxx"
    }
}

The following table describes the parameters contained in data.

A data disk is attached or detached

The following example shows the event that EventBridge receives when a data disk is attached to or detached from an ECS instance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:DiskOperationCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "operation": "AttachDisk",
        "diskId": "d-gx3hn2vc0fuxxxxxxxx"
    }
}

The following table describes the parameters contained in data.

An EBS device is released due to overdue payments

The following example shows the event that EventBridge receives when an Elastic Block Storage (EBS) device is released due to overdue payments:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "result":"accomplished",
        "instanceId":"i-wz9e60ytsp3lspww****",
        "diskId":"d-wz9ad6x3sistd7fh****"
    },
    "subject":"acs:ecs:cn-shenzhen-st3-a01:123456789098****:disk/d-wz9ad6x3sistd7fh****",
    "source":"acs.ecs",
    "type":"ecs:Disk:OverduePaymentRelease",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

The performance of a burstable instance is restricted

The following example shows the event that EventBridge receives when the performance of a burstable instance is restricted:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "intervalEnd":"2021-01-18T05:00Z",
        "intervalStart":"2021-01-18T04:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:BurstablePerformanceRestricted",
    "aliyunpublishtime":"2021-01-18T04:06:45.441Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"be468204-6cac-4088-9e57-6455d749****",
    "time":"2021-01-18T12:06:45.238Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

An ECS instance is hot migrated between dedicated hosts

The following example shows the event that EventBridge receives when an ECS instance is hot migrated between dedicated hosts:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "sourceDedicatedHostId":"dh-2ze3lma1c2-3e343****",
        "destinationDedicatedHostId":"dh-2ze3lm********t8nr83",
        "startTime":"2018-06-08T01:25:37Z",
        "status":"started"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:LiveMigrationAcrossDDH",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

The performance mode of a burstable instance is changed

The following example shows the event that EventBridge receives when the performance mode of a burstable instance is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PerformanceModeChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-bp1eojtvpmlraj13****",
        "intervalEnd": "2021-01-18T05:00Z",
        "intervalStart": "2021-01-18T04:00Z"
    }
}

The following table describes the parameters contained in data.

A preemptible instance is released

The following example shows the event that EventBridge receives before a preemptible ECS instance is automatically released due to changed price or insufficient resources:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PreemptibleInstanceInterruption",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "action": "delete",
        "instanceId": "i-bp17j2bvqa9xxxxxxxx"
    }
}

The following table describes the parameters contained in data.

The status of an ECS instance changes

The following example shows the event that EventBrdige receives when the status of an ECS instance changes:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:StateChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceName": "iZ0jl0kyquo46hxxxxxxxx",
        "instanceType": "ecs.c6.large",
        "privateIpAddress": "172.21.48.37",
        "publicIpAddress": "8.xx.49.237",
        "resourceId": "i-0jl0kyquo46xxxxxxxx",
        "resourceType": "ALIYUN::ECS::Instance",
        "spotStrategy": "SpotWithPriceLimit",
        "state": "Running"
    }
}

The following table describes the parameters contained in data.

Additional fees are charged for a burstable instance

The following example shows the event that EventBridge receives when additional fees are charged for a burstable instance:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-abc1792gcdoonr9a****",
        "creditSpecification":"Unlimited",
        "intervalStart":"2019-06-14T00:00:00Z",
        "intervalEnd":"2019-06-14T01:00:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-abc1792gcdoonr9a****",
    "source":"acs.ecs",
    "type":"ecs:Instance:SurplusCreditIncurCharge",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

An ENI is created

The following example shows the event that EventBridge receives when an elastic network interface (ENI) is created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:NetworkInterfaceOperateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eniStatus": "Available",
        "result": "success",
        "eniId": "eni-bp1j9eoibxxxxxxxxxx",
        "operation": "CreateNetworkInterface",
        "requestId": "8D152511-XXXX-18E2-XXXX-8A1219DAD64F.i-bp1ffahxxxxxxxxxx",
        "primaryPrivateIp": "192.168.XX.XX",
        "secondaryPrivateIps": ["192.168.XX.XX","192.168.XX.XX"],
        "ipv4Prefixes": ["192.168.XX.XX/24"],
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCG:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters contained in data.

A snapshot is created

The following example shows the event that EventBridge receives when a snapshot is created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "snapshotId": "s-bp151qed0khxxxxxxxxx",
        "snapshotType": "user",
        "snapshotName": "cust51119970_xxxxxxxx_20211117114015",
        "diskId": "d-bp18dnj7u1xxxxxxxxx",
        "startTime": "2020-11-19T21:02:16Z",
        "endTime": "2020-11-19T21:04:17Z"
    }
}

The following table describes the parameters contained in data.

A snapshot starts to be created

The following example shows the event that EventBridge receives when a snapshot starts to be created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotInitiated",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "cust46638731_xxxxxxxxxxx_20211117114238",
        "diskId": "d-bp13j42n65xxxxxxxxxxx",
        "snapshotId": "s-bp1e4pf8dgxxxxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters contained in data.

A snapshot is deleted

The following example shows the event that EventBridge receives when a snapshot is deleted:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:SnapshotDeleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "Created from i-bp1dl6knxxxxxxxxx",
        "reason": "USER",
        "diskId": "d-bp15e8k1f48xxxxxxxxx",
        "snapshotId": "s-bp197a5b5txxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters contained in data.

An alert about damage to the local disk is generated

The following example shows the event that EventBridge receives when an alert about damage to the local disk is generated:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ErrorDetected",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72z******",
        "ecsInstanceId": "i-t4n8rbpfmzs******",
        "ecsInstanceName": "******-slave",
        "eventId": "e-t4nc86ziq4q6******",
        "eventType": "ErrorDetected",
        "executeFinishTime": "2022-09-02T01:55:41Z",
        "executeStartTime": "2022-09-02T01:55:41Z"
    }
}

The following table describes the parameters contained in data.

Disk performance is severely impaired

The following example shows the event that EventBridge receives when disk performance is severely impaired:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:Stalled",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-2zef8thfnbx*****",
        "ecsInstanceId": "i-2zehp4inhn*****",
        "ecsInstanceName": "iZ2zehp4inhnbvm*****",
        "eventId": "e-2zec86ziq4q6*****",
        "eventType": "Stalled",
        "executeFinishTime": "2022-09-01T13:54:07Z",
        "executeStartTime": "2022-09-01T13:53:07Z"
    }
}

For information about the parameters in data, see the field description table.

An instance is automatically restarted

The following example shows the event that EventBridge receives when an instance is automatically restarted:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:AutoReactivateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-hp339adxge******",
        "result": "failed"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted due to an instance error

The following example shows the event that EventBridge receives when an instance is rebooted due to an instance error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:InstanceFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q*******",
        "eventStatus": "Executed",
        "eventType": "InstanceFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:23:39Z",
        "executeStartTime": "2022-09-01T13:23:39Z",
        "instanceId": "i-bp1gp1t778*******",
        "notBefore": "2022-09-01T13:23:39Z",
        "privateIpAddress":
        [
            "10.11.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T13:23:39Z"
    }
}

For information about the parameters in data, see the field description table.

A TPM security alert is generated

The following example shows the event that EventBridge receives when a Trusted Platform Module (TPM) security alert is generated:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:Security.TpmAlert",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6*****",
        "eventStatus": "Executed",
        "eventType": "Security.TpmAlert",
        "executeFinishTime": "2022-09-02T06:58:32Z",
        "executeStartTime": "2022-09-02T06:58:32Z",
        "instanceId": "i-uf66x7kyzdf0*****",
        "privateIpAddress":
        [
            "172.19.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.103.XX.XX"
        ],
        "publishTime": "2022-09-02T06:58:32Z",
        "reason": "Unauthorized or corrupted component detected in system boot. Component name is pcr9, and the measurement value is 7b888c4f4e28817d743660017*****"
    }
}

The following table describes the parameters contained in data.

An instance is released due to a creation failure

The following example shows the event that EventBridge receives when an instance is released due to a creation failure:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Delete",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp16vh3ff7t2******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Delete",
        "executeFinishTime": "2022-08-09T13:55:08Z",
        "executeStartTime": "2022-08-09T13:54:56Z",
        "instanceId": "i-bp1ez0hvdy5x******",
        "notBefore": "2022-08-09T13:54:56Z",
        "publishTime": "2022-08-09T13:54:56Z",
        "reason": "OperationDenied.NoStock"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted due to a system error

The following example shows the event that EventBridge receives when an instance is rebooted due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:35:40Z",
        "executeStartTime": "2022-09-01T13:34:10Z",
        "instanceId": "i-bp18c3eakhaq******",
        "notBefore": "2022-09-01T13:34:10Z",
        "privateIpAddress":
        [
            "172.28.XX.XX"
        ],
        "publicIpAddress":
        [
            "120.27.XX.XX"
        ],
        "publishTime": "2022-09-01T13:34:10Z"
    }
}

For information about the parameters in data, see the field description table.

An instance is redeployed due to a system error

The following example shows the event that EventBridge receives when an instance is redeployed due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q1d*****",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Redeploy",
        "executeFinishTime": "2022-08-23T09:04:03Z",
        "executeStartTime": "2022-08-23T09:02:49Z",
        "instanceId": "i-bp144npue7n*****",
        "notBefore": "2022-08-23T09:02:49Z",
        "privateIpAddress":
        [
            "172.29.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.97.XX.XX"
        ],
        "publishTime": "2022-08-23T09:02:49Z"
    }

}

For information about the parameters in data, see the field description table.

An instance is stopped due to a system error

The following example shows the event that EventBridge receives when an instance is stopped due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-f8zc86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Stop",
        "executeFinishTime": "2022-09-01T14:07:52Z",
        "executeStartTime": "2022-09-01T14:05:52Z",
        "instanceId": "i-f8z9datgf1m9******",
        "notBefore": "2022-09-01T14:05:52Z",
        "privateIpAddress":
        [
            "11.71.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:05:52Z"
    }
}

For information about the parameters in data, see the field description table.

A damaged local disk is isolated due to system maintenance

The following example shows the event that EventBridge receives when a damaged local disk is isolated due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.IsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72zd*******",
        "eventId": "e-t4nc86ziq4*******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.IsolateErrorDisk",
        "instanceId": "i-t4n8rbpfmzsn*******",
        "privateIpAddress":
        [
            "10.62.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T09:47:26Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

A damaged local disk is reinitialized due to system maintenance

The following example shows the event that EventBridge receives when a damaged local disk is reinitialized due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.ReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdv",
        "diskId": "d-bp15esw9c01fh******",
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.ReInitErrorDisk",
        "instanceId": "i-bp1iwarx7zt1e******",
        "privateIpAddress":
        [
            "10.50.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-02T02:18:29Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance reboot event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance reboot event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2022-09-07T12:31:34Z",
    "type": "ecs:Instance:SystemMaintenance.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2022-09-07T12:31:34Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksaxxxxxxx",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Reboot",
        "instanceId": "i-8vbirq9ijhxxxxxxx",
        "privateIpAddress":
        [
            "192.168.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-07T12:31:34Z",
        "traceInfo": "c1352085-8678-4f23-a7cc-xxxx"
    }
}

The following table describes the parameters contained in data.

An instance is rebooted and a damaged local disk is isolated due to system maintenance

The following example shows the event that EventBridge receives when an instance is rebooted and a damaged local disk is isolated due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndIsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre******",
        "eventId": "e-0jlc86ziq4q******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndIsolateErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted and a damaged local disk is reinitialized due to system maintenance

The following example shows the event that EventBridge receives when an instance is rebooted and a damaged local disk is reinitialized due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre1r******",
        "eventId": "e-0jlc86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndReInitErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance redeployment event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance redeployment event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Redeploy",
        "instanceId": "dh-uf64debetm******",
        "publishTime": "2022-09-01T08:49:23Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure;Critical error detected on hardware components;Disk error"
    }
}

For information about the parameters in data, see the field description table.

An instance stop event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance stop event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksackfxxxxxxx",
        "eventStatus": "Avoided",
        "eventType": "SystemMaintenance.Stop",
        "executeFinishTime": "2022-09-01T15:36:58Z",
        "instanceId": "i-uf62dv6w1oapxxxxxxx",
        "notBefore": "2022-04-02T02:07:59Z",
        "privateIpAddress":
        [
            "10.15.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-03-30T02:07:59Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

A vSwitch is changed

The following example shows the event that EventBridge receives when a vSwitch is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:VSwitchChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "instanceId":"i-8vb1qo****cdeg2n",
        "vswitchId":"vsw-bp1s5fnvk4gn3tw12****",
        "privateIpAddress":"172.17.XX.XX",
        "vpcId":"vpc-bp1vwnn14rqpyiczj****",
        "secondaryPrivateIps": ["172.17.XX.XX"]
    }
}

The following table describes the parameters contained in data.

A private IP address is assigned

This type of event occurs when a secondary private IPv4 address is assigned to a primary ENI, or when a primary private IPv4 address or a secondary private IPv4 address is assigned to a secondary ENI.

If you create a private IP address for an ENI, the operation is displayed in An ENI is created.

If you change the private IP address of an ENI in the following scenarios, the operation is displayed in A vSwitch is changed.

• An ECS instance is migrated from the classic network to a VPC.

• The instance type is changed across zones.

• The VPC or vSwitch in which an ECS instance is deployed is changed.

• An ECS instance is transferred from one account to another account.

The following example shows the event that EventBridge receives when a private IP is assigned:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPAssigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

The following table describes the parameters contained in data.

A private IP address is revoked

This type of event occurs when a secondary private IPv4 address of a primary ENI is revoked or when a primary private IPv4 address or a secondary private IPv4 address of a secondary ENI is revoked.

If you delete the private IP address of an ENI, the operation is displayed in An ENI is created.

The following example shows the event that EventBridge receives when a private IP address is revoked:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPUnassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

For information about the parameters in data, see the field description table.

An IPv6 address is assigned

The following example shows the event that EventBridge receives when an IPv6 address is assigned:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Assigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters contained in data.

An IPv6 address is revoked.

The following example shows the event that EventBridge receives when an IPv6 address is revoked:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Unassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

For information about the parameters in data, see the field description table.

Disks are cleaned up after hot swapping on EBS failed

The following example shows the event that EventBridge receives when disks are cleaned up after hot swapping on EBS failed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41+08:00",
    "type": "ecs:Instance:SystemMaintenance.CleanReleasedDisks",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp15v0xj40ffy8****",
        "eventStatus": "Scheduled",
        "eventType": "SystemMaintenance.CleanReleasedDisks",
        "instanceId": "i-bp16ho3ovmvttwy*****",
        "notBefore": "2023-08-09T07:49:48Z",
        "publishTime": "2023-08-09T06:49:48Z",
        "reason": "A simulated event"
    }
}

The following table describes the parameters nested under data.

The status of a slave network interface is changed

The following example shows the event that EventBridge receives when the status of a slave network interface is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:SlaveEniWorkStateChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "eniStatus":"enabled"
    }
}

The following table describes the parameters contained in data.