All Products
Search
Document Center

:ECS events

最終更新日:Sep 04, 2024

This topic describes the types of Elastic Compute Service (ECS) events that can be published to EventBridge.

Event types

The following table describes the types of ECS events that can be published to EventBridge.

Event type

Value of the type parameter

A cloud disk is retained

ecs:Disk:ConvertToPostpaidCompleted

A data disk is attached or detached

ecs:Disk:DiskOperationCompleted

An EBS device is released due to overdue payments

ecs:Disk:OverduePaymentRelease

The performance of a burstable instance is restricted

ecs:Instance:BurstablePerformanceRestricted

An ECS instance is hot migrated between dedicated hosts

ecs:Instance:LiveMigrationAcrossDDH

The performance mode of a burstable instance is changed

ecs:Instance:PerformanceModeChange

A preemptible instance is released

ecs:Instance:PreemptibleInstanceInterruption

The lifecycle state of an instance is changed

ecs:Instance:StateChange

Additional fees are charged for a burstable instance

ecs:Instance:SurplusCreditIncurCharge

An ENI is created

ecs:NetworkInterface:NetworkInterfaceOperateCompleted

A snapshot is created

ecs:Snapshot:CreateSnapshotCompleted

A snapshot starts to be created

ecs:Snapshot:CreateSnapshotInitiated

A snapshot is deleted

ecs:Snapshot:SnapshotDeleted

An alert about damage to the local disk is generated

ecs:Disk:ErrorDetected

Disk performance is severely impaired

ecs:Disk:Stalled

An instance is automatically restarted

ecs:Instance:AutoReactivateCompleted

An instance is rebooted due to an instance error

ecs:Instance:InstanceFailure.Reboot

A TPM security alert is generated

ecs:Instance:Security.TpmAlert

An instance is released due to a creation failure

ecs:Instance:SystemFailure.Delete

An instance is rebooted due to a system error

ecs:Instance:SystemFailure.Reboot

An instance is redeployed due to a system error

ecs:Instance:SystemFailure.Redeploy

An instance is stopped due to a system error

ecs:Instance:SystemFailure.Stop

A damaged local disk is isolated due to system maintenance

ecs:Instance:SystemMaintenance.IsolateErrorDisk

A damaged local disk is reinitialized due to system maintenance

ecs:Instance:SystemMaintenance.ReInitErrorDisk

An instance reboot event is scheduled due to system maintenance

ecs:Instance:SystemMaintenance.Reboot

An instance is rebooted and a damaged local disk is isolated due to system maintenance

ecs:Instance:SystemMaintenance.RebootAndIsolateErrorDisk

An instance is rebooted and a damaged local disk is reinitialized due to system maintenance

ecs:Instance:SystemMaintenance.RebootAndReInitErrorDisk

An instance redeployment event is scheduled due to system maintenance

ecs:Instance:SystemMaintenance.Redeploy

An instance stop event is scheduled due to system maintenance

ecs:Instance:SystemMaintenance.Stop

A vSwitch is changed

ecs:Instance:VSwitchChanged

A private IP address is assigned

ecs:NetworkInterface:PrivateIPAssigned

A private IP address is revoked

ecs:NetworkInterface:PrivateIPUnassigned

An IPv6 address is assigned

ecs:NetworkInterface:PrivateIPv6Assigned

An IPv6 address is revoked

ecs:NetworkInterface:PrivateIPv6Unassigned

Disks are cleaned up after hot swapping on EBS failed

ecs:Instance:SystemMaintenance.CleanReleasedDisks

The status of a slave network interface is changed

ecs:NetworkInterface:SlaveEniWorkStateChanged

An operation is performed on a resource

ecs:ActionTrail:AliyunServiceEvent

An API operation is called

ecs:ActionTrail:ApiCall

Operations performed in a console

ecs:ActionTrail:ConsoleOperation

An alert about damage to the local disk ends

ecs:CloudMonitor:Disk[ErrorDetected:Executed]

An alert about damage to the local disk starts

ecs:CloudMonitor:Disk[ErrorDetected:Executing]

A severe impact on the disk performance ends

ecs:CloudMonitor:Disk[Stalled:Executed]

A severe impact on the disk performance starts

ecs:CloudMonitor:Disk[Stalled:Executing]

An instance is automatically restarted

ecs:CloudMonitor:Instance[AutoReactivateCompleted]

A potential impact of an instance error on the instance performance ends

ecs:CloudMonitor:Instance[InstanceFailure.PerformanceImpact:Executed]

A potential impact of an instance error on the instance performance starts

ecs:CloudMonitor:Instance[InstanceFailure.PerformanceImpact:Executing]

An instance reboot that is caused by an instance error is complete

ecs:CloudMonitor:Instance[InstanceFailure.Reboot:Executed]

An instance reboot that is caused by an instance error starts

ecs:CloudMonitor:Instance[InstanceFailure.Reboot:Executing]

A TPM security alert ends

ecs:CloudMonitor:Instance[Security.TpmAlert:Executed]

A TPM security alert starts

ecs:CloudMonitor:Instance[Security.TpmAlert:Executing]

An automatic instance release that is caused by an instance creation failure is bypassed

ecs:CloudMonitor:Instance[SystemFailure.Delete:Avoided]

An automatic instance release that is caused by an instance creation failure is complete

ecs:CloudMonitor:Instance[SystemFailure.Delete:Executed]

An automatic instance release that is caused by an instance creation failure is being executed

ecs:CloudMonitor:Instance[SystemFailure.Delete:Executing]

The impact of a system error on the instance performance ends

ecs:CloudMonitor:Instance[SystemFailure.PerformanceImpact:Executed]

The impact of a system error on the instance performance starts

ecs:CloudMonitor:Instance[SystemFailure.PerformanceImpact:Executing]

An instance reboot that is caused by a system error is complete

ecs:CloudMonitor:Instance[SystemFailure.Reboot:Executed]

An instance reboot that is caused by a system error starts

ecs:CloudMonitor:Instance[SystemFailure.Reboot:Executing]

An instance reboot that is caused by a system error fails

ecs:CloudMonitor:Instance[SystemFailure.Reboot:Failed]

An instance redeployment that is caused by a system error is bypassed

ecs:CloudMonitor:Instance[SystemFailure.Redeploy:Avoided]

An instance redeployment that is caused by a system error is canceled

ecs:CloudMonitor:Instance[SystemFailure.Redeploy:Canceled]

An instance redeployment that is caused by a system error is complete

ecs:CloudMonitor:Instance[SystemFailure.Redeploy:Executed]

An instance redeployment that is caused by a system error is being executed

ecs:CloudMonitor:Instance[SystemFailure.Redeploy:Executing]

An instance redeployment that is caused by a system error is scheduled

ecs:CloudMonitor:Instance[SystemFailure.Redeploy:Scheduled]

An instance stop that is caused by a system error is complete

ecs:CloudMonitor:Instance[SystemFailure.Stop:Executed]

An instance stop that is caused by a system error starts

ecs:CloudMonitor:Instance[SystemFailure.Stop:Executing]

The damaged-disk isolation that is caused by system maintenance is bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Avoided]

The damaged-disk isolation that is caused by system maintenance is canceled

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Canceled]

The damaged-disk isolation that is caused by system maintenance is complete

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Executed]

The damaged-disk isolation that is caused by system maintenance is being executed

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Executing]

The damaged-disk isolation that is caused by system maintenance fails

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Failed]

The damaged-disk isolation that is caused by system maintenance is waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.IsolateErrorDisk:Inquiring]

The potential impact of system maintenance on the instance performance ends

ecs:CloudMonitor:Instance[SystemMaintenance.PerformanceImpact:Executed]

The potential impact of system maintenance on the instance performance starts

ecs:CloudMonitor:Instance[SystemMaintenance.PerformanceImpact:Executing]

A scheduled instance reboot that is caused by system maintenance is bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Avoided]

A scheduled instance reboot that is caused by system maintenance is canceled

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Canceled]

A scheduled instance reboot that is caused by system maintenance is complete

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Executed]

A scheduled instance reboot that is caused by system maintenance is being executed

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Executing]

A scheduled instance reboot that is caused by system maintenance fails

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Failed]

A scheduled instance reboot that is caused by system maintenance is waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Inquiring]

An instance reboot that is caused by system maintenance is scheduled

ecs:CloudMonitor:Instance[SystemMaintenance.Reboot:Scheduled]

An instance reboot and damaged-disk isolation that are caused by system maintenance are bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndIsolateErrorDisk:Avoided]

An instance reboot and damaged-disk isolation that are caused by system maintenance are canceled

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndIsolateErrorDisk:Canceled]

The instance reboot and damaged-disk isolation that are caused by system maintenance are complete

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndIsolateErrorDisk:Executed]

The instance reboot and damaged-disk isolation that are caused by system maintenance are being executed

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndIsolateErrorDisk:Executing]

The instance reboot and damaged-disk isolation that are caused by system maintenance are waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndIsolateErrorDisk:Inquiring]

The instance reboot and damaged-disk reinitialization that are caused by system maintenance are bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndReInitErrorDisk:Avoided]

The instance reboot and damaged-disk reinitialization that are caused by system maintenance are canceled

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndReInitErrorDisk:Canceled]

The instance reboot and damaged-disk reinitialization that are caused by system maintenance are complete

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndReInitErrorDisk:Executed]

The instance reboot and damaged-disk reinitialization that are caused by system maintenance are being executed

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndReInitErrorDisk:Executing]

The instance reboot and damaged-disk reinitialization that are caused by system maintenance are waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.RebootAndReInitErrorDisk:Inquiring]

The scheduled instance redeployment that is caused by system maintenance is bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Avoided]

The scheduled instance redeployment that is caused by system maintenance is canceled

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Canceled]

The scheduled instance redeployment that is caused by system maintenance is complete

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Executed]

The scheduled instance redeployment that is caused by system maintenance is being executed

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Executing]

The scheduled instance redeployment that is caused by system maintenance is waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Inquiring]

The instance redeployment that is caused by system maintenance is scheduled

ecs:CloudMonitor:Instance[SystemMaintenance.Redeploy:Scheduled]

The damaged-disk reinitialization that is caused by system maintenance is bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Avoided]

The damaged-disk reinitialization that is caused by system maintenance is canceled

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Canceled]

The damaged-disk reinitialization that is caused by system maintenance is complete

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Executed]

The damaged-disk reinitialization that is caused by system maintenance is being executed

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Executing]

The damaged-disk reinitialization that is caused by system maintenance fails

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Failed]

The damaged-disk reinitialization that is caused by system maintenance is waiting for your confirmation

ecs:CloudMonitor:Instance[SystemMaintenance.ReInitErrorDisk:Inquiring]

The scheduled instance stop that is caused by system maintenance is bypassed

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Avoided]

The scheduled instance stop that is caused by system maintenance is canceled

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Canceled]

The scheduled instance stop that is caused by system maintenance is complete

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Executed]

The scheduled instance stop that is caused by system maintenance is being executed

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Executing]

The scheduled instance stop that is caused by system maintenance fails

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Failed]

The instance stop that is caused by system maintenance is scheduled

ecs:CloudMonitor:Instance[SystemMaintenance.Stop:Scheduled]

Notification indicating that resource change logs are delivered

ecs:Config:ConfigurationItemChangeNotification

Notification indicating that a resource is evaluated as non-compliant

ecs:Config:NonCompliantNotification

For more information about the parameters defined in the CloudEvents specification, see Overview.

A disk is retained

The following example shows the event that EventBridge receives when an ECS is released but the cloud disk attached to it is retained as a pay-as-you-go data disk:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ConvertToPostpaidCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "diskName": "e2e-ecs-xxxxxxxx",
        "diskId": "d-gx3hn2vc0fxxxxxxxx"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

result

String

accomplished

The task result.

Valid values:

  • accomplished: The task is successful.

  • failed: The task failed.

diskId

String

d-bp11ba7acc69nkta****

The disk ID.

diskName

String

e2e-ecs-xxxxxxxx

The disk name.

A data disk is attached or detached

The following example shows the event that EventBridge receives when a data disk is attached to or detached from an ECS instance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:DiskOperationCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "operation": "AttachDisk",
        "diskId": "d-gx3hn2vc0fuxxxxxxxx"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

result

String

accomplished

The task result.

Valid values:

  • accomplished: The task is successful.

  • failed: The task failed.

operation

String

AttachDisk

The operation that was performed.

diskId

String

d-gx3hn2vc0fuxxxxxxxx

The disk ID.

An EBS device is released due to overdue payments

The following example shows the event that EventBridge receives when an Elastic Block Storage (EBS) device is released due to overdue payments:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "result":"accomplished",
        "instanceId":"i-wz9e60ytsp3lspww****",
        "diskId":"d-wz9ad6x3sistd7fh****"
    },
    "subject":"acs:ecs:cn-shenzhen-st3-a01:123456789098****:disk/d-wz9ad6x3sistd7fh****",
    "source":"acs.ecs",
    "type":"ecs:Disk:OverduePaymentRelease",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

result

String

accomplished

The task result.

Valid values:

  • accomplished: The task is successful.

  • failed: The task failed.

instanceId

String

i-wz9e60ytsp3lspww****

The ID of the ECS instance.

diskId

String

d-wz9ad6x3sistd7fh****

The disk ID.

The performance of a burstable instance is restricted

The following example shows the event that EventBridge receives when the performance of a burstable instance is restricted:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "intervalEnd":"2021-01-18T05:00Z",
        "intervalStart":"2021-01-18T04:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:BurstablePerformanceRestricted",
    "aliyunpublishtime":"2021-01-18T04:06:45.441Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"be468204-6cac-4088-9e57-6455d749****",
    "time":"2021-01-18T12:06:45.238Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-bp1eojtvpmlraj13****

The ID of the ECS instance.

intervalEnd

TimeStamp

2021-01-18T05:00Z

The end time of the event interval.

intervalStart

TimeStamp

2021-01-18T04:00Z

The start time of the event interval.

An ECS instance is hot migrated between dedicated hosts

The following example shows the event that EventBridge receives when an ECS instance is hot migrated between dedicated hosts:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-bp1eojtvpmlraj13****",
        "sourceDedicatedHostId":"dh-2ze3lma1c2-3e343****",
        "destinationDedicatedHostId":"dh-2ze3lm********t8nr83",
        "startTime":"2018-06-08T01:25:37Z",
        "status":"started"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-bp1eojtvpmlraj13****",
    "source":"acs.ecs",
    "type":"ecs:Instance:LiveMigrationAcrossDDH",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-bp1eojtvpmlraj13****

The ID of the ECS instance.

sourceDedicatedHostId

String

dh-2ze3lma1c2-3e343****

The ID of the source dedicated host.

destinationDedicatedHostId

String

dh-2ze3lm********t8nr83

The ID of the destination dedicated host.

startTime

TimeStamp

2021-01-18T16:20:51.199Z

The start time of the hot migration.

status

String

started

The status of the hot migration.

Valid values:

  • started: The migration is started.

  • failed: The migration failed.

  • accomplished: The migration is successful.

The performance mode of a burstable instance is changed

The following example shows the event that EventBridge receives when the performance mode of a burstable instance is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PerformanceModeChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-bp1eojtvpmlraj13****",
        "intervalEnd": "2021-01-18T05:00Z",
        "intervalStart": "2021-01-18T04:00Z"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-bp1eojtvpmlraj13****

The ID of the ECS instance.

intervalEnd

String

2021-01-18T05:00Z

The end time of the event interval.

intervalStart

String

2021-01-18T04:00Z

The start time of the event interval.

A preemptible instance is released

The following example shows the event that EventBridge receives before a preemptible ECS instance is automatically released due to changed price or insufficient resources:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:PreemptibleInstanceInterruption",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "action": "delete",
        "instanceId": "i-bp17j2bvqa9xxxxxxxx"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-abc1792gcdoonr9a****

The ID of the ECS instance.

action

String

delete

The operation that was performed.

The status of an ECS instance changes

The following example shows the event that EventBrdige receives when the status of an ECS instance changes:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:StateChange",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceName": "iZ0jl0kyquo46hxxxxxxxx",
        "instanceType": "ecs.c6.large",
        "privateIpAddress": "172.21.48.37",
        "publicIpAddress": "8.xx.49.237",
        "resourceId": "i-0jl0kyquo46xxxxxxxx",
        "resourceType": "ALIYUN::ECS::Instance",
        "spotStrategy": "SpotWithPriceLimit",
        "state": "Running"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

resourceId

String

i-bp1dkbnzouipluli****

The resource ID.

state

String

Running

The status of the ECS instance.

Valid values:

  • Pending: The instance is being prepared.

  • Starting: The instance is being started.

  • Running: The instance is running.

  • Stopping: The instance is being stopped or restarted.

  • Stopped: The instance is stopped.

  • Deleted: The instance is released.

resourceType

String

ALIYUN::ECS::Instance

The resource type.

publicIpAddress

String

8.100.XX.XX

The public IP address.

privateIpAddress

String

172.21.XX.XX

The private IP address.

instanceName

String

iZ0jl0kyquo46h****

The name of the ECS instance.

instanceType

String

ecs.c6.large

The resource type.

spotStrategy

String

SpotWithPriceLimit

The bidding policy.

Additional fees are charged for a burstable instance

The following example shows the event that EventBridge receives when additional fees are charged for a burstable instance:

{
    "datacontenttype":"application/json;charset=utf-8",
    "aliyunaccountid":"123456789098****",
    "data":{
        "instanceId":"i-abc1792gcdoonr9a****",
        "creditSpecification":"Unlimited",
        "intervalStart":"2019-06-14T00:00:00Z",
        "intervalEnd":"2019-06-14T01:00:00Z"
    },
    "subject":"acs:ecs:cn-hangzhou:123456789098****:instance/i-abc1792gcdoonr9a****",
    "source":"acs.ecs",
    "type":"ecs:Instance:SurplusCreditIncurCharge",
    "aliyunpublishtime":"2021-01-18T08:20:51.890Z",
    "specversion":"1.0",
    "aliyuneventbusname":"default",
    "id":"a3a1e190-a357-40c5-a1c2-3e343a90****",
    "time":"2021-01-18T16:20:51.199Z",
    "aliyunregionid":"cn-hangzhou",
    "aliyunpublishaddr":"172.25.XX.XX"
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-abc1792gcdoonr9a****

The ID of the ECS instance.

creditSpecification

String

Unlimited

The performance mode of the burstable instance.

Valid values:

  • Standard

  • Unlimited

intervalStart

TimeStamp

2019-06-14T00:00:00Z

The start time of the event interval.

intervalEnd

TimeStamp

2019-06-14T01:00:00Z

The end time of the event interval.

An ENI is created

The following example shows the event that EventBridge receives when an elastic network interface (ENI) is created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:NetworkInterfaceOperateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eniStatus": "Available",
        "result": "success",
        "eniId": "eni-bp1j9eoibxxxxxxxxxx",
        "operation": "CreateNetworkInterface",
        "requestId": "8D152511-XXXX-18E2-XXXX-8A1219DAD64F.i-bp1ffahxxxxxxxxxx",
        "primaryPrivateIp": "192.168.XX.XX",
        "secondaryPrivateIps": ["192.168.XX.XX","192.168.XX.XX"],
        "ipv4Prefixes": ["192.168.XX.XX/24"],
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCG:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eniStatus

string

Available

The status of the ENI.

result

string

success

The operation result.

eniId

string

eni-bp1j9eoib****

The ENI ID.

operation

string

CreateNetworkInterface

The operation that was performed.

requestId

string

8D152511-XXXX-18E2-XXXX-8A1219DAD64F.i-bp1ffah****

The request ID.

primaryPrivateIp

String

192.168.XX.XX

The primary private IP address.

secondaryPrivateIps

Array

["192.168.XX.XX","192.168.XX.XX"]

The secondary private IP address.

ipv4Prefixes

Array

["192.168.XX.XX/24"]

The prefix of the secondary private IP address.

ipv6s

Array

["ABCD:EF01:2345:6789:ABCD:EF01:ABCG:XXXX"]

The IPv6 address.

ipv6Prefixes

Array

["2001:XXXX::/32"]

The prefix of the IPv6 address.

A snapshot is created

The following example shows the event that EventBridge receives when a snapshot is created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "result": "accomplished",
        "snapshotId": "s-bp151qed0khxxxxxxxxx",
        "snapshotType": "user",
        "snapshotName": "cust51119970_xxxxxxxx_20211117114015",
        "diskId": "d-bp18dnj7u1xxxxxxxxx",
        "startTime": "2020-11-19T21:02:16Z",
        "endTime": "2020-11-19T21:04:17Z"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

result

String

USER

The task result.

Valid values:

  • accomplished: The task is successful.

  • failed: The task failed.

snapshotId

String

s-bp13al3gx35awyr8****

The snapshot ID.

snapshotType

String

user

The snapshot type.

Valid values:

  • user: You manually create the snapshot.

  • auto: The system automatically creates the snapshot.

snapshotName

String

cust51119970_xxxxxxxx_20211117114015

The snapshot name.

diskId

String

d-bp1dsz8qsstbk9ph****

The disk ID.

startTime

String

2021-01-18T03:22:08Z

The time when the snapshot started to be created.

endTime

String

2021-01-18T03:22:08Z

The time when the snapshot was created.

A snapshot starts to be created

The following example shows the event that EventBridge receives when a snapshot starts to be created:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:CreateSnapshotInitiated",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "cust46638731_xxxxxxxxxxx_20211117114238",
        "diskId": "d-bp13j42n65xxxxxxxxxxx",
        "snapshotId": "s-bp1e4pf8dgxxxxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

snapshotId

String

s-bp1hew62f61pjk77****

The snapshot ID.

snapshotType

String

user

The snapshot type.

Valid values:

  • user: You manually create the snapshot.

  • auto: The system automatically creates the snapshot.

snapshotName

String

cust24417935_hins11712633_20210118112409

The snapshot name.

diskId

String

d-bp11gspuopjn701i****

The disk ID.

A snapshot is deleted

The following example shows the event that EventBridge receives when a snapshot is deleted:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Snapshot:SnapshotDeleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "snapshotName": "Created from i-bp1dl6knxxxxxxxxx",
        "reason": "USER",
        "diskId": "d-bp15e8k1f48xxxxxxxxx",
        "snapshotId": "s-bp197a5b5txxxxxxxxx",
        "snapshotType": "user"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

reason

String

USER

The reason why the snapshot was deleted.

Valid values:

  • USER: You manually delete the snapshot.

  • DEVICE_CONFIG: The snapshot is automatically deleted because the disk is released.

  • ROTATED: The snapshot is automatically deleted because the upper limit of retained automatic snapshots is reached.

  • EXPIRED: The snapshot is deleted because it expires.

  • SERVICE_RELEASED: The snapshot is deleted because the snapshot service is released due to overdue payments.

  • CREATE_FAILURE: The snapshot is automatically deleted because it fails to be created.

  • OTHERS: The snapshot is deleted due to other reasons that are not classified.

snapshotId

String

s-bp13al3gx35awyr8****

The snapshot ID.

snapshotType

String

user

The snapshot type.

Valid values:

  • user: You manually create the snapshot.

  • auto: The system automatically creates the snapshot.

snapshotName

String

System 20190917

The snapshot name.

diskId

String

d-bp1dsz8qsstbk9ph****

The disk ID.

An alert about damage to the local disk is generated

The following example shows the event that EventBridge receives when an alert about damage to the local disk is generated:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:ErrorDetected",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72z******",
        "ecsInstanceId": "i-t4n8rbpfmzs******",
        "ecsInstanceName": "******-slave",
        "eventId": "e-t4nc86ziq4q6******",
        "eventType": "ErrorDetected",
        "executeFinishTime": "2022-09-02T01:55:41Z",
        "executeStartTime": "2022-09-02T01:55:41Z"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

device

String

/dev/xvdf

The device.

diskId

String

d-t4nbfrpow72z******

The disk ID.

ecsInstanceId

String

i-t4n8rbpfmzs******

The ID of the ECS instance.

ecsInstanceName

String

******-slave

The name of the ECS instance.

eventId

String

e-t4nc86ziq4q6******

The event ID.

eventType

String

ErrorDetected

The event type.

executeFinishTime

String

2022-09-02T01:55:41Z

The time when the event ended.

executeStartTime

String

2022-09-02T01:55:41Z

The time when the event started.

Disk performance is severely impaired

The following example shows the event that EventBridge receives when disk performance is severely impaired:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Disk:Stalled",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-2zef8thfnbx*****",
        "ecsInstanceId": "i-2zehp4inhn*****",
        "ecsInstanceName": "iZ2zehp4inhnbvm*****",
        "eventId": "e-2zec86ziq4q6*****",
        "eventType": "Stalled",
        "executeFinishTime": "2022-09-01T13:54:07Z",
        "executeStartTime": "2022-09-01T13:53:07Z"
    }
}

For information about the parameters in data, see the field description table.

An instance is automatically restarted

The following example shows the event that EventBridge receives when an instance is automatically restarted:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:AutoReactivateCompleted",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "instanceId": "i-hp339adxge******",
        "result": "failed"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted due to an instance error

The following example shows the event that EventBridge receives when an instance is rebooted due to an instance error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:InstanceFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q*******",
        "eventStatus": "Executed",
        "eventType": "InstanceFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:23:39Z",
        "executeStartTime": "2022-09-01T13:23:39Z",
        "instanceId": "i-bp1gp1t778*******",
        "notBefore": "2022-09-01T13:23:39Z",
        "privateIpAddress":
        [
            "10.11.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T13:23:39Z"
    }
}

For information about the parameters in data, see the field description table.

A TPM security alert is generated

The following example shows the event that EventBridge receives when a Trusted Platform Module (TPM) security alert is generated:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:Security.TpmAlert",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6*****",
        "eventStatus": "Executed",
        "eventType": "Security.TpmAlert",
        "executeFinishTime": "2022-09-02T06:58:32Z",
        "executeStartTime": "2022-09-02T06:58:32Z",
        "instanceId": "i-uf66x7kyzdf0*****",
        "privateIpAddress":
        [
            "172.19.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.103.XX.XX"
        ],
        "publishTime": "2022-09-02T06:58:32Z",
        "reason": "Unauthorized or corrupted component detected in system boot. Component name is pcr9, and the measurement value is 7b888c4f4e28817d743660017*****"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eventId

String

e-uf6c86ziq4q6*****

The event ID.

eventStatus

String

Executed

The event status.

eventType

String

Security.TpmAlert

The event type.

executeFinishTime

String

2022-09-02T06:58:32Z

The time when the event ended.

executeStartTime

String

2022-09-02T06:58:32Z

The time when the event started.

instanceId

String

i-uf66x7kyzdf0*****

The ID of the ECS instance.

privateIpAddress

Array

172.19.XX.XX

The private IP address.

publicIpAddress

Array

47.103.XX.XX

The public IP address.

publishTime

String

2022-09-02T06:58:32Z

The time when the event is published.

reason

String

Unauthorized or corrupted component detected in system boot. Component name is pcr9, and the measurement value is 7b888c4f4e28817d743660017*****

The reason why the TPM security alert is generated.

An instance is released due to a creation failure

The following example shows the event that EventBridge receives when an instance is released due to a creation failure:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Delete",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp16vh3ff7t2******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Delete",
        "executeFinishTime": "2022-08-09T13:55:08Z",
        "executeStartTime": "2022-08-09T13:54:56Z",
        "instanceId": "i-bp1ez0hvdy5x******",
        "notBefore": "2022-08-09T13:54:56Z",
        "publishTime": "2022-08-09T13:54:56Z",
        "reason": "OperationDenied.NoStock"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted due to a system error

The following example shows the event that EventBridge receives when an instance is rebooted due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Reboot",
        "executeFinishTime": "2022-09-01T13:35:40Z",
        "executeStartTime": "2022-09-01T13:34:10Z",
        "instanceId": "i-bp18c3eakhaq******",
        "notBefore": "2022-09-01T13:34:10Z",
        "privateIpAddress":
        [
            "172.28.XX.XX"
        ],
        "publicIpAddress":
        [
            "120.27.XX.XX"
        ],
        "publishTime": "2022-09-01T13:34:10Z"
    }
}

For information about the parameters in data, see the field description table.

An instance is redeployed due to a system error

The following example shows the event that EventBridge receives when an instance is redeployed due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp1c86ziq4q1d*****",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Redeploy",
        "executeFinishTime": "2022-08-23T09:04:03Z",
        "executeStartTime": "2022-08-23T09:02:49Z",
        "instanceId": "i-bp144npue7n*****",
        "notBefore": "2022-08-23T09:02:49Z",
        "privateIpAddress":
        [
            "172.29.XX.XX"
        ],
        "publicIpAddress":
        [
            "47.97.XX.XX"
        ],
        "publishTime": "2022-08-23T09:02:49Z"
    }

}

For information about the parameters in data, see the field description table.

An instance is stopped due to a system error

The following example shows the event that EventBridge receives when an instance is stopped due to a system error:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemFailure.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-f8zc86ziq4q6******",
        "eventStatus": "Executed",
        "eventType": "SystemFailure.Stop",
        "executeFinishTime": "2022-09-01T14:07:52Z",
        "executeStartTime": "2022-09-01T14:05:52Z",
        "instanceId": "i-f8z9datgf1m9******",
        "notBefore": "2022-09-01T14:05:52Z",
        "privateIpAddress":
        [
            "11.71.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:05:52Z"
    }
}

For information about the parameters in data, see the field description table.

A damaged local disk is isolated due to system maintenance

The following example shows the event that EventBridge receives when a damaged local disk is isolated due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.IsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdf",
        "diskId": "d-t4nbfrpow72zd*******",
        "eventId": "e-t4nc86ziq4*******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.IsolateErrorDisk",
        "instanceId": "i-t4n8rbpfmzsn*******",
        "privateIpAddress":
        [
            "10.62.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T09:47:26Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

A damaged local disk is reinitialized due to system maintenance

The following example shows the event that EventBridge receives when a damaged local disk is reinitialized due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.ReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdv",
        "diskId": "d-bp15esw9c01fh******",
        "eventId": "e-bp1c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.ReInitErrorDisk",
        "instanceId": "i-bp1iwarx7zt1e******",
        "privateIpAddress":
        [
            "10.50.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-02T02:18:29Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance reboot event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance reboot event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2022-09-07T12:31:34Z",
    "type": "ecs:Instance:SystemMaintenance.Reboot",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2022-09-07T12:31:34Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksaxxxxxxx",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Reboot",
        "instanceId": "i-8vbirq9ijhxxxxxxx",
        "privateIpAddress":
        [
            "192.168.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-07T12:31:34Z",
        "traceInfo": "c1352085-8678-4f23-a7cc-xxxx"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eventId

String

e-uf6c86ziq4q6*****

The event ID.

eventStatus

String

Executed

The event status. Valid values:

  • Inquiring

  • Scheduled

  • Executing

  • Executed

  • Avoided

  • Failed

  • Canceled

eventType

String

Security.TpmAlert

The event type.

instanceId

String

i-uf66x7kyzdf0*****

The ID of the ECS instance.

privateIpAddress

Array

172.19.XX.XX

The private IP address.

publicIpAddress

Array

47.103.XX.XX

The public IP address.

publishTime

String

2022-09-02T06:58:32Z

The time when the event is published.

traceInfo

String

c1352085-8678-4f23-a7cc-xxxx

The tracing information.

An instance is rebooted and a damaged local disk is isolated due to system maintenance

The following example shows the event that EventBridge receives when an instance is rebooted and a damaged local disk is isolated due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndIsolateErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre******",
        "eventId": "e-0jlc86ziq4q******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndIsolateErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance is rebooted and a damaged local disk is reinitialized due to system maintenance

The following example shows the event that EventBridge receives when an instance is rebooted and a damaged local disk is reinitialized due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.RebootAndReInitErrorDisk",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "device": "/dev/xvdb",
        "diskId": "d-0jl6834zzre1r******",
        "eventId": "e-0jlc86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.RebootAndReInitErrorDisk",
        "instanceId": "i-0jl77to5ekvau******",
        "privateIpAddress":
        [
            "172.26.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-09-01T14:54:17Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

An instance redeployment event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance redeployment event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Redeploy",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6c86ziq4q6******",
        "eventStatus": "Inquiring",
        "eventType": "SystemMaintenance.Redeploy",
        "instanceId": "dh-uf64debetm******",
        "publishTime": "2022-09-01T08:49:23Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure;Critical error detected on hardware components;Disk error"
    }
}

For information about the parameters in data, see the field description table.

An instance stop event is scheduled due to system maintenance

The following example shows the event that EventBridge receives when an instance stop event is scheduled due to system maintenance:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:SystemMaintenance.Stop",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-uf6iqgksackfxxxxxxx",
        "eventStatus": "Avoided",
        "eventType": "SystemMaintenance.Stop",
        "executeFinishTime": "2022-09-01T15:36:58Z",
        "instanceId": "i-uf62dv6w1oapxxxxxxx",
        "notBefore": "2022-04-02T02:07:59Z",
        "privateIpAddress":
        [
            "10.15.XX.XX"
        ],
        "publicIpAddress":
        [],
        "publishTime": "2022-03-30T02:07:59Z",
        "reason": "System maintenance is scheduled due to a potential risk is detected on underlying  infrastructure"
    }
}

For information about the parameters in data, see the field description table.

A vSwitch is changed

The following example shows the event that EventBridge receives when a vSwitch is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:Instance:VSwitchChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "instanceId":"i-8vb1qo****cdeg2n",
        "vswitchId":"vsw-bp1s5fnvk4gn3tw12****",
        "privateIpAddress":"172.17.XX.XX",
        "vpcId":"vpc-bp1vwnn14rqpyiczj****",
        "secondaryPrivateIps": ["172.17.XX.XX"]
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

instanceId

String

i-8vb1qo****cdeg2n

The ID of the ECS instance.

vswitchId

String

vsw-bp1s5fnvk4gn3tw12****

The vSwitch ID.

privateIpAddress

String

172.17.XX.XX

The primary private IP address.

vpcId

String

vpc-bp1vwnn14rqpyiczj****

The VPC ID.

secondaryPrivateIps

Array

["172.17.XX.XX"]

The secondary private IP address.

A private IP address is assigned

This type of event occurs when a secondary private IPv4 address is assigned to a primary ENI, or when a primary private IPv4 address or a secondary private IPv4 address is assigned to a secondary ENI.

If you create a private IP address for an ENI, the operation is displayed in An ENI is created.

If you change the private IP address of an ENI in the following scenarios, the operation is displayed in A vSwitch is changed.

  • An ECS instance is migrated from the classic network to a VPC.

  • The instance type is changed across zones.

  • The VPC or vSwitch in which an ECS instance is deployed is changed.

  • An ECS instance is transferred from one account to another account.

The following example shows the event that EventBridge receives when a private IP is assigned:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPAssigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eniId

String

eni-8vb1qo****cdeg2n

The ID of the secondary ENI.

primaryPrivateIp

String

192.168.XX.XX

The primary private IP address.

secondaryPrivateIps

Array

["192.168.XX.XX"]

The secondary private IP address.

ipv4Prefixes

Array

["192.168.XX.XX/24"]

The prefix of the private IP address.

A private IP address is revoked

This type of event occurs when a secondary private IPv4 address of a primary ENI is revoked or when a primary private IPv4 address or a secondary private IPv4 address of a secondary ENI is revoked.

If you delete the private IP address of an ENI, the operation is displayed in An ENI is created.

The following example shows the event that EventBridge receives when a private IP address is revoked:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPUnassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "primaryPrivateIp":"192.168.XX.XX",
        "secondaryPrivateIps":["192.168.XX.XX"],
        "ipv4Prefixes":["192.168.XX.XX/24"]
    }
}

For information about the parameters in data, see the field description table.

An IPv6 address is assigned

The following example shows the event that EventBridge receives when an IPv6 address is assigned:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Assigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eniId

String

eni-8vb1qo****cdeg2n

The ID of the secondary ENI.

ipv6s

String

["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"]

The IPv6 address.

ipv6Prefixes

String

["2001:XXXX::/32"]

The prefix of the IPv6 address.

An IPv6 address is revoked.

The following example shows the event that EventBridge receives when an IPv6 address is revoked:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:PrivateIPv6Unassigned",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "ipv6s": ["ABCD:EF01:2345:6789:ABCD:EF01:ABCD:XXXX"],
        "ipv6Prefixes": ["2001:XXXX::/32"]
    }
}

For information about the parameters in data, see the field description table.

Disks are cleaned up after hot swapping on EBS failed

The following example shows the event that EventBridge receives when disks are cleaned up after hot swapping on EBS failed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41+08:00",
    "type": "ecs:Instance:SystemMaintenance.CleanReleasedDisks",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "data": {
        "eventId": "e-bp15v0xj40ffy8****",
        "eventStatus": "Scheduled",
        "eventType": "SystemMaintenance.CleanReleasedDisks",
        "instanceId": "i-bp16ho3ovmvttwy*****",
        "notBefore": "2023-08-09T07:49:48Z",
        "publishTime": "2023-08-09T06:49:48Z",
        "reason": "A simulated event"
    }
}

The following table describes the parameters nested under data.

Parameter

Type

Example

Description

eventId

String

e-bp15v0xj40ffy8****

The event ID.

eventStatus

String

Scheduled

The event status.

eventType

String

SystemMaintenance.CleanReleasedDisks

The event type.

instanceId

String

i-bp16ho3ovmvttwy****

The ID of the ECS instance.

notBefore

String

2023-08-09T07:49:48Z

The time when the event is published.

publishTime

String

2023-08-09T06:49:48Z

The scheduled time when the event is published.

reason

String

A simulated event

The reason why disks are cleaned up after hot swapping on EBS failed.

The status of a slave network interface is changed

The following example shows the event that EventBridge receives when the status of a slave network interface is changed:

{
    "id": "45ef4dewdwe1-7c35-447a-bd93-fab****",
    "source": "acs.ecs",
    "specversion": "1.0",
    "subject": "acs.ecs:cn-hangzhou:123456789098****:215672",
    "time": "2020-11-19T21:04:41Z",
    "type": "ecs:NetworkInterface:SlaveEniWorkStateChanged",
    "aliyunaccountid": "123456789098****",
    "aliyunpublishtime": "2020-11-19T21:04:42Z",
    "aliyuneventbusname": "default",
    "aliyunregionid": "cn-hangzhou",
    "aliyunpublishaddr": "172.25.XX.XX",
    "requestId": "91C5FC51-6F0F-12CA-8D03-C35AB1****",
    "data": {
        "eniId":"eni-8vb1qo****cdeg2n",
        "eniStatus":"enabled"
    }
}

The following table describes the parameters contained in data.

Parameter

Type

Example

Description

eniId

String

eni-8vb1qo****cdeg2n

The ID of the secondary ENI.

eniStatus

String

enabled

The status of the secondary ENI. Valid values:

  • enabled: The traffic is being redirected.

  • disabled: The traffic is removed.