全部产品
Search
文档中心

配置审计:资源配置变更历史内容示例

更新时间:Apr 24, 2024

通过本文您可以了解配置审计的资源配置变更历史投递到日志服务SLS的内容示例和主要参数说明。

内容示例

创建资源、修改资源和删除资源的配置变更历史投递到日志服务SLS的内容示例如下:

  • 创建资源

    在单账号模式下,阿里云账号110803419679****在云服务器ECS的呼和浩特地域创建云盘test_disk,在configurationDiff中显示云盘的变更前信息null和变更后详细信息,在relationshiprelationshipDiff中显示云盘新增相关资源i-8psdh7l6lphbn10l****

    accountId:110803419679****
    availabilityZone:cn-huhehaote-a
    captureTime:1642411308000
    configuration:{"DetachedTime":"","Category":"cloud_efficiency","KMSKeyId":"","Description":"","ResourceGroupId":"rg-aekzmdckngg****","Size":40,"Encrypted":false,"DeleteAutoSnapshot":false,"DiskChargeType":"PrePaid","Attachments":{"Attachment":[{"AttachedTime":"2022-01-17T09:20:14Z","InstanceId":"i-8psdh7l6lphbn10l****","Device":"/dev/xvda"}]},"MultiAttach":"Disabled","ExpiredTime":"2022-02-17T16:00Z","ImageId":"win2012r2_9600_x64_dtc_en-us_40G_alibase_20211217.vhd","StorageSetId":"","Tags":{"Tag":[]},"Status":"In_use","AttachedTime":"2022-01-17T09:20:14Z","StorageClusterId":"","ZoneId":"cn-huhehaote-a","InstanceId":"i-8psdh7l6lphbn10l****","ProductCode":"","SourceSnapshotId":"","Device":"/dev/xvda","PerformanceLevel":"","DeleteWithInstance":true,"EnableAutomatedSnapshotPolicy":false,"EnableAutoSnapshot":true,"AutoSnapshotPolicyId":"","DiskName":"","test_disk":"","OperationLocks":{"OperationLock":[]},"Portable":true,"Type":"system","SerialNumber":"8psdh7l6lphbn10i****","CreationTime":"2022-01-17T09:20:10Z","RegionId":"cn-huhehaote","DiskId":"d-8psdh7l6lphbn10i****"}
    configurationDiff:{"Category":[null,"cloud_efficiency"],"ResourceGroupId":[null,"rg-aekzmdckngg****"],"Size":[null,40],"Encrypted":[null,false],"DeleteAutoSnapshot":[null,false],"DiskChargeType":[null,"PrePaid"],"Attachments":[null,{"Attachment":[{"AttachedTime":"2022-01-17T09:20:14Z","InstanceId":"i-8psdh7l6lphbn10l****","Device":"/dev/xvda"}]}],"MultiAttach":[null,"Disabled"],"ExpiredTime":[null,"2022-02-17T16:00Z"],"ImageId":[null,"win2012r2_9600_x64_dtc_en-us_40G_alibase_20211217.vhd"],"Tags":[null,{"Tag":[]}],"Status":[null,"In_use"],"AttachedTime":[null,"2022-01-17T09:20:14Z"],"ZoneId":[null,"cn-huhehaote-a"],"InstanceId":[null,"i-8psdh7l6lphbn10l****"],"Device":[null,"/dev/xvda"],"DeleteWithInstance":[null,true],"EnableAutomatedSnapshotPolicy":[null,false],"EnableAutoSnapshot":[null,true],"OperationLocks":[null,{"OperationLock":[]}],"Portable":[null,true],"Type":[null,"system"],"SerialNumber":[null,"8psdh7l6lphbn10i****"],"CreationTime":[null,"2022-01-17T09:20:10Z"],"RegionId":[null,"cn-huhehaote"],"DiskId":[null,"d-8psdh7l6lphbn10i****"]}
    dataType:ConfigurationItemChangeNotification
    regionId:cn-huhehaote
    relationship:[{"regionId":"cn-huhehaote","relationType":"IsAttachedTo","resourceId":"i-8psdh7l6lphbn10l****","resourceType":"ACS::ECS::Instance"}]
    relationshipDiff:{"relationship_diff":{"relationship_add":[{"regionId":"cn-huhehaote","relationType":"IsAttachedTo","resourceId":"i-8psdh7l6lphbn10l****","resourceType":"ACS::ECS::Instance"}],"relationship_delete":[]}}
    requestId:be30368b-71dd-4367-9871-d00e565f8679
    resourceCreateTime:1642411210000
    resourceEventType:DISCOVERED
    resourceGroupId:rg-aekzmdckngg****
    resourceId:d-8psdh7l6lphbn10i****
    resourceName:test_disk
    resourceStatus:In_use
    resourceType:ACS::ECS::Disk
    tags:{}
  • 修改资源

    在单账号模式下,阿里云账号118239008140****在云服务器ECS的杭州地域为云盘test_disk关联标签key1,在configurationDiff中显示云盘的标签变更前信息null和变更后信息key1,在relationshiprelationshipDiff中显示云盘删除相关资源i-bp1g9rukkdar0dro****

    accountId:118239008140****
    availabilityZone:cn-hangzhou-i
    captureTime:1630422042000
    configuration:{"DetachedTime":"2022-01-17T09:27:40Z","Category":"cloud_efficiency","KMSKeyId":"","Description":"","ResourceGroupId":"","Size":20,"Encrypted":false,"DeleteAutoSnapshot":true,"DiskChargeType":"PostPaid","MultiAttach":"Disabled","ExpiredTime":"2999-09-08T16:00Z","ImageId":"","StorageSetId":"","Tags":{"Tag":[{"TagKey":"key1","TagValue":""}]},"Status":"Available","AttachedTime":"2022-01-17T09:02:01Z","StorageClusterId":"","ZoneId":"cn-hangzhou-i","InstanceId":"","ProductCode":"","SourceSnapshotId":"","Device":"","PerformanceLevel":"","DeleteWithInstance":false,"EnableAutomatedSnapshotPolicy":false,"EnableAutoSnapshot":true,"AutoSnapshotPolicyId":"","DiskName":"test_disk","BdfId":"","OperationLocks":{"OperationLock":[]},"Portable":true,"Type":"data","SerialNumber":"bp1fybs4hwesp8kv****","CreationTime":"2021-08-19T09:11:48Z","RegionId":"cn-hangzhou","DiskId":"d-bp1fybs4hwesp8kv****"}
    configurationDiff:{"Tags":[{"Tag":[]},{"Tag":[{"TagKey":"key1","TagValue":""}]}]}
    dataType:ConfigurationItemChangeNotification
    regionId:cn-hangzhou
    relationship:
    relationshipDiff:{"relationship_diff":{"relationship_add":[],"relationship_delete":[{"regionId":"cn-hangzhou","relationType":"IsAttachedTo","resourceId":"i-bp1g9rukkdar0dro****","resourceType":"ACS::ECS::Instance"}]}}
    requestId:4f9a90a9-63bf-43bd-981d-bc15658c423e
    resourceCreateTime:1630422000000
    resourceEventType:MODIFY
    resourceGroupId:rg-acfmwvtff2y***
    resourceId:d-bp1fybs4hwesp8kv****
    resourceName:test_disk
    resourceStatus:Available
    resourceType:ACS::ECS::Disk
    tags:{"key1":[""]}
  • 删除资源

    在单账号模式下,阿里云账号120886317861****在云服务器ECS的呼和浩特地域删除云盘test_disk,在configurationDiff中显示云盘变更前信息和变更后信息null,在relationshiprelationshipDiff中显示云盘无相关资源。

    accountId:120886317861****
    availabilityZone:cn-huhehaote-a
    captureTime:1629875147000
    configuration:{"DetachedTime":"","Category":"cloud_essd","KMSKeyId":"","Description":"","ResourceGroupId":"","Size":40,"Encrypted":false,"DeleteAutoSnapshot":false,"DiskChargeType":"PostPaid","MultiAttach":"Disabled","ExpiredTime":"2999-09-08T16:00Z","ImageId":"","StorageSetId":"","Tags":{"Tag":[]},"Status":"Available","AttachedTime":"","StorageClusterId":"","ZoneId":"cn-huhehaote-a","InstanceId":"","ProductCode":"","SourceSnapshotId":"","Device":"","PerformanceLevel":"PL1","DeleteWithInstance":false,"EnableAutomatedSnapshotPolicy":false,"EnableAutoSnapshot":true,"AutoSnapshotPolicyId":"","DiskName":"test_disk","BdfId":"","OperationLocks":{"OperationLock":[]},"Portable":true,"Type":"data","SerialNumber":"hp33mwzuof9qoa22****","CreationTime":"2021-08-25T06:52:35Z","RegionId":"cn-huhehaote","DiskId":"d-hp33mwzuof9qoa22****"}
    configurationDiff:{"Status":["Available",null],"Category":["cloud_essd",null],"ZoneId":["cn-huhehaote-a",null],"Size":[40,null],"Encrypted":[false,null],"PerformanceLevel":["PL1",null],"DeleteAutoSnapshot":[false,null],"DeleteWithInstance":[false,null],"EnableAutomatedSnapshotPolicy":[false,null],"DiskChargeType":["PostPaid",null],"EnableAutoSnapshot":[true,null],"DiskName":["test_disk",null],"MultiAttach":["Disabled",null],"OperationLocks":[{"OperationLock":[]},null],"Portable":[true,null],"Type":["data",null],"SerialNumber":["hp33mwzuof9qoa22ic6q",null],"ExpiredTime":["2999-09-08T16:00Z",null],"CreationTime":["2021-08-25T06:52:35Z",null],"RegionId":["cn-huhehaote",null],"Tags":[{"Tag":[]},null],"DiskId":["d-hp33mwzuof9qoa22****",null]}
    dataType:ConfigurationItemChangeNotification
    regionId:cn-huhehaote
    relationship:
    relationshipDiff:{"relationship_diff":{"relationship_add":[],"relationship_delete":[]}}
    requestId:d9bca2bc-75ba-4e4c-92dd-7cc38e779806
    resourceCreateTime:1629874355000
    resourceEventType:REMOVE
    resourceGroupId:rg-acfmw3ty5y7****
    resourceId:d-hp33mwzuof9qoa22****
    resourceName:test_disk
    resourceStatus:Available
    resourceType:ACS::ECS::Disk
    tags:{}

参数说明

资源配置变更历史投递到日志服务SLS的主要参数说明如下表所示。

参数

说明

accountId

资源归属的账号ID。配置审计支持如下账号类型:

  • 单账号:未被管理账号加入资源目录的独立的阿里云账号ID。

  • 多账号:管理账号ID或成员ID。

availabilityZone

资源可用区。

captureTime

配置审计发现资源配置变更并生成日志的时间戳。

configuration

资源的详细配置。

configurationDiff

资源配置变更的具体变更项及变更前后信息。

dataType

日志服务SLS的接收内容。取值:

  • ConfigurationItemChangeNotification:资源配置变更历史。

  • NonCompliantNotification:资源不合规事件。

regionId

资源所在地域ID。

relationship

相关资源的详细信息,包括相关资源所在地域ID、资源关系、资源ID和资源类型。根据资源是否有相关资源,该参数显示如下:

relationshipDiff

相关资源的变更项。

resourceCreateTime

创建资源的时间戳。

resourceEventType

资源变更事件的类型。取值:

  • DISCOVERED:配置审计新发现的资源事件。

  • MODIFY:修改资源事件。

  • REMOVE:删除资源事件。

  • DISCOVERED_REVISED:配置审计新发现的通过周期修正任务产生的资源事件。

  • MODIFY_REVISED:通过周期修正任务产生的修改资源事件。

resourceGroupId

资源归属的资源组ID。根据资源类型是否支持资源组,该参数显示如下:

  • 当资源类型支持资源组时,该参数为资源组ID。

    关于支持资源组的云服务,请参见支持资源组的云服务

  • 当资源类型不支持资源组时,该参数为空。

resourceId

资源ID。

resourceName

资源名称。

resourceStatus

资源状态。资源的状态取决于各云服务对资源的定义,该参数可能为空。例如:

  • 当资源类型为ACS::ECS::Instance时,由于ECS实例有状态,因此该参数为RunningStopped

  • 当资源类型为ACS::OSS::Bucket时,由于OSS Bucket无状态,因此该参数为空。

resourceType

资源类型。关于支持配置审计的资源类型,请参见配置审计支持的资源类型和资源关系

tags

资源标签。