When a user logs on to a bastion host to perform O&M operations on assets, you can view the O&M session details in the Bastionhost console in real time as an administrator. The O&M session details are displayed on the Graphic Text, Commands, and File Transfer tabs. You can interrupt the sessions with unauthorized or high-risk operations. This topic describes how to monitor O&M sessions in real time and interrupt high-risk sessions as an administrator.
Procedure
Log on to the Bastionhost console by using your Alibaba Cloud account. In the top navigation bar, select the region where your bastion host resides.
In the list of Bastionhost instances, find the target instance and click Manage.
In the navigation pane on the left, choose .
-
On the Real-Time Monitoring page, enter your search criteria and click Search.
-
In the session list, find the session to monitor and click Play in the Actions column.
-
If you detect high-risk operations, return to the session list, select the session's checkbox, and then click Use the session blocking feature below the list.
-
In the confirmation dialog box, click Use the session blocking feature.
References
For information about O&M audit types, audit content, and retention period of audit videos, see O&M audit.
For information about how to view the O&M information and export O&M reports, see View the O&M information on the O&M Reports page and export an O&M report.