This topic describes the managed rules that are related to ActiontTrail and the rectification methods that target at non-compliance of ActionTrail.

Rule name: actiontrail-enabled

Checks whether you have created a trail under your account and enabled logging for the trail.

Trigger type: configuration change

Applicable resource type: ACS::ActionTrail::Trail

Input parameter: none

Non-compliance description: Logging is not enabled for a trail under your account. In this case, enable logging for the trail. Cloud Config detects your modification and automatically starts to evaluate the resource within 10 minutes. You can rectify resource non-compliance in the ActionTrail console or by calling the StartLogging operation.
  • To enable logging for the trail in the ActionTrail console, perform the following steps:
    1. Log on to the ActionTrail console.
    2. In the left-side navigation pane, choose ActionTrail > Trails.
    3. On the Trails page, click the target trail. On the page that appears, turn on the Enable Logging switch.
    4. Click Confirm.
  • You can also call the StartLogging operation to enable logging. For more information, see StartLogging.