This topic describes the cloud services and events that are supported by ActionTrail.

Elastic computing

Service name Service alias
Elastic Compute Service Ecs
Auto Scaling Ess
Container Service CS
Container Registry cr
Simple Application Server SWAS
Batch Compute BatchCompute
Elastic High Performance Computing EHPC
Web App Service WebPlus
Elastic Container Instance Eci
Function Compute FC
Elastic Cloud Desktop ECD


Service name Service alias
Apsara File Storage NAS NAS

Object Storage Service

  • ActionTrail allows you to query only bucket management events for Object Storage Service (OSS). The bucket management events for OSS cannot be delivered to OSS or Log Service. For a list of bucket management events for OSS, see Events.
  • You may manage OSS buckets by assuming a RAM role or by using the permissions that are granted by another Alibaba Cloud account. In this case, your identity information may be inaccurate. The OSS console can identify whether your identity information is accurate for a single bucket management event only after all information about the event is recorded. The service team for OSS is trying to resolve this issue.


Intelligent Media Management IMM
Cloud Storage Gateway CloudStorageGateway


Service name Service alias
ApsaraDB RDS Rds
Data Transmission Service Dts
HybridDB for PostgreSQL gpdb
ApsaraDB for Redis R-kvstore
PolarDB-X Drds
ApsaraDB for MongoDB Dds
Tablestore OTS
AnalyticDB for MySQL ADS
ApsaraDB for HBase HBase
Time Series Database TSDB
ApsaraDB for Cassandra Cassandra


Service name Service alias
Virtual Private Cloud Vpc
NAT Gateway Vpc
Elastic IP Address Vpc
Express Connect Vpc
Global Accelerator Vpc
Cloud Enterprise Network Cen
Server Load Balancer Slb
Smart Access Gateway Smartag



Alibaba Cloud DNS PrivateZone PrivateZone

Media services and CDN

Service name Service alias
Alibaba Cloud CDN Cdn
ApsaraVideo VOD vod
ApsaraVideo Live live
ApsaraVideo for Media Processing Mts
Dynamic Route for CDN DCDN
Edge Node Service ENS

Domains and hosting

Service name Service alias
Domains Domain/Domain-intl
Alibaba Cloud DNS Alidns

Application services

Service name Service alias
API Gateway CloudAPI
Blockchain as a Service Baas


Service name Service alias
Message Queue for Apache RocketMQ Ons
Message Queue for Apache Kafka AliKafka
Application Configuration Management ACM
EventBridge EventBridge

Cloud communications

Service name Service alias
Short Message Service Dysms
Short Message Service API Dysmsapi


Service name Service alias

Anti-DDoS Premium


Anti-DDoS Pro


Web Application Firewall Waf
Web Application Firewall API waf-openapi
Server Guard aegis
Cloud Firewall Cloudfw
Website Threat Inspector avds
SSL Certificates Service cas
Security Center Sas
Content Moderation Green
Fraud Detection SAF

Big data

Service name Service alias
E-MapReduce Emr
QuickBI quickbi
DataWorks DataWorks
Elasticsearch ElasticSearch

Internet of Things

Service name Service alias
IoT Platform Iot

Management and monitoring

Service name Service alias
Cloud Monitor Cms
Resource Access Management Ram
Identity Management Service Ims
Aas Aas
AasCustomer AasCustomer
AasSub AasSub
Sts Sts
Resource Management ResourceManager
ActionTrail Actiontrail
Cloud Config Config
Resource Orchestration Service ROS
Key Management Service Kms

Membership service

Service name Service alias
Billing Management API BssOpenApi


Event type Event name
Account-related event
  • Unusual logon with an Alibaba Cloud account
  • Password resetting for an Alibaba Cloud account

OSS bucket management event

  • DeleteBucket
  • DeleteBucketCors
  • DeleteBucketEncryption
  • DeleteBucketEventNotification
  • DeleteBucketInventory
  • DeleteBucketLifecycle
  • DeleteBucketLog
  • DeleteBucketNotification
  • DeleteBucketPolicy
  • DeleteBucketQoSInfo
  • DeleteBucketReplication
  • DeleteBucketTagging
  • DeleteBucketWebSite
  • DeleteBucketWebSite
  • GetBucketAcl
  • GetBucketCors
  • GetBucketEncryption
  • GetBucketEventNotification
  • GetBucketInfo
  • GetBucketInventory
  • GetBucketLifecycle
  • GetBucketLocation
  • GetBucketLog
  • GetBucketMimeType
  • GetBucketNotification
  • GetBucketPolicy
  • GetBucketQoSInfo
  • GetBucketReferer
  • GetBucketReplication
  • GetBucketReplicationLocation
  • GetBucketReplicationProgress
  • GetBucketRequestPayment
  • GetBucketStat
  • GetBucketTagging
  • GetBucketTransferAcceleration
  • GetBucketUserQos
  • GetBucketVersioning
  • GetBucketVersions
  • GetBucketWebSite
  • GetBucketWorm
  • PutBucket
  • PutBucketCors
  • PutBucketEncryption
  • PutBucketEventNotification
  • PutBucketHash
  • PutBucketInventory
  • PutBucketLifecycle
  • PutBucketLog
  • PutBucketNotification
  • PutBucketPolicy
  • PutBucketQoSInfo
  • PutBucketReferer
  • PutBucketReplication
  • PutBucketRequestPayment
  • PutBucketTagging
  • PutBucketTransferAcceleration
  • PutBucketUserQos
  • PutBucketVersioning
  • PutBucketWebSite