If you purchase a resource in the Alibaba Cloud Management Console or by calling an API operation, an event is generated. This topic provides the log of a sample event in which a user purchased a resource. This topic also describes the key fields involved in the event log.

Note If you purchase a resource in the Alibaba Cloud Management Console or by calling an API operation, the generated event may have the same name as the relevant API operation. For example, if you purchase an instance by calling the CreateInstance operation or in the Alibaba Cloud Management Console, a CreateInstance event is generated. In most cases, if you purchase a resource on the buy page of an Alibaba Cloud service, an event named Create is generated.

The following sample event log indicates that the Alibaba Cloud account 151266687691**** was used to purchase an Elastic Compute Service (ECS) instance whose ID is i-bp67acfmxazb4p**** on the buy page of ECS at 14:30:17 on August 2, 2021, UTC+8.

{
  "requestId": "2546c4b7-6b56-403e-97d3-500d8d29339a",
  "eventType": "ConsoleOperation",
  "userIdentity": {
    "accountId": "151266687691****",
    "principalId": "151266687691****",
    "type": "root-account",
    "userName": "root"
  },
  "acsRegion": "cn-hangzhou",
  "eventName": "Create",
  "requestParameters": {},
  "eventSource": "ecs.aliyuncs.com",
  "serviceName": "Ecs",
  "eventTime": "2021-08-02T06:30:17Z",
  "referencedResources": {
    "ACS::ECS::Instance": [
      "i-bp67acfmxazb4p****"
    ]
  },
  "userAgent": "AliyunConsole",
  "eventId": "2546c4b7-6b56-403e-97d3-500d8d29****",
  "additionalEventData": {
      "orderIds": "2105464****",
    "2105464****": {
      "resourceId": "i-bp67acfmxazb4p****",
      "articleConfig": {
        "vm_yundun_monitor": "1",
        "iooptimized": "optimized",
        "vm_cpu": "4",
        "vm_iz": "random",
        "vm_yundun_service": "1",
        "vm_web_type": "1",
        "vm_bandwidth": "1024,5",
        "systemdisk": "cloud_essd,/dev/xvda,200,PL0",
        "vm_region_no": "cn-hangzhou-dg-a01",
        "vm_vpc_switch_id": "vsw-bp1bnszwnkvjpdhkh****",
        "instance_type": "ecs.g6e,ecs-5,ecs.g6e.xlarge",
        "vm_os": "linux,64,centos_7_9_x64_20G_alibase_2021****.vhd",
        "vm_ram": "16384"
      }
    }
  },
  "errorCode": "",
  "errorMessage": "",
  "eventVersion": "1",
  "sourceIpAddress": "192.168.XX.XX"
}

The sample event log contains the following key fields:

  • userIdentity.accountId: the ID of the Alibaba Cloud account used by the requester.
  • userIdentity.type: the identity type of the requester. The value in this example is root-account, which indicates an Alibaba Cloud account.
  • eventName: the name of the event. The value in this example is Create, which indicates that a resource was purchased.
  • eventTime: the time when the event was generated in UTC. The value in this example is 2021-08-02T06:30:17Z, which indicates that the event was generated at 14:30:17 on August 2, 2021, UTC+8.
  • referencedResources: the purchased resource. The value in this example is {"ACS::ECS::Instance": ["i-bp67acfmxazb4p****"]}. i-bp67acfmxazb4p**** indicates the ID of the ECS instance.