If you modify the configuration of a resource, an event is generated. This topic provides the log of a sample event in which a user modified the configuration of a resource. This topic also describes the key fields involved in the event log.

Note If you modify the configuration of a resource in the Alibaba Cloud Management Console or by calling an API operation, the generated event may have the same name as the relevant API operation. For example, if you modify the configuration of an instance by calling the ModifyInstance operation or in the Alibaba Cloud Management Console, a ModifyInstance event is generated. In most cases, if you modify the configuration of a resource on the buy page of an Alibaba Cloud service, an event named Modify is generated.

The following sample event log shows that the Alibaba Cloud account 151266687691**** was used to modify the configuration of the Server Load Balancer (SLB) instance whose ID is i-lb-bp1h66tp5uat8******** on the buy page of SLB at 15:04:50 on August 2, 2021, UTC+8. 

{
  "eventId": "2546c4b7-6b56-403e-97d3-500d8d29****",
  "eventVersion": 1,
  "eventSource": "slb.aliyuncs.com",
  "requestParameters": {},
  "sourceIpAddress": "192.168.XX.XX",
  "userAgent": "AliyunConsole",
  "eventType": "ConsoleOperation",
  "referencedResources": {
    "ACS::SLB::LoadBalancer": [
      "lb-bp1h66tp5uat8****"
    ]
  },
  "userIdentity": {
    "accountId": "151266687691****",
    "principalId": "151266687691****",
    "type": "root-account",
    "userName": "root"
  },
  "serviceName": "Slb",
  "additionalEventData": {
    "2105464****": {
      "resourceId": "lb-bp1h66tp5uat8****",
      "articleConfig": {
        "slb_web_type": "0",
        "slaveZoneId": "cn-hangzhou-g",
        "slb_bandwidth_max": "25600",
        "slb_flow_out": "0",
        "masterZoneId": "cn-hangzhou-b",
        "slb_yundun_service": "1",
        "slb_rentalfee": "1",
        "billing_component": "excludeflowout",
        "slb_instance": "internet",
        "loadbalancerSpec": "slb.s2.small",
        "slb_region_no": "cn-hangzhou-dg-a01",
        "ZoneType": "many"
      }
    },
    "2105464****": {
      "resourceId": "lb-bp1h66tp5uat8****",
      "articleConfig": null
    },
    "orderIds": "2105464****,2105464****"
  },
  "requestId": "2546c4b7-6b56-403e-97d3-500d8d29339a",
  "eventTime": "2021-08-02T07:04:50Z",
  "isGlobal": false,
  "acsRegion": "cn-hangzhou",
  "eventName": "Modify"
}

The sample event log contains the following key fields:

  • userIdentity.accountId: the ID of the Alibaba Cloud account used by the requester.
  • userIdentity.type: the identity type of the requester. The value in this example is root-account, which indicates an Alibaba Cloud account.
  • eventName: the name of the event. The value in this example is Modify, which indicates that the configuration of a resource was modified.
  • referencedResources: the resource whose configuration was modified. The value in this example is {"ACS::SLB::LoadBalancer": ["lb-bp1h66tp5uat8****"]}. lb-bp1h66tp5uat8**** indicates the ID of the SLB instance.
  • eventTime: the time when the event was generated in UTC. The value is 2021-08-02T07:04:50Z, which indicates that the event was generated at 15:04:50 on August 2, 2021, UTC+8.