All Products
Search
Document Center

ActionTrail:Query the logs of an AccessKey pair

Last Updated:Mar 08, 2024

Alibaba Cloud provides the AccessKey pair audit feature. You can use the feature to query and manage the usage records of an AccessKey pair. This helps you monitor the security of your account and detect potential risks at the earliest opportunity. You can use the ActionTrail console to query the basic information about an AccessKey pair, the accessed Alibaba Cloud services by using the AccessKey pair, and related IP addresses and resources based on your business requirements.

Prerequisites

An AccessKey ID is obtained. For more information, see Obtain an AccessKey pair.

Procedure

  1. Log on to the ActionTrail console.

  2. In the left-side navigation pane, click AccessKey Pair Audit.

  3. On the AccessKey Pair Audit page, enter the AccessKey ID that you want to query and click the 查询按钮 icon.

  4. In the Basic Information section, view and query the information about the AccessKey pair, such as AccessKey ID, account ID (Alibaba Cloud account ID or RAM user ID), Username, Last Accessed At, and Service Last Accessed.

  5. In the Alibaba Cloud Service section, you can perform the following operations based on your business requirements:

    • View accessed Alibaba Cloud services

      In the Alibaba Cloud Service section, view the accessed Alibaba Cloud services and the points in time at which the Alibaba Cloud services were last accessed in the Service Name and Last Accessed At columns.

    • Query events

      Find the required Alibaba Cloud service and click Event List in the Actions column. In the Event List panel, you can view information about the service-related events, such as Event Name, Last Accessed At, and Region. You can also view the details of an event.

      Note
      • For more information about event fields, see Management event structure.

      • After you enable the advanced event query feature, you can click View More Records in the Actions column to view more information about an event. For more information about how to enable the advanced event query feature, see Enable the advanced event query feature.

    • Query IP addresses

      Find the required Alibaba Cloud service and click IP Address List in the Actions column. In the IP Address List panel, you can view information about the service-related IP addresses, such as IP, Last Used At, and Region. You can also view the details of an IP address.

    • Query resources

      Find the required Alibaba Cloud service and click Resource List in the Actions column. In the Resource List panel, you can view information about the service-related resources, such as Resource Type, Resource Name, Last Used At, and Region. You can also view the details of a resource.

      For more information about the types of resources supported by the AccessKey pair audit feature, go to the Supported Cloud Services tab.

Related operations