Cloud Config is integrated with ActionTrail. In the ActionTrail console, you can query the management events that are generated when you manage Cloud Config resources. ActionTrail can deliver management events to Log Service Logstores or Object Storage Service (OSS) buckets. This way, you can audit the events in real time and identify event causes.

Cloud Config records the management events that are generated when you manage cloud resources by calling API operations or in the Alibaba Cloud Management Console. You can query the management events in the ActionTrail console. The following table describes the Cloud Config API operations that you can call to manage cloud resources.
API operation Description
ActiveAggregateConfigRules Enables one or more rules in an account group.
ActiveConfigRules Enables multiple rules at a time.
AttachAggregateConfigRuleToCompliancePack Adds one or more rules in an account group to a compliance package.
AttachConfigRuleToCompliancePack Adds one or more rules to a compliance package.
CheckServiceLinkedRoleForDeleting Checks whether a service-linked role can be deleted.
CopyCompliancePacks Clones compliance packages.
CopyConfigRules Clones rules.
CreateAdvancedSearchFile Generates a file that includes the results when you search for resources and downloads the file.
CreateAggregateAdvancedSearchFile Generates a file that includes the results when you search for resources by account group name and downloads the file.
CreateAggregateCompliancePack Creates a compliance package for an account group.
CreateAggregateConfigDeliveryChannel Creates a delivery channel for an account group.
CreateAggregateConfigRule Creates a rule for an account group.
CreateAggregateRemediation Configures a remediation setting for an account group.
CreateAggregator Creates an account group.
CreateCompliancePack Creates a compliance package.
CreateConfigDeliveryChannel Creates a delivery channel.
CreateConfigRule Creates a rule.
CreateDeliveryChannel Creates a delivery channel.
CreateRemediation Creates a remediation setting.
DeactiveAggregateConfigRules Disables one or more rules in an account group.
DeactiveConfigRules Disables one or more rules.
DeleteAggregateCompliancePacks Deletes one or more compliance packages from an account group.
DeleteAggregateConfigDeliveryChannel Deletes a delivery channel from an account group.
DeleteAggregateConfigRules Deletes one or more rules.
DeleteAggregateRemediations Deletes one or more remediation settings from an account group.
DeleteAggregators Deletes one or more account groups.
DeleteCompliancePacks Deletes one or more compliance packages.
DeleteConfigDeliveryChannel Deletes a delivery channel.
DeleteConfigRules Deletes multiple rules at a time.
DeleteRemediations Deletes one or more remediation settings.
DescribeCompliance Queries the compliance evaluation results of resources.
DescribeComplianceHistory Queries the compliance timeline of a resource.
DescribeComplianceReport Queries the details of a compliance report on resources.
DescribeComplianceSummary Queries the statistics about compliance evaluation results.
DescribeConfigRule Queries the details of a rule.
DescribeConfigurationRecorder Queries the types of resources that are monitored by Cloud Config.
DescribeDeliveryChannels Queries the details of delivery channels.
DescribeDiscoveredResource Queries the configuration details of a resource.
DescribeDiscoveredResourceBatch Queries the details of multiple resources at a time.
DescribeEvaluationResults Queries compliance evaluation results.
DescribeIntegratedServiceStatus Queries the authorization status of each integrated Alibaba Cloud service.
DescribeProductComplianceSummary Queries the statistics about the compliance evaluation results of Alibaba Cloud services.
DescribeRemediation Queries the details of a remediation setting.
DetachAggregateConfigRuleToCompliancePack Removes one or more rules in an account group from a compliance package.
DetachConfigRuleToCompliancePack Removes one or more rules from a compliance package.
GenerateAggregateCompliancePackReport Generates a compliance evaluation report for a compliance package in an account group.
GenerateAggregateConfigRulesReport Generates a compliance evaluation report for all rules in an account group.
GenerateAggregateResourceInventory Generates a resource list for an account group.
GenerateCompliancePackReport Generates a compliance evaluation report for a compliance package.
GenerateConfigRulesReport Generates a compliance evaluation report on all existing rules.
GenerateResourceInventory Generates a compliance evaluation report on resources.
GetAdvancedSearchFile Queries a file that includes the results when you search for resources and downloads the file.
GetAggregateAccountComplianceByPack Queries the compliance evaluation results of member accounts monitored by a compliance package in an account group.
GetAggregateCompliancePack Queries the details of a compliance package in an account group.
GetAggregateCompliancePackReport Queries a compliance evaluation report on a compliance package in an account group.
GetAggregateConfigDeliveryChannel Queries the information about a delivery channel in an account group.
GetAggregateConfigRule Queries the details of a rule in an account group.
GetAggregateConfigRuleComplianceByPack Queries the compliance evaluation results of specified rules in a compliance package in an account group.
GetAggregateConfigRulesReport Queries a compliance evaluation report on all existing rules in an account group.
GetAggregateConfigRuleSummaryByRiskLevel Queries the summary of compliance evaluation results in an account group by rule risk level.
GetAggregateDiscoveredResource Queries the details of a resource in an account group.
GetAggregateResourceComplianceByConfigRule Queries the compliance evaluation results of a rule in an account group.
GetAggregateResourceComplianceByPack Queries the statistics about the compliance evaluation results of resources monitored by a compliance package in an account group.
GetAggregateResourceComplianceGroupByRegion Queries the statistics about compliance evaluation results for rules in an account group by region.
GetAggregateResourceComplianceGroupByResourceType Queries the statistics about compliance evaluation results for rules in an account group by resource.
GetAggregateResourceComplianceTimeline Queries the compliance timeline of a resource in an account group.
GetAggregateResourceConfigurationTimeline Queries the configuration timeline of a resource in an account group.
GetAggregateResourceCountsGroupByRegion Queries the statistics about the resources in an account group by region.
GetAggregateResourceCountsGroupByResourceType Queries the statistics about the resources in an account group by resource type.
GetAggregateResourceInventory Queries a compliance evaluation report on the resources in an account group.
GetAggregator Queries the details of an account group.
GetCompliancePack Queries the details of a compliance package.
GetCompliancePackReport Queries a compliance evaluation report on a compliance package.
GetConfigDeliveryChannel Queries the information about a delivery channel.
GetConfigRule Queries the details of a rule.
GetConfigRuleComplianceByPack Queries the statistics about the compliance evaluation results in a compliance package by rule.
GetConfigRulesReport Queries a compliance evaluation report on all existing rules.
GetConfigRuleSummaryByRiskLevel Queries the summary of compliance evaluation results by rule risk level.
GetDiscoveredResource Queries the details of a resource.
GetDiscoveredResourceCounts Queries the number of resources.
GetDiscoveredResourceCountsGroupByRegion Queries the statistics about resources by region.
GetDiscoveredResourceCountsGroupByResourceType Queries the statistics about resources by resource type.
GetDiscoveredResourceSummary Queries the statistics about resources monitored by Cloud Config.
GetManagedRule Queries the details of a managed rule.
GetResourceComplianceByConfigRule Queries the statistics about compliance evaluation results for resources based on a rule.
GetResourceComplianceByPack Queries the compliance evaluation results of resources monitored by a compliance package.
GetResourceComplianceGroupByRegion Queries the statistics about compliance evaluation results for resources by region.
GetResourceComplianceGroupByResourceType Queries the statistics about compliance evaluation results for resources by resource type.
GetResourceComplianceTimeline Queries the compliance timeline of a resource.
GetResourceConfigHistory Queries the configuration change records of a resource.
GetResourceConfigurationTimeline Queries the configuration timeline of a resource.
GetResourceInventory Queries the information about a report on resources.
GetServiceQuota Queries a specified quota of an Alibaba Cloud service.
GetSupportedResourceTypes Queries the resource types that are supported by Cloud Config.
GetSupportedResourceTypesForSpec Queries the resource types that are supported by Cloud Config.
GetSupportedResourceTypesInfo Queries the information about the core configurations of resource types that are supported by Cloud Config.
IgnoreAggregateEvaluationResults Ignores one or more resources that are evaluated as non-compliant by a rule in an account group.
IgnoreEvaluationResults Ignores one or more resources that are evaluated as non-compliant by a rule.
ListAggregateCompliancePacks Queries the compliance packages in an account group.
ListAggregateConfigDeliveryChannels Queries the information about all delivery channels of an account group.
ListAggregateConfigRuleEvaluationResults Queries compliance evaluation results for resources evaluated by rules in an account group.
ListAggregateConfigRules Queries rules in an account group.
ListAggregateDiscoveredResourceRelations Queries resource relationships in an account group.
ListAggregateDiscoveredResources Queries resources in an account group.
ListAggregateDiscoveredResourcesByAdvancedSearch Queries resources in an account group.
ListAggregateRemediations Queries all remediation templates in an account group.
ListAggregateResourceEvaluationResults Queries compliance evaluation results for resources in an account group.
ListAggregators Queries account groups.
ListCadtAppResource Queries resources in an application structure.
ListCompliancePacks Queries compliance packages.
ListCompliancePackTemplates Queries compliance package templates.
ListConfigDeliveryChannels Queries delivery channels.
ListConfigRuleEvaluationResults Queries compliance evaluation results for resources evaluated by rules.
ListConfigRules Queries rules.
ListDiscoveredResourceRelations Queries resource relationships.
ListDiscoveredResourceRelationsBatch Queries multiple resource relationships at a time.
ListDiscoveredResources Queries the details of resources.
ListDiscoveredResourcesByAdvancedSearch Queries the details of resources.
ListIntegratedService Queries the authorized Alibaba Cloud services that are integrated with Cloud Config.
ListManagedRules Queries managed rules.
ListRemediations Queries remediation settings.
ListRemediationTemplates Queries remediation templates.
ListResourceEvaluationResults Queries compliance evaluation results for resources.
ListResourceOwnerInAllAggregator Queries the information about the members of an account group.
ListServiceQuotas Queries the quotas of an Alibaba Cloud service.
ListSupportedProducts Queries the Alibaba Cloud services that are supported by Cloud Config.
ListTagResources Queries the tags of a resource.
PutConfigRule Creates or modifies a rule.
PutConfigurationRecorder Changes the types of resources that are monitored by Cloud Config.
PutDeliveryChannel Creates or updates a delivery channel.
PutEvaluations Submits compliance evaluation results.
RevertAggregateEvaluationResults Re-evaluates one or more resources that are evaluated as non-compliant by a rule in an account group.
RevertEvaluationResults Re-evaluates one or more resources that are evaluated as non-compliant by a rule.
StartAggregateConfigRuleEvaluation Uses a rule in an account group to evaluate resources.
StartAggregateRemediation Performs a remediation operation by using a rule in an account group.
StartConfigRuleEvaluation Enables a rule.
StartConfigurationRecorder Enables Cloud Config to monitor the resources of your Alibaba Cloud account.
StartRemediation Enables a remediation setting.
StopConfigRules Disables multiple rules at a time.
StopConfigurationRecorder Deactivates Cloud Config.
TagResources Adds a tag to a resource.
UntagResources Removes a tag from a resource.
UpdateAggregateCompliancePack Modifies a compliance package in an account group.
UpdateAggregateConfigDeliveryChannel Modifies a delivery channel in an account group.
UpdateAggregateConfigRule Modifies a rule in an account group.
UpdateAggregateRemediation Modifies a remediation setting.
UpdateAggregator Modifies an account group.
UpdateCompliancePack Modifies a compliance package.
UpdateConfigDeliveryChannel Modifies a delivery channel.
UpdateConfigRule Modifies a rule.
UpdateDeliveryChannel Modifies a delivery channel.
UpdateIntegratedServiceStatus Changes the status of an integrated Alibaba Cloud service.
UpdateRemediation Modifies a remediation setting.