ActionTrail can track and record Resource Access Management (RAM) operation events that are performed by using Alibaba Cloud accounts, RAM users, and RAM roles. This topic describes how to view RAM operation events in the ActionTrail console.

Background information

ActionTrail can track and record the following RAM operation events:

For more information about the fields in operation events, see ActionTrail event log reference.

Procedure

  1. Log on to the ActionTrail console.
  2. In the left-side navigation pane, click Event Detail Query.
  3. In the top navigation bar, select a region from the drop-down list. The region is where the event that you want to query occurred.
  4. On the Query Event Details page, select Service Name from the drop-down list.
  5. Enter Ram in the field and click the Search icon.
  6. Find the event that you want to query and move the pointer over the event name in the Event Name column to view the event details.
  7. Optional:To query the code of an event, click the plus sign (+) to the left of the event that you want to query and click Event Detail.