Cloud Config is integrated with ActionTrail. In the ActionTrail console, you can query the management events that are generated when you manage Cloud Config resources. ActionTrail can deliver management events to Logstores in Log Service or Object Storage Service (OSS) buckets. This way, you can audit the events in real time and locate the causes of issues.
ActionTrail generates management events when you manage cloud resources by using APIs or the Alibaba Cloud Management Console. The following table describes the management events of Cloud Config that you can query in the ActionTrail console.
| API operation | Description |
| ActiveAggregateConfigRules | Enables one or more rules in an account group. |
| ActiveConfigRules | Enables multiple rules at a time. |
| AttachAggregateConfigRuleToCompliancePack | Adds one or more rules in an account group to a compliance package. |
| AttachConfigRuleToCompliancePack | Adds one or more rules to a compliance package. |
| CheckServiceLinkedRoleForDeleting | Checks whether a service-linked role can be deleted. |
| CopyCompliancePacks | Clones compliance packages. |
| CopyConfigRules | Clones rules. |
| CreateAdvancedSearchFile | Generates a file that includes the results when you search for resources and downloads the file. |
| CreateAggregateAdvancedSearchFile | Generates a file that includes the results when you search for resources by account group name and downloads the file. |
| CreateAggregateCompliancePack | Creates a compliance package for an account group. |
| CreateAggregateConfigDeliveryChannel | Creates a delivery channel for an account group. |
| CreateAggregateConfigRule | Creates a rule for an account group. |
| CreateAggregateRemediation | Configures a remediation setting for an account group. |
| CreateAggregator | Creates an account group. |
| CreateCompliancePack | Creates a compliance package. |
| CreateConfigDeliveryChannel | Creates a delivery channel. |
| CreateConfigRule | Creates a rule. |
| CreateDeliveryChannel | Creates a delivery channel. |
| CreateRemediation | Creates a remediation setting. |
| DeactiveAggregateConfigRules | Disables one or more rules in an account group. |
| DeactiveConfigRules | Disables one or more rules. |
| DeleteAggregateCompliancePacks | Deletes one or more compliance packages from an account group. |
| DeleteAggregateConfigDeliveryChannel | Deletes a delivery channel from an account group. |
| DeleteAggregateConfigRules | Deletes one or more rules. |
| DeleteAggregateRemediations | Deletes one or more remediation settings from an account group. |
| DeleteAggregators | Deletes one or more account groups. |
| DeleteCompliancePacks | Deletes one or more compliance packages. |
| DeleteConfigDeliveryChannel | Deletes a delivery channel. |
| DeleteConfigRules | Deletes multiple rules at a time. |
| DeleteRemediations | Deletes one or more remediation settings. |
| DescribeCompliance | Queries the compliance evaluation results of resources. |
| DescribeComplianceHistory | Queries the compliance timeline of a resource. |
| DescribeComplianceReport | Queries the details of a compliance report on resources. |
| DescribeComplianceSummary | Queries the statistics about compliance evaluation results. |
| DescribeConfigRule | Queries the details of a rule. |
| DescribeConfigurationRecorder | Queries the types of resources that are monitored by Cloud Config. |
| DescribeDeliveryChannels | Queries the details of delivery channels. |
| DescribeDiscoveredResource | Queries the configuration details of a resource. |
| DescribeDiscoveredResourceBatch | Queries the details of multiple resources at a time. |
| DescribeEvaluationResults | Queries compliance evaluation results. |
| DescribeIntegratedServiceStatus | Queries the authorization status of each integrated Alibaba Cloud service. |
| DescribeProductComplianceSummary | Queries the statistics about the compliance evaluation results of Alibaba Cloud services. |
| DescribeRemediation | Queries the details of a remediation setting. |
| DetachAggregateConfigRuleToCompliancePack | Removes one or more rules in an account group from a compliance package. |
| DetachConfigRuleToCompliancePack | Removes one or more rules from a compliance package. |
| GenerateAggregateCompliancePackReport | Generates a compliance evaluation report for a compliance package in an account group. |
| GenerateAggregateConfigRulesReport | Generates a compliance evaluation report for all rules in an account group. |
| GenerateAggregateResourceInventory | Generates a resource list for an account group. |
| GenerateCompliancePackReport | Generates a compliance evaluation report for a compliance package. |
| GenerateConfigRulesReport | Generates a compliance evaluation report on all existing rules. |
| GenerateResourceInventory | Generates a compliance evaluation report on resources. |
| GetAdvancedSearchFile | Queries a file that includes the results when you search for resources and downloads the file. |
| GetAggregateAccountComplianceByPack | Queries the compliance evaluation results of member accounts monitored by a compliance package in an account group. |
| GetAggregateCompliancePack | Queries the details of a compliance package in an account group. |
| GetAggregateCompliancePackReport | Queries a compliance evaluation report on a compliance package in an account group. |
| GetAggregateConfigDeliveryChannel | Queries the information about a delivery channel in an account group. |
| GetAggregateConfigRule | Queries the details of a rule in an account group. |
| GetAggregateConfigRuleComplianceByPack | Queries the compliance evaluation results of specified rules in a compliance package in an account group. |
| GetAggregateConfigRulesReport | Queries a compliance evaluation report on all existing rules in an account group. |
| GetAggregateConfigRuleSummaryByRiskLevel | Queries the summary of compliance evaluation results in an account group by rule risk level. |
| GetAggregateDiscoveredResource | Queries the details of a resource in an account group. |
| GetAggregateResourceComplianceByConfigRule | Queries the compliance evaluation results of a rule in an account group. |
| GetAggregateResourceComplianceByPack | Queries the statistics about the compliance evaluation results of resources monitored by a compliance package in an account group. |
| GetAggregateResourceComplianceGroupByRegion | Queries the statistics about compliance evaluation results for rules in an account group by region. |
| GetAggregateResourceComplianceGroupByResourceType | Queries the statistics about compliance evaluation results for rules in an account group by resource. |
| GetAggregateResourceComplianceTimeline | Queries the compliance timeline of a resource in an account group. |
| GetAggregateResourceConfigurationTimeline | Queries the configuration timeline of a resource in an account group. |
| GetAggregateResourceCountsGroupByRegion | Queries the statistics about the resources in an account group by region. |
| GetAggregateResourceCountsGroupByResourceType | Queries the statistics about the resources in an account group by resource type. |
| GetAggregateResourceInventory | Queries a compliance evaluation report on the resources in an account group. |
| GetAggregator | Queries the details of an account group. |
| GetCompliancePack | Queries the details of a compliance package. |
| GetCompliancePackReport | Queries a compliance evaluation report on a compliance package. |
| GetConfigDeliveryChannel | Queries the information about a delivery channel. |
| GetConfigRule | Queries the details of a rule. |
| GetConfigRuleComplianceByPack | Queries the statistics about the compliance evaluation results in a compliance package by rule. |
| GetConfigRulesReport | Queries a compliance evaluation report on all existing rules. |
| GetConfigRuleSummaryByRiskLevel | Queries the summary of compliance evaluation results by rule risk level. |
| GetDiscoveredResource | Queries the details of a resource. |
| GetDiscoveredResourceCounts | Queries the number of resources. |
| GetDiscoveredResourceCountsGroupByRegion | Queries the statistics about resources by region. |
| GetDiscoveredResourceCountsGroupByResourceType | Queries the statistics about resources by resource type. |
| GetDiscoveredResourceSummary | Queries the statistics about resources monitored by Cloud Config. |
| GetManagedRule | Queries the details of a managed rule. |
| GetResourceComplianceByConfigRule | Queries the statistics about compliance evaluation results for resources based on a rule. |
| GetResourceComplianceByPack | Queries the compliance evaluation results of resources monitored by a compliance package. |
| GetResourceComplianceGroupByRegion | Queries the statistics about compliance evaluation results for resources by region. |
| GetResourceComplianceGroupByResourceType | Queries the statistics about compliance evaluation results for resources by resource type. |
| GetResourceComplianceTimeline | Queries the compliance timeline of a resource. |
| GetResourceConfigHistory | Queries the configuration change records of a resource. |
| GetResourceConfigurationTimeline | Queries the configuration timeline of a resource. |
| GetResourceInventory | Queries the information about a report on resources. |
| GetServiceQuota | Queries a specified quota of an Alibaba Cloud service. |
| GetSupportedResourceTypes | Queries the resource types that are supported by Cloud Config. |
| GetSupportedResourceTypesForSpec | Queries the resource types that are supported by Cloud Config. |
| GetSupportedResourceTypesInfo | Queries the information about the core configurations of resource types that are supported by Cloud Config. |
| IgnoreAggregateEvaluationResults | Ignores one or more resources that are evaluated as non-compliant by a rule in an account group. |
| IgnoreEvaluationResults | Ignores one or more resources that are evaluated as non-compliant by a rule. |
| ListAggregateCompliancePacks | Queries the compliance packages in an account group. |
| ListAggregateConfigDeliveryChannels | Queries the information about all delivery channels of an account group. |
| ListAggregateConfigRuleEvaluationResults | Queries compliance evaluation results for resources evaluated by rules in an account group. |
| ListAggregateConfigRules | Queries rules in an account group. |
| ListAggregateDiscoveredResourceRelations | Queries resource relationships in an account group. |
| ListAggregateDiscoveredResources | Queries resources in an account group. |
| ListAggregateDiscoveredResourcesByAdvancedSearch | Queries resources in an account group. |
| ListAggregateRemediations | Queries all remediation templates in an account group. |
| ListAggregateResourceEvaluationResults | Queries compliance evaluation results for resources in an account group. |
| ListAggregators | Queries account groups. |
| ListCadtAppResource | Queries resources in an application structure. |
| ListCompliancePacks | Queries compliance packages. |
| ListCompliancePackTemplates | Queries compliance package templates. |
| ListConfigDeliveryChannels | Queries delivery channels. |
| ListConfigRuleEvaluationResults | Queries compliance evaluation results for resources evaluated by rules. |
| ListConfigRules | Queries rules. |
| ListDiscoveredResourceRelations | Queries resource relationships. |
| ListDiscoveredResourceRelationsBatch | Queries multiple resource relationships at a time. |
| ListDiscoveredResources | Queries the details of resources. |
| ListDiscoveredResourcesByAdvancedSearch | Queries the details of resources. |
| ListIntegratedService | Queries the authorized Alibaba Cloud services that are integrated with Cloud Config. |
| ListManagedRules | Queries managed rules. |
| ListRemediations | Queries remediation settings. |
| ListRemediationTemplates | Queries remediation templates. |
| ListResourceEvaluationResults | Queries compliance evaluation results for resources. |
| ListResourceOwnerInAllAggregator | Queries the information about the members of an account group. |
| ListServiceQuotas | Queries the quotas of an Alibaba Cloud service. |
| ListSupportedProducts | Queries the Alibaba Cloud services that are supported by Cloud Config. |
| ListTagResources | Queries the tags of a resource. |
| PutConfigRule | Creates or modifies a rule. |
| PutConfigurationRecorder | Changes the types of resources that are monitored by Cloud Config. |
| PutDeliveryChannel | Creates or updates a delivery channel. |
| PutEvaluations | Submits compliance evaluation results. |
| RevertAggregateEvaluationResults | Re-evaluates one or more resources that are evaluated as non-compliant by a rule in an account group. |
| RevertEvaluationResults | Re-evaluates one or more resources that are evaluated as non-compliant by a rule. |
| StartAggregateConfigRuleEvaluation | Uses a rule in an account group to evaluate resources. |
| StartAggregateRemediation | Performs a remediation operation by using a rule in an account group. |
| StartConfigRuleEvaluation | Enables a rule. |
| StartConfigurationRecorder | Enables Cloud Config to monitor the resources of your Alibaba Cloud account. |
| StartRemediation | Enables a remediation setting. |
| StopConfigRules | Disables multiple rules at a time. |
| StopConfigurationRecorder | Deactivates Cloud Config. |
| TagResources | Adds a tag to a resource. |
| UntagResources | Removes a tag from a resource. |
| UpdateAggregateCompliancePack | Modifies a compliance package in an account group. |
| UpdateAggregateConfigDeliveryChannel | Modifies a delivery channel in an account group. |
| UpdateAggregateConfigRule | Modifies a rule in an account group. |
| UpdateAggregateRemediation | Modifies a remediation setting. |
| UpdateAggregator | Modifies an account group. |
| UpdateCompliancePack | Modifies a compliance package. |
| UpdateConfigDeliveryChannel | Modifies a delivery channel. |
| UpdateConfigRule | Modifies a rule. |
| UpdateDeliveryChannel | Modifies a delivery channel. |
| UpdateIntegratedServiceStatus | Changes the status of an integrated Alibaba Cloud service. |
| UpdateRemediation | Modifies a remediation setting. |