This topic describes how to enable the Inner-ActionTrail feature.


  • A ticket is submitted, or your sales manager added you to the whitelist of users who can use the Inner-ActionTrail feature.
  • The AliyunActionTrailDefaultRole role is created for ActionTrail. The role allows you to use ActionTrail to deliver event logs to Log Service.
    You can go to the Cloud Resource Access Authorization page to complete the authorization.
    • This authorization is required only when you configure ActionTrail for the first time. You must complete the authorization by using your Alibaba Cloud account.
    • If you use a RAM user to log on to ActionTrail, you must grant the required permissions to the RAM user. For more information, see RAM user authorization.


  1. Log on to the ActionTrail console.
  2. In the left-side navigation pane, choose Inner-ActionTrail > Trails to view introductions to the Inner-ActionTrail feature.
    • Inner-ActionTrail appears only after you enable the Inner-ActionTrail feature.
    • After you enable the Inner-ActionTrail feature, a Logstore named innertrail_trail name is created.

What to do next

You can create a trail to deliver event logs to Log Service for storage and analysis. For more information, see Common operations on logs of Alibaba Cloud services.