This topic describes the release notes for ActionTrail and provides links to the relevant references.

April 2022

Feature Description Release date Region References
AccessKey pair audit The AccessKey pair audit feature is supported in ActionTrail. You can use the feature to query the basic information about an AccessKey pair and the call records of the AccessKey pair, such as the accessed Alibaba Cloud services, related IP addresses, and resources. 2022-04 All regions Overview

December 2021

Feature Description Release date Region References
Scenario-based advanced event query Advanced event queries are supported in ActionTrail based on the following scenarios:
  • Query events that are related to an Alibaba Cloud account or an AccessKey pair.
  • Query events that are related to Center for Internet Security (CIS) benchmarks.
  • Query resource lifecycle events.
2021-12 All regions

November 2021

Feature Description Release date Region References
Event-based custom alerting Custom alert rules can be created in ActionTrail to monitor events. You can write query statements and configure thresholds when you create custom alert rules. 2021-11 All regions Create a custom alert rule

August 2021

Feature Description Release date Region References
Insight event The insight event feature is provided. You can use the feature to identify abnormal operations that are recorded in management events. This way, you can identify potential risks to your cloud resources and take remedial measures at the earliest opportunity. After you enable the insight event feature for a trail, ActionTrail identifies abnormal operations based on the management events recorded by the trail and generates insight events. These insight events are delivered to the Log Service Logstore or Object Storage Service (OSS) bucket specified for the trail.
Note To obtain the permissions to manage insight events,submit a ticket.
2021-08 All regions except China (Heyuan), China (Guangzhou), and UAE (Dubai) Overview of insight events

April 2021

Feature Description Release date Region References
Event alerting The event alerting feature is provided. You can use the feature to configure alert rules for a trail that is configured to deliver events to a Log Service Logstore. When the alert rules are triggered by sensitive or abnormal operations, you can receive alert notifications and respond at the earliest opportunity. 2021-04 All regions Overview

March 2021

Feature Description Release date Region References
Cross-account event delivery The cross-account event delivery feature is provided. You can use the feature to deliver the events of multiple Alibaba Cloud accounts or the events of multiple members in your resource directory to the same Log Service Logstore or OSS bucket. This helps you archive and monitor audit data in a centralized manner. 2021-03 All regions
Additional supported Alibaba Cloud services and fields for the Inner-ActionTrail feature
  • The following Alibaba Cloud services are supported by the Inner-ActionTrail feature: Key Management Service (KMS) and Data Security Center (DSC).
  • The EmployeeID field is recorded in platform events. This field indicates the encrypted ciphertext of the globally unique employee ID of an operator on Alibaba Cloud.
2021-03 All regions

January 2021

Feature Description Release date Region References
Historical event delivery Historical event delivery tasks can be created to deliver the events that occurred in the last 90 days and are recorded by ActionTrail to Log Service. Then, you can analyze or download these events based on your business requirements. 2021-01 All regions Create a historical event delivery task

December 2020

Feature Description Release date Region References
Advanced event query The advanced event query feature is provided. You can use the feature to perform advanced event queries based on a trail that is created to deliver events to a Log Service Logstore. You can specify multiple criteria to query the events that are associated with multiple Alibaba Cloud services and occurred in multiple regions more than 90 days ago. 2020-12 All regions Perform custom event queries

October 2020

Feature Description Release date Region References
Event summary query The event summary query feature is provided. ActionTrail generates event summaries every 2 hours. You can query event summaries in the ActionTrail console to improve the efficiency of event queries. 2020-10 All regions Event summary query

September 2020

Feature Description Release date Region References
Best practices The Best Practices page is added to the ActionTrail console. You can click the links on this page to view the best practices for operations such as creating trails and analyzing events. 2020-09 All regions

August 2020

Feature Description Release date Region References
Optimized trail operation Trails in all regions can be viewed in a specific region. This facilitates trail management. The method that is used to create a trail is updated. 2020-08 All regions

July 2020

Feature Description Release date Region References
Details of events Details of events, such as the source (Alibaba Cloud service), operator, and name of each event, are added. 2020-07 All regions Query events in the ActionTrail console

March 2020

Feature Description Release date Region References
Multi-account trails The operation logs of all members in the resource directory of an enterprise can be delivered to an OSS bucket or a Log Service Logstore. 2020-03 All regions

February 2020

Feature Description Release date Region References
Additional supported Alibaba Cloud services Events of more Alibaba Cloud services are supported. 2020-02 All regions Services that work with ActionTrail
Optimized engine for online event queries Multiple query criteria can be used at the same time. A single criterion supports multiple options. 2020-02 All regions Query events in the ActionTrail console

January 2020

Feature Description Release date Region References
Event delivery notification Event delivery notifications can be sent. You can receive notifications from a Message Service (MNS) topic after ActionTrail delivers events to an OSS bucket. 2020-01 All regions Create a single-account trail
OSS server-side encryption Server-side encryption can be enabled for events that are delivered to OSS buckets. 2020-01 All regions Create a single-account trail

December 2019

Feature Description Release date Region References
Integration with the ECS console Events of an Elastic Compute Service (ECS) instance can be viewed in the ECS console. 2019-12 All regions Query events in the ECS console
Multiple trails A maximum of five trails can be created in each region. You can create trails to track and record different types of events that occur in different regions and deliver the events to specified OSS buckets or Log Service Logstores based on your business requirements. 2019-12 All regions Create a multi-account trail
Region selection for trails Trails can be created to track and record events in one or more regions based on your business requirements. 2019-12 All regions Create a single-account trail
Online query of events that occurred in the last 90 days The online query of events that occurred in the last 90 days is supported without the need to create trails. The number of days that an event can be stored for query in the ActionTrail console is increased from 30 days to 90 days. If you need to store and query events that occurred 90 days ago, you must create a trail. 2019-12 All regions Query events in the ActionTrail console

November 2019

Feature Description Release date Region References
Auto-activation ActionTrail ActionTrail is automatically activated for all valid Alibaba Cloud accounts. 2019-11 All regions Billing
Best practices Best practices are provided to help you use ActionTrail and understand the compliance auditing on Alibaba Cloud. 2019-11 All regions

October 2019

Feature Description Release date Region References
More supported Alibaba Cloud services Events of more Alibaba Cloud services are supported. 2019-10 All regions Services that work with ActionTrail

September 2019

Feature Description Release date Region References
Inner-ActionTrail Platform events can be tracked and recorded. This improves the transparency of O&M on Alibaba Cloud. Only events of OSS are supported. You can submit a ticket to use this feature. 2019-9 Regions supported by the China site (aliyun.com) Enable the inner-ActionTrail feature