Elastic Compute Service (ECS) is integrated with ActionTrail. In the ActionTrail console, you can query the management events that are generated when you manage ECS resources. ActionTrail can deliver management events to Logstores in Log Service or Object Storage Service (OSS) buckets. This way, you can audit the events in real time and locate the causes of issues.
ActionTrail generates management events when you manage cloud resources by using APIs or the Alibaba Cloud Management Console. The following table describes the management events of ECS that you can query in the ActionTrail console.
Accepts the default operation for a system event in the Inquiring state and authorizes the system to perform the default operation.
Activates a router interface.
Adds one or more public IP addresses to a NAT service plan.
Adds one or more ECS instances that can be migrated.
Adds one or more tags to ECS resources, or overwrites one or more tags of ECS resources.
Creates one or more pay-as-you-go or subscription dedicated hosts.
Applies for an elastic IP address (EIP).
Assigns a public IP address to an ECS instance.
Applies an automatic snapshot policy to one or more cloud disks.
Assigns one or more IPv6 addresses to an elastic network interface (ENI).
Assigns one or more secondary private IP addresses to an ENI.
Associates an EIP to an ECS instance.
Associates a high-availability virtual IP address (HAVIP) to an ECS instance that is located in a virtual private cloud (VPC).
Links an ECS instance located in the classic network to a VPC by establishing a ClassicLink connection between them.
Attaches a pay-as-you-go data disk to an ECS instance.
Attaches an instance RAM role to one or more ECS instances.
Binds an SSH key pair to one or more Linux instances.
Binds an ENI to an ECS instance located in a VPC.
Creates an inbound rule in a security group.
Creates an outbound rule in a security group.
Disables an automatic snapshot policy for one or more cloud disks.
Cancels an ongoing image copy (CopyImage) task.
Cancels an image creation task.
Cancels an instance migration task.
Cancels a migration plan.
Cancels a connection over an Express Connect circuit.
Cancels one or more simulated system events that are in the Scheduled or Executing state.
Cancels an ongoing task.
Configures a security group rule.
Enables an initiator router interface to send a connection request to an acceptor router interface.
Converts the public IP address of an ECS instance located in a VPC to an EIP.
Copies a custom image from one region to another region.
Copies a normal snapshot from one region to another region.
Purchases an ECS instance on the buy page.
Creates an activation code.
Creates an auto provisioning group.
Creates an automatic snapshot policy.
Creates a capacity reservation.
Creates a Cloud Assistant command.
Creates a dedicated block storage cluster.
Creates a dedicated host cluster.
Creates a default automatic snapshot policy.
Creates a filing for the demanded ECS resources.
Creates a deployment set in a specified region.
Creates a diagnosis.
Creates a diagnostic metric set.
Creates a diagnostic report for a resource.
Creates a pay-as-you-go or subscription data disk.
Creates a replication pair.
Creates one or more pay-as-you-go or subscription data disks.
Creates an elasticity assurance.
Creates an ENI Quality of Service (QoS) group.
Adds DNAT entries to a DNAT table.
Creates feature feedback.
Creates an HAVIP.
Creates a high performance computing (HPC) cluster.
Creates a custom image.
Creates an image component.
Creates an image template.
Creates a subscription or pay-as-you-go ECS instance.
Creates an SSH key pair.
Creates a launch template.
Creates a version for a specified launch template.
Creates a migration plan.
Creates a NAT gateway.
Creates an ENI.
Grants ENI permissions to Alibaba Cloud partners who are certified independent software vendors (ISVs) or individual users.
Applies for a connection over an Express Connect circuit.
Creates a prefix list.
Creates a custom route entry.
Creates a router interface.
Creates a security group.
Schedules simulated system events for one or more ECS instances.
Creates a snapshot for a cloud disk.
Creates a snapshot-consistent group for the disks on an ECS instance.
Creates a storage set in a zone of a specified region.
Creates a user quota application.
Creates a virtual border router (VBR).
Creates a directory.
Creates a VPC.
Creates a vSwitch.
Disables a router interface.
Deletes an unused activation code.
Deletes an auto provisioning group.
Deletes an automatic snapshot policy.
Deletes a specified NAT service plan.
Deletes a Cloud Assistant command.
Deletes a dedicated host cluster.
Deletes a filing for the demanded ECS resources.
Deletes a deployment set.
Deletes diagnostic metric sets.
Deletes a diagnostic report.
Deletes a pay-as-you-go data disk.
Deletes a replication pair.
Deletes an ENI QoS group.
Deletes a specified DNAT entry.
Deletes an HAVIP.
Deletes an HPC cluster.
Delete a custom image.
Deletes an image component.
Deletes an image template.
Releases a pay-as-you-go ECS instance or an expired subscription ECS instance.
Releases one or more pay-as-you-go ECS instances or expired subscription ECS instances.
Deletes one or more SSH key pairs.
Deletes a launch template.
Deletes a version of a specified launch template.
Deletes a specified NAT gateway.
Deletes an ENI.
Revokes ENI permissions.
Deletes a connection over an Express Connect circuit.
Deletes a prefix list.
Deletes a custom route entry.
Deletes a router interface.
Deletes a security group.
Deletes a specified snapshot.
Deletes a snapshot-consistent group.
Deletes an empty storage set.
Deletes a user quota application.
Deletes a VBR.
Deletes a VPC.
Deletes a vSwitch.
Deregisters a managed instance.
Queries the access points of an Express Connect circuit in a specified region.
Queries the quota of ECS instances that can be created in a region.
Queries the quotas within an account.
Queries the attributes of the quotas within an account.
Queries existing activation codes and their usage information.
Queries the capacity of an auto provisioning group.
Queries the scheduling tasks of an auto provisioning group.
Queries the ECS instances in an auto provisioning group.
Queries the information about one or more auto provisioning groups.
Queries the automatic snapshot policies that you create.
Queries the resources in a zone.
Queries the maximum public bandwidth that is available for purchase, upgrade, or downgrade when different instance types are involved.
Queries bandwidth plans.
Queries bandwidth prices.
Queries the ECS instances that match a capacity reservation.
Queries the details of one or more capacity reservations.
Queries one or more ECS instances that are located in the classic network and have established ClassicLink connections with VPCs.
Checks whether the Cloud Assistant client is installed on one or more ECS instances.
Queries the Cloud Assistant commands that you create.
Queries the dedicated block storage clusters that are created.
Queries the auto-renewal status of one or more subscription dedicated hosts.
Queries the details of one or more dedicated host clusters.
Queries the details of one or more dedicated hosts.
Queries the details of dedicated host types supported in a specified region.
Queries the delivery and usage status of filed resources.
Queries the attributes of one or more deployment sets.
Queries the instance families that support deployment sets.
Queries the physical topology of a deployment set.
Queries a diagnosis.
Queries diagnostic metrics.
Queries diagnostic metric sets.
Queries the details of a diagnostic report.
Queries diagnostic reports.
Queries the monitoring data of a cloud disk over a specified period of time.
Queries replication pairs in a region.
Queries one or more Elastic Block Storage (EBS) devices that you create, including cloud disks and local disks.
Queries the full status information about one or more EBS devices.
Queries the EIPs that are created in a specified region.
Queries the monitoring data of an EIP.
Queries the running ECS instances that are created by using an elasticity assurance.
Queries the details of elasticity assurances.
Queries the monitoring data of a secondary ENI over a specified period of time.
Queries the information about an ENI QoS group.
Queries the DNAT entries that are created.
Queries feature feedback.
Queries the types of HAVS instances.
Queries available HPC clusters.
Queries the details of one or more image components.
Queries the available custom images that are created in a specified image family.
Queries the details of an image creation task.
Queries the details of one or more image templates.
Queries available images.
Queries the accounts to which a custom image is shared.
Queries the ECS instance types supported by a specified image.
Queries the information about the private pools that ECS instances match.
Queries the details of an ECS instance.
Queries the time when an ECS instance automatically restarts.
Queries the auto-renewal status of one or more subscription ECS instances.
Queries the system events of a specified ECS instance.
Queries the maintenance attributes of an ECS instance.
Queries the pricing information about the configuration modification of an ECS instance.
Queries the monitoring data of an ECS instance.
Queries the ECS instances that require a restart.
Queries the history of the performance limits on an ECS instance.
Queries the instance RAM roles that are attached to one or more ECS instances.
Queries the details of one or more ECS instances.
Queries the full status information about one or more ECS instances.
Queries the status information about multiple ECS instances.
Queries the topology of the host on which an ECS instance resides.
Queries the instance families provided by ECS.
Queries the instance types provided by ECS.
Queries the Virtual Network Computing (VNC) password of an ECS instance.
Queries the VNC URL of an ECS instance.
Queries the execution results of Cloud Assistant commands on ECS instances.
Queries the execution list and status of Cloud Assistant commands.
Queries one or more key pairs.
Queries the attributes of a Key Management Service (KMS) key.
Queries KMS keys.
Queries one or more available launch templates.
Queries the versions of launch templates.
Queries resource quotas.
Queries the related KMS keys.
Queries the repair activities of a local disk.
Queries managed instances.
Queries the ECS instances in an instance migration task.
Queries migration plans.
Queries migration preferences.
Queries the NAT gateways that are created.
Queries the attributes of an ENI.
Queries the ENI permissions that are granted to Alibaba Cloud partners who are certified ISVs or individual users.
Queries the EIP monitoring data of a new project.
Queries the connections that are established over Express Connect circuits in a specified region.
Queries the information about resources that are associated with a specified prefix list.
Queries the details of a specified prefix list.
Queries the information about one or more prefix lists.
Queries the refund prices of subscription resources.
Queries the most recent prices of ECS resources.
Queries private pools.
Queries the information about a specified instance type.
Queries recommended services.
Queries the regions in which ECS is available.
Queries the renewal prices of subscription ECS resources.
Queries reserved instances.
Queries the categories of reserved instances.
Queries the pricing information about reserved instances.
Queries the purchased reserved instances.
Queries resource aggregations.
Queries the information about resource allocation.
Queries resources by tag.
Queries the display information about a resource.
Queries the attributes of resource filters.
Queries the filters that are used to filter for recommended resources.
Queries available resources within a specified zone when you upgrade or downgrade instance types or replace system disks.
Queries resource solutions.
Queries router interfaces.
Queries the route tables of a specified router.
Queries the rules of a security group.
Checks whether a security group is referenced by other security groups.
Queries the basic information about security groups.
Queries the files that are sent by Cloud Assistant and the status of the files.
Queries the information about snapshot-consistent groups.
Queries the snapshot chains of one or more cloud disks.
Queries the monitoring data of changes in snapshot sizes in a region over the last 30 days.
Queries the OSS storage plans that are purchased in a region.
Queries all snapshots of an ECS instance or a cloud disk.
Queries the number of snapshots that are stored in a region and the total size of the snapshots.
Queries the average release rate of an instance in the last 30 days.
Queries on-site suggestions.
Queries the price history of a preemptible instance in the last 30 days.
Queries the allocation of storage capacity units (SCUs).
Queries the details of one or more SCUs.
Queries the details of the cloud disks or Shared Block Storage devices in a storage set.
Queries the information about one or more storage sets.
Queries available tags.
Queries the details of an asynchronous task.
Queries the progress of one or more asynchronous requests.
Queries the business behavior of a user.
Queries the user data of an ECS instance.
Queries user quota applications.
Queries the VBRs that are created.
Queries the VBRs that are bound to a specified Express Connect circuit.
Queries the VPCs that are created.
Queries the vRouters in a specified region.
Queries the zones in a region.
Unlinks an ECS instance located in the classic network from a VPC by removing the ClassicLink connection between them.
Detaches a pay-as-you-go data disk from an ECS instance.
Detaches an instance RAM role from one or more ECS instances.
Unbinds an SSH key pair from one or more Linux instances.
Unbinds an ENI from an ECS instance.
Manually disables a specified activation code.
Exports a custom image to an OSS bucket that resides in the same region as the custom image.
Exports a snapshot.
Reports a diagnosis.
Queries the command output of an ECS instance.
Queries the screenshots of an ECS instance.
Queries the data of a launch template.
Imports a local image file to an ECS instance.
Imports the public key of an RSA-encrypted key pair that is generated by a third-party tool.
Imports the snapshots in an OSS bucket to the snapshot list.
Installs the Cloud Assistant client on one or more ECS instances.
Triggers a Cloud Assistant command for one or more ECS instances.
Adds an ENI to an ENI QoS group.
Adds an ECS resource or service to a resource group.
Adds an ECS instance to a specified security group.
Removes an ENI from an ENI QoS group.
Removes an ECS instance from a specified security group.
Queries the ECS instance quota within an account.
Queries the images that are bound to an ECS instance.
Queries the tags that are added to one or more ECS resources.
Modifies the configurations of an ECS instance on the buy page.
Modifies the configurations of an auto provisioning group.
Modifies an automatic snapshot policy.
Modifies an automatic snapshot policy.
Modifies the bandwidth of a specified NAT service plan.
Modifies the information about a capacity reservation.
Modifies the parameters and content of a Cloud Assistant command.
Modifies the information about a dedicated host.
Specifies an automatic release time for a pay-as-you-go dedicated host.
Enables or disables auto-renewal for one or more subscription dedicated hosts.
Modifies the information about a dedicated host cluster.
Changes the billing method of dedicated hosts.
Changes the name or modifies the description of a deployment set.
Modifies a diagnosis.
Modifies a diagnostic metric set.
Modifies the attributes of one or more block storage devices. The attributes include their names, descriptions, and whether the attributes are released along with their associated instances.
Changes the billing methods of up to 16 cloud disks attached to an ECS instance.
Changes the type of a cloud disk.
Changes the name or maximum bandwidth or modifies the description of a specified EIP.
Changes the name or modifies the description of an elasticity assurance.
Modifies an ENI QoS group.
Modifies the description of an HPC cluster.
Changes the name, status, or image family or modifies the description of a custom image.
Modifies the permissions on a shared image group.
Modifies the share permissions on an image.
Modifies the attributes of the private pool for an ECS instance.
Modifies the information about an ECS instance.
Modifies the time when an ECS instance automatically restarts.
Specifies or cancels the automatic release time for a pay-as-you-go ECS instance.
Enables or disables auto-renewal for one or more subscription ECS instances.
Changes the billing method of one or more ECS instances.
Changes the deployment set of an ECS instance.
Modifies the maintenance attributes of an ECS instance.
Modifies the metadata of an ECS instance.
Modifies the bandwidth configuration of an ECS instance.
Changes the instance type and public bandwidth of a pay-as-you-go ECS instance.
Modifies the VNC password of an ECS instance.
Modifies the VPC, private IP address, or vSwitch of an ECS instance located in a VPC.
Modifies the default version of a launch template.
Modifies a managed instance.
Modifies the ECS instances in an instance migration task.
Modifies a migration plan.
Modifies the attributes such as the name, description, and security group of an ENI.
Changes the name or modifies the description or entries of a specified prefix list.
Upgrades or downgrades the instance type of a subscription ECS instance.
Modifies the attributes of a reserved instance.
Splits, merges, or modifies reserved instances.
Modifies the metadata of a resource.
Modifies the configurations of a router interface.
Modifies the specifications of a router interface.
Changes the name or modifies the description of a security group.
Modifies the description of an outbound rule in a security group.
Modifies the internal access control policy of a basic security group.
Modifies the description of an inbound rule in a security group.
Changes the name or modifies the description of a snapshot.
Modifies a snapshot-consistent group.
Changes the name or modifies the description of an SCU.
Changes the name or modifies the description of a storage set.
Modifies the business behavior of a user.
Modifies the configurations of a VBR.
Modifies the attributes of a specified VPC.
Changes the name or modifies the description of a vRouter.
Changes the name or modifies the description of a specified vSwitch.
Requests to unsubscribe from resources based on the 5-day money-back guarantee.
Purchases a reserved instance.
Purchases one or more SCUs.
Queries ENI QoS groups by ENI.
Queries ENI QoS groups by instance.
Reactivates a pay-as-you-go ECS instance that is in the Expired state or Overdue and Being Recycled state.
Adds a migration task again.
Restarts an ECS instance that is in the Running state.
Restarts one or more ECS instances that are in the Running state.
Migrates ECS instances from a failed dedicated host.
Redeploys an ECS instance.
Re-initializes a cloud disk to the state that is used when the cloud disk is created.
Releases an ECS instance.
Releases a capacity reservation.
Releases a pay-as-you-go dedicated host.
Releases a specified EIP.
Release a public IP address.
Requests to unsubscribe from resources.
Removes one or more public IP addresses from a NAT service plan.
Removes one or more tags from a resource such as an instance, disk, snapshot, image, or security group.
Renews an instance or a resource plan.
Renews one or more subscription dedicated hosts.
Renews a subscription ECS instance.
Replaces the system disk or operating system of an ECS instance.
Reports exceptions on one or more ECS instances.
Rolls back a disk to a specific point in time based on a snapshot of the disk.
Resets disks in batches.
Resizes a cloud disk.
Deletes an inbound rule from a security group.
Deletes an outbound rule from a security group.
Runs a shell, PowerShell, or batch script on one or more ECS instances.
Creates one or more pay-as-you-go or subscription ECS instances.
Sends a remote file to one or more ECS instances.
Specifies an automatic release time for an ECS instance.
Activates a replication pair.
Starts an elasticity assurance that can be used for a limited number of times.
Executes an image creation task by using an image template.
Starts an ECS instance.
Starts one or more ECS instances that are in the Stopped state.
Creates a session.
Stops a replication pair.
Stops an ECS instance that is in the Running state.
Stops one or more ECS instances that are in the Running state.
Stops the process of a running Cloud Assistant command on one or more ECS instances.
Adds tags to specified ECS resources.
Terminates a connection over an Express Connect circuit.
Terminates a VBR.
Unassigns one or more IPv6 addresses from an ENI.
Unassigns one or more secondary private IP addresses from an ENI.
Disassociates an EIP from an ECS instance.
Disassociates an HAVIP from an ECS instance located in a VPC.
Removes tags from specified ECS resources.