All Products
Search
Document Center

ActionTrail:Auditable events of DCDN

Last Updated:Jun 22, 2026

Dynamic Route for CDN (DCDN) is integrated with ActionTrail. You can query management events generated when you manage DCDN resources. ActionTrail can deliver management events to Simple Log Service (SLS) Logstores or Object Storage Service (OSS) buckets for real-time auditing and issue analysis.

ActionTrail records management events generated when you manage cloud resources by using the API or the console. The following table lists the DCDN management events that you can query in ActionTrail. Descriptions for some events will be added later.

Event Name

Event definition

ActivateDcdnVersionOfConfigGroup

Published version.

AddDcdnConfigGroup

A configuration group is created.

AddDcdnDomain

A domain name is added to DCDN.

AddDcdnIpaDomain

A domain name is added to IP Application Accelerator (IPA).

AttachDcdnDomainNameToVersion

Associate a domain name.

BatchAddDcdnDomain

Multiple domain names are added to DCDN at a time.

BatchCreateDcdnWafRules

You can configure protection rules.

BatchDeleteDcdnDomainConfigs

The configurations of multiple accelerated domain names are deleted at a time.

BatchDeleteDcdnWafRules

Multiple WAF protection rules are deleted at a time.

BatchSetDcdnDomainCertificate

The certificate feature is configured and the certificate information is modified for multiple accelerated domain names at a time.

BatchSetDcdnDomainConfigs

Multiple accelerated domain names are configured at a time.

BatchSetDcdnIpaDomainConfigs

Multiple IPA-accelerated domain names are configured at a time.

BatchSetDcdnWafDomainConfigs

The protection status of multiple accelerated domain names is configured at a time.

BatchSetRDBlockIP

The IP addresses of multiple domain names are blocked or unblocked at a time.

BatchStartDcdnDomain

Multiple disabled accelerated domain names are enabled at a time.

BatchStopDcdnDomain

Disable an accelerated domain name.

CheckDcdnProjectExist

Whether a real-time log delivery project exists is checked.

CloneDcdnVersionOfConfigGroup

Copy the version.

CommitStagingRoutineCode

Generate a production version.

Create

A resource is purchased on the buy page.

CreateDcdnCertificateSigningRequest

A certificate signing request (CSR) file is created.

CreateDcdnDeliverTask

A tracking task is created.

CreateDcdnDomainOfflineLogDelivery

Log storage is enabled.

CreateDcdnSLSRealTimeLogDelivery

A real-time log delivery project is created.

CreateDcdnSubTask

A custom operations report is created.

CreateDcdnWafPolicy

You can set the mitigation policies.

CreateRoutine

A routine is created.

CreateSlrAndSlsProject

A service-linked role and a Log Service project are created.

DeactivateDcdnConfigOfVersion

A version of a configuration template is discontinued.

DeleteDcdnConfigGroup

A configuration group is deleted.

DeleteDcdnConfigOfVersion

A version of a configuration template is deleted.

DeleteDcdnDeliverTask

You can delete a subscribed report job.

DeleteDcdnDomain

An accelerated domain name is removed.

DeleteDcdnIpaDomain

An IPA-accelerated domain name is removed.

DeleteDcdnIpaSpecificConfig

Deletes the IPA layer configuration for a specified domain name.

DeleteDcdnKv

Key-value pairs in a namespace are deleted.

DeleteDcdnKvNamespace

A namespace is deleted.

DeleteDcdnRealTimeLogProject

A real-time log delivery project is deleted.

DeleteDcdnSpecificConfig

The configurations of an accelerated domain name are deleted.

DeleteDcdnSpecificStagingConfig

The configurations of an accelerated domain name are deleted from the canary release environment.

DeleteDcdnSubTask

A custom operations report is deleted.

DeleteDcdnVersionOfConfigGroup

A version of a configuration group is deleted.

DeleteDcdnWafPolicy

A WAF protection policy is deleted.

DeleteRoutine

Deletes an EdgeRoutine program configuration.

DeleteRoutineCodeRevision

You can delete the EdgeRoutine code.

DeleteRoutineConfEnvs

You can delete the grayscale environment for the EdgeRoutine code.

DescribeDcdnAclFields

Precise access control rules are configured.

DescribeDcdnActiveVersionOfConfigGroup

The version of a configuration group that is in effect is queried.

DescribeDcdnBgpBpsData

Bandwidth data is queried for Border Gateway Protocol (BGP) accelerated domain names. Data is collected every 5 minutes.

DescribeDcdnBgpTrafficData

Traffic data is queried for BGP accelerated domain names. Data is collected every 5 minutes.

DescribeDcdnBlockedRegions

You can query the countries and regions that are supported for geo-blocking.

DescribeDcdnCertificateDetail

The details of a certificate are queried.

DescribeDcdnCertificateList

Retrieves a list of certificates.

DescribeDcdnConfigGroupDetail

Configuration templates in a configuration group are queried.

DescribeDcdnConfigOfVersion

You can query the version configuration.

DescribeDcdnConfigOfVersionForDiff

Configurations are exported.

DescribeDcdnDeletedDomains

Query for deleted domain names.

DescribeDcdnDeliverList

You can query the list of report tracking tasks.

DescribeDcdnDomainBpsData

The bandwidth data of one or more accelerated domain names is queried.

DescribeDcdnDomainBpsDataByLayer

You can retrieve the bandwidth information for an accelerated domain name.

DescribeDcdnDomainByCertificate

Accelerated domain names are queried by SSL certificate.

DescribeDcdnDomainCcActivityLog

Query interception logs for rate limiting rules.

DescribeDcdnDomainCertificateInfo

The certificate information about an accelerated domain name is queried.

DescribeDcdnDomainCname

Verify that the CNAME configuration is complete.

DescribeDcdnDomainConfigs

The configurations of an accelerated domain name are queried.

DescribeDcdnDomainDetail

The basic information about an accelerated domain name is queried.

DescribeDcdnDomainHitRateData

Hit ratios are queried for an accelerated domain name.

DescribeDcdnDomainHttpCodeData

The total number and proportions of HTTP status codes returned from one or more accelerated domain names are queried. Data is collected every 5 minutes.

DescribeDcdnDomainHttpCodeDataByLayer

The distribution of HTTP status codes is queried by protocol.

DescribeDcdnDomainIpaBpsData

The bandwidth data of the Layer-4 accelerated network is queried for one or more accelerated domain names.

DescribeDcdnDomainIpaConnData

The number of IPA user connections is queried.

DescribeDcdnDomainIpaTrafficData

The network traffic data of the Layer-4 accelerated network is queried for one or more accelerated domain names.

DescribeDcdnDomainISPData

The proportions of data usage of different Internet service providers (ISPs) are queried. Data is collected every day.

DescribeDcdnDomainLog

The address from which you can download the raw access logs of an accelerated domain name is queried.

DescribeDcdnDomainMultiUsageData

Retrieve various types of data for a domain name.

DescribeDcdnDomainNamesOfVersion

You can query the list of associated domain names.

DescribeDcdnDomainOriginBpsData

The data of back-to-origin bandwidth is queried for one or more accelerated domain names.

DescribeDcdnDomainOriginTrafficData

The data of back-to-origin traffic is queried for one or more accelerated domain names.

DescribeDcdnDomainProperty

You can obtain domain name properties.

DescribeDcdnDomainPvData

The page view (PV) data of an accelerated domain name is queried. Data can be collected at minimum intervals of one hour.

DescribeDcdnDomainQpsData

The number of queries per second (QPS) for one or more accelerated domain names is queried.

DescribeDcdnDomainQpsDataByLayer

The number of queries per second (QPS) for the accelerated domain name.

DescribeDcdnDomainRealTimeBpsData

The bandwidth data of one or more accelerated domain names is queried. Data is collected every minute.

DescribeDcdnDomainRealTimeByteHitRateData

Byte hit ratios for one or more accelerated domain names are queried. Data is collected every minute.

DescribeDcdnDomainRealTimeDetailData

The traffic data and the number of visits of each ISP in each region are queried. Data is collected every minute.

DescribeDcdnDomainRealTimeHttpCodeData

The total number and proportions of HTTP status codes returned from one or more accelerated domain names are queried.

DescribeDcdnDomainRealTimeQpsData

You can retrieve data on requests per second for a domain name at a 1-minute granularity.

DescribeDcdnDomainRealTimeReqHitRateData

Request hit ratios for one or more accelerated domain names are queried. Data is collected every minute.

DescribeDcdnDomainRealTimeSrcBpsData

You can retrieve origin bandwidth data for a domain name with a granularity of 1 minute.

DescribeDcdnDomainRealTimeSrcTrafficData

The data of back-to-origin traffic is queried for one or more accelerated domain names. Data is collected every minute.

DescribeDcdnDomainRegionData

The distribution of users is queried by region for an accelerated domain name. Data is collected every day.

DescribeDcdnDomainStagingConfig

The configurations of the canary release environment are queried.

DescribeDcdnDomainTopReferVisit

Frequently requested web pages of one or more accelerated domain names on a specific day are queried and sorted.

DescribeDcdnDomainTopUrlVisit

Frequently referenced URLs on a specific day are queried.

DescribeDcdnDomainTrafficData

The network traffic data of one or more accelerated domain names is queried.

DescribeDcdnDomainUsageData

Queries the usage data for a domain name in a specified billing region.

DescribeDcdnDomainUvData

The unique visitor (UV) data of an accelerated domain name is queried. Data is collected every hour.

DescribeDcdnDomainWebsocketBpsData

The bandwidth data of one or more accelerated domain names for which WebSocket is enabled is queried.

DescribeDcdnDomainWebsocketHttpCodeData

The total number and proportions of HTTP status codes returned from one or more accelerated domain names for which WebSocket is enabled are queried. Data can be collected at minimum intervals of 5 minutes.

DescribeDcdnDomainWebsocketTrafficData

The network traffic data of one or more accelerated domain names for which WebSocket is enabled is queried.

DescribeDcdnErUsageData

You can query the number of EdgeRoutine executions.

DescribeDcdnHttpsDomainList

Retrieves information about all certificates for a user.

DescribeDcdnIpaDomainConfigs

You can query the domain name configuration.

DescribeDcdnIpaDomainDetail

The basic information about an accelerated domain name is queried.

DescribeDcdnIpaService

The status of the IPA feature is queried.

DescribeDcdnIpaUserDomains

The information about all IPA-accelerated domain names within your Alibaba Cloud account is queried.

DescribeDcdnIpInfo

Whether an IP address is assigned to a DCDN node is checked.

DescribeDcdnKvAccount

You can query KV information.

DescribeDcdnKvNamespace

The information about a namespace is queried.

DescribeDcdnOfflineLogDelivery

You can retrieve DCDN offline logs.

DescribeDcdnOfflineLogDeliveryField

The log fields that are supported by log storage are queried.

DescribeDcdnOfflineLogDeliveryRegions

Regions in which log storage is supported are queried.

DescribeDcdnOfflineLogDeliveryStatus

Whether log storage is enabled is queried.

DescribeDcdnRealTimeDeliveryField

The fields in real-time log entries are queried.

DescribeDcdnRefreshQuota

The maximum number and the remaining number of URLs and directories that can be refreshed and the maximum number and the remaining number of URLs that can be prefetched per day are queried.

DescribeDcdnRefreshTaskById

The status of refresh or prefetch tasks is queried by task ID.

DescribeDcdnRefreshTasks

You can query the status of refresh and prefetch tasks across the entire network.

DescribeDcdnRegionAndIsp

Available regions and ISPs are queried.

DescribeDcdnReport

The content of a custom operations report is queried.

DescribeDcdnReportList

Retrieves a list of all custom reports.

DescribeDcdnSecFuncInfo

A drop-down list for edge security.

DescribeDcdnsecService

The information about secure DCDN is queried.

DescribeDcdnSecSpecInfo

The version of secure DCDN and relevant security rules are queried.

DescribeDcdnService

The information about the DCDN service is queried.

DescribeDcdnSLSRealtimeLogDelivery

A real-time log delivery project is queried.

DescribeDcdnSMCertificateDetail

The details of an SM certificate are queried.

DescribeDcdnSMCertificateList

You can retrieve a list of SM certificates.

DescribeDcdnStagingIp

You can obtain a valid virtual IP address (VIP) for the public preview node.

DescribeDcdnSubList

You can query customized report jobs.

DescribeDcdnTagResources

The tags of one or more resources are queried.

DescribeDcdnTopDomainsByFlow

The top N domain names ranked by network traffic are queried.

DescribeDcdnUserCertificateExpireCount

Retrieve the number of DCDN domain names whose user certificates have expired.

DescribeDcdnUserConfigs

The configurations of security features are queried.

DescribeDcdnUserDomains

All accelerated domain names within your Alibaba Cloud account are queried.

DescribeDcdnUserDomainsByFunc

All accelerated domain names that belong to your Alibaba Cloud account are queried based on the FuncId parameter

DescribeDcdnUserQuota

Resource quotas and usage are queried.

DescribeDcdnUserRealTimeDeliveryField

The fields that you have selected are queried.

DescribeDcdnUserResourcePackage

You can query the current data transfer plan of a DCDN user.

DescribeDcdnUserSecDrop

The number of packets that are blocked by a specific security feature is queried.

DescribeDcdnUserSecDropByMinute

The number of packets that are blocked by a security feature at the application layer is queried.

DescribeDcdnUserTags

The tags of the current user are queried.

DescribeDcdnVerifyContent

The ownership verification content of a domain name is queried.

DescribeDcdnVersionInfo

The version information is queried.

DescribeDcdnVersionOfConfigGroup

The versions of a configuration group are queried.

DescribeDcdnWafDomain

Obtain your WAF domain name.

DescribeDcdnWafDomainDetail

The information about the protection policy of an accelerated domain name is queried.

DescribeDcdnWafDomains

The accelerated domain names that are protected by WAF are queried.

DescribeDcdnWafFilterInfo

The information about match conditions in a custom protection rule is queried.

DescribeDcdnWafGeoInfo

The countries and regions that can be added to the blacklist of WAF are queried.

DescribeDcdnWafPolicies

The details of all configured protection policies are queried.

DescribeDcdnWafPolicy

The details of a protection policy are queried.

DescribeDcdnWafPolicyDomains

The accelerated domain names that are protected by a specific WAF protection policy are queried.

DescribeDcdnWafPolicyValidDomains

The domain names that can be bound to a custom protection policy are queried.

DescribeDcdnWafRule

The details of a protection rule are queried.

DescribeDcdnWafRules

The details of all configured protection rules are queried.

DescribeDcdnWafScenes

The information about one or more types of protection policies that you use is queried.

DescribeDcdnWafService

You can query the WAF service status.

DescribeDcdnWafSpecInfo

The version of WAF used in DCDN is queried.

DescribeDcdnWafUsageData

The usage data of WAF in DCDN is queried.

DescribeEncryptRoutineUid

Returns the encrypted UID and additional information.

DescribeRDDomains

All domain names of Alibaba Cloud CDN and DCDN in a resource directory are queried.

DescribeRoutine

The metadata of a routine is queried.

DescribeRoutineCanaryEnvs

You can retrieve a list of Canary environments supported by EdgeRoutine.

DescribeRoutineCodeRevision

You can obtain the EdgeRoutine JS code.

DescribeRoutineSpec

Retrieves the available specifications for EdgeRoutine programs.

DescribeRoutineUserInfo

You can retrieve information about the Alibaba Cloud account attachment.

DescribeUserDcdnIpaStatus

Whether IPA is enabled and whether you have overdue payments for your IPA are queried.

DescribeUserDcdnStatus

Whether the DCDN service is activated and whether you have overdue payments for your DCDN service are queried.

DescribeUserErStatus

Whether EdgeRoutine is enabled and whether you have overdue payments for your EdgeRoutine are queried.

DescribeUserLogserviceStatus

Whether Log Service is activated and whether you have overdue payments for your Log Service are queried.

DetachDcdnDomainNameFromVersion

You can detach the domain name.

DisableDcdnDomainOfflineLogDelivery

You can disable a domain name for which the log storage service is enabled.

DisableDcdnOfflineLogDelivery

Log storage is disabled.

EditRoutineConf

You can modify the EdgeRoutine configuration.

EnableDcdnDomainOfflineLogDelivery

You can enable the log storage service for a new domain name.

GetDcdnKv

The value of a key in a key-value pair is queried.

ListDcdnKv

The values of keys in a namespace are traversed.

ListDcdnRealTimeDeliveryProject

You can query your enabled projects.

ModifyDcdnConfigTemplate

The description of a configuration template is modified.

ModifyDcdnDescriptionOfVersion

The version of a configuration group is modified.

ModifyDCdnDomainSchdmByProperty

The acceleration region of an accelerated domain name is changed.

ModifyDcdnWafPolicy

The name or the status of a protection policy is changed.

ModifyDcdnWafPolicyDomains

The accelerated domain names that are bound to a protection policy are changed.

ModifyDcdnWafRule

A protection rule is modified.

OpenDcdnService

DCDN is activated.

OpenService

A service is activated.

PreloadDcdnObjectCaches

Content is prefetched from the specified origin servers to L2 cache nodes.

PublishDcdnStagingConfigToProduction

The configurations of an accelerated domain name are deployed from the staging environment to the production environment.

PublishRoutineCodeRevision

A specific version of routine code is published to an environment.

PutDcdnKv

Key-value pairs in a namespace are set.

PutDcdnKvAccount

The key-value feature is enabled or disabled for your Alibaba Cloud account.

PutDcdnKvNamespace

A namespace is created.

RefreshDcdnObjectCaches

Specific objects on DCDN cache nodes are refreshed. The objects can be included in the content of files or URLs.

RollbackDcdnStagingConfig

Roll back the Whole Site Acceleration configuration in the simulation environment to that of the production environment.

SetDcdnConfigOfVersion

You can edit the version configuration.

SetDcdnDomainCertificate

The certificate feature is configured and the certificate information is modified for an accelerated domain name.

SetDcdnDomainCSRCertificate

Configures an HTTPS certificate for a specified domain name.

SetDcdnDomainSMCertificate

The SM certificate for an accelerated domain name is enabled or disabled.

SetDcdnDomainStagingConfig

The domain name configuration in the canary release environment is specified or modified.

SetDcdnFullDomainsBlockIP

IP addresses that are blocked or unblocked from accessing the resources of DCDN are configured.

SetRoutineSubdomain

You can set the EdgeRoutine subdomain.

StartDcdnDomain

A disabled accelerated domain name is enabled.

StartDcdnIpaDomain

You can enable a disabled accelerated domain name.

StopDcdnDomain

An accelerated domain name is disabled.

StopDcdnIpaDomain

An accelerated domain name is disabled.

TagDcdnResources

Tags are added to resources.

UntagDcdnResources

Tags are removed from resources.

UpdateDcdnDeliverTask

Update a Job for a subscribed report.

UpdateDcdnDomain

An accelerated domain name is modified.

UpdateDcdnIpaDomain

An accelerated domain name is modified.

UpdateDcdnSLSRealtimeLogDelivery

You can update the real-time log project.

UpdateDcdnSubTask

One or more custom operations reports are updated.

UpdateDcdnUserRealTimeDeliveryField

The fields in real-time log entries are updated.

UploadRoutineCode

You can upload the EdgeRoutine code.

UploadStagingRoutineCode

You can upload the test code for EdgeRoutine.

VerifyDcdnDomainOwner

The ownership of a domain name is verified.

DcdnHttpRequestTestTool

None

DescribeAclStatisticsInfo

None

DescribeDcdnCcSignatureArgList

None

DescribeDcdnCcSignatureObjectList

None

DescribeDcdnDdosService

None

DescribeDcdnDdosSpecInfo

None

DescribeDcdnIpaDomainMultiUsageData

None

DescribeDcdnKvAccountStatus

None

DescribeDcdnL2Vips

None

DescribeDcdnSLSRealTimeLogType

None

DescribeHighlightInfo

None

DescribeRuleHitsTopClientIp

None

DescribeRuleHitsTopResource

None

DescribeRuleHitsTopRuleId

None

DescribeRuleHitsTopRuleType

None

DescribeRuleHitsTopUa

None

DescribeRuleHitsTopUrl

None

DescribeRuleIdInfo

None

DescribeWebAttackLogs

None

DescribeWebAttackTypePv

None

DescribeWebRegionPv

None

DescribeWebSourceIpPv

None

ListDcdnEsTemplateInfo

None

SetDcdnBlockIP

None