All Products
Search
Document Center

Cloud Config:BestPracticesForResourceExpirationReminders

Last Updated:Oct 31, 2023

The best practices for sending resource expiration reminders help you check the stability of cloud resources from the perspective of resource expiration risks. This helps identify potential risks in advance and improve stability and O&M efficiency. This topic describes the default rules in the best practices for sending resource expiration reminders.

Rule name

Description

adb-cluster-expired-check

Checks whether the duration between the expiration date of each AnalyticDB for MySQL cluster (Data Warehouse Edition) and the current date is greater than a specified period of time. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for an instance, the evaluation result is also Compliant. This rule applies only to subscription resource instances and does not apply to pay-as-you-go resource instances.

bastionhost-instance-expired-check

Checks whether the duration between the expiration date of each bastion host and the current date is greater than a specified period of time. If so, the evaluation result is Compliant. Default value: 30. Unit: days.

cbwp-bandwidth-package-expired-check

Checks whether the duration between the expiration date of each EIP bandwidth plan and the current date is greater than a specified period of time. If so, the evaluation result is Compliant. Default value: 30. Unit: days. This rule applies only to subscription resource instances and does not apply to pay-as-you-go resource instances.

cen-bandwidth-package-expired-check

Checks whether the duration between the expiration date of each CEN bandwidth plan and the current date is greater than a specified period of time. If so, the evaluation result is Compliant. Default value: 30. Unit: days.

cloudsso-directory-saml-expired-check

Checks whether the validity period of a CloudSSO SAML signature certificate exceeds the specified number of days. If no, the evaluation result is Incompliant. Default value: 90. Unit: days.

cloudsso-scim-credential-expired-check

Checks whether the validity period of a CloudSSO SCIM key exceeds the specified number of days. If no, the evaluation result is Incompliant. Default value: 90. Unit: days.

cr-repository-tag-expired-check

Checks whether the duration between the last update date of each image version in a Container Registry repository and the current date is less than a specified number of days. If so, the evaluation result is Compliant. Default value: 180. Unit: days.

ddoscoo-instance-expired-check

Checks whether the duration between the expiration date of each Anti-DDoS instance and the current date is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days.

ecs-instance-expired-check

If you use subscription resources, you must renew the resources before they expire. This prevents your instances from being stopped due to expired resources. Checks whether the duration between the expiration date and the check date of each subscription resource is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for an instance, the evaluation result is also Compliant. For pay-as-you-go resources, the evaluation result is Not Applicable.

ecs-instance-image-expired-check

If the duration between the creation date of the image of each ECS instance and the current date is less than a specified number of days, the evaluation result is Compliant. Default value: 180. Unit: days.

eip-address-expired-check

Checks whether the duration between the expiration date of each EIP and the current date is greater than a specified period of time. If so, the evaluation result is Compliant. Default value: 30. Unit: days. For pay-as-you-go resources, the evaluation result is Not Applicable.

hbase-cluster-expired-check

Checks whether the duration between the expiration date and the check date of each subscription ApsaraDB for HBase cluster is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days.

mongodb-cluster-expired-check

Checks whether the duration between the expiration date and the check date of each subscription ApsaraDB for MongoDB cluster is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for a cluster, the evaluation result is also Compliant.

polardb-cluster-expired-check

If you use subscription resources, you must renew the resources before they expire. This prevents your instances from being stopped due to expired resources. Checks whether the duration between the expiration date and the check date of each subscription resource is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for an instance, the evaluation result is also Compliant. For pay-as-you-go resources, the evaluation result is Not Applicable.

polardb-x1-instance-expired-check

Checks whether the duration between the expiration date of each PolarDB for Xscale 1.0 instance and the current date is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. This rule applies only to subscription resource instances and does not apply to pay-as-you-go resource instances.

polardb-x2-instance-expired-check

Checks whether the duration between the expiration date of each PolarDB for Xscale 2.0 instance and the current date is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. This rule applies only to subscription resource instances and does not apply to pay-as-you-go resource instances.

ram-user-ak-create-date-expired-check

Checks whether the time when the AccessKey pair of each RAM user was created is earlier than the specified number of days before the check time. If so, the evaluation result is Compliant. Default value: 90. Unit: days.

ram-user-ak-used-expired-check

Checks whether the time when the AccessKey pair of each RAM user was used is earlier than the specified number of days before the current day. If so, the evaluation result is Compliant. Default value: 90. Unit: days.

ram-user-last-login-expired-check

Checks whether each RAM user has logged on within the last 90 days. If so, the evaluation result is Compliant. If a RAM user has been updated within the last 90 days, the evaluation result is Compliant regardless of whether the RAM user has recently logged on. For RAM users that have no console access, the evaluation result is Not Applicable.

rds-instance-expired-check

If you use subscription resources, you must renew the resources before they expire. This prevents your instances from being stopped due to expired resources. Checks whether the duration between the expiration date and the check date of each subscription resource is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. For pay-as-you-go resources, the evaluation result is Not Applicable.

redis-instance-expired-check

Checks whether the duration between the expiration date and the check date of each subscription ApsaraDB for Redis instance is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for an instance, the evaluation result is also Compliant. For pay-as-you-go resources, the evaluation result is Not Applicable.

slb-instance-expired-check

If you use subscription resources, you must renew the resources before they expire. This prevents your instances from being stopped due to expired resources. Checks whether the duration between the expiration date and the check date of each subscription resource is greater than a specified number of days. If so, the evaluation result is Compliant. Default value: 30. Unit: days. If auto-renewal is enabled for an instance, the evaluation result is also Compliant. For pay-as-you-go resources, the evaluation result is Not Applicable.

slb-server-certificate-expired

Checks whether the duration between the expiration date of the SLB certificate and the current date is greater than the specified value. If so, the evaluation result is Compliant. Default value: 90. Unit: days.