All Products
Search

This Product

    Cloud Config:View the compliance timeline of a resource

    Document Center

    Cloud Config:View the compliance timeline of a resource

    Last Updated:Dec 01, 2023

    In Cloud Config, each resource has its own compliance timeline. Cloud Config generates a compliance evaluation record for a resource each time the resource is evaluated based on a rule. The compliance evaluation records of a resource are displayed in a compliance timeline.

    Background information

    The compliance timeline of a resource indicates the compliance evaluation history of the resource. The following table describes the elements included in the compliance timeline.

    Element

    Description

    Points on a compliance timeline

    • Start point: the time when a resource is evaluated based on a rule for the first time. You can configure Cloud Config to run a rule to evaluate a resource on a regular basis or each time you change the resource configuration. You can also manually run a rule to evaluate a resource.

    • Node: A node is generated on the compliance timeline of a resource each time the resource is evaluated. One or more rules may be used to evaluate a resource at a time.

    • Breakpoint: If you remove a resource type from the monitoring scope of Cloud Config, Cloud Config stops monitoring this type of resource and does not update the compliance timeline of each resource of this type. Cloud Config monitors this type of resource again only after you add the resource type to the monitoring scope. Cloud Config does not record the changes of the resources before you add the resource type to the monitoring scope.

    Content on a compliance timeline

    • Time: the time when a compliance evaluation is performed.

    • Trigger type: the reason that triggers the compliance evaluation on a resource. A compliance evaluation can be manually or periodically triggered, and can also be triggered based on real-time configuration changes.

    • Compliance evaluation results: On the left side of the Compliance Timeline tab, the evaluation result for each node can be marked as Compliant or Non-compliant. This helps you find non-compliant resources.

    • Evaluation details of each node: You can view the basic information about the resource and the current evaluation result. If the evaluation is periodically triggered, or triggered based on real-time configuration changes, the change details of the core resource configuration are also displayed for you to find non-compliant configuration items.

    Procedure

    1. Log on to the Cloud Config console.

    2. Optional. In the upper-left corner, select an account group.

      This operation is required only if you are using a management account of a resource directory. Otherwise, you do not need to perform the operation.

    3. In the left-side navigation pane, choose Resources > Global Resources.

    4. On the Global Resources page, enter a resource ID or set filter conditions to query the specified resource.

      • You can enter a resource ID to query the specified resource.

      • You can also efficiently query a resource by resource type, region and resource status.

    5. Click the resource ID in the Resource ID / Resource Name column.

    6. Click the Compliance Timeline tab to view the compliance timeline of the resource.

      • In the Basic Info After Change section, you can view the ID, name, type, and tags of the resource, the time when the resource was created, and the region and zone in which the resource resides.

      • In the Evaluation Result section, you can view the latest compliance evaluation result of the resource.

      • In the Change Details section, you can view the relevant resource configurations before and after the current configuration change in the JSON format.