View the compliance timeline of a resource - Cloud Config

In Cloud Config, each resource has its own compliance timeline. Cloud Config generates a compliance evaluation record for a resource each time the resource is evaluated by a rule, and displays the compliance evaluation records over time in a compliance timeline.

Background information

The compliance timeline of a resource indicates the compliance evaluation history of the resource. The following table describes the elements included in the compliance timeline.


Element	Description
Points on a compliance timeline	Start point: the time when a resource is evaluated by a rule for the first time. You can configure Cloud Config to run a rule to periodically evaluate a resource at the specified time or each time you change the resource configuration. You can also manually run a rule to evaluate a resource. Node: A node is generated on the compliance timeline of a resource each time the resource is evaluated. One or more rules may be used to evaluate a resource at a time. Breakpoint: If you remove a resource type from the monitoring scope of Cloud Config, Cloud Config stops monitoring this type of resource and does not update the compliance timeline of each resource of this type. Cloud Config monitors this type of resource again only after you add the resource type to the monitoring scope. Cloud Config does not record the changes of the resources before you add the resource type to the monitoring scope.
Content on a compliance timeline	Time: the time when a compliance evaluation is performed. Trigger type: the reason that triggers the compliance evaluation on a resource. A compliance evaluation can be manually or periodically triggered, and can also be triggered based on real-time configuration changes. Compliance evaluation results: On the left side of the Compliance Timeline tab, the evaluation result for each node can be marked as Compliant or Non-compliant. This helps you find non-compliant resources. Evaluation details of each node: You can view the basic information about the resource and the current evaluation result. If the evaluation is periodically triggered, or triggered based on real-time configuration changes, the change details of the core resource configuration are also displayed for you to find non-compliant configuration items.

Use an ordinary account

If you use an ordinary account, you can view the compliance timelines of resources within your account.

Log on to the Cloud Config console.
In the left-side navigation pane, click Resources.
On the Global Resources page, enter a resource ID or set filter conditions to search for the specified resource.
- You can enter a resource ID to search for the specified resource.
- You can filter the resources based on the resource type, region, compliance status, and resource status to search for the specified resource with high efficiency.
Click the resource ID in the Resource ID / Resource Name column.
Click the Compliance Timeline tab to view the compliance timeline of the resource.
- In the Basic Information section, you can view the ID, name, type, and tags of the resource, the time when the resource was created, and the region and zone where the resource resides.
- In the Evaluation Result section, you can view the latest compliance evaluation result of the resource.
- In the Change Details section, you can view the relevant resource configurations before and after the current configuration change in the JSON format.

Use a management account

If you use a management account, you can view the compliance timelines of resources within your account and the member accounts in all account groups.

Log on to the Cloud Config console.
In the left-side navigation pane, click Resources.
On the Resources page, click the required account group tab.
On the account group tab, enter a resource ID or set filter conditions to search for the specified resource.
- You can enter a resource ID to search for the specified resource.
- You can filter the resources based on the resource type, region, compliance status, and resource status to search for the specified resource with high efficiency.
Click the resource ID in the Resource ID / Resource Name column.
Click the Compliance Timeline tab to view the compliance timeline of the resource.
- In the Basic Information section, you can view the ID, name, type, and tags of the resource, the time when the resource was created, and the region and zone where the resource resides.
- In the Evaluation Result section, you can view the latest compliance evaluation result of the resource.
- In the Change Details section, you can view the relevant resource configurations before and after the current configuration change in the JSON format.