This topic describes the release notes for ActionTrail and provides links to the relevant references.
February 2024
Feature | Description | Release date | Region | References |
Event delivery to MaxCompute | A trail can be created to deliver events to MaxCompute. | 2024-02 | All regions |
October 2023
Feature | Description | Release date | Region | References |
New advanced event query feature | The new advanced event query feature is built based on the existing event query feature. You can use analytic statements for statistical analysis of audit logs. | 2023-10 | All regions |
March 2023
Feature | Description | Release date | Region | References |
New Insights feature | The new Insights feature is provided. The feature analyzes management events, identifies unusual activities that are associated with API call rates, API error rates, IP addresses, AccessKey pair call rates, permission changes, password changes, and trail concealment, and then generates Insights events. | 2023-03 | ||
Insights event delivery | The Insights event delivery feature is provided to deliver Insights events to Object Storage Service (OSS) or Simple Log Service. | 2023-03 | All regions |
February 2023
Feature | Description | Release date | Region | References |
Service-event name-based query | Service-event name-based query is supported and allows you to query events by using the combination of a service name and an event name. | 2023-02 | All regions |
September 2022
Feature | Description | Release date | Region | References |
Sensitive operation query | Query conditions are added for sensitive operations. You can query sensitive operations within an account. | 2022-09 | All regions |
April 2022
Feature | Description | Release date | Region | References |
AccessKey pair audit | The AccessKey pair audit feature is supported in ActionTrail. You can use the feature to query the basic information about an AccessKey pair and the usage records of the AccessKey pair, such as the accessed Alibaba Cloud services, related IP addresses, and resources. | 2022-04 | All regions |
December 2021
Feature | Description | Release date | Region | References |
Scenario-based advanced event query | Advanced event queries are supported in ActionTrail based on the following scenarios:
| 2021-12 | All regions |
November 2021
Feature | Description | Release date | Region | References |
Event-based custom alerting | Custom alert rules can be created in ActionTrail to monitor events. You can write query statements and configure thresholds when you create custom alert rules. | 2021-11 | All regions |
August 2021
Feature | Description | Release date | Region | References |
Insights | The Insights feature is provided. You can use the feature to identify abnormal operations that are recorded in management events. This way, you can identify potential risks to your cloud resources and take remedial measures at the earliest opportunity. After you enable the Insights feature for a trail, ActionTrail identifies abnormal operations based on the management events recorded by the trail and generates Insights events. These Insights events are delivered to the Simple Log Service Logstore or Object Storage Service (OSS) bucket specified for the trail. Note To obtain the permissions to manage Insights events, submit a ticket. | 2021-08 | All regions except China (Heyuan), China (Guangzhou), and UAE (Dubai) |
April 2021
Feature | Description | Release date | Region | References |
Event alerting | The event alerting feature is provided. You can use the feature to configure alert rules for a trail that is configured to deliver events to a Simple Log Service Logstore. When the alert rules are triggered by sensitive or abnormal operations, you can receive alert notifications and respond at the earliest opportunity. | 2021-04 | All regions |
March 2021
Feature | Description | Release date | Region | References |
Cross-account event delivery | The cross-account event delivery feature is provided. You can use the feature to deliver the events of multiple Alibaba Cloud accounts or the events of multiple members in your resource directory to the same Simple Log Service Logstore or OSS bucket. This helps you archive and monitor audit data in a centralized manner. | 2021-03 | All regions | |
Additional supported Alibaba Cloud services and fields for the Inner-ActionTrail feature |
| 2021-03 | All regions |
January 2021
Feature | Description | Release date | Region | References |
Historical event delivery | Historical event delivery tasks can be created to deliver the events that occurred in the last 90 days and are recorded by ActionTrail to Simple Log Service. Then, you can analyze or download these events based on your business requirements. | 2021-01 | All regions |
December 2020
Feature | Description | Release date | Region | References |
Advanced event query | The advanced event query feature is provided. You can use the feature to perform advanced event queries based on a trail that is created to deliver events to a Simple Log Service Logstore. You can specify multiple criteria to query the events that are associated with multiple Alibaba Cloud services and occurred in multiple regions more than 90 days ago. | 2020-12 | All regions |
September 2020
Feature | Description | Release date | Region | References |
Best practices | The Best Practices page is added to the ActionTrail console. You can click the links on this page to view the best practices for operations such as creating trails and analyzing events. | 2020-09 | All regions |
|
August 2020
Feature | Description | Release date | Region | References |
Optimized trail operation | Trails in all regions can be viewed in a specific region. This facilitates trail management. The method that is used to create a trail is updated. | 2020-08 | All regions |
July 2020
Feature | Description | Release date | Region | References |
Details of events | Details of events, such as the source (Alibaba Cloud service), operator, and name of each event, are added. | 2020-07 | All regions |
March 2020
Feature | Description | Release date | Region | References |
Multi-account trails | The operation logs of all members in the resource directory of an enterprise can be delivered to an OSS bucket or a Simple Log Service Logstore. | 2020-03 | All regions |
February 2020
Feature | Description | Release date | Region | References |
More supported Alibaba Cloud services | Events of more Alibaba Cloud services are supported. | 2020-02 | All regions | |
Optimized engine for online event queries | Multiple query criteria can be used at the same time. A single criterion supports multiple options. | 2020-02 | All regions |
January 2020
Feature | Description | Release date | Region | References |
Event delivery notification | Event delivery notifications can be sent. You can receive notifications from a Message Service (MNS) topic after ActionTrail delivers events to an OSS bucket. | 2020-01 | All regions | |
OSS server-side encryption | Server-side encryption can be enabled for events that are delivered to OSS buckets. | 2020-01 | All regions |
December 2019
Feature | Description | Release date | Region | References |
Integration with the ECS console | Events of an Elastic Compute Service (ECS) instance can be viewed in the ECS console. | 2019-12 | All regions | |
Support for multiple trails | Up to five trails can be created in each region. You can create trails to track and record different types of events that occur in different regions and deliver the events to specified OSS buckets or Simple Log Service Logstores based on your business requirements. | 2019-12 | All regions | |
Region selection | Trails can be created to track and record events in one or more regions based on your business requirements. | 2019-12 | All regions | |
Online query of events that occurred in the last 90 days | The online query of events that occurred in the last 90 days is supported without the need to create trails. The number of days that an event can be stored for query in the ActionTrail console is increased from 30 days to 90 days. If you need to store and query events that occurred 90 days ago, you must create a trail. | 2019-12 | All regions |
November 2019
Feature | Description | Release date | Region | References |
Auto-activation ActionTrail | ActionTrail is automatically activated for all valid Alibaba Cloud accounts. | 2019-11 | All regions | |
Best practices | Best practices are provided to help you use ActionTrail and understand the compliance auditing on Alibaba Cloud. | 2019-11 | All regions |
October 2019
Feature | Description | Release date | Region | References |
More supported Alibaba Cloud services | Events of more Alibaba Cloud services are supported. | 2019-10 | All regions |
September 2019
Feature | Description | Release date | Region | References |
Inner-ActionTrail | Platform events can be tracked and recorded. This improves the transparency of O&M on Alibaba Cloud. Only events of OSS are supported. You can submit a ticket to use this feature. | 2019-9 | Regions supported by the China site (aliyun.com) |