EventBridge collects and routes events from Alibaba Cloud services through a centralized event bus. Each integrated service publishes structured events -- such as state changes, API calls, or system actions -- that you can filter and route with event rules.
The following sections list all supported service event sources grouped by service category and explain the four event type categories that determine how events reach EventBridge.
Event type categories
Every Alibaba Cloud service event belongs to one of the following four categories. The category determines the delivery path and the format of the type field in the event payload.
| Category | type field format | Description |
|---|---|---|
| ActionTrail | {ServiceAbbreviation}:ActionTrail:{Action} | Events delivered through ActionTrail, the Alibaba Cloud audit trail service. |
| Cloud Config | {ServiceAbbreviation}:Config:{Action} | Events delivered through Cloud Config for resource configuration and compliance monitoring. |
| CloudMonitor | {ServiceAbbreviation}:CloudMonitor:{Action} | Events delivered through CloudMonitor for operational metrics and alerts. |
| Collected | Service-specific | Events collected directly from Alibaba Cloud services after the services are activated and automatically connected to EventBridge. |
ActionTrail event actions
ActionTrail events use one of three action suffixes:
| Action suffix | When it fires |
|---|---|
ActionTrail:ApiCall | A developer calls an API operation to create, query, modify, or delete a resource. Most console actions are also recorded as ApiCall events because the consoles of most Alibaba Cloud services are built on APIs. |
ActionTrail:ConsoleOperation | A user performs an action in the console or on the buy page of a service whose console is not built on APIs. ActionTrail records this action as a ConsoleOperation or ConsoleCall event. The eventName field contains a string that identifies the specific action. |
ActionTrail:AliyunServiceEvent | Alibaba Cloud performs an action on your resources, such as renewing an instance or releasing an expired subscription instance. For example, if an ECS instance is set to auto-release at a specified time, the release generates an AliyunServiceEvent. |
Cloud Config event actions
| Action suffix | When it fires |
|---|---|
Config:ConfigurationItemChangeNotification | A configuration item of a resource changes. |
Config:NonCompliantNotification | A resource is evaluated as non-compliant. |
Supported services
Important
To connect a Container Service for Kubernetes (ACK) cluster to EventBridge, install either the ARMS Prometheus component (ack-arms-prometheus) or the Node Problem Detector (NPD) component (ack-node-problem-detector) in the cluster. For setup instructions, see ACK events.
Elastic computing
| Service | Example events | Details |
|---|---|---|
| ECS | Disk retained, data disk attached or detached, block storage released due to overdue payments | ECS events |
| Elastic Container Instance (ECI) | API calls, console operations, Alibaba Cloud service events | ECI events |
| Elastic High Performance Computing (E-HPC) | API calls, console operations, Alibaba Cloud service events | E-HPC events |
| Batch Compute | Job canceled, instance ready, project created | Batch Compute events |
| Auto Scaling | API calls, console operations, Alibaba Cloud service events | Auto Scaling events |
| Resource Orchestration Service (ROS) | Stack created, stack deleted, stack rolled back | ROS events |
| CloudOps Orchestration Service (OOS) | API calls, console operations, Alibaba Cloud service events | OOS events |
| Function Compute | API calls, console operations, Alibaba Cloud service events | Function Compute events |
Storage
| Service | Example events | Details |
|---|---|---|
| Object Storage Service (OSS) | API calls, console operations, Alibaba Cloud service events | OSS events |
| Tablestore | API calls, console operations, Alibaba Cloud service events | Tablestore events |
| Apsara File Storage NAS (NAS) | API calls, console operations, Alibaba Cloud service events | NAS events |
| Database File System | API calls, console operations, Alibaba Cloud service events | Database File System events |
| Intelligent Media Management | Object metadata indexed, file metadata updated, file metadata deleted | Intelligent Media Management events |
Databases
| Service | Example events | Details |
|---|---|---|
| PolarDB | Primary-secondary failover, instance failure starts, instance failure ends | PolarDB events |
| PolarDB-X | API calls, console operations, Alibaba Cloud service events | PolarDB-X events |
| ApsaraDB RDS | API calls, console operations, Alibaba Cloud service events | ApsaraDB RDS events |
| ApsaraDB for HBase | API calls, console operations, Alibaba Cloud service events | ApsaraDB for HBase events |
| ApsaraDB for Cassandra | API calls, console operations, Alibaba Cloud service events | ApsaraDB for Cassandra events |
| AnalyticDB for MySQL | API calls, console operations, Alibaba Cloud service events | AnalyticDB for MySQL events |
| Data Transmission Service (DTS) | Migration task exception, migration task resumed, migration task error | DTS events |
| AnalyticDB for PostgreSQL | CPU usage of a compute group exceeds 90%, memory usage exceeds 85%, disk usage exceeds 80% | AnalyticDB for PostgreSQL events |
| Data Disaster Recovery | Incremental backup disabled, incremental backup exception, data restoration exception | Data Disaster Recovery events |
| Tair (Redis OSS-compatible) | Primary-secondary failover, instance failure starts, instance failure ends | Tair events |
| ApsaraDB for MongoDB | Primary-secondary failover, instance failure starts, instance failure ends | ApsaraDB for MongoDB events |
| ApsaraDB RDS for MySQL | Elastic plan execution delayed, elastic plan execution failed | ApsaraDB RDS for MySQL events |
| Time Series Database (TSDB) | Resource change notification, resource evaluated as non-compliant | TSDB events |
Security
| Service | Example events | Details |
|---|---|---|
| Security Center | API calls, console operations, Alibaba Cloud service events | Security Center events |
| Web Application Firewall (WAF) | Access control attack, HTTP flood attack, web attack | WAF events |
| ActionTrail | API calls, console operations, Alibaba Cloud service events | ActionTrail events |
| Resource Access Management (RAM) | API calls, console operations, Alibaba Cloud service events | RAM events |
| DBAudit | API calls, console operations, Alibaba Cloud service events | DBAudit events |
| Key Management Service (KMS) | API calls, console operations, Alibaba Cloud service events | KMS events |
| Fraud Detection | API calls, console operations, Alibaba Cloud service events | Fraud Detection events |
| Server Guard | API calls, console operations, Alibaba Cloud service events | Server Guard events |
| Anti-DDoS | Blackhole filtering triggered, traffic scrubbing triggered, blackhole filtering stopped | Anti-DDoS events |
| Cloud Firewall (CFW) | Peak Internet bandwidth exceeds the specification limit, security event triggers an alert | CFW events |
Big data
| Service | Example events | Details |
|---|---|---|
| E-MapReduce (EMR) | API calls, console operations, Alibaba Cloud service events | EMR events |
| Elasticsearch | API calls, console operations, Alibaba Cloud service events | Elasticsearch events |
| Hologres | API calls, console operations, Alibaba Cloud service events | Hologres events |
| OpenSearch | API calls, console operations, Alibaba Cloud service events | OpenSearch events |
| Quick BI | API calls, console operations, Alibaba Cloud service events | Quick BI events |
| DataV | API calls, console operations, Alibaba Cloud service events | DataV events |
| Artificial Intelligence Recommendation (AIRec) | API calls, console operations, Alibaba Cloud service events | AIRec events |
AI
| Service | Example events | Details |
|---|---|---|
| City Visual Intelligence Engine | API calls, console operations, Alibaba Cloud service events | City Visual Intelligence Engine events |
| Multimedia AI | API calls, console operations, Alibaba Cloud service events | Multimedia AI events |
Networking and CDN
| Service | Example events | Details |
|---|---|---|
| Virtual Private Cloud (VPC) | API calls, console operations, Alibaba Cloud service events | VPC events |
| Server Load Balancer (SLB) | API calls, console operations, Alibaba Cloud service events | SLB events |
| Cloud Enterprise Network (CEN) | API calls, console operations, Alibaba Cloud service events | CEN events |
| Smart Access Gateway | Access point failover, network disconnected, device under attack | Smart Access Gateway events |
| CDN | API calls, console operations, Alibaba Cloud service events | CDN events |
| Edge Security Acceleration (ESA) | API calls, console operations, Alibaba Cloud service events | ESA events |
| Edge Node Service (ENS) | API calls, console operations, Alibaba Cloud service events | ENS events |
| VPN Gateway | Certificate expired, health check failed, health check succeeded | VPN Gateway events |
| PrivateLink | Endpoint connection request accepted, endpoint connection request rejected, zones added to an endpoint connection | PrivateLink events |
| Alibaba Cloud DNS PrivateZone | DNS requests per second within the account exceeds the upper limit | Alibaba Cloud DNS PrivateZone events |
| Alibaba Cloud DNS | High-level remote control attack detected, high-level mining activity detected, high-level malware detected | Alibaba Cloud DNS events |
LinkVisual
| Service | Example events | Details |
|---|---|---|
| ApsaraVideo Live | API calls, console operations, Alibaba Cloud service events | ApsaraVideo Live events |
| Real-Time Communication | API calls, console operations, Alibaba Cloud service events | Real-Time Communication events |
| ApsaraVideo VOD | API calls, console operations, Alibaba Cloud service events | ApsaraVideo VOD events |
| Cloud Conferencing | Conference status changed, member status changed, member action performed | Cloud Conferencing events |
| ApsaraVideo Media Processing | API calls, console operations, Alibaba Cloud service events | ApsaraVideo Media Processing events |
| LinkVisual | API calls, console operations, Alibaba Cloud service events | LinkVisual events |
Containers and middleware
| Service | Example events | Details |
|---|---|---|
| Container Service for Kubernetes (ACK) | ARMS-collected cluster events, node events, pod events | ACK events |
| Container Registry | API calls, console operations, Alibaba Cloud service events | Container Registry events |
| Microservices Engine (MSE) | Instance gracefully shut down, outlier instance removed, outlier instance recovered | MSE events |
| Enterprise Distributed Application Service (EDAS) | Application changed | EDAS events |
| ApsaraMQ for Kafka | API calls, console operations, Alibaba Cloud service events | ApsaraMQ for Kafka events |
| ApsaraMQ for RocketMQ | API calls, console operations, Alibaba Cloud service events; resource change notification, resource non-compliance notification | ApsaraMQ for RocketMQ events |
Development and operations
| Service | Example events | Details |
|---|---|---|
| Application Real-Time Monitoring Service (ARMS) | Agent started, deadlock detected, out-of-memory error | ARMS events |
| CloudMonitor | API calls, console operations, Alibaba Cloud service events | CloudMonitor events |
| Performance Testing Service (PTS) | API calls, console operations, Alibaba Cloud service events | PTS events |
| Cloud Config | API calls, console operations, Alibaba Cloud service events; configuration item changed | Cloud Config events |
| Resource Management | Resource change notification, resource non-compliance notification | Resource Management events |
Domain names and websites
| Service | Example events | Details |
|---|---|---|
| Domains | API calls, console operations, Alibaba Cloud service events | Domains events |
IoT
| Service | Example events | Details |
|---|---|---|
| IoT Platform | API calls, console operations, Alibaba Cloud service events | IoT Platform events |
Enterprise applications and services
| Service | Example events | Details |
|---|---|---|
| Blockchain as a Service (BaaS) | API calls, console operations, Alibaba Cloud service events | BaaS events |
Enterprise services and cloud communications
| Service | Example events | Details |
|---|---|---|
| Direct Mail | Email failed to send, email sent, email clicked, email opened | Direct Mail events |