CloudOps Orchestration Service:Create O&M items through custom EventBridge rules

Step 1: create a Cloud Config rule

This example uses RDS instances that are deployed across multiple zones to show how to create a rule from a template.

1. Go to the Cloud Config > Compliance Audit > Rules page and click Create Rule.

2. Enter multi-zone in the search box, select rds-multi-az-support, and then click Next.

   

3. Keep the default values of the basic properties and click Next.

4. Keep the default values of the effective scope and click Next.

5. Keep the default values of the remediation settings and click Submit.

6. View the non-compliant resources in the Cloud Config rule list.

   

Step 2: create O&M items by creating an EventBridge rule

1. Go to the EventBridge > Event Buses page and select a region in the top navigation bar.

2. Click the default system event bus.

3. In the left-side navigation pane, click Event Rules.

4. On the Event Rules page, click Create Rule.

5. On the Create Rule page, complete the relevant parameter settings.

6. On the Configure Basic Info wizard page, enter the Name and Description of the event rule, and then click Next.

7. On the Configure Event Pattern wizard page, configure the following parameters, and then click Next.

   Parameter name	Description	Example value
   Event Source Type	Two types are supported: Alibaba Cloud Service Event Sources and Custom Event Sources.	Alibaba Cloud Service Event Sources
   Event Source	The event source is the origin of events. It publishes the events that it produces to EventBridge.	acs.config
   Event Type	Select the event type that you want to use to filter events.	config:CloudMonitor:ConfigurationNonCompliantNotification

   This configuration monitors non-compliance events from all rules that are enabled in Cloud Config.

8. On the Configure Targets wizard page, configure the following event target parameters, and then click Create.

   Parameter name	Description	Parameter value
   Service Type	Select the event target type.	acs.openapi.oos
   API Version	Keep the default API version.	2019-06-01
   API Type	Select CreateOpsItem to create an O&M item.	CreateOpsItem
   API Parameters	Configure the relevant parameters of the CreateOpsItem API.	For more information, see CreateOpsItem.
   Role	Configure a role that has the OOS CreateOpsItem OpenAPI permissions. If you do not have such a role, click Authorization to quickly create one.	None

   The following non-compliance event message is provided as an example to help you configure EventBridge rules.

Expand to view: audit non-compliance event message

{
    "datacontenttype": "application/json;charset=utf-8",
    "aliyunaccountid": "15634*******22",
    "data": {
        "annotation": "{\"configuration\":\"\",\"desiredValue\":\"i-bp*******z0tptjbgu\",\"operator\":\"Contains\",\"property\":\"$.Propertys[*].InstanceId\",\"reason\":\"FeaturePath not exist\"}",
        "accountId": 15634*******22,
        "riskLevel": "Warning",
        "requestId": "f9bce983-1460-4b83-ac81-724b*******3a",
        "dataType": "NonCompliantNotification",
        "eventName": "NonCompliant",
        "evaluationResultIdentifier": {
            "orderingTimestamp": 1726747626751,
            "evaluationResultQualifier": {
                "resourceId": "i-bp*******z0tptjbgu",
                "configRuleName": "ecs-instance-running-process-check",
                "sourceIdentifier": "ecs-instance-running-process-check",
                "configRuleId": "cr-8315e6183e*******b1",
                "configRuleArn": "acs:config::15634*******22:rule/cr-8315e6183*******b1",
                "captureTime": 1726747626751,
                "regionId": "cn-hangzhou",
                "resourceName": "ESS-asg-asg-bp1efisbt64zu16lebhm",
                "resourceArn": "acs:ecs:cn-hangzhou:15634*******22:instance/i-bp*******z0tptjbgu",
                "resourceGroupId": "rg-acfmzmhzoaad5oq",
                "resourceOwnerId": 15634*******22,
                "resourceType": "ACS::ECS::Instance"
            }
        },
        "eventType": "ResourceCompliance",
        "invokingEventMessageType": "ScheduledNotification",
        "notificationCreationTime": 1726749483808,
        "complianceType": "NON_COMPLIANT"
    },
    "subject": "acs:config:cn-hangzhou:15634*******22:instance/i-bp*******z0tptjbgu",
    "aliyunoriginalaccountid": "15634*******22",
    "source": "acs.config",
    "type": "config:CloudMonitor:ConfigurationNonCompliantNotification",
    "aliyunpublishtime": "2024-09-19T12:38:18.889Z",
    "specversion": "1.0",
    "aliyuneventbusname": "default",
    "id": "315C0C75DB4E0B4CBA0DA*******AF6EB802C92E7-CMS",
    "time": "2024-09-19T12:38:04.000Z",
    "aliyunregionid": "cn-hangzhou"
}

{
  "resourceArn":"$.data.evaluationResultIdentifier.evaluationResultQualifier.resourceArn"
}

["${resourceArn}"]

{
"document_url": "$.data.evaluationResultIdentifier.evaluationResultQualifier.helpUrls"
}

[{
    "priority": 1,
    "type": "url",
    "url": "${document_url}",
    "description": "Refer to the document to handle the issue."
}]

Step 3: view the automatically created O&M items

1. Go to the CloudOps Orchestration Service > Operation Center > O&M Items tab to view the O&M items that are automatically created for the non-compliant resources.