What are the auditable events of ROS - Resource Orchestration Service

ActionTrail is integrated with Resource Orchestration Service (ROS). In the ActionTrail console, you can query the management events that are generated from operations on ROS resources. ActionTrail can deliver the management events to Simple Log Service (SLS) Logstores or Object Storage Service (OSS) buckets for real-time audits and issue backtracking and analysis.

ActionTrail records the management events that are generated from your operations performed on cloud resources by using the Alibaba Cloud Management Console or API operations. The following table describes the management events of ROS that you can query in the ActionTrail console and the corresponding operations.

Event	Operation
CancelUpdateStack	Cancel the update of a stack.
ContinueCreateStack	Continue to create a stack after the stack fails to be created.
CreateChangeSet	Create a change set.
CreateStack	Create a stack.
CreateStackGroup	Create a stack group.
CreateStackInstances	Create stack instances in accounts and regions.
CreateTemplate	Create a custom template.
CreateTemplateScratch	Creates a resource scenario.
DeleteChangeSet	Delete a change set.
DeleteStack	Delete a stack.
DeleteStackGroup	Delete a stack group.
DeleteStackInstances	Delete stack instances from accounts and regions.
DeleteTemplate	Delete a template.
DeleteTemplateScratch	Delete a resource scenario.
DescribeRegions	Query regions.
DetectStackDrift	Detect drift on a stack.
DetectStackGroupDrift	Detect drift on a stack group.
DetectStackResourceDrift	Detect drift on a resource.
ExecuteChangeSet	Execute a change set.
GenerateTemplateByScratch	Generate a template based on a resource scenario.
GenerateTemplatePolicy	Generate a template policy.
GetChangeSet	Query the information about a change set.
GetFeatureDetails	Query the information about a feature.
GetResourceType	Query the information about a resource type.
GetResourceTypeTemplate	Query a resource template by using a resource type.
GetServiceProvisions	Query the information about activation status and Resource Access Management (RAM) roles of Alibaba Cloud services.
GetStack	Query the information about a stack.
GetStackDriftDetectionStatus	Query the status of a drift detection operation.
GetStackGroup	Query the information about a stack group.
GetStackGroupOperation	Query the information about a stack group operation.
GetStackInstance	Query the information about a stack instance that is associated with a stack group.
GetStackPolicy	Query a stack policy.
GetStackResource	Query a resource in a stack.
GetTemplate	Query the information about a template, such as a stack template, change set template, or custom template.
GetTemplateEstimateCost	Query the estimated prices of template resources that you want to create based on a template.
GetTemplateParameterConstraints	Query template parameter constraints.
GetTemplateScratch	Query the information about a resource scenario.
GetTemplateSummary	Query the information about a new template or an existing template.
ListChangeSets	Query change sets.
ListResourceTypes	Query supported resource types.
ListStackEvents	Query the events of a stack and its resources.
ListStackGroupOperationResults	Query the results of a stack group operation.
ListStackGroupOperations	Query stack group operations.
ListStackGroups	Query stack groups.
ListStackInstances	Query stack instances that are associated with a stack group.
ListStackOperationRisks	Query resources that may pose high risks during stack deletion and the cause of each risk.
ListStackResourceDrifts	Query the drift information about resources in a stack.
ListStackResources	Query the information about resources in a stack.
ListStacks	Query stacks.
ListTagKeys	Query tag keys.
ListTagResources	Query tags that are added to one or more ROS resources.
ListTagValues	Query the values of a tag key.
ListTemplates	Query templates.
ListTemplateScratches	Query resource scenarios.
ListTemplateVersions	Query the versions of a template.
MoveResourceGroup	Change the resource group to which a resource belongs.
PreviewStack	Preview the information about a stack that you want to create based on a template.
SetDeletionProtection	Modify the deletion protection feature for a stack.
SetStackPolicy	Configure a stack policy.
SetTemplatePermission	Configure the permissions on a template.
SignalResource	Send a signal.
StopStackGroupOperation	Stop a stack group operation.
TagResources	Create tags and add the tags to ROS resources.
UntagResources	Remove tags from ROS resources and delete the tags.
UpdateStack	Update a stack.
UpdateStackGroup	Update a stack group.
UpdateStackInstances	Update stack instances in accounts and regions.
UpdateStackTemplateByResources	Correct a stack template to eliminate stack drift.
UpdateTemplate	Update a template.
UpdateTemplateScratch	Update a resource scenario.
ValidateTemplate	Validate the template that you want to use to create a stack.

When you use the administrator account to apply changes to stack instances in a stack group, ActionTrail records the changes that are applied to the corresponding stacks deployed within the execution accounts.

Event in the administrator account	Event in the execution accounts	Description
UpdateStackGroup	UpdateStack	When you use the administrator account to update a stack group, the relevant stacks may be updated within the execution accounts.
CreateStackInstances	CreateStack	When you use the administrator account to create stack instances in a stack group, the relevant stacks may be created within the execution accounts.
UpdateStackInstances	UpdateStack	When you use the administrator account to update stack instances in a stack group, the relevant stacks may be updated within the execution accounts.
DeleteStackInstances	DeleteStack	When you use the administrator account to delete stack instances from a stack group, the relevant stacks may be deleted from the execution accounts.