Simple Log Service:Use Terraform to configure Log Audit Service

Parameter

Description

ALICLOUD_ACCESS_KEY

The AccessKey ID that is used to access Simple Log Service. For more information, see AccessKey pair.

ALICLOUD_SECRET_KEY

The AccessKey secret that is used to access Simple Log Service. For more information, see AccessKey pair.

ALICLOUD_REGION

The region where the central project of Log Audit Service resides. The following regions are supported:

• Chinese mainland: China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Shenzhen), and China (Hong Kong)

• Outside the Chinese mainland: Singapore, Japan (Tokyo), Germany (Frankfurt), Indonesia (Jakarta), and Malaysia (Kuala Lumpur)

Parameter

Description

Default value

actiontrail_enabled

Specifies whether to collect ActionTrail logs. Valid values:

• true

• false

false

actiontrail_ttl

The retention period of ActionTrail logs in the central Logstore. Unit: days.

180

cloudconfig_change_enabled

Specifies whether to collect Cloud Config change logs. Valid values:

• true

• false

false

cloudconfig_change_ttl

The retention period of Cloud Config change logs in the central Logstore. Unit: days.

180

cloudconfig_noncom_enabled

Specifies whether to collect Cloud Config non-compliance events. Valid values:

• true

• false

false

cloudconfig_noncom_ttl

The retention period of Cloud Config non-compliance events in the central Logstore. Unit: days.

180

oss_access_enabled

Specifies whether to collect Object Storage Service (OSS) access logs. Valid values:

• true

• false

false

oss_access_ttl

The retention period of OSS access logs in the regional Logstore. Unit: days.

7

oss_sync_enabled

Specifies whether to synchronize OSS access logs to the central project. Valid values:

• true

• false

true

oss_sync_ttl

The retention period of OSS access logs in the central Logstore. Unit: days.

180

oss_metering_enabled

Specifies whether to collect OSS metering logs. Valid values:

• true

• false

false

oss_metering_ttl

The retention period of OSS metering logs in the central Logstore. Unit: days.

180

rds_enabled

Specifies whether to collect ApsaraDB RDS for MySQL audit logs. Valid values:

• true

• false

false

rds_audit_collection_policy

The collection policy for ApsaraDB RDS for MySQL audit logs.

""

rds_ttl

The retention period of ApsaraDB RDS for MySQL audit logs in the central Logstore. Unit: days.

180

rds_slow_enabled

Specifies whether to collect ApsaraDB RDS for MySQL slow query logs. Valid values:

• true

• false

false

rds_slow_collection_policy

The collection policy for ApsaraDB RDS for MySQL slow query logs.

""

rds_slow_ttl

The retention period of ApsaraDB RDS for MySQL slow query logs in the central Logstore. Unit: days.

180

rds_error_enabled

Specifies whether to collect ApsaraDB RDS for MySQL error logs. Valid values:

• true

• false

false

rds_error_collection_policy

The collection policy for ApsaraDB RDS for MySQL error logs.

""

rds_error_ttl

The retention period of ApsaraDB RDS for MySQL error logs in the central Logstore. Unit: days.

180

rds_perf_enabled

Specifies whether to collect ApsaraDB RDS for MySQL performance logs. Valid values:

• true

• false

false

rds_perf_collection_policy

The collection policy for ApsaraDB RDS for MySQL performance logs.

""

rds_perf_ttl

The retention period of ApsaraDB RDS for MySQL performance logs in the central Logstore. Unit: days.

180

vpc_flow_enabled

Specifies whether to collect VPC flow logs. Valid values:

• true

• false

false

vpc_flow_ttl

The retention period of VPC flow logs in the regional Logstore. Unit: days.

7

vpc_flow_collection_policy

The collection policy for VPC flow logs.

""

vpc_sync_enabled

Specifies whether to synchronize VPC flow logs to the central project. Valid values:

• true

• false

true

vpc_sync_ttl

The retention period of VPC flow logs in the central Logstore. Unit: days.

180

dns_gtm_collection_policy

The collection policy for the global traffic manager logs of Alibaba Cloud DNS (DNS).

""

dns_gtm_ttl

The retention period of the global traffic manager logs of DNS. Unit: days.

180

dns_gtm_enabled

Specifies whether to collect the global traffic manager logs of DNS. Valid values:

• true

• false

false

dns_resolve_collection_policy

The collection policy for public DNS resolution logs.

""

dns_resolve_ttl

The retention period of public DNS resolution logs. Unit: days.

180

dns_resolve_enabled

Specifies whether to collect public DNS resolution logs. Valid values:

• true

• false

false

dns_intranet_enabled

Specifies whether to collect intranet private DNS logs. Valid values:

• true

• false

false

dns_intranet_ttl

The retention period of intranet private DNS logs in the regional Logstore. Unit: days.

7

dns_intranet_collection_policy

The collection policy for intranet private DNS logs.

None

dns_sync_enabled

Specifies whether to synchronize intranet private DNS logs to the central project. Valid values:

• true

• false

true

dns_sync_ttl

The retention period of intranet private DNS logs in the central Logstore. Unit: days.

180

polardb_enabled

Specifies whether to collect PolarDB for MySQL audit logs. Valid values:

• true

• false

false

polardb_audit_collection_policy

The collection policy for PolarDB for MySQL audit logs.

""

polardb_ttl

The retention period of PolarDB for MySQL audit logs in the central Logstore. Unit: days.

180

polardb_slow_enabled

Specifies whether to collect PolarDB for MySQL slow query logs. Valid values:

• true

• false

false

polardb_slow_collection_policy

The collection policy for PolarDB for MySQL slow query logs.

""

polardb_slow_ttl

The retention period of PolarDB for MySQL slow query logs in the central Logstore. Unit: days.

180

polardb_error_enabled

Specifies whether to collect PolarDB for MySQL error logs. Valid values:

• true

• false

false

polardb_error_collection_policy

The collection policy for PolarDB for MySQL error logs.

""

polardb_error_ttl

The retention period of PolarDB for MySQL error logs in the central Logstore. Unit: days.

180

polardb_perf_enabled

Specifies whether to collect PolarDB for MySQL performance logs. Valid values:

• true

• false

false

polardb_perf_collection_policy

The collection policy for PolarDB for MySQL performance logs.

""

polardb_perf_ttl

The retention period of PolarDB for MySQL performance logs in the central Logstore. Unit: days.

180

drds_audit_enabled

Specifies whether to collect PolarDB-X 1.0 audit logs. Valid values:

• true

• false

false

drds_audit_collection_policy

The collection policy for PolarDB-X 1.0 audit logs.

""

drds_audit_ttl

The retention period of PolarDB-X 1.0 audit logs in the regional Logstore. Unit: days.

7

drds_sync_enabled

Specifies whether to synchronize PolarDB-X 1.0 audit logs to the central project. Valid values:

• true

• false

true

drds_sync_ttl

The retention period of PolarDB-X 1.0 audit logs in the central Logstore. Unit: days.

180

slb_access_enabled

Specifies whether to collect Server Load Balancer (SLB) access logs. Valid values:

• true

• false

false

slb_access_collection_policy

The collection policy for SLB access logs.

""

slb_access_ttl

The retention period of SLB access logs in the regional Logstore. Unit: days.

7

slb_sync_enabled

Specifies whether to synchronize SLB access logs to the central project. Valid values:

• true

• false

true

slb_sync_ttl

The retention period of SLB access logs in the central Logstore. Unit: days.

180

alb_access_enabled

Specifies whether to collect Application Load Balancer (ALB) access logs. Valid values:

• true

• false

false

alb_access_collection_policy

The collection policy for ALB access logs.

""

alb_access_ttl

The retention period of ALB access logs in the regional Logstore. Unit: days.

7

alb_sync_enabled

Specifies whether to synchronize ALB access logs to the central project. Valid values:

• true

• false

true

alb_sync_ttl

The retention period of ALB access logs in the central Logstore. Unit: days.

180

bastion_enabled

Specifies whether to collect Bastionhost operation logs. Valid values:

• true

• false

false

bastion_ttl

The retention period of Bastionhost operation logs in the central Logstore. Unit: days.

180

waf_enabled

Specifies whether to collect Web Application Firewall (WAF) access logs. Valid values:

• true

• false

false

waf_ttl

The retention period of WAF access logs in the central Logstore. Unit: days.

180

cloudfirewall_enabled

Specifies whether to collect Internet firewall traffic logs from Cloud Firewall. Valid values:

• true

• false

false

cloudfirewall_ttl

The retention period of Cloud Firewall Internet firewall traffic logs in the central Logstore. Unit: days.

180

cloudfirewall_vpc_enabled

Specifies whether to collect VPC firewall traffic logs from Cloud Firewall. Valid values:

• true

• false

false

cloudfirewall_vpc_ttl

The retention period of Cloud Firewall VPC firewall traffic logs in the central Logstore. Unit: days.

180

ddos_coo_access_enabled

Specifies whether to collect Anti-DDoS Proxy (Chinese Mainland) access logs. Valid values:

• true

• false

false

ddos_coo_access_ttl

The retention period of Anti-DDoS Proxy (Chinese Mainland) access logs in the central Logstore. Unit: days.

180

ddos_bgp_access_enabled

Specifies whether to collect Anti-DDoS Origin access logs. Valid values:

• true

• false

false

ddos_bgp_access_ttl

The retention period of Anti-DDoS Origin access logs in the central Logstore. Unit: days.

180

ddos_dip_access_enabled

Specifies whether to collect Anti-DDoS Proxy (Outside Chinese Mainland) access logs. Valid values:

• true

• false

false

ddos_dip_access_ttl

The retention period of Anti-DDoS Proxy (Outside Chinese Mainland) access logs in the central Logstore. Unit: days.

180

sas_file_detect_enabled

Specifies whether to collect the file detection logs of Security Center. Valid values:

• true

• false

false

sas_client_enabled

Specifies whether to collect the client event logs of Security Center. Valid values:

• true

• false

false

sas_net_block_enabled

Specifies whether to collect the network protection logs of Security Center. Valid values:

• true

• false

false

sas_rasp_enabled

Specifies whether to collect the application protection logs of Security Center. Valid values:

• true

• false

false

sas_cspm_enabled

Specifies whether to collect the configuration assessment logs of Security Center. Valid values:

• true

• false

false

sas_ttl

The retention period of Security Center logs in the central Logstore. Unit: days.

180

sas_process_enabled

Specifies whether to collect the process startup logs of Security Center. Valid values:

• true

• false

false

sas_network_enabled

Specifies whether to collect the network connection logs of Security Center. Valid values:

• true

• false

false

sas_login_enabled

Specifies whether to collect the logon logs of Security Center. Valid values:

• true

• false

false

sas_crack_enabled

Specifies whether to collect the brute-force attack logs of Security Center. Valid values:

• true

• false

false

sas_snapshot_process_enabled

Specifies whether to collect the process snapshot logs of Security Center. Valid values:

• true

• false

false

sas_snapshot_account_enabled

Specifies whether to collect the account snapshot logs of Security Center. Valid values:

• true

• false

false

sas_snapshot_port_enabled

Specifies whether to collect the port snapshot logs of Security Center. Valid values:

• true

• false

false

sas_dns_enabled

Specifies whether to collect the DNS logs of Security Center. Valid values:

• true

• false

false

sas_local_dns_enabled

Specifies whether to collect the local DNS logs of Security Center. Valid values:

• true

• false

false

sas_session_enabled

Specifies whether to collect the network session logs of Security Center. Valid values:

• true

• false

false

sas_http_enabled

Specifies whether to collect the web access logs of Security Center. Valid values:

• true

• false

false

sas_security_vul_enabled

Specifies whether to collect the vulnerability logs of Security Center. Valid values:

• true

• false

false

sas_security_hc_enabled

Specifies whether to collect the baseline logs of Security Center. Valid values:

• true

• false

false

sas_security_alert_enabled

Specifies whether to collect the security alert logs of Security Center. Valid values:

• true

• false

false

sas_dns_query_enabled

Specifies whether to collect the DNS request logs of Security Center. Valid values:

• true

• false

false

apigateway_enabled

Specifies whether to collect API Gateway access logs. Valid values:

• true

• false

false

apigateway_ttl

The retention period of API Gateway access logs in the central Logstore. Unit: days.

180

nas_enabled

Specifies whether to collect File Storage NAS access logs. Valid values:

• true

• false

false

nas_ttl

The retention period of NAS access logs in the central Logstore. Unit: days.

180

appconnect_enabled

Specifies whether to collect Cloud Service Bus (CSB) App Connect logs. Valid values:

• true

• false

false

appconnect_ttl

The retention period of CSB App Connect logs in the central Logstore. Unit: days.

180

cps_enabled

Specifies whether to collect Alibaba Cloud Mobile Push logs. Valid values:

• true

• false

false

cps_ttl

The retention period of Alibaba Cloud Mobile Push logs in the central Logstore. Unit: days.

180

k8s_audit_enabled

Specifies whether to collect Kubernetes audit logs. Valid values:

• true

• false

false

k8s_audit_collection_policy

The collection policy for Kubernetes audit logs.

""

k8s_audit_ttl

The retention period of Kubernetes audit logs in the central Logstore. Unit: days.

180

k8s_event_enabled

Specifies whether to collect Kubernetes event logs. Valid values:

• true

• false

false

k8s_event_collection_policy

The collection policy for Kubernetes event logs.

""

k8s_event_ttl

The retention period of Kubernetes event logs in the central Logstore. Unit: days.

180

k8s_ingress_enabled

Specifies whether to collect Kubernetes Ingress access logs. Valid values:

• true

• false

false

k8s_ingress_collection_policy

The collection policy for Kubernetes Ingress access logs.

""

k8s_ingress_ttl

The retention period of Kubernetes Ingress access logs in the central Logstore. Unit: days.

180