Document Center
Cloud Config
Announcements & Updates
Announcement: Cloud Config provides the account group feature to replace Cloud Config for Enterprise
Release notes
Product Introduction
What is Cloud Config?
Scenarios
Terms
Limits
Alibaba Cloud services that are supported by Cloud Config
Differences between ordinary accounts, member accounts, and management accounts
Pricing
Billings methods
Quick Start
Quick start for ordinary accounts
Quick start for management accounts
Resources
Overview
View the resource list
Enter a resource ID or set filter conditions to globally search for the specified resource
View the information about a resource
View the configuration timeline of a resource
View the compliance timeline of a resource
View the resources that are associated with a resource
Download the resource list
Manage resources
Rules
Manage rules
Create a rule based on a managed rule
Create a custom rule
Modify a rule
Disable a rule
Enable a rule
Delete a rule
Manually re-evaluate resources
Download a compliance evaluation report
View the rule list
View the details of a rule
Remediation settings
Overview
Configure automatic remediation
Configure manual remediation
Delete remediation settings
View compliance evaluation results
View the compliance evaluation results
View the compliance timeline of a resource
Compliance Packages
Overview
Enable a compliance package
Edit a compliance package
Delete a compliance package
View the compliance evaluation results generated based on a compliance package
Download the compliance evaluation report generated based on a compliance package
Account Groups
Overview
Create an account group
Modify an account group
Delete an account group
View the resources of an account group
Manage compliance packages in an account group
Manage the rules in an account group
Event Log
View ActionTrail event details
ActionTrail event log reference
Delivery Destination Services
Overview
Delivery to Log Service
Deliver resource-related logs to a Log Service Logstore
Examples of resource change logs
Example of resource non-compliance events
Resource Snapshots
Deliver resource data to an OSS bucket
Example of scheduled resource snapshots
Examples of resource change logs
Events
Deliver resource data to an MNS topic
Examples of resource change logs
Example of resource non-compliance events
Monitoring Scope
Overview
Configure the monitoring scope
Service-linked Roles
Manage the service-linked role for Cloud Config
Manage the AliyunServiceRoleForConfigRemediation service-linked role
Best Practices
Remediate non-compliant resources by using MNS topics
Use a custom rule to check whether MFA is enabled for a specified RAM user
API Reference
Release notes
API Reference (2020-09-07)
List of operations by function
Request method
Request signatures
Common parameters
RAM user authorization
Obtain an AccessKey pair
Operations for ordinary accounts
Compliance packages
ListCompliancePackTemplates
CreateCompliancePack
ListCompliancePacks
GetCompliancePack
UpdateCompliancePack
DeleteCompliancePacks
GenerateCompliancePackReport
GetCompliancePackReport
GetConfigRuleComplianceByPack
GetResourceComplianceByPack
Rules
CreateConfigRule
UpdateConfigRule
GetConfigRule
DeactiveConfigRules
ListResourceEvaluationResults
ListConfigRuleEvaluationResults
GenerateConfigRulesReport
GetConfigRulesReport
GetResourceComplianceByConfigRule
GetConfigRuleSummaryByRiskLevel
Resources
GetDiscoveredResourceCountsGroupByRegion
GetDiscoveredResourceCountsGroupByResourceType
GetResourceConfigurationTimeline
GetResourceComplianceTimeline
Delivery channels
CreateDeliveryChannel
UpdateDeliveryChannel
Operations for management accounts
Account groups
CreateAggregator
ListAggregators
GetAggregator
UpdateAggregator
DeleteAggregators
Compliance packages
ListCompliancePackTemplates
CreateAggregateCompliancePack
ListAggregateCompliancePacks
GetAggregateCompliancePack
UpdateAggregateCompliancePack
DeleteAggregateCompliancePacks
GenerateAggregateCompliancePackReport
GetAggregateCompliancePackReport
GetAggregateResourceComplianceByPack
GetAggregateConfigRuleComplianceByPack
GetAggregateAccountComplianceByPack
Rules
CreateAggregateConfigRule
ListAggregateConfigRules
GetAggregateConfigRule
UpdateAggregateConfigRule
DeleteAggregateConfigRules
ActiveAggregateConfigRules
DeactiveAggregateConfigRules
GenerateAggregateConfigRulesReport
GetAggregateConfigRulesReport
StartAggregateConfigRuleEvaluation
GetAggregateResourceComplianceByConfigRule
GetAggregateConfigRuleSummaryByRiskLevel
ListAggregateConfigRuleEvaluationResults
ListAggregateResourceEvaluationResults
Resources
GetAggregateResourceCountsGroupByRegion
GetAggregateResourceCountsGroupByResourceType
GetAggregateResourceConfigurationTimeline
GetAggregateResourceComplianceTimeline
Delivery channels
CreateDeliveryChannel
UpdateDeliveryChannel
Member accounts
API Reference (2019-01-08)
List of API operations by function
Make API requests
Common parameters
Request signatures
RAM user authorization
Obtain an AccessKey pair
Resources
GetDiscoveredResourceCounts
GetSupportedResourceTypes
DescribeDiscoveredResource
GetDiscoveredResourceSummary
GetResourceComplianceTimeline
GetResourceConfigurationTimeline
ListDiscoveredResources
ListAggregateDiscoveredResources
GetAggregateDiscoveredResource
Rules
DescribeConfigRule
ListConfigRules
PutConfigRule
DeleteConfigRules
StartConfigRuleEvaluation
StopConfigRules
PutEvaluations
DescribeEvaluationResults
DescribeCompliance
DescribeComplianceSummary
ActiveConfigRules
Monitoring scope
DescribeConfigurationRecorder
StartConfigurationRecorder
PutConfigurationRecorder
Delivery methods
DescribeDeliveryChannels
PutDeliveryChannel
Remediation templates
ListRemediationTemplates
FAQ
Why is cloud resource access authorization required when I activate Cloud Config?
Why am I unable to find any data in the console after I activate Cloud Config?
Why some of my resources are not listed in the console?
Why does no related record appear on the configuration timeline after a configuration is changed?
How do I configure a custom rule?
How do I obtain more managed rules?
Why are my resources not evaluated after I configure a rule?
Why does Cloud Config not detect a configuration change that results in non-compliance?
What is the relationship between the compliance timeline and the configuration timeline?
What is the data structure of functions that can be used to create custom rules?
all-products-head
This Product
This Product
All Products
All Products
Show more
Show less