ActionTrail

Implement security analytics, resource change tracking, and compliance audits.

Get it FreeContact Sales

ActionTrail collects API calling records of cloud services (including API call records triggered in the console). It standardizes the operation records and saves them to specified OSS buckets as files. You can also manage the records files using management functions provided by OSS, such as authorization, lifecycle management, and archiving.

When you initiate an operation call using the console or SDK, ActionTrail transfers the operation records to the specified OSS bucket within five minutes. You can access the ActionTrail operation records through OSS, or view the operation records for the last seven days in the ActionTrail console or API.


Tab #2 content goes here!

Donec pulvinar neque sed semper lacinia. Curabitur lacinia ullamcorper nibh; quis imperdiet velit eleifend ac. Donec blandit mauris eget aliquet lacinia! Donec pulvinar massa interdum risus ornare mollis. In hac habitasse platea dictumst. Ut euismod tempus hendrerit. Morbi ut adipiscing nisi. Etiam rutrum sodales gravida! Aliquam tellus orci, iaculis vel.

Tab #3 content goes here!

Donec pulvinar neque sed semper lacinia. Curabitur lacinia ullamcorper nibh; quis imperdiet velit eleifend ac. Donec blandit mauris eget aliquet lacinia! Donec pulvinar massa interdum ri.

Tab #4 content goes here!

Donec pulvinar neque sed semper lacinia. Curabitur lacinia ullamcorper nibh; quis imperdiet velit eleifend ac. Donec blandit mauris eget aliquet lacinia! Donec pulvinar massa interdum risus ornare mollis. In hac habitasse platea dictumst. Ut euismod tempus hendrerit. Morbi ut adipiscing nisi. Etiam rutrum sodales gravida! Aliquam tellus orci, iaculis vel.

Benefits

Troubleshooting
EWith ActionTrail, you can capture adjustments and view operations on your Alibaba Cloud account within a specific period to analyze or solve potential problems.
Security Troubleshooting
ActionTrail allows the recording of source IP address calls initiated by your account (including your RAM account) and the execution results to prevent data or password leaks.
Quick Push
ActionTrail leverages a highly available data processing pipeline to collect, handle, and transmit events. ActionTrail usually handles events within 10 minutes upon user operation.
Security Compliance
With ActionTrail, you can automatically record and store logs of executed events on your Alibaba Cloud account (both from the console or an API) to streamline compliance and auditing processes.

Features

How it works

Analysis

Logs recorded by ActionTrail can help to analyze the cause of security issues affecting your Alibaba Cloud account or resources. For example, ActionTrail records all of your account login operations, including detailed records such as the login time, IP addresses of logon, and whether multi-factor authentication was used. With these files, you can identify security issues that are affecting your account.

Tracking

When there are abnormal changes to your cloud resources, the operation logs recorded by ActionTrail can help you
identify the reason(s). For example, when you find that an ECS instance has stopped, you can use ActionTrail to
identify who initiated the operation, from which IP address, and at what time.

Compliance

If your organization has multiple members and you are using the Alibaba Cloud RAM service to manage the identities
of the members, you have to obtain detailed operation records of each member to meet the compliance audit
requirements of your organization. The operation events recorded by ActionTrail can meet these compliance audit
requirements. Try out over 40 products for free

FAQs

1. What products does ActionTrail currently support?

• Elastic Compute Service (ECS)
• Server Load Balancer
• ApsaraDB for RDS
• Alibaba Cloud CDN
• Resource Access Management (RAM)
• Security Token Service (STS)
• ActionTrail
• Alibaba Cloud account and RAM user logon

2. How many days of records can I search with ActionTrail?

ActionTrail supports searching logs within the past seven days. If you want to keep the logs longer, activate the OSS and ActionTrail services, and use StartLogging to store the records to your own OSS.

3. What operations does ActionTrail record?

The following is the list of regions where KMS is available with their corresponding location ID and public/private network addresses:

Upgraded Support For You

1 on 1 Presale Consultation, 24/7 Technical Support, Faster Response, and More Tickets.

1 on 1 Presale Consultation

Consulting by experienced cloud experts. Learn More

24/7 Technical Support

Extended service time from 10 hours 5 days a week to 24/7. Learn More

6 Free Tickets per Quarter

The number of free tickets doubled from 3 to 6 per quarter. Learn More

Faster Response

Shorten after-sale response time from 36 hours to 18 hours. Learn More