Auditing and Logs

Auditing

Cloud Trace Service (CTS) records operations on the cloud resources in your account. You can use the logs generated by CTS to perform security analysis, trace resource changes, audit compliance, and locate faults.

After you enable CTS and configure a trace task, CTS can record management and data traces of ModelArts for auditing.

For details about how to enable and configure CTS, see Enabling CTS.

For details about ModelArts management and data traces that can be tracked by CTS, see Key Operations Recorded for Data Management, Key Development Environment Operations Traced by CTS, Key Training Job Operations Traced by CTS, Key Model Management Operations Traced by CTS, and Key Service Management Operations Traced by CTS.

Figure 1 CTS

Key Data Management Operations Traced by CTS

**Table 1** Key data management operations traced by CTS
Operation	Resource Type	Trace
Creating a dataset	dataset	createDataset
Deleting a dataset	dataset	deleteDataset
Updating a dataset	dataset	updateDataset
Publishing a dataset version	dataset	publishDatasetVersion
Deleting a dataset version	dataset	deleteDatasetVersion
Synchronizing the data source	dataset	syncDataSource
Exporting a dataset	dataset	exportDataFromDataset
Creating an auto labeling task	dataset	createAutoLabelingTask
Creating an auto grouping task	dataset	createAutoGroupingTask
Creating an auto deployment task	dataset	createAutoDeployTask
Importing samples to a dataset	dataset	importSamplesToDataset
Creating a dataset label	dataset	createLabel
Updating a dataset label	dataset	updateLabel
Deleting a dataset label	dataset	deleteLabel
Deleting a dataset label and its samples	dataset	deleteLabelWithSamples
Adding samples	dataset	uploadSamples
Deleting samples	dataset	deleteSamples
Stopping an auto labeling task	dataset	stopTask
Creating a team labeling task	dataset	createWorkforceTask
Deleting a team labeling task	dataset	deleteWorkforceTask
Starting the acceptance of a team labeling task	dataset	startWorkforceSamplingTask
Approving, rejecting, or canceling the acceptance of a team labeling task	dataset	updateWorkforceSamplingTask
Submitting sample review comments for an acceptance task	dataset	acceptSamples
Adding a label to a sample	dataset	updateSamples
Sending an email to team labeling members	dataset	sendEmails
Starting a team labeling task as the team manager	dataset	startWorkforceTask
Updating a team labeling task	dataset	updateWorkforceTask
Adding a label to a team-labeled sample	dataset	updateWorkforceTaskSamples
Reviewing team labeling results	dataset	reviewSamples
Creating a labeling team member	workforce	createWorker
Updating labeling team members	workforce	updateWorker
Deleting a labeling team member	workforce	deleteWorker
Deleting labeling team members in batches	workforce	batchDeleteWorker
Creating a labeling team	workforce	createWorkforce
Updating a labeling team	workforce	updateWorkforce
Deleting a labeling team	workforce	deleteWorkforce
Automatically creating an IAM agency	IAM	createAgency
Logging in to the labeling console as a team labeling member	labelConsoleWorker	workerLoginLabelConsole
Logging out of the labeling console as a team labeling member	labelConsoleWorker	workerLogOutLabelConsole
Changing the password for logging in to the labeling console as a team labeling member	labelConsoleWorker	workerChangePassword
Handling the issue that the password for logging in to the labeling console as a team labeling member is lost	labelConsoleWorker	workerForgetPassword
Resetting the password for logging in to the labeling console through the URL as a team labeling member	labelConsoleWorker	workerResetPassword

Key Development Environment Operations Traced by CTS

**Table 2** Key development environment operations traced by CTS
Operation	Resource Type	Trace
Creating a notebook instance	Notebook	createNotebook
Deleting a notebook instance	Notebook	deleteNotebook
Opening a notebook instance	Notebook	openNotebook
Starting a notebook instance	Notebook	startNotebook
Stopping a notebook instance	Notebook	stopNotebook
Updating a notebook instance	Notebook	updateNotebook
Deleting a NotebookApp	NotebookApp	deleteNotebookApp
Switching CodeLab specifications	NotebookApp	updateNotebookApp

Key Training Job Operations Traced by CTS

**Table 3** Key training job operations traced by CTS
Operation	Resource Type	Trace
Creating a training job	ModelArtsTrainJob	createModelArtsTrainJob
Creating a training job version	ModelArtsTrainJob	createModelArtsTrainVersion
Stopping a training job	ModelArtsTrainJob	stopModelArtsTrainVersion
Modifying the description of a training job	ModelArtsTrainJob	updateModelArtsTrainDesc
Deleting a training job version	ModelArtsTrainJob	deleteModelArtsTrainVersion
Deleting a training job	ModelArtsTrainJob	deleteModelArtsTrainJob
Configuring a training job	ModelArtsTrainConfig	createModelArtsTrainConfig
Modifying training job configurations	ModelArtsTrainConfig	updateModelArtsTrainConfig
Deleting training job configurations	ModelArtsTrainConfig	deleteModelArtsTrainConfig
Creating a visualization job	ModelArtsTensorboardJob	createModelArtsTensorboardJob
Deleting a visualization job	ModelArtsTensorboardJob	deleteModelArtsTensorboardJob
Modifying the description of a visualization job	ModelArtsTensorboardJob	updateModelArtsTensorboardDesc
Stopping a visualization job	ModelArtsTensorboardJob	stopModelArtsTensorboardJob
Restarting a visualization job	ModelArtsTensorboardJob	restartModelArtsgTensorboardJob

Key Model Management Operations Traced by CTS

**Table 4** Key model management operations traced by CTS
Operation	Resource Type	Trace
Creating a model	model	addModel
Updating a model	model	updateModel
Deleting a model	model	deleteModel
Creating a model conversion task	convert	addConvert
Updating a model conversion task	convert	updateConvert
Deleting a model conversion task	convert	deleteConvert

Key Service Management Operations Traced by CTS

**Table 5** Key service management operations traced by CTS
Operation	Resource Type	Trace
Deploying a service	service	addService
Deleting a service	service	deleteService
Updating a service	service	updateService
Starting or stopping a service	service	startOrStopService
Adding an access key	service	addAkSk
Deleting an access key	service	deleteAkSk
Creating a dedicated resource pool	cluster	createCluster
Deleting a dedicated resource pool	cluster	deleteCluster
Adding a node to a dedicated resource pool	cluster	addClusterNode
Deleting a node from a dedicated resource pool	cluster	deleteClusterNode
Obtaining the result of creating a dedicated resource pool	cluster	createClusterResult

Key AI Gallery Operations Traced by CTS

**Table 6** Key AI Gallery operations traced by CTS
Operation	Resource Type	Trace
Publishing an asset	ModelArts_Market	create_content
Modifying asset information	ModelArts_Market	modify_content
Publishing an asset version	ModelArts_Market	add_version
Subscribing to an asset	ModelArts_Market	subscription_content
Removing an asset from favorites	ModelArts_Market	cancel_star_content
Liking an asset	ModelArts_Market	like_content
Unliking an asset	ModelArts_Market	cancel_like_content
Publishing an activity	ModelArts_Market	publish_activity
Signing up an activity	ModelArts_Market	regist_activity
Modifying user information	ModelArts_Market	update_user

Log

You can enable ModelArts logging for analysis or audit. After CTS is enabled, CTS starts recording operations on ModelArts. The CTS management console stores the last seven days of operation records. This section describes how to view operation records of the last seven days on the CTS console.

For details about how to view audit logs on CTS, see Viewing ModelArts Audit Logs.

Parent topic: Security

Previous topic: Data Protection

Next topic: Service Resilience