Updated on 2024-11-08 GMT+08:00

HSS Operations Supported by CTS

Cloud Trace Service (CTS) records all operations on HSS, including requests initiated from the management console or open APIs and responses to the requests, for tenants to query, audit, and trace.

Table 1 provides more details.

Table 1 HSS operations that can be recorded by CTS

Operation

Resource Type

Trace Name

Adding or deleting resource tags in batches

hss

changeTmsResourceTagInfo

Provisioning a resource in a scenario

hss

moOpenResourceInfo

Placing an order in a scenario

hss

dealMoOrderInfo

Provisioning a resource

hss

openResourceInfo

Querying a resource instance

hss

listTmsResourceInstancesInfo

Deleting AOS

hss

deleteAosResourceInfo

Opening AOS resource information

hss

openAosResourceInfo

Deleting tenant information

hss

deleteProjectInfo

Checking whether the licenses exceed the threshold

hss

licenseCheck

Updating a license file

hss

updateLicenseFile

Uploading a license file

hss

uploadLicenseFile

Renewal

hss

dealChargeInfo

Obtaining resource information

hss

getCbcServiceResourceInstances

Changing resource status

hss

changeResourceStatusInfo

Changing a resource

hss

changeResourceInfo

Adding a tag to a resource

hss

addResourceInstanceTag

Deleting a resource tag

hss

deleteResourceInstanceTag

Creating tags in batches

hss

batchCreateTags

Deleting tags in batches

hss

batchDeleteTags

Filtering the number of purchased resources by tag

hss

countResourceInstances

Filtering purchased resources by tag

hss

filterResourceInstanceList

Deleting an authorization policy

hss

deleteIamAgenciesRoles

Binding an authorization policy

hss

createIamAgenciesRoles

Changing the status of the pay-per-use billing switch for virus scan

hss

changeAntivirusPayPerScanStatus

Changing the number of free virus scans

hss

changeAntivirusFreeQuota

Changing the display status of the pay-per-use billing switch for virus scan

hss

changeAntivirusNotificationStatus

Creating a paid virus scan task

hss

createAntiVirusPaidTask

Creating a custom scan policy

hss

createAntiVirusPolicy

Editing a custom scan policy

hss

changeAntivirusPolicy

Deleting a custom scan policy

hss

deleteAntivirusPolicy

Exporting the virus scan result list

hss

exportAntiVirusResult

Handling virus scan results

hss

operateAntiVirusResult

Creating a virus scan task

hss

createAntiVirusTask

Canceling a scan task

hss

switchAntivirusTask

Deleting a server from the whitelist policy

hss

deleteAppWhitelistPolicyHost

Adding a server to the whitelist policy

hss

addAppWhitelistPolicyHost

Managing the whitelist policy learning status

hss

switchAppWhitelistPolicyLearnStatus

Adding a process to the process whitelist policy

hss

addAppWhitelistPolicyProcess

Marking a process whitelist policy to identify a process

hss

changeAppWhitelistPolicyProcessStatus

Applying a whitelist policy

hss

switchAppWhitelistPolicyHost

Deleting a whitelist policy

hss

deleteAppWhitelistPolicy

Creating a whitelist policy

hss

createAppWhitelistPolicy

Modifying a whitelist policy

hss

changeAppWhitelistPolicy

Immediately collecting asset fingerprints on a single server

hss

runHostAssetManualCollect1

Changing the port status

hss

batchModifyPortStatus

Exporting container asset fingerprints

hss

downloadAssetFile

Immediately collecting asset fingerprints on a single server

hss

runHostAssetManualCollect

Asset management - server management - configuring asset importance

hss

addValuesLevel

Modifying the backup policy associated with the vault

hss

updateBackupPolicyInfo

Ignoring, unignoring, repairing, or verifying the failed configuration check items

hss

changeCheckRuleAction

Ignoring, unignoring, repairing, or verifying the failed configuration check items that failed to pass the check

hss

changeCheckRuleAction

Deleting a specified configuration check policy

hss

deleteSecurityCheckPolicyGroup

Modifying information about a specified configuration check policy

hss

updateSecurityCheckPolicyGroup

Creating a configuration check policy

hss

addSecurityCheckPolicyGroup

Unbinding quota

hss

cancelHostsQuota

Querying quota IDs in batches

hss

listResourceIds

Exporting the container cluster protection event list

hss

exportClusterProtectEventInfo

Changing the alarm status

hss

modClusterEvents

Deleting a cluster protection policy

hss

deleteClusterProtectionPolicy

Creating a cluster protection policy

hss

createClusterProtectionPolicy

Modifying a cluster protection policy

hss

changeClusterProtectionPolicy

Managing the cluster protection mode

hss

switchClusterProtectionMode

Creating a container export task

hss

exportContainerList

Deleting a cluster daemonset

hss

deleteAgentDaemonset

Creating a cluster daemonset

hss

createAgentDaemonset

Updating a cluster daemonset

hss

updateAgentDaemonset

Obtaining cluster configurations

hss

getCCEClusterConfig

Uninstalling daemonsets in batches

hss

batchDeleteAgentDaemonset

Upgrading cluster daemonsets in batches

hss

batchUpgradeAgentDaemonset

Obtaining cluster node tags

hss

listCCENodesLabel

Enabling protection for a cluster

hss

addCceIntegrationProtection

Obtaining container cluster risk information in batches

hss

getCCEClusterDetectRiskList

Creating a multi-cloud cluster

hss

createMultiCloudClusters

Deleting a multi-cloud cluster

hss

removeMultiCloudClusters

Updating a multi-cloud cluster

hss

updateMultiCloudClusters

Synchronizing the access status of a multi-cloud cluster

hss

syncMultiCloudClusterStatus

Parsing the configuration file of a multi-cloud cluster

hss

parseMultiCloudClusterConfig

Changing protection status

hss

switchContainerProtectStatus

Creating a security group policy

hss

createSecurityGroupPolicy

Updating a security group policy

hss

updateSecurityGroupPolicy

Deleting a configuration policy of the container cluster network

hss

deleteContainerNetworkPolicy

Adding a configuration policy to the container cluster network

hss

createContainerNetworkPolicy

Updating a configuration policy of the container cluster network

hss

updateContainerNetworkPolicy

Deleting a security group policy

hss

deleteSecurityGroupPolicy

Exporting emergency malicious programs

hss

exportEmergency

Handling incidents

hss

handleMalwareEvent

Managing the isolation switch

hss

isolateOperateEmergency

Restoring an isolated file

hss

recoverIsolateFile

Handling alarms in batches

hss

batchChangeEvent

Unblocking an IP address

hss

changeBlockedIp

Exporting vulnerabilities

hss

exportEventRequest

Deleting an isolated file

hss

deleteIsolatedFile

Restoring an isolated file

hss

changeIsolatedFile

Handling an alarm event

hss

changeEvent

Removing an alarm from whitelist

hss

removeAlarmWhiteList

Importing an alarm whitelist

hss

importAlarmWhiteList

Removing login information from login whitelist

hss

removeLoginWhiteList

Configuring the login whitelist

hss

addLoginWhiteList

Removing an item from the system user whitelist

hss

removeSystemUserWhiteList

Adding an item to the system user whitelist

hss

addSystemUserWhiteList

Modifying the system user whitelist

hss

updateSystemUserWhiteList

Exporting a task

hss

exportTaskInfo

Enabling protection for new servers by default

hss

switchDecoyPortAutoBind

Disabling HSS

hss

deleteDecoyPortHostPolicy

Changing the server protection policy

hss

switchDecoyPortHostPolicy

Creating a protection policy

hss

createDecoyPortPolicy

Deleting a server protection policy

hss

deleteDecoyPortPolicy

Editing a protection policy

hss

modifyDecoyPortPolicy

Enabling or disabling a protection policy

hss

switchDecoyPortPolicy

Ignoring or unignoring a server

hss

changeHostIgnoreStatus

Delivering a manual scan

hss

setManualDetect

Configuring asset importance

hss

associateHostAssetValue

Modifying the firewall authorization status

hss

switchFirewallStatus

Adding a server to group

hss

associateHostsGroup

Deleting a server group

hss

deleteHostsGroup

Creating a server group

hss

addHostsGroup

Editing a server group

hss

changeHostsGroup

Creating an on-premise data center server group

hss

addOutsideHostGroup

Editing an on-premises data center server group

hss

changeOutsideHostGroup

Changing protection status

hss

switchHostsProtectStatus

Switching editions

hss

switchHostsProtectVersion

Uninstall an agent

hss

uninstallAgents

Upgrading an agent

hss

upgradeAgents

Creating a VPC endpoint

hss

createVpcEndpoint

Querying the creation status of each server endpoint

hss

showEndpointStatus

Creating a service order

hss

createDealOrder

Changing specifications

hss

upgradeOrder

Batch exporting baseline check results of the SWR image repository

hss

batchExportBaselineTask

Changing the user-defined weak password of an image

hss

changeExtendedWeakPassword

Scanning images in the image repository in batches

hss

batchScanSwrImage

Scanning local images

hss

batchScanLocalImage

Batch exporting local image vulnerabilities

hss

batchExportLocalVulList

Batch exporting local image vulnerabilities

hss

batchExportLocalVulTask

Scanning SWR images in batches

hss

batchScanPrivateImage

Exporting image security report export statistics

hss

showImageSecurityReportStatistic

Modifying the whitelist of file paths containing sensitive image information

hss

changeFilePathWhiteDetail

Sensitive information processing

hss

changeSensitiveInfo

Updating images shared by others from SWR

hss

sharedImageSynchronization

Batch exporting SWR image repository vulnerabilities

hss

batchExportSWRVulList

Updating and scanning an SWR image

hss

runSwrImageScan

Batch exporting SWR image repository vulnerabilities

hss

batchExportSWRVulTask

Synchronizing the image list from SWR

hss

runImageSynchronize

Synchronizing private and shared images from SWR

hss

runImageSynchronizeTask

Scanning images

hss

runImageScan

(Operation tool) Clearing the search history of the tool

hss

deleteToolConditionHistory

(Operation tool) Using the tool to search

hss

executeTool

Managing the container lifecycle

hss

changeContainerStatus

Synchronizing cluster information

hss

createClustersInfo

Running a cluster script

hss

createDaemonset

Running a cluster script

hss

createDaemonset

Changing the status of the monthly operations report dialog box

hss

changeMonthlyOperationReportTipStatus

Performing a security check again

hss

resetRiskScore

Modifying a policy

hss

changePolicyDetail

Applying a policy group

hss

associatePolicyGroup

Removing a policy group

hss

deletePolicyGroup

Modifying a policy group

hss

changePolicyGroup

Copying a server policy group

hss

addPolicyGroup

Deleting a server from the whitelist policy

hss

deletePWLPolicyHost

Applying a whitelist policy

hss

switchPWLPolicyHost

Adding a server to the whitelist policy

hss

addPWLPolicyHost

Marking a process whitelist policy to identify a process

hss

changePWLPolicyProcessStatus

Re-learning a whitelist policy

hss

relearnPWLPolicy

Handling an event

hss

operatePWLEvent

Deleting a whitelist policy

hss

deletePWLPolicy

Modifying a whitelist policy

hss

changePWLPolicy

Creating a whitelist policy

hss

createPWLPolicy

Creating a quota order

hss

createQuotasOrder

Applying a backup policy to a vault

hss

associateBackupPolicy

Enabling backup for a single server

hss

startBackupSingle

Enabling backup for a single server

hss

startSingleBackup

Deleting a backup

hss

deleteDuplicationInfo

Restoring data from a backup

hss

restoreDuplicationInfo

Ignoring a prompt

hss

updateAutoDeployAgent

Enabling ransomware prevention

hss

batchStartProtection

Disabling ransomware prevention

hss

stopProtection

Enabling ransomware prevention

hss

startProtection

Enabling ransomware protection for a single server

hss

startProtectionSingle

Deleting a policy

hss

deleteProtectionPolicy

Adding a protection policy

hss

addProtectionPolicy

Modifying a ransomware protection policy

hss

updateProtectionPolicy

Switching a ransomware protection policy

hss

associateProtectionPolicy

Deleting a protection policy

hss

deletePolicy

Adding a protection policy

hss

addPolicy

Modifying a policy

hss

updatePolicy

Enabling/Disabling application protection

hss

switchRasp

Uploading a security report logo

hss

uploadReportLogo

Changing the security report switch

hss

switchReportStatus

Deleting a report

hss

deleteSecurityReport

Creating or copying a report

hss

addSecurityReport

Modifying a report

hss

changeSecurityReport

Sending a report

hss

sendSecurityReport

Modifying the scheduled configuration of a security check

hss

updateSecurityCheckConfig

Manually starting a health check

hss

startManualSecurityCheck

Canceling a manually started health check

hss

stopManualSecurityCheck

Deleting a user-built cluster daemonset

hss

deleteSelfBuiltClusterDaemonset

Saving a user-built cluster daemonset

hss

saveSelfBuiltClusterDaemonset

Installing the agent

hss

installAgent

Configuring alarms

hss

updateAlarmConfig

Installing agents in batches

hss

batchInstallAgent

Enabling or disabling the automatic agent upgrade function

hss

changeAgentAutoUpgradeStatus

Enabling or disabling the automatic quota binding function

hss

changeAutoOpenQuotaStatus

Adding, editing, or deleting common login IP addresses

hss

modifyLoginCommonIp

Adding, editing, or deleting common login locations

hss

modifyLoginCommonLocation

Adding, editing, or deleting a login IP address whitelist

hss

modifyLoginWhiteIp

Enabling or disabling malware sample collection for cloud scan

hss

changeMalwareCollectStatus

Setting prompt information

hss

setMalwareReminders

Setting prompt information

hss

setRemindersConfig

Uploading a template file

hss

uploadTemplate

Configuring two-factor login

hss

setTwoFactorLoginConfig

Enabling or disabling automatic isolation and killing of malicious programs

hss

changeAutoKillVirusStatus

Upgrading from agent 1.0 to agent 2.0

hss

upgradeAgent

Restarting a server where vulnerabilities were fixed

hss

changeVulRestart

Exporting emergency vulnerabilities

hss

exportEmergencyVulnerabilities

Operating emergency vulnerabilities

hss

emergencyOperate

Exporting information about vulnerabilities and affected servers

hss

exportVuls

Scanning for vulnerabilities

hss

createVulnerabilityScanTask

Ignoring or unignoring the servers affected by the selected software vulnerability

hss

changeVulStatus1

Performing rollback using a backup

hss

restoreVulHostBackup

Querying the backup statistics of the servers where vulnerabilities were handled

hss

showVulBackupStatistics

Creating a task for exporting historical vulnerabilities

hss

exportHandledVulnerabilities

Querying the vulnerability fixing command list

hss

listVulRepairCmds

Vulnerability management - server view - server list - displaying report

hss

showVulReportData

Vulnerability management - server view - server list - exporting report

hss

exportVulReport

Modifying a vulnerability scan policy

hss

changeVulScanPolicy

Rescanning servers in the previous vulnerability scan job

hss

rescanVulScanTask

Querying the estimated time of vulnerability scan tasks

hss

showVulScanTaskEstimatedTime

Modifying a vulnerability scan policy

hss

changeVulScanPolicy

Creating a scan task

hss

createVulnerabilityScanTask

Changing the status of a vulnerability

hss

changeVulStatus

Recording the last time when a user viewed the vulnerability task management page

hss

recordUserViewVulTask

Removing a vulnerability whitelist item

hss

deleteVulWhiteList

Adding a vulnerability whitelist item

hss

addVulWhiteList

Modifying the vulnerability whitelist

hss

changeVulWhiteList

Enabling or disabling dynamic WTP

hss

setRaspSwitch

Setting the trustworthy status of a privileged process and its subprocesses

hss

setPrivilegedChildStatus

Enabling or disabling WTP

hss

setWtpProtectionStatusInfo

Setting the period for automatically disabling protection

hss

setDateOffConfigInfo

Setting the status of the monitoring-only switch

hss

setMonitorOnlyStatus

Removing a privileged process

hss

deletePrivilegedProcessInfo

Adding a privileged process

hss

addPrivilegedProcessInfo

Modifying a privileged process

hss

updatePrivilegedProcessInfo

Removing a protected directory

hss

deleteHostProtectDirInfo

Adding a protected directory

hss

addHostProtectDirInfo

Modifying a protected directory

hss

updateHostProtectDirInfo

Enabling or disabling directory protection

hss

setProtectDirSwitchInfo

Modifying the Tomcat bin directory for dynamic WTP

hss

updateRaspPathInfo

Enabling or disabling remote backup

hss

setRemoteBackupInfo

Setting the status of scheduled protection

hss

setTimingOffSwitchInfo

Deleting scheduled protection settings

hss

deleteTimingOffConfigInfo

Adding a scheduled protection setting

hss

addTimingOffConfigInfo

Modifying scheduled protection settings

hss

updateTimingOffConfigInfo

Removing a remote backup server

hss

deleteBackupHostInfo

Adding or modifying a remote backup server

hss

updateBackupHostInfo

Querying software information through file upload

hss

showFileAppInfoList

Importing the feature library upgrade package

hss

importFeatureUpload21

Deleting an account

hss

deleteAccount

Adding accounts in batches

hss

batchAddAccounts

Enabling a trusted service

hss

enableTrustService