IMS Operations Audited by CTS

Scenarios

Cloud Trace Service (CTS) is a log audit service provided by Huawei Cloud and intended for cloud security. It allows you to collect, store, and query cloud resource operation records and use these records for security analysis, compliance auditing, resource tracking, and fault locating.

You can use CTS to record IMS operations for later querying, auditing, and backtracking.

Prerequisites

You need to enable CTS before using it. If it is not enabled, IMS operations cannot be recorded. After being enabled, CTS automatically creates a tracker to record all your operations. The tracker stores only the operations of the last seven days. To store the operations for a longer time, store trace files in OBS buckets.

IMS Operations Recorded by CTS

**Table 1** IMS operations that can be recorded by CTS
Operation	Resource Type	Trace Name
Creating an Image	ims	createImage
Modifying an image	ims	updateImage
Deleting images in a batch	ims	deleteImage
Replicating an image	ims	copyImage
Exporting an image	ims	exportImage
Adding a tenant that can use a shared image	ims	addMember
Modifying tenants that can use a shared image	ims	updateMember
Deleting tenants from the group where the members can use a shared image	ims	deleteMemeber

**Table 2** Relationship between IMS operations and native OpenStack APIs
Operation	Trace Name	Service Type	Resource Type	OpenStack Component
Creating an Image	createImage	IMS	image	glance
Modifying/Uploading an image	updateImage	IMS	image	glance
Deleting an image	deleteImage	IMS	image	glance
Tagging an image	addTag	IMS	image	glance
Deleting an image tag	deleteTag	IMS	image	glance
Adding a tenant that can use a shared image	addMember	IMS	image	glance
Modifying information about a tenant that can use a shared image	updateMember	IMS	image	glance
Deleting a tenant from the group where the members can use a shared image	deleteMember	IMS	image	glance