IMS Operations Audited by CTS

Scenarios

Cloud Trace Service (CTS) is a log audit service provided by Huawei Cloud and intended for cloud security. It allows you to collect, store, and query cloud resource operation records and use these records for security analysis, compliance auditing, resource tracking, and fault locating.

You can use CTS to record IMS operations for later querying, auditing, and backtracking.

Prerequisites

You need to enable CTS before using it. If it is not enabled, IMS operations cannot be recorded. After being enabled, CTS automatically creates a tracker to record all your operations. The tracker stores only the operations of the last seven days. To store the operations for a longer time, store trace files in OBS buckets.

IMS Operations Recorded by CTS

**Table 1** IMS operations that can be recorded by CTS
Operation	Resource Type	Trace Name
Creating an image	ims	createImage
Creating a data disk image	ims	createDataImage
Creating a full-ECS image	ims	createWholeImage
Modifying an image	ims	updateImage
Deleting images in a batch	ims	deleteImage
Querying details about an image	ims	queryImage
Querying details about images	ims	listImages
Replicating an image	ims	copyImage
Replicating an image across regions	ims	crossRegionCopyImage
Exporting an image	ims	exportImage
Adding a member	ims	addMember
Modifying members in a batch	ims	updateMember
Deleting members in a batch	ims	deleteMember
Querying details about a member	ims	queryMember
Querying details about members	ims	listMembers
Adding or modifying an image tag	ims	createOrUpdateTags
Adding or deleting image tags in a batch	ims	batchAddOrDeleteImageTag
Adding an image tag	ims	createTag
Deleting image tags in a batch	ims	deleteTags
Deleting an image tag	ims	deleteTag
Querying image tags	ims	listTags
Creating image metadata	ims	createImageMetadata
Register an image file as a private image	ims	registerImage
Uploading an image	ims	uploadImage
Querying an image schema	ims	queryImageSchema
Querying an image list schema	ims	queryImageListSchema
Querying an image member schema	ims	queryMemberSchema
Querying an image member list schema	ims	queryMemberListSchema
Querying OSs supported by images	ims	listOsVersions
Querying image quotas	ims	queryImageQuota

**Table 2** Relationship between IMS operations and native OpenStack APIs
Operation	Trace Name	Service Type	Resource Type	OpenStack Component
Creating an Image	createImage	IMS	image	glance
Modifying/Uploading an image	updateImage	IMS	image	glance
Deleting an image	deleteImage	IMS	image	glance
Tagging an image	addTag	IMS	image	glance
Deleting an image tag	deleteTag	IMS	image	glance
Adding a tenant that can use a shared image	addMember	IMS	image	glance
Modifying information about a tenant that can use a shared image	updateMember	IMS	image	glance
Deleting a tenant from the group where the members can use a shared image	deleteMember	IMS	image	glance