Using CTS to Audit CDN
Cloud Trace Service (CTS) records operations on cloud resources in your account. You can use the logs to perform security analysis, track resource changes, audit compliance, and locate faults.
Enabling CTS
A tracker will be automatically created after CTS is enabled. All traces recorded by CTS are associated with a tracker. Currently, only one tracker can be created for each account.
For details about how to enable CTS, see CTS Overview.
CDN Operations Recorded by CTS
| Operation | Description |
|---|---|
| createDomain | Creating a domain name |
| updateDomain | Updating a domain name Configuring range requests Configuring redirect from origin Configuring an IP ACL Creating a referer rule Configuring the host header Configuring the origin server Configuring an HTTPS certificate Configuring cache rules Configuring HTTP headers |
| deleteDomain | Deleting a domain name |
| enableDomain | Enabling a domain name |
| disableDomain | Disabling a domain name |
| updateOrigin | Configuring the origin server (historical version) |
| updateOriginHost | Configuring the host header (historical version) |
| createRefer | Creating a referer rule (historical version) |
| createCertificate | Configuring a domain certificate (historical version) |
| createCacheRule | Creating a cache rule (historical version) |
| createRefreshTask | Creating a cache purge task |
| createPreheatingTask | Creating a cache prefetch task |
| createTags | Adding a tag |
| batchDeleteTags | Deleting tags in a batch |
| createRuleNew | Creating a rule engine |
| updateDomainRule | Modifying a rule in the rules engine |
| deleteDomainRule | Deleting a rule from the rules engine |
| updateFullRule | Updating all rules in the rules engine |
| batchUpdateRuleStatus | Modifying rules in the rules engine in a batch |
| updateDomainMultiCertificates | Configuring HTTPS for domain names in a batch |
| updatePrivateBucketAccess | Modifying the status of OBS private bucket access |
| batchCopyDomain | Configuring domain names in a batch |
| verifyDomainOwner | Verifying domain ownership |
| duplicateDomain | Copying configurations to new domains |
| createShareCacheGroups | Creating a shared cache group |
| updateShareCacheGroups | Updating a shared cache group |
| deleteShareCacheGroups | Deleting a shared cache group |
| modifyAccountInfo | Modifying tenant configuration |
| createTemplate | Creating a domain name template |
| updateTemplate | Modifying a domain name template |
| deleteTemplate | Deleting a domain name template |
| applyTemplate | Applying a domain name template |
| createAccessControlTask | Creating a URL blocking or unblocking task |
CDN allows you to view some query trace logs through Cloud Trace Service (CTS). To view these logs, you need to perform the operations in Configuring Query Trace Reporting for Cloud Services.
| Trace | Description |
|---|---|
| listDomains | Listing acceleration domain names |
| showDomainDetailByName | Querying acceleration domain details by name |
| queryVerifyDomainOwnerInfo | Querying domain ownership verification details |
| listDomainConfigs | Listing basic configurations of acceleration domain names |
| showDomainSpecialConfigs | Querying special configurations of acceleration domain names |
| showIpInfo | Querying IP address information |
| showCertificatesHttpsInfo | Querying domain names associated with HTTPS certificates |
| showTags | Querying resource tags |
| showDomainFullConfig | Querying the domain name configuration |
| listRuleDetails | Listing rule engines |
| listShareCacheGroups | Listing shared cache groups |
| showQuota | Querying quotas |
| queryTemplate | Listing domain name templates |
| queryTemplateApplyRecord | Querying application records of a domain name template |
| showHistoryTasks | Listing cache purge & prefetch tasks |
| showHistoryTaskDetails | Querying purge & prefetch task details |
| showUrlTaskInfo | Querying purge & prefetch URL records |
| queryAccessControlTask | Querying a URL blocking or unblocking task |
| queryBanUrls | Querying blocked URLs |
| showDomainDetail | Querying details about a domain name |
| showRefer | Querying referer validation rules |
| showBlackWhiteList | Querying IP ACLs |
| showCacheRules | Querying cache rules |
| showHttpInfo | Querying HTTPS settings |
| showResponseHeader showOriginHost | Querying response headers Querying the origin host |
Viewing CTS Traces
After you enable CTS, the system starts to record CDN operations. You can view operations of the past seven days on the CTS console. For details, see Querying Real-Time Traces.
Disabling CTS
You can disable trackers on the CTS console. After a tracker is disabled, the system will stop recording operations, but you can still view historical records. For details about how to disable a tracker, see Disabling or Enabling a Tracker.
What is your overall rating for this page?
Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot
