VPC支持审计的关键操作
通过云审计,您可以记录与虚拟私有云相关的操作事件,便于日后的查询、审计和回溯。
云审计支持的虚拟私有云操作列表如表1所示。
|
操作名称 |
资源类型 |
事件名称 |
|---|---|---|
|
修改Bandwidth |
bandwidth |
modifyBandwidth |
|
创建EIP |
eip |
createEip |
|
释放EIP |
eip |
deleteEip |
|
绑定EIP |
eip |
bindEip |
|
解绑定EIP |
eip |
unbindEip |
|
释放EIP(调用弹性公网IP V3删除接口) |
publicip |
deleteEip |
|
解绑定EIP(调用弹性公网IP V3解绑接口) |
publicip |
disassociateInstance |
|
绑定EIP(调用弹性公网IP V3绑定接口) |
publicip |
associateInstance |
|
创建PrivateIp |
privateIps |
createPrivateIp |
|
删除PrivateIp |
privateIps |
deletePrivateIp |
|
创建安全组 |
security_groups |
createSecurity-group |
|
更新安全组 |
security_groups |
updateSecurity-group |
|
删除安全组 |
security_groups |
deleteSecurity-group |
|
添加安全组规则 |
security-group-rules |
createSecurity-group-rule |
|
更新安全组规则 |
security-group-rules |
updateSecurity-group-rule |
|
删除安全组规则 |
security-group-rules |
deleteSecurity-group-rule |
|
创建子网 |
subnet |
createSubnet |
|
删除子网 |
subnet |
deleteSubnet |
|
修改子网 |
subnet |
modifySubnet |
|
创建VPC |
vpc |
createVpc |
|
删除VPC |
vpc |
deleteVpc |
|
修改VPC |
vpc |
modifyVpc |
|
创建路由器 |
routers |
createRouter |
|
更新路由器 |
routers |
updateRouter |
|
路由器添加接口 |
routers |
addRouterInterface |
|
路由器删除接口 |
routers |
removeRouterInterface |
|
创建端口 |
ports |
createPort |
|
更新端口 |
ports |
updatePort |
|
删除端口 |
ports |
deletePort |
|
创建Network |
networks |
createNetwork |
|
更新Network |
networks |
updateNetwork |
|
删除Network |
networks |
deleteNetwork |
|
批量创建和删除子网资源标签 |
tag |
batchUpdateTags |
|
批量创建和删除VPC资源标签 |
tag |
batchUpdateVpcTags |
|
创建路由表 |
routetables |
createRouteTable |
|
更新路由表 |
routetables |
updateRouteTable |
|
删除路由表 |
routetables |
deleteRouteTable |
|
创建VPC对等连接 |
vpc-peerings |
createVpcPeerings |
|
更新VPC对等连接 |
vpc-peerings |
updateVpcPeerings |
|
删除VPC对等连接 |
vpc-peerings |
deleteVpcPeerings |
|
创建网络ACL |
firewall-groups |
createFirewallGroup |
|
更新网络ACL |
firewall-groups |
updateFirewallGroup |
|
删除网络ACL |
firewall-groups |
deleteFirewallGroup |
|
创建网络ACL策略 |
firewall-policies |
createFirewallPolicy |
|
更新网络ACL策略 |
firewall-policies |
updateFirewallPolicy |
|
删除网络ACL策略 |
firewall-policies |
deleteFirewallPolicy |
|
插入网络ACL规则 |
firewall-policies |
insertFirewallPolicyRule |
|
移除网络ACL规则 |
firewall-policies |
removeFirewallPolicyRule |
|
创建网络ACL规则 |
firewall-rules |
createFirewallRule |
|
更新网络ACL规则 |
firewall-rules |
updateFirewallRule |
|
删除网络ACL规则 |
firewall-rules |
deleteFirewallRule |
|
创建IP地址组 |
address_group |
createAddress_group |
|
更新IP地址组 |
address_group |
updateAddress_group |
|
强制删除IP地址组 |
address_group |
force_deleteAddress_group |
|
删除IP地址组 |
address_group |
deleteAddress_group |
|
创建VPC流日志 |
flowlogs |
createFlowLog |
|
更新VPC流日志 |
flowlogs |
updateFlowLog |
|
删除VPC流日志 |
flowlogs |
deleteFlowLog |
|
创建公网NAT网关 |
natgateways |
createNatGateway |
|
修改公网NAT网关 |
natgateways |
updateNatGateway |
|
删除公网NAT网关 |
natgateways |
deleteNatGateway |
|
创建公网NAT网关DNAT规则 |
dnatrules |
createDnatRule |
|
修改公网NAT网关DNAT规则 |
dnatrules |
updateDnatRule |
|
删除公网NAT网关DNAT规则 |
dnatrules |
deleteDnatRule |
|
创建公网NAT网关SNAT规则 |
snatrules |
createSnatRule |
|
修改公网NAT网关SNAT规则 |
snatrules |
updateSnatRule |
|
删除公网NAT网关SNAT规则 |
snatrules |
deleteSnatRule |