VPC支持审计的关键操作
通过云审计,您可以记录与虚拟私有云相关的操作事件,便于日后的查询、审计和回溯。
云审计支持的虚拟私有云操作列表如表1所示。
操作名称 | 资源类型 | 事件名称 |
|---|---|---|
修改Bandwidth | bandwidth | modifyBandwidth |
创建EIP | eip | createEip |
释放EIP | eip | deleteEip |
绑定EIP | eip | bindEip |
解绑定EIP | eip | unbindEip |
释放EIP(调用弹性公网IP V3删除接口) | publicip | deleteEip |
解绑定EIP(调用弹性公网IP V3解绑接口) | publicip | disassociateInstance |
绑定EIP(调用弹性公网IP V3绑定接口) | publicip | associateInstance |
创建PrivateIp | privateIps | createPrivateIp |
删除PrivateIp | privateIps | deletePrivateIp |
创建安全组 | security_groups | createSecurity-group |
更新安全组 | security_groups | updateSecurity-group |
删除安全组 | security_groups | deleteSecurity-group |
添加安全组规则 | security-group-rules | createSecurity-group-rule |
更新安全组规则 | security-group-rules | updateSecurity-group-rule |
删除安全组规则 | security-group-rules | deleteSecurity-group-rule |
创建子网 | subnet | createSubnet |
删除子网 | subnet | deleteSubnet |
修改子网 | subnet | modifySubnet |
创建VPC | vpc | createVpc |
删除VPC | vpc | deleteVpc |
修改VPC | vpc | modifyVpc |
创建路由器 | routers | createRouter |
更新路由器 | routers | updateRouter |
路由器添加接口 | routers | addRouterInterface |
路由器删除接口 | routers | removeRouterInterface |
创建端口 | ports | createPort |
更新端口 | ports | updatePort |
删除端口 | ports | deletePort |
创建Network | networks | createNetwork |
更新Network | networks | updateNetwork |
删除Network | networks | deleteNetwork |
批量创建和删除子网资源标签 | tag | batchUpdateTags |
批量创建和删除VPC资源标签 | tag | batchUpdateVpcTags |
创建路由表 | routetables | createRouteTable |
更新路由表 | routetables | updateRouteTable |
删除路由表 | routetables | deleteRouteTable |
创建VPC对等连接 | vpc-peerings | createVpcPeerings |
更新VPC对等连接 | vpc-peerings | updateVpcPeerings |
删除VPC对等连接 | vpc-peerings | deleteVpcPeerings |
创建网络ACL | firewall-groups | createFirewallGroup |
更新网络ACL | firewall-groups | updateFirewallGroup |
删除网络ACL | firewall-groups | deleteFirewallGroup |
创建网络ACL策略 | firewall-policies | createFirewallPolicy |
更新网络ACL策略 | firewall-policies | updateFirewallPolicy |
删除网络ACL策略 | firewall-policies | deleteFirewallPolicy |
插入网络ACL规则 | firewall-policies | insertFirewallPolicyRule |
移除网络ACL规则 | firewall-policies | removeFirewallPolicyRule |
创建网络ACL规则 | firewall-rules | createFirewallRule |
更新网络ACL规则 | firewall-rules | updateFirewallRule |
删除网络ACL规则 | firewall-rules | deleteFirewallRule |
创建IP地址组 | address_group | createAddress_group |
更新IP地址组 | address_group | updateAddress_group |
强制删除IP地址组 | address_group | force_deleteAddress_group |
删除IP地址组 | address_group | deleteAddress_group |
创建VPC流日志 | flowlogs | createFlowLog |
更新VPC流日志 | flowlogs | updateFlowLog |
删除VPC流日志 | flowlogs | deleteFlowLog |
创建公网NAT网关 | natgateways | createNatGateway |
修改公网NAT网关 | natgateways | updateNatGateway |
删除公网NAT网关 | natgateways | deleteNatGateway |
创建公网NAT网关DNAT规则 | dnatrules | createDnatRule |
修改公网NAT网关DNAT规则 | dnatrules | updateDnatRule |
删除公网NAT网关DNAT规则 | dnatrules | deleteDnatRule |
创建公网NAT网关SNAT规则 | snatrules | createSnatRule |
修改公网NAT网关SNAT规则 | snatrules | updateSnatRule |
删除公网NAT网关SNAT规则 | snatrules | deleteSnatRule |

