Trace Storage
Feature Overview
The trace set is an enhancement of operation records, and helps customers to trace to the source, and guarantee the operation security of enterprise personnel and assets. And it includes the type information of record operation log, storage path of operation log, and other contents.
For all the operation records stored by Cloudtrail, you can realize security analysis, resource change tracing and compliance audit.
Create Trace
-
Log in to BCT console, and in the left navigation bar, select "Trace Storage", and click [Create Trace].
-
Fill in the "Basic Information" and "Storage Location".
Filling instructions:
[Basic information]
- Trace name: It only supports the combination of upper and lower case letters, numbers, and-_., not exceeding 40 characters.
- Tracing position: The tracing of all regions is supported.
[Storage Location]
- Whether a new BOS Bucket is created: To create a BOS Bucket, enter one name in the textbox; or click the box to choose for the BOS bucket, a Bucket list available for selection pops up.
- Name of BOS Bucket: It can only include lowercase letters, numbers and "-", and must start with lowercase letters and numbers, with a length ranging from 3 to 63; a created bucket name cannot be modified, and is unique in all regions. The company/item name can be used as a prefix.
- Log file prefix: It can only include letters, numbers, Chinese, underlines and dashes, and decimal points; and can only start with letters, numbers or Chinese; the length of a file folder is limited to 1-65.
- After configuration, click "Create" to create a trace storage.
Manage Trace
Enable/Disable Trace
The users can enable, disable, modify and delete the created traces in the overview page of trace storage.
Note
- After deleting the trace, you will no longer receive a new audit event;
- The audit events delivered to BOS cannot be deleted.
Modify Trace
The users can click [Modify] behind the trace record to edit the created trace.
After re-editing, click [Update] to change the trace.