User Guide - HUAWEI CLOUD · User Guide Issue 26 Date 2018-06-01 HUAWEI TECHNOLOGIES CO., ... IMS, EVS, CSBS, VBS, VPC, DNS, ... User Guide 1 Managing Trackers

Cloud Trace Service

User Guide

Issue 26

Date 2018-06-01

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei and thecustomer. All or part of the products, services and features described in this document may not be within thepurchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees orrepresentations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

Bantian, LonggangShenzhen 518129People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Issue 26 (2018-06-01) Huawei Proprietary and ConfidentialCopyright © Huawei Technologies Co., Ltd.

i

http://www.huawei.com

mailto:[email protected]

Contents

1 Managing Trackers........................................................................................................................11.1 Configuring a Tracker.....................................................................................................................................................11.2 Disabling or Enabling a Tracker.....................................................................................................................................41.3 Deleting a Tracker.......................................................................................................................................................... 4

2 Application Examples...................................................................................................................62.1 Security Auditing............................................................................................................................................................62.2 Fault Locating.................................................................................................................................................................72.3 Resource Tracking.......................................................................................................................................................... 8

3 CTS Trace Reference.....................................................................................................................93.1 Trace Structure................................................................................................................................................................93.2 Trace Examples.............................................................................................................................................................11

4 Supported Services and Operation Lists................................................................................ 144.1 Key Operations on ECS................................................................................................................................................144.2 Key Operations on IMS................................................................................................................................................154.3 Key Operations on BMS...............................................................................................................................................154.4 Key Operations on AS..................................................................................................................................................164.5 Key Operations on DeC................................................................................................................................................174.6 Key Operations on CCE............................................................................................................................................... 174.7 Key Operations on CSBS............................................................................................................................................. 214.8 Key Operations on VPC............................................................................................................................................... 224.9 Key Operations on Direct Connect...............................................................................................................................234.10 Key Operations on ELB............................................................................................................................................. 234.11 Region-level Key Operations on DNS........................................................................................................................254.12 Global-level Key Operations on DNS........................................................................................................................ 254.13 Key Operations on EVS............................................................................................................................................. 264.14 Key Operations on VBS............................................................................................................................................. 274.15 Key Operations on OMS............................................................................................................................................ 284.16 Key Operations on CDN.............................................................................................................................................284.17 Key Operations on SFS.............................................................................................................................................. 294.18 Key Operations on DESS........................................................................................................................................... 304.19 Key Operations on OBS............................................................................................................................................. 314.20 Key Operations on CTS..............................................................................................................................................33

Cloud Trace ServiceUser Guide Contents


ii

4.21 Key Operations on Cloud Eye.................................................................................................................................... 334.22 Key Operations on IAM............................................................................................................................................. 344.23 Key Operations on CCS............................................................................................................................................. 374.24 Key Operations on CRS............................................................................................................................................. 394.25 Key Operations on TMS.............................................................................................................................................404.26 Key Operations on SMN............................................................................................................................................ 404.27 Key Operations on DMS............................................................................................................................................ 414.28 Key Operations on FGS..............................................................................................................................................424.29 Key Operations on DDM............................................................................................................................................424.30 Key Operations on ServiceStage................................................................................................................................ 434.31 Key Operations on API Gateway............................................................................................................................... 534.32 Key Operations on DevCloud.....................................................................................................................................554.33 Key Operations of DEW.............................................................................................................................................564.34 Key Operations on Anti-DDoS...................................................................................................................................574.35 Key Operations on ARS............................................................................................................................................. 584.36 Key Operations on SSA..............................................................................................................................................584.37 Key Operations on WTP.............................................................................................................................................584.38 Key Operations on WAF.............................................................................................................................................594.39 Key Operations on HVD............................................................................................................................................ 594.40 Key Operations on SCS..............................................................................................................................................604.41 Key Operations on DBSS........................................................................................................................................... 604.42 Key Operations on HSS..............................................................................................................................................614.43 Key Operations on SAS..............................................................................................................................................614.44 Key Operations on VSS..............................................................................................................................................624.45 Key Operations on DCS............................................................................................................................................. 634.46 Key Operations on RDS............................................................................................................................................. 634.47 Key Operations on DRS............................................................................................................................................. 654.48 Key Operations on DDS............................................................................................................................................. 664.49 Key Operations on Workspace................................................................................................................................... 674.50 Key Operations on Voice Call.................................................................................................................................... 684.51 Key Operations on MSGSMS.................................................................................................................................... 694.52 Key Operations on MRS.............................................................................................................................................694.53 Key Operations on DLI.............................................................................................................................................. 704.54 Key Operations on DPS..............................................................................................................................................714.55 Key Operations on CS................................................................................................................................................ 724.56 Key Operations on DWS............................................................................................................................................ 734.57 Key Operations on DIS...............................................................................................................................................744.58 Key Operations on CloudTable.................................................................................................................................. 744.59 Key Operations on MLS.............................................................................................................................................754.60 Key Operations on DLS............................................................................................................................................. 754.61 Key Operations on GES............................................................................................................................................. 774.62 Key Operations on ES................................................................................................................................................ 78



iii

4.63 Key Operations on IEF............................................................................................................................................... 794.64 Key Operations on CPTS........................................................................................................................................... 804.65 Key Operations on UPredict.......................................................................................................................................814.66 Key Operations on AOS............................................................................................................................................. 814.67 Key Operations on FunctionStage..............................................................................................................................834.68 Key Operations on CBS............................................................................................................................................. 844.69 Key Operations on AAD............................................................................................................................................ 844.70 Key Operations on FRS..............................................................................................................................................854.71 Key Operations on AOM............................................................................................................................................864.72 Key Operations on Blockchain Service......................................................................................................................874.73 Key Operations on SWR............................................................................................................................................ 884.74 Key Operations on RES..............................................................................................................................................894.75 Key Operations on SC................................................................................................................................................ 904.76 Key Operations on DLF............................................................................................................................................. 914.77 Relationship between Operations triggered by FusionSphere OpenStack and Native OpenStack APIs................... 92

A Change History......................................................................................................................... 105



iv

1 Managing Trackers

1.1 Configuring a Tracker

Scenarios

You can configure the OBS storage and key event notification for a created tracker.

l Configuring Transfer Trace to OBS: You can select whether to send recorded traces tothe OBS bucket:– Select an existing OBS bucket or create an OBS bucket on the configuration page.

CTS automatically attaches dumping policies to the OBS bucket.

NOTE

You must select a standard OBS bucket because CTS needs to frequently access the OBSbucket that stores traces.

– The trace file prefix is used to mark the dumped trace file. This field supportscustomization by users and can be automatically added in front of the name of adumped file to help users quickly filter out files.

– After enabling Verify Trace File, check whether data in OBS buckets is tamperedto ensure integrity of trace files.

– Encrypt the dumped trace files to improve storage security. Encryption keys areprovided by KMS.

l Key Event Notification: You can select whether to send an email and a text message orother notifications through HTTP/HTTPS in the event of a key operation. This functionis triggered by CTS, but notifications need to be sent by SMN. Therefore, you need toenable SMN and create a notification topic before enabling this configuration item. Youcan select Typical or All based on actual requirements:– Typical: CTS is suitable for routine audit of enterprises. Currently, CTS can enable

text notifications pertaining to key operations such as creating and deleting somecore resources of ECS, VPC, EVS, and KMS, and logging in to IAM.

NOTE

Because IAM is a global service, the Login function is only provided for central region ofthe current site. After this function is enabled, SMN deployed in the central region will sendnotifications upon the login of any region.

Cloud Trace ServiceUser Guide 1 Managing Trackers


1

– All: This scenario is suitable for interconnecting with your own audit systems. Itcan enable text notifications through SMN for operations of creating, deleting, orchanging resources of ECS, IMS, EVS, CSBS, VBS, VPC, DNS, ELB, ULB, IAM,KMS, RDS, DDS, SFS, DMS, and OBS, as well as relevant operations triggered byinvoking FusionSphere OpenStack APIs. When All is selected, you cannot modifyany settings, and CTS sends text notifications for all traces sent from interconnectedservices by default. You are advised to use the SMN topic for which HTTPS isselected.

After a tracker is configured, new rules take effect immediately.

This section describes how to configure a tracker.

Prerequisites

CTS has been enabled.

Procedure1. Log in to the management console.

2. Click in the upper left corner of the management console and select a region andproject.

3. Click Service List and select Cloud Trace Service under Management & Deployment.4. Click Tracker in the left pane.5. Click Configure in the Operation column.

– If you select Yes for Transfer Trace to OBS and No for Create a New OBSBucket, you can perform the following operations:n Select an existing OBS bucket or create an OBS bucket on the configuration

page.n Determine whether to enable Verify Trace File to ensure integrity of trace

files.n Determine whether to encrypt the files stored in the OBS bucket and select a

created KMS key.If selecting Do not use for Transfer Trace to OBS, you do not need to configureany parameter.

– If you select Yes for Send Notification, you need to configure the followingparameters:n You can select an existing topic or click Create Topic to create a topic on the

SMN page.n You can select Typical or All based on actual requirements.Table 1-1 lists the parameters.

Table 1-1 Parameter description

Parameter Description ExampleValue

OBS Bucket Name of the OBS bucket in which tracefiles are to be stored

buckert-001



2

Parameter Description ExampleValue

File Prefix Used for identifying the logs stored in theOBS bucket. This parameter is optional.The value is a string of no more than 64characters, and can contain letters, digits,hyphens (-), underscores (_), and periods(.).NOTE

When a tracker is created, a file prefixcontaining four random characters will beautomatically created.

N/A

Key Name Used for marking the key name of tracefiles dumped and encrypted in the OBSbucket

N/A

Topic Select the SMN topic for whichnotifications are sent.NOTE

When All is selected, notifications will betriggered by all operations performed on theECS, IMS, EVS, CSBS, VBS, VPC, DNS, ELB,ULB, IAM, KMS, RDS, DDS, SFS, OBS, andDMS services. Traces contain sensitive data ofcustomers, such as tenant and deviceinformation. As a result, HTTPS-encryptedtransmission is recommended. It isrecommended that you use the SMN topics withHTTPS subscriptions.

N/A

Trigger Condition Typical: supports creating, deleting, andlogin operations on instances or resources.You must select at least one triggercondition.Such operations include creating anddeleting some core operations of ECS,VPC, EVS, and KMS, as well as loginoperations on IAM.

N/A

All: supports creating, deleting, andchanging operations on instances orresources, as well as operations triggered byinvoking FusionSphere OpenStack APIs.When All is selected, you cannot modifyany settings, and CTS sends textnotifications for all traces sent frominterconnected services by default.The supported services include ECS, IMS,EVS, CSBS, VBS, VPC, DNS, ELB, ULB,IAM, KMS, RDS, DDS, SFS, and DMS.

N/A

6. Click OK.



3

After the tracker is configured, you can view its details on the Tracker page.

NOTE

Traces recorded by CTS are periodically delivered to the OBS bucket for storage. If you configurean OBS bucket for the tracker, traces generated during the current period (generally severalminutes) will be delivered to the configured OBS bucket. For example, if the current period isfrom 12:00 to 12:05 and you configure an OBS bucket for the tracker at 12:02, traces receivedfrom 12:00 to 12:02 will be delivered to the configured OBS bucket for storage at 12:05.

1.2 Disabling or Enabling a Tracker

ScenariosThis section describes how to disable an existing tracker on the CTS console. After the trackeris disabled, the system will stop recording operations, but you can still view operation recordsthat have been recorded.

This section describes how to disable a tracker.

PrerequisitesYou have created a tracker in CTS.



3. Click Service List. Under Management & Deployment, choose Cloud Trace Service.4. Click Tracker in the left pane.5. Click Disable on the right of the tracker information.6. Click OK.7. After the tracker is disabled, its status changes from Disable to Enable. To enable the

tracker again, click Enable and then click OK. Then the system will start recordingoperations again.

1.3 Deleting a Tracker

ScenariosThis section describes how to delete an existing tracker on the CTS console. Deleting atracker has no impact on operation records that have been generated. When you enable CTSagain, you still can view those records.



4

NOTICEUsers need to manually delete bucket policies in *:user/* format in the used OBS bucket onehour after the tracker is deleted. If the OBS bucket has multiple *:user/* bucket policies,contact Huawei customer service for confirmation and then delete associated bucket policies.

This section describes how to delete the tracker.

PrerequisitesYou have created a tracker in CTS.



3. Click Service List. Under Management & Deployment, choose Cloud Trace Service.4. Click Tracker in the left pane.5. Click Delete on the right of the tracker information.6. Click OK.



5

2 Application Examples

2.1 Security Auditing

Scenarios

This section describes how to query records matching a specified characteristic and toperform security analysis on records of operations to check whether the operations areperformed by authorized users.

Prerequisites

CTS has been enabled and the tracker is normal. For details about how to enable CTS, seesection "Enabling CTS" in the Cloud Trace Service User Guide.

Procedure

The following steps take the creation and deletion of EVS disks in the last two weeks as anexample:

1. Log in to the management console using the administrator account.


3. Click Service List. Under Management & Deployment, choose Cloud Trace Service.4. Choose Trace List in the navigation pane on the left.5. On the trace list page, click Filter. In the displayed box, specify Trace Source,

Resource Type, and Search By, and click Query to query the specified traces.6. For example, you can select EVS for Trace Source, evs for Resource Type, and Trace

name and createVolume (or deleteVolume) for Search By, and click Query to query allthe EVS creation (or deletion) operations.

7. Choose Tracker from the left pane to switch to the Tracker page and obtain the OBSbucket name.

8. Download traces generated in the last 7 days or all traces. For details, see section"Querying Archived Traces" in the Quick Start.

Cloud Trace ServiceUser Guide 2 Application Examples


6

9. In the trace files, search traces using keywords createVolume and deleteVolume.

10. Obtain information about the user who performs the operation from the results in steps 6and 9. Check whether the user performs any unauthorized operation or operation thatdoes not conform to the security operation rules.

2.2 Fault Locating

Scenarios

If a specified resource or an action encounters an exception, you can query operation recordsof the resource in the specified time period and view the request and response to facilitatefault locating.

Prerequisites

You have enabled CTS and the tracker is normal. For details about how to enable CTS, seesection "Enabling CTS" in the Cloud Trace Service User Guide.

Procedure

The following steps take the locating of an ECS fault after it occurred on one morning as anexample.



3. Click Service List. Under Management & Deployment, choose Cloud Trace Service.

4. Choose Trace List in the navigation pane on the left.

5. On the trace list page, click Filter. In the displayed box, specify Trace Source,Resource Type, and Search By, and click Query.

NOTE

For example, you can select ECS for Trace Source, ecs for Resource Type, and Resource ID andID of the faulty VM for Search By, and set the time range to 06:00 to 12:00 at a certain date.

6. Check the query result. Pay special attention to the request type and response of eachtrace, and traces whose Trace Status is warning or incident and traces whose responseshowed a failure.

The following steps use the fault locating after an ECS creation task fails as an example.


2. Click Service List. Under Management & Deployment, choose Cloud Trace Service.

3. Choose Trace List in the navigation pane on the left.

4. Specify the filter based on the failed ECS creation task. For example, you can selectECS for Trace Source, ecs for Trace Type, and Trace Status and Warning for SearchBy to query the operation trace named createSingleServer.

5. Locate the fault based on the error code or error message in the trace.



7

2.3 Resource Tracking

ScenariosThis section describes how to view operation records of any cloud resource throughout itslifecycle and how to check details of a specific operation.

PrerequisitesCTS has been enabled and the tracker is normal. For details about how to enable CTS, seesection "Enabling CTS" in the Cloud Trace Service User Guide.

ProcedureThe following steps take the records of operations on an ECS as an example.



3. Click Service List. Under Management & Deployment, choose Cloud Trace Service.4. Choose Trace List in the navigation pane on the left.5. On the trace list page, click Filter. In the displayed box, specify Trace Source,

Resource Type, and Search By, and click Query to query the specified traces.

NOTE

For example, you can select ECS for Trace Source, ecs for Resource Type, and Resource ID andID of the faulty ECS for Search By, and click Query to query traces of the last 7 days.

6. Choose Tracker from the left navigation pane to switch to the Tracker page and obtainthe OBS bucket name.

7. Download traces generated in the last 7 days or all traces. For details, see section"Querying Archived Traces" in the Quick Start.

8. Check the operation and change records of the ECS in the results of steps 5 and 7.



8

3 CTS Trace Reference

3.1 Trace StructureTable 3-1 lists the key fields used by CTS to mark each trace.

NOTE

l Formats of some fields displayed on the management console are optimized so that you canunderstand them easily.

l This section describes the key fields of traces displayed on the management console.

Table 3-1 Key fields of traces

Field Mandatory Type Description

time Yes Date Time when a trace occurredThe value is the local standard time(GMT+local time zone), forexample, 2016/12/08 11:24:04GMT+08:00. This field istransmitted and stored in the formof a timestamp. It is the totalnumber of milliseconds from00:00:00 on January 1, 1970(UTC), or 08:00:00 on January 1,1970 (CST) to the current time.

user Yes Structure Cloud account used to perform anoperationThis field is displayed in theOperator column on the TraceList page.This field is transmitted and storedin the API in the form of a string.

Cloud Trace ServiceUser Guide 3 CTS Trace Reference


9


request No Structure Content requested by an operationThis field is transmitted and storedin the API in the form of a string.

response No Structure Response to the request by anoperationThis field is transmitted and storedin the API in the form of a string.

service_type Yes String Operation source

resource_type Yes String Resource type

resource_name No String Resource name

resource_id No String Unique resource ID

source_ip Yes String IP address of the user that performsan operationThe value of this parameter isempty if the operation is triggeredby the system.

trace_name Yes String Operation name

trace_status Yes String Trace levelThe value can be All trace status,normal, warning, or incident.

trace_type Yes String Operation typeThere are five types of operations:l ConsoleAction: operations

performed on the managementconsole

l SystemAction: operationstriggered by the system

l ApiCall: operations triggered byinvoking ApiGateway.

l ObsSDK indicates theoperations related to OBSbuckets that are triggered bySDK provided by invokingOBS.

l Others indicates the operationsexcept those related to OBSbuckets that are triggered byObsSDK.

api_version No String API version of the cloud service onwhich an operation is performed



10


message No Structure Supplementary information

record_time Yes Number Record time (time stamp) of anoperation

trace_id Yes String Unique operation ID

code No Number Trace HTTP return code, forexample, 200 or 400

request_id No String Record the ID of the request.

location_info No String Additional information required forfault locating after a requestrecording error occurs

endpoint No String Endpoint of the page that displaysdetails of cloud resources involvedin this operation

resource_url No String Access link (excluding theendpoint) of the page that displaysdetails of cloud resources involvedin this operation

user_agent No String Type of the operations related toOBS buckets that are not triggeredby SDK provided by invokingOBS.

content_length No Number Length of the request message bodyused in OBS-related operations

total_time No Number Response time of the requestinvolved in OBS-related operations

3.2 Trace ExamplesThis section provides two example traces collected by CTS and describes key fields to helpyou understand the trace information. You can understand traces of other services in thesimilar way.

For details about the fields in a trace file, see section 3.1 Trace Structure.

Create an ECS{ "time": "2016/12/01 11:07:28 GMT+08:00", "user": { "name": "aaa/op_service", "id": "f2fe9fac63414a35a7d03108d5f1ea73", "domain": { "name": "aaa", "id": "1f9b9ba51f6b4061bd5c1736b28469f8"



11

} }, "request": { "server": { "name": "as-config-15f1_XWO68TFC", "imageRef": "b2b2c7dc-bbb0-4d6b-81dd-f0904023d54f", "flavorRef": "m1.tiny", "personality": [], "vpcid": "e4c374b9-3675-482c-9b81-4acd59745c2b", "nics": [ { "subnet_id": "fff89132-88d4-4e5b-9e27-d9001167d24f", "nictype": null, "ip_address": null, "binding:profile": null, "extra_dhcp_opts": null } ], "adminPass": "********", "count": 1, "metadata": { "op_svc_userid": "26e96eda18034ae9a44130bacb967b96" }, "availability_zone": "az1.dc1", "root_volume": { "volumetype": "SATA", "extendparam": { "resourceSpecCode": "SATA" }, "size": 40 }, "data_volumes": [], "security_groups": [ { "id": "dd597fd7-d119-4994-a22c-891fcfc54be1" } ], "key_name": "KeyPair-3e51" } }, "response": { "status": "SUCCESS", "entities": { "server_id": "42d39b4a-19b7-4ee2-b01b-a9f1353b4c54" }, "job_id": "4010b39d58b855980158b8574b270018", "job_type": "createSingleServer", "begin_time": "2016-12-01T03:04:38.437Z", "end_time": "2016-12-01T03:07:26.871Z", "error_code": null, "fail_reason": null }, "service_type": "ECS", "resource_type": "ecs", "resource_name": "as-config-15f1_XWO68TFC", "resource_id": "42d39b4a-19b7-4ee2-b01b-a9f1353b4c54", "source_ip": "", "trace_name": "createSingleServer", "trace_status": "normal", "trace_type": "SystemAction", "api_version": "1.0", "record_time": "2016/12/01 11:07:28 GMT+08:00", "trace_id": "4abc3a67-b773-11e6-8412-8f0ed3cc97c6"}

Key fields in the preceding information are as follows:

l time: indicates the time when the trace occurred. In this example, the time is 11:07:28 onDecember 1.



12

l user: indicates the user who performs the operation. In this example, the user is aaa(name field) under the enterprise account aaa (domain field).

l request: indicates the request to create an ECS. It contains some basic information aboutthe ECS, such as name (as-config-15f1_XWO68TFC) and resource ID(e4c374b9-3675-482c-9b81-4acd59745c2b).

l response: indicates the response to the ECS creation request. It contains status (Successin this example), error_code (null in this example), and fail_reason (null in thisexample).

Create an EVS Disk{ "time": "2016/12/01 11:24:04 GMT+08:00", "user": { "name": "aaa", "id": "26e96eda18034ae9a44130bacb967b96", "domain": { "name": "aaa", "id": "1f9b9ba51f6b4061bd5c1736b28469f8" } }, "request": "", "response": "", "service_type": "EVS", "resource_type": "evs", "resource_name": "volume-39bc", "resource_id": "229142c0-2c2e-4f01-a1b4-2dfdf1c678c7", "source_ip": "10.146.230.124", "trace_name": "deleteVolume", "trace_status": "normal", "trace_type": "ConsoleAction", "api_version": "1.0", "record_time": ""2016/12/01 11:24:04 GMT+08:00", "trace_id": "c529254f-bcf5-11e6-a89a-7fc778a6c92c"}

Key fields in the preceding information are as follows:

l time: indicates the time when the trace occurred. In this example, the time is 11:24:04 onDecember 1.

l user: indicates the user who performs the operation. In this example, the user is aaa(name field) under the enterprise account aaa (domain field).

l request: optional. It is null in this example.l response: optional. It is null in this example.l trace_status: indicates the level of the trace. It can replace the response field in

indicating the operation result. In this example, the value is normal, indicating that theoperation is successful.



13

4 Supported Services and Operation Lists

4.1 Key Operations on ECSElastic Cloud Server (ECS) is a computing server that consists of CPUs, memory, images, andEVS disks, and that allows on-demand allocation and elastic scaling. ECS integrates virtualprivate cloud (VPC), virtual firewall, and multi-data-copy capabilities to construct anefficient, reliable, and secure computing environment. It ensures that your services are stableand can run continuously.

With CTS, you can record operations associated with ECSs for later query, audit, andbacktrack operations.

Table 4-1 ECS operations that can be recorded by CTS

Operation Resource Type Trace Name

Creating an ECS ecs createServer

Deleting an ECS ecs deleteServer

Starting an ECS ecs startServer

Restarting an ECS ecs rebootServer

Stopping an ECS ecs stopServer

Adding NICs to an ECS ecs addNic

Deleting NICs from an ECS ecs deleteNic

Attaching EVS disks to an ECS ecs attachVolume

Attaching EVS disks to an ECS (on theEVS page)

ecs attachVolume2

Detaching EVS disks from an ECS ecs detachVolume

Reinstalling the OS ecs reinstallOs

Changing the OS ecs changeOs

Cloud Trace ServiceUser Guide 4 Supported Services and Operation Lists


14


Reinstalling the OS ecs reinstallOsV2

Changing the OS ecs changeOsV2

Modifying ECS specifications ecs resizeServer

Adding the automatic recovery tag to aVM

ecs addAutoRecovery

Deleting the automatic recovery tag froma VM

ecs deleteAutoRecovery

Creating a security group ecs createSecurityGroup

4.2 Key Operations on IMSImage Management Service (IMS) provides simple and convenient image management. Youcan use a public or private image to create an ECS. You can also create a private image usingan existing ECS or an external image file.

With CTS, you can record operations associated with IMS for later query, audit, andbacktrack operations.

Table 4-2 IMS operations that can be recorded by CTS


Creating an image ims createImage

Modifying an image ims updateImage

Deleting images inbatches

ims deleteImage

Copying an Image ims copyImage

Exporting an Image ims exportImage

Adding a member ims addMember

Modifying imagemembers in batches

ims updateMember

Deleting imagemembers in batches

ims deleteMemeber

4.3 Key Operations on BMSBare Metal Server (BMS) is a dedicated physical server for individual tenants. BMSs provideremarkable computing performance and stability required by core applications. In addition,



15

BMSs can be combined flexibly with other cloud services, such as VPC, boasting both thestability of the traditional host service and the high elasticity of cloud resources.

With CTS, you can record operations associated with BMSs for later query, audit, andbacktrack operations.

Table 4-3 BMS operations that can be recorded by CTS


Creating a BMS bms createBareMetalServers

Deleting a BMS bms deleteBareMetalServers

Starting a BMS bms startBareMetalServers

Stopping a BMS bms stopBareMetalServers

Restarting a BMS bms rebootBareMetalServers

Attaching a data volumeto a BMS

bms attachDataVolume

Detaching a data volumefrom a BMS

bms detachDataVolume

4.4 Key Operations on ASAuto Scaling (AS) automatically adjusts compute resources based on your servicerequirements and AS policies you have configured to ensure that the number of ECSsincreases or decreases as the service load changes over time and that services are runningproperly.

With CTS, you can record operations associated with AS for later query, audit, and backtrackoperations.

Table 4-4 AS operations that can be recorded by CTS


Creating an AS group scaling_group createScalingGroup

Modifying an AS group scaling_group modifyScalingGroup

Deleting an AS group scaling_group deleteScalingGroup

Enabling an AS group scaling_group enableScalingGroup

Disabling an AS group scaling_group disableScalingGroup

Creating an ASconfiguration

scaling_configuration createScalingConfiguration

Deleting an ASconfiguration

scaling_configuration deleteScalingConfiguration



16


Deleting ASconfigurations in batches

scaling_configuration batchDeleteScalingConfigura-tion

Creating an AS policy scaling_policy createScalingPolicy

Modifying an AS policy scaling_policy modifyScalingPolicy

Deleting an AS policy scaling_policy deleteScalingPolicy

Enabling an AS policy scaling_policy enableScalingPolicy

Disabling an AS policy scaling_policy disableScalingPolicy

Executing an AS policy scaling_policy executeScalingPolicy

Removing instances froman AS group

scaling_instance removeInstance

Removing instances inbatches

scaling_instance batchRemoveInstances

Adding instances inbatches

scaling_instance batchAddInstances

4.5 Key Operations on DeCDedicated Cloud (DeC) is an isolated virtual resource pool on the public cloud. You haveexclusive use of all physical devices, computing and network resources, and reliabledistributed storage inside a DeC.

With CTS, you can record operations associated with DeC for later query, audit, andbacktrack operations.

Table 4-5 DeC operations that can be recorded by CTS


Enabling DeC dec openDEC

4.6 Key Operations on CCECloud Container Engine (CCE) is a high-performance, high-reliability service through whichenterprises can manage containerized applications. CCE supports native Kubernetesapplications and tools, allowing you to easily set up a container runtime environment on thecloud.

With CTS, you can record operations associated with CCE for later query, audit, andbacktrack operations.



17

Table 4-6 CCE operations that can be recorded by CTS


Uploading a certificate aksk uploadAKSK

Creating a cluster cluster_cce createCluster

Upgrading a cluster cluster_cce upgradeCluster

Updating a cluster cluster_cce updateCluster

Deleting a cluster cluster_cce deleteCluster

Creating a node node createNode

Deleting a node node deleteNode

Creating a template component createComponent

Updating a template component updateComponent

Deleting a template component deleteComponent

Creating an application app createApp

Updating an application app updateApp

Rolling back anapplication

app rollBackApp

Deleting an application app deleteApp

Creating an applicationusing a blueprint

app createAppByBlueprint

Creating a blueprint blueprint createBlueprint

Deleting a blueprint blueprint deleteBlueprint

Updating a blueprint blueprint updateBlueprint

Renaming a blueprint blueprint renameBlueprint

Validating a blueprint blueprint validateBlueprint

Deleting junk images image garbageCollectImage

Deleting a specifiedimage

image deleteImage

Deleting a tag image image deleteTagImage

Updating the descriptionof an image

image updateImageDesc

Creating a policy policy createPolicy

Updating a policy policy updatePolicy

Deleting a policy policy deletePolicy



18


Enabling a policy policy enablePolicy

Disabling a policy policy disablePolicy

Creating a periodic orscheduled scaling policy

scaling_policy_cce createScalingPolicy

Deleting a periodic orscheduled scaling policy

scaling_policy_cce deleteScalingPolicy

Creating a cluster clusters createCluster

Updating a cluster clusters updateCluster

Deleting a cluster clusters deleteCluster

Creating a node clusters-nodes createNode

Adding a static node clusters-nodes addStaticNode

Updating a node clusters-nodes updateNode

Deleting a host clusters-nodes deleteOneHost

Deleting all hosts clusters-nodes deleteAllHosts

Suspending userresources

N/A suspendUserResource

Creating a ConfigMap configmaps createConfigmaps

Creating a DaemonSet daemonsets createDaemonsets

Creating a deployment deployments createDeployments

Creating an event events createEvents

Creating an ingress ingress createIngresses

Creating a job jobs createJobs

Creating a namespace namespaces createNamespaces

Creating a node nodes createNodes

Creating aPersistentVolumeClaim

persistentvolume-claims

createPersistentvolumeclaims

Creating a pod pods createPods

Creating a replica set replicasets createReplicasets

Creating a resource quota resourcequotas createResourcequotas

Creating a key secrets createSecrets

Creating a service services createServices

Creating a StatefulSet statefulsets createStatefulsets



19


Creating a volume volumes createVolumes

Deleting a ConfigMap configmaps deleteConfigmaps

Deleting a DaemonSet daemonsets deleteDaemonsets

Deleting a deployment deployments deleteDeployments

Deleting an event events deleteEvents

Deleting an ingress ingresses deleteIngresses

Deleting a job jobs deleteJobs

Deleting a namespace namespaces deleteNamespaces

Deleting a node nodes deleteNodes

Deleting a pod pods deletePods

Deleting a replica set replicasets deleteReplicasets

Deleting a resource quota resourcequotas deleteResourcequotas

Deleting a secret secrets deleteSecrets

Deleting a service services deleteServices

Deleting a StatefulSet statefulsets deleteStatefulsets

Deleting a volume volumes deleteVolumes

Replacing a specifiedConfigMap

configmaps updateConfigmaps

Replacing a specifiedDaemonSet

daemonsets updateDaemonsets

Replacing a specifieddeployment

deployments updateDeployments

Replacing a specifiedevent

events updateEvents

Replacing a specifiedingress

ingresses updateIngresses

Replacing a specified job jobs updateJobs

Replacing a specifiednamespace

namespaces updateNamespaces

Replacing a specifiednode

nodes updateNodes

Replacing a specifiedPersistentVolumeClaim

persistentvolume-claims

updatePersistentvolumeclaims



20


Replacing a specified pod pods updatePods

Replacing a specifiedreplica set

replicasets updateReplicasets

Replacing a specifiedresource quota

resourcequotas updateResourcequotas

Replacing a specifiedsecret

secrets updateSecrets

Replacing a specifiedservice

services updateServices

Replacing a specifiedStatefulSet

statefulsets updateStatefulsets

Replacing the specifiedstatus

status updateStatus

Uploading a chart uploadchart uploadChart

Updating a chart charts updateChart

Deleting a chart charts deleteChart

Creating a templateapplication

releases createRelease

Updating a templateapplication

releases updateRelease

Deleting a templateapplication

releases deleteRelease

4.7 Key Operations on CSBSCloud Server Backup Service (CSBS) can back up an entire ECS. It can use the consistentbackup data of multiple Elastic Volume Service (EVS) disks to restore the service data of anECS. CSBS ensures data security and service continuity.

With CTS, you can record operations associated with CSBS for later query, audit, andbacktrack operations.

Table 4-7 CSBS operations that can be recorded by CTS


Creating a backup policy backupPolicy createBackupPolicy

Updating a backup policy backupPolicy updateBackupPolicy

Deleting a backup policy backupPolicy deleteBackupPolicy



21


Binding resources backupPolicy bindResources

Executing a backup checkpointItem createCheckpoint

Restoring a backup checkpointItem restoreCheckpointItem

Deleting a backup checkpointItem deleteCheckpointItem

Backing up an ECS cloudServer backupCloudServer

Deleting a task operationLog deleteOperationLog

4.8 Key Operations on VPCVirtual Private Cloud (VPC) service enables you to provision logically isolated, configurable,and manageable virtual networks for Elastic Cloud Servers (ECSs), improving the security ofresources in enterprise clouds and simplifying network deployment.

With CTS, you can record operations associated with VPC for later query, audit, andbacktrack operations.

Table 4-8 VPC operations that can be recorded by CTS


Modifying the bandwidth bandwidth modifyBandwidth

Creating an EIP eip createEip

Releasing an EIP eip deleteEip

Binding an EIP eip bindEip

Unbinding an EIP eip unbindEip

Creating a private IPaddress

privateIps createPrivateIp

Deleting a private IPaddress

privateIps deletePrivateIp

Creating a security group security_group createSecurityGroup

Modifying a securitygroup

security_group modifySecurityGroup

Creating a subnet subnet createSubnet

Deleting a subnet subnet deleteSubnet

Modifying a subnet subnet modifySubnet

Creating a VPC vpc createVpc



22


Deleting a VPC vpc deleteVpc

Modifying a VPC vpc modifyVpc

Creating a VPN vpn createVpn

Deleting a VPN vpn deleteVpn

Modifying a VPN vpn modifyVpn

Creating a NAT Gateway natgateway createNatGateway

Updating a NAT gateway natgateway updateNatGateway

Deleting a NAT gateway natgateway deleteNatGateway

Creating an SNAT rule snatrule createSnatRule

Deleting an SNAT rule snatrule deleteSnatRule

Creating a DNAT rule dnatrule createDnatRule

Deleting a DNAT rule dnatrule deleteDnatRule

4.9 Key Operations on Direct ConnectDirect Connect allows you to establish a private, dedicated network connection from yourdata center, office, or collocation environment to the public cloud platform. It can reduce yournetwork latency and provide a more consistent network experience than Internet-basedconnections.

With CTS, you can record operations associated with Direct Connect for later query, audit,and backtrack operations.

Table 4-9 Direct Connect operations that can be recorded by CTS


Modifying a directconnection

directconnections modifyDirectConnect

4.10 Key Operations on ELBElastic Load Balance (ELB) is a service that automatically distributes access traffic tomultiple ECSs to balance their service load. ELB enables you to achieve higher levels of faulttolerance in your applications and expand application service capabilities.

With a web-based console, you can create load balancers, configure the ports required forlistening, and add backend ECSs for load balancers. ELB helps eliminate single points offailure (SPOFs), improving availability of the whole system.



23

With CTS, you can record operations associated with ELB for later query, audit, andbacktrack operations.

Table 4-10 ELB operations that can be recorded by CTS


Configuring access logs accesslog create access log

Deleting access logs accesslog delete access log

Creating a certificate certificate create certificate

Modifying a certificate certificate update certificate

Deleting a certificate certificate delete certificate

Configuring a health check healthmonitor create healthmonitor

Modifying a health check healthmonitor update healthmonitor

Deleting a health check healthmonitor delete healthmonitor

Configuring a forwardingpolicy

l7policy create forwarding policy

Modifying a forwardingpolicy

l7policy update forwarding policy

Deleting a forwardingpolicy

l7policy delete forwarding policy

Configuring a forwardingrule

l7rule create forwarding rule

Modifying a forwardingrule

l7rule update forwarding rule

Deleting a forwarding rule l7rule delete forwarding rule

Adding a listener listener create listener

Modifying a listener listener update listener

Deleting a listener listener delete listener

Creating a load balancer loadbalancer create loadbalancer

Modifying a load balancer loadbalancer update loadbalancer

Deleting a load balancer loadbalancer delete loadbalancer

Adding a backend ECS member add backend ecs

Modifying a backend ECS member update backend ecs

Removing a backend ECS member remove backend ecs

Creating a backend ECSgroup

pool create backend ecs group



24


Modifying a backend ECSgroup

pool update backend ecs group

Deleting a backend ECSgroup

pool delete backend ecs group

4.11 Region-level Key Operations on DNSDomain Name Service (DNS) provides highly available and scalable authoritative DNSservices and domain name management services. It translates domain names or applicationresources into IP addresses required for network connection. By doing so, visitors' accessrequests are directed to the desired resources.

With CTS, you can record operations associated with DNS for later query, audit, andbacktrack operations.

NOTE

Traces of global-level cloud services are only recorded at the central region of the current site. Multi-project scenarios are not supported.

Table 4-11 DNS operations that can be recorded by CTS (region level)


Creating a private recordset

privateRecordSet createPrivateRecordSet

Deleting a private recordset

privateRecordSet deletePrivateRecordSet

Modifying a privaterecord set

privateRecordSet updatePrivateRecordSet

Creating a private zone privateZone createPrivateZone

Modifying a private zone privateZone updatePrivateZone

Deleting a private zone privateZone deletePrivateZone

Associating a VPC privateZone associateRouter

Disassociating a VPC privateZone disassociateRouter

Configuring a PTR record ptrRecord setPTRRecord

Restoring a PTR record ptrRecord resetPTRRecord

4.12 Global-level Key Operations on DNSDomain Name Service (DNS) provides highly available and scalable authoritative DNSservices and domain name management services. It translates domain names or application



25

resources into IP addresses required for network connection. By doing so, visitors' accessrequests are directed to the desired resources.

With CTS, you can record operations associated with DNS for later query, audit, andbacktrack operations.

Table 4-12 DNS operations that can be recorded by CTS (global level)


Creating a public record set publicRecordSet createPublicRecordSet

Deleting a public record set publicRecordSet deletePublicRecordSet

Modifying a public record set publicRecordSet updatePublicRecordSet

Creating a public zone publicZone createPublicZone

Modifying a public zone publicZone updatePublicZone

Deleting a public zone publicZone deletePublicZone

Batch creating public zonetags

publicZoneTag createPublicZoneTag

Batch deleting public zonetags

publicZoneTag deletePublicZoneTag

Batch creating public recordset tags

publicRecordSetTag createPublicRecordSetTag

Batch deleting public recordset tags

publicRecordSetTag deletePublicRecordSetTag

Batch creating private zonetags

privateZoneTag createPrivateZoneTag

Batch deleting private zonetags

privateZoneTag deletePrivateZoneTag

Batch creating private recordset tags

privateRecordSet-Tag

createPrivateRecordSetTag

Batch deleting private recordset tags

privateRecordSet-Tag

deletePrivateRecordSetTag

Batch creating PTR record settags

ptrRecordTag createPTRRecordSetTag

Batch deleting PTR record settags

ptrRecordTag deletePTRRecordTag

4.13 Key Operations on EVSElastic Volume Service (EVS) is a scalable virtual block storage service that is based on thedistributed architecture. EVS disks can be operated online. Using them is similar to using



26

common server hard disks. Compared with common server hard disks, EVS disks have higherdata reliability and I/O throughput capabilities. They are also easier to use. EVS disks applyto file systems, databases, or system software or other applications that require block storagedevices.

With CTS, you can record operations associated with EVS disks for later query, audit, andbacktrack operations.

Table 4-13 EVS operations that can be recorded by CTS


Creating an EVS disk evs createVolume

Updating an EVS disk evs updateVolume

Expanding EVS diskcapacity

evs extendVolume

Deleting an EVS disk evs deleteVolume

4.14 Key Operations on VBSVolume Backup Service (VBS) provides snapshot-based data protection for EVS disks onECSs in public cloud environments. VBS supports both full and incremental backups. Bydefault, the system performs a full backup initially, and then performs incremental backups.You can use those data backups generated in either backup mode to restore EVS disks to thestate they were in when the backup was created.

With CTS, you can record operations associated with VBS backups for later query, audit, andbacktrack operations.

Table 4-14 VBS operations that can be recorded by CTS


Creating a backup vbs bksCreateBackup

Deleting a backup vbs bksDeleteBackup

Restoring a backup vbs bksRestoreBackup

Binding a backup policy autobackup addPolicyResource

Unbinding a backup policy autobackup deletePolicyResource

Executing a backup policy autobackup actionPolicy

Creating a backup policy autobackup createPolicy

Deleting a backup policy autobackup deletePolicy

Modifying a backup policy autobackup modifyPolicy



27


Creating backupsscheduled by a backuppolicy

autobackup scheduleCreateBackup

Automatically deletingredundant backupsscheduled by a backuppolicy

autobackup scheduleDeleteBackup

Modifying a backup policytag

autobackup modifyPolicyTag

Deleting a backup policytag

autobackup deletePolicyTag

4.15 Key Operations on OMSObject Storage Migration Service (OMS) enables you to migrate object storage on other cloudplatforms to the OBS service. The migration operations are simple. Users can use the consoleto create automatic migration tasks or manually perform migration tasks.

With CTS, you can record operations associated with OMS for later query, audit, andbacktrack operations.

NOTE

OMS is a global-level service and OMS traces are only displayed in the central region of the current site.

Table 4-15 OMS operations that can be recorded by CTS


Creating a task OMS createTask

Deleting a task OMS deleteTask

Starting a task OMS startTask

Stopping or suspending atask

OMS stopTask

4.16 Key Operations on CDNContent Delivery Network (CDN) is an intelligent virtual network layer based on the existingInternet infrastructure. It delivers network content from origin servers to edge node serversdistributed across a country, enabling end users to obtain desired content from the proximalnode.

With CTS, you can record operations associated with CDN for later query, audit, andbacktrack operations.



28

NOTE

CDN is a Global service and CDN traces are only displayed in the central Region of the current site.

Table 4-16 CDN operations that can be recorded by CTS


Creating an accelerationdomain name

CDN createDomain

Updating an accelerationdomain name

CDN updateDomain

Deleting an accelerationdomain name

CDN deleteDomain

Enabling an accelerationdomain name

CDN enableDomain

Disabling an accelerationdomain name

CDN disableDomain

Configuring a retrievalhost

CDN updateOriginHost

Creating a Referer rule CDN createRefer

Configuring anacceleration domain namecertificate

CDN createCertificate

Creating a cache rule CDN createCacheRule

Creating a cacherefreshing task

CDN createRefreshTask

Creating a preheating task CDN createPreheatingTask

Provisioning the service CDN createBillingMode

4.17 Key Operations on SFSScalable File Service (SFS) provides high-performance file storage that can be expanded ondemand. It is accessible to ECSs and Direct Connect servers. Compared with traditional filesharing storage, SFS has many advantages, including elastic scaling, seamless integration,superior performance and reliability, easy operation, and low cost.

With CTS, you can record operations associated with SFS for later query, audit, and backtrackoperations.



29

Table 4-17 SFS operations that can be recorded by CTS


Creating a share sfs createShare

Modifying shareinformation

sfs updateShareInfo

Deleting a share sfs deleteShare

Adding a shared accessrule

sfs addShareACL

Deleting a shared accessrule

sfs deleteShareACL

Expanding a share sfs extendShare

Shrinking a share sfs shrinkShare

4.18 Key Operations on DESSDedicated Enterprise Storage Service (DESS) is based on Huawei enterprise storage devices.It applies to scenarios where critical applications such as Oracle RAC and SAP HANA TDIare used. DESS can provide performance and reliability comparable to enterprises' privateclouds. In addition, DESS simplifies the deployment of critical applications on public clouds.

With CTS, you can record operations associated with DESS for later query, audit, andbacktrack operations.

Table 4-18 DESS operations that can be recorded by CTS


Updating DESS dess updateDess

Creating a volume volume createVolume

Updating a volume volume updateVolume

Deleting a volume volume deleteVolume

Attaching a volume volume attachVolume

Detaching a volume volume detachVolume

Expanding volumecapacity

volume expandVolume

Creating volumes inbatches

volume batchCreateVolume

Attaching volumes inbatches

volume batchAttachVolume



30


Detaching volumes inbatches

volume batchDetachVolume

4.19 Key Operations on OBSObject Storage Service (OBS) is a stable, secure, efficient, and easy-to-use cloud storageservice. With RESTful application programming interfaces (APIs), OBS is able to store anyamount and form of unstructured data at a reliability of 99.999999999%.

With CTS, you can record data-related operations associated with OBS for later query, audit,and backtrack operations.

Table 4-19 OBS data-related operations that can be recorded by CTS

Operation Trace Name

Deleting a bucket deleteBucket

Deleting the bucket CORSconfiguration

deleteBucketCors

Deleting the custom domainconfiguration

deleteBucketCustomdomain

Deleting the bucket lifecycleconfiguration

deleteBucketLifecycle

Deleting the bucket policy configuration deleteBucketPolicy

Deleting the bucket cross-regionreplication configuration

deleteBucketReplication

Deleting the bucket taggingconfiguration

deleteBucketTagging

Deleting the bucket websiteconfiguration

deleteBucketWebsite

Deleting bucket data deleteBucketdata

Querying the bucket cross-domainrequest

optionsBucket

Creating a bucket createBucket

Setting the bucket ACL setBucketAcl

Setting the bucket CORS setBucketCors

Setting the bucket's user-defined domainname

setBucketCustomdomain

Setting the bucket lifecycle setBucketLifecycle



31


Setting the bucket logging configuration setBucketLogging

Setting the bucket notificationconfiguration

setBucketNotification

Setting the bucket policy setBucketPolicy

Setting the bucket quota setBucketQuota

Setting the bucket's cross-domainreplication

setBucketReplication

Setting the bucket storage level setBucketStorageclass

Setting the bucket tag setBucketTagging

Setting bucket versioning setBucketVersioning

Setting the bucket's static domain name setBucketWebsite

Downloading an object GET.OBJECT

Querying the object ACL GET.OBJECT.ACL

Querying the bucket website GET.OBJECT.WEBSITE

Accessing an object using the website HEAD.OBJECT.WEBSITE

Querying the object metadata HEAD.OBJECT

Listing part data LIST.OBJECT.UPLOAD

Deleting an object DELETE.OBJECT

Canceling a part DELETE.UPLOAD

Querying the object cross-domainrequest

OPTIONS.OBJECT

Uploading an object POST.OBJECT

Batch deleting objects POST.OBJECT.MULTIDELETE

Restoring cold objects POST.OBJECT.RESTORE

Combining parts POST.UPLOAD.COMPLETE

Initializing a part POST.UPLOAD.INIT

Uploading an object PUT.OBJECT

Setting the object ACL PUT.OBJECT.ACL

Copying an object PUT.OBJECT.COPY

Setting the object storage level PUT.OBJECT.STORAGECLASS

Uploading a part PUT.PART



32


Copying a part PUT.PART.COPY

4.20 Key Operations on CTSCTS provides records of operations on cloud service resources. With CTS, you can query,audit, and backtrack these operations.

With CTS, you can record operations associated with CTS itself for later query, audit, andbacktrack operations.

Table 4-20 CTS operations that can be recorded by itself


Creating a tracker tracker createTracker

Modifying a Tracker tracker updateTracker

Disabling a tracker tracker updateTracker

Enabling a tracker tracker updateTracker

Deleting a Tracker tracker deleteTracker

4.21 Key Operations on Cloud EyeCloud Eye is an open monitoring platform. It provides monitoring, alarm reporting, and alarmnotification for your resources in near-real time.

With CTS, you can record operations associated with Cloud Eye for later query, audit, andbacktracking operations.

Table 4-21 Cloud Eye operations that can be recorded by CTS


Creating an alarm rule alarm_rule createAlarmRule

Deleting an alarm rule alarm_rule deleteAlarmRule

Disabling an alarm rule alarm_rule disableAlarmRule

Enabling an alarm rule alarm_rule enableAlarmRule

Modifying an alarm rule alarm_rule updateAlarmRule

Updating the alarm status toalarm

alarm_rule alarmStatusChangeToAlarm



33


Updating the alarm status toinsufficient data

alarm_rule alarmStatusChangeToInsuffi-cientData

Updating the alarm status tonormal

alarm_rule alarmStatusChangeToOk

Creating a custom alarmtemplate

alarm_template createAlarmTemplate

Deleting a custom alarmtemplate

alarm_template deleteAlarmTemplate

Modifying a custom alarmtemplate

alarm_template updateAlarmTemplate

Creating a monitoring panel dashboard createDashboard

Deleting a monitoring panel dashboard deleteDashboard

Modifying a monitoring panel dashboard updateDashboard

Adding monitoring data metric addMetricData

Exporting monitoring data metric downloadMetricsReport

Configuring OBS transfer obs_transfer createObsTransfer

Modifying OBS transfer obs_transfer updateObsTransfer

Creating remote monitoringrules

remote_check createRemoteMonitoringRules

Deleting remote monitoringrules

remote_check deleteRemoteMonitoringRules

Modifying remote monitoringrules

remote_check updateRemoteMonitoringRule

4.22 Key Operations on IAMIdentity and Access Management (IAM) enables you to centrally manage authenticationinformation, including your authenticated email, phone number, and password. When youinvoke an API to apply for an ECS, manage cloud resources, or log in to the public cloudplatform in multi-tenant mode, you can query the required project ID, AK/SK, and usernamein real time.

With CTS, you can record operations associated with IAM for later query, audit, andbacktrack operations.

NOTE

IAM is a global-level service and IAM traces are only displayed in the central region of the current site.



34

Table 4-22 IAM operations that can be recorded by CTS


Creating a token token createTokenByPwd

Creating a token token createTokenByHwAccessKey

Creating a token token createTokenByToken

Creating a token token createTokenByAssumeRole

Creating a token token createTokenByHwRenewToken

User login user login

User logout user logout

Changing a user password user changePassword

Creating a user user createUser

Modifying user information user updateUser

Deleting a user user deleteUser

Changing a user password user updateUserPwd

Creating an AK/SK user addCredential

Deleting an AK/SK user deleteCredential

Changing the email address user modifyUserEmail

Changing the mobile phonenumber

user modifyUserMobile

Changing the password user modifyUserPassword

Enabling the two-factorauthentication for login

user modifySMVerify

Uploading a user picture user modifyUserPicture

Modifying Latch user modifyLatchVerify

Modifying MC user modifyMCConnectVerify

Setting the user password user setPasswordByAdmin

Creating a user group userGroup createGroup

Modifying a user group userGroup updateGroup

Deleting a user group userGroup deleteGroup

Adding a user to a user group userGroup addUserToGroup

Deleting a user from a usergroup

userGroup removeUserFromGroup



35


Creating a project project createProject

Changing a project project updateProject

Deleting a project project deleteProject

Updating the project status project updateProjectStatus

Canceling a project deletiontask

project cancelProjectDeletion

Creating an agency agency createAgency

Modifying an agency agency updateAgency

Deleting an agency agency deleteAgency

Switching the role agency switchRole

Registering an identityprovider

identityProvider createIdentityProvider

Modifying an identityprovider

identityProvider updateIdentityProvider

Deleting an identity provider identityProvider deleteIdentityProvider

Updating the IDP metadata identityProvider updateMetaConfigure

Updating the preset IDPmetadata

identityProvider updateSystemMetaConfigure

Creating a mapping mapping createMapping

Updating a mapping mapping updateMapping

Deleting a mapping mapping deleteMapping

Creating a protocol protocol createProtocol

Changing a protocol protocol updateProtocol

Deleting a protocol protocol deleteProtocol

Granting permissions to anagency based on tenantinformation

roleAgencyDomain

assignRoleToAgencyOnDomain

Deleting permissions from anagency based on tenantinformation

roleAgencyDomain

unassignRoleToAgencyOnDomain

Granting permissions to anagency based on projectInformation

roleAgencyProject

assignRoleToAgencyOnProject



36


Deleting permissions from anagency based on projectinformation

roleAgencyProject

unassignRoleToAgencyOnProject

Assigning permissions to auser group in a tenant

roleGroupDomain assignRoleToGroupOnDomain

Deleting permissions of aspecified user group in atenant

roleGroupDomain unassignRoleToGroupOnDomain

Assigning permissions to auser group corresponding to aproject

roleGroupProject assignRoleToGroupOnProject

Deleting permissions of a usergroup corresponding to aproject

roleGroupProject unassignRoleToGroupOnProject

Modifying a security policy domain updateSecurityPolicies

Updating the password policy domain updatePasswordPolicies

Modifying an ACL policy domain updateACLPolicies

Updating the security warningpolicy

domain updateWarningPolicies

Creating a domain domain createDomain

4.23 Key Operations on CCSCloud Catalog Service (CCS) enables you to centrally manage, allocate, and use IT services.Using CCS, administrators centrally manage and deploy IT services and efficiently allocate ITservices to end users. Therefore, end users can rapidly obtain and enable authorized ITservices, simplifying IT service deployment and reducing deployment cost.

With CTS, you can record operations associated with CCS for later query, audit, andbacktrack operations.

Table 4-23 CCS operations that can be recorded by CTS


Creating a product portfolio portfolio createPortfolio

Deleting a product portfolio portfolio deletePortfolio

Modifying a productportfolio

portfolio modifyPortfolio



37


Adding products to aproduct portfolio

portfolio addProductToPortfolio

Removing products from aproduct portfolio

portfolio removeProductFromPortfolio

Performing an illegalproduct adding or removingaction

portfolio operateProduct

Adding authorizations to aproduct portfolio

portfolio addAuthorizationToPortfolio

Removing authorizationsfrom a product portfolio

portfolio removeAuthorizationFromPort-folio

Performing an illegalauthorization adding orremoving action

portfolio operateAuthorization

Creating a product product createProduct

Deleting a product product deleteProduct

Modifying a product product modifyProduct

Creating a version version createVersion

Deleting a version version deleteVersion

Modifying a version version modifyVersion

Creating a product instance productInstance assignTaskCreateProductInstance

Deleting a product instance productInstance assignTaskDeleteProductInstance

Modifying a productinstance

productInstance modifyProductInstance

Updating the productinstance version

productInstance assignTaskUpdateProductInstan-ceVersion

Creating a product instancetask

productInstance createProductInstanceTask

Updating a productinstance task

productInstance updateProductInstanceVersion-Task

Deleting a product instancetask

productInstance deleteProductInstanceTask

Performing an illegaloperation for a productinstance task (neveroccurring)

productInstance productInstanceTask

Creating a constraint constraint createConstraint



38


Deleting a constraint constraint deleteConstraint

Modifying a constraint constraint modifyConstraint

Modifying user quotas userQuota modifyUserQuota

4.24 Key Operations on CRSCloud Report Service (CRS) is a self-service platform for generating reports and allows usersto process and analyze reports. After connected to data sources, CRS can analyze data in realtime and generate multiple types of visualized reports to help users understand relationshipsbetween data.

With CTS, you can record operations associated with CRS for later query, audit, andbacktrack operations.

Table 4-24 CRS operations that can be recorded by CTS


Creating a data source datasource createDatasource

Modifying a data source datasource updateDatasource

Deleting a data source datasource deleteDatasource

Creating a data set dataset createDataset

Modifying a data set dataset updateDataset

Deleting a data set dataset deleteDataset

Creating a worksheet worksheet createWorksheet

Modifying a worksheet worksheet updateWorksheet

Deleting a worksheet worksheet deleteWorksheet

Creating a visual visual createVisual

Modifying a visual visual updateVisual

Deleting a visual visual deleteVisual

Creating a dashboard dashboard createDashboard

Modifying a dashboard dashboard updateDashboard

Deleting a dashboard dashboard deleteDashboard



39

4.25 Key Operations on TMSTag Management Service (TMS) is a visualized service for fast, unified tag management thatenables you to control your resource permissions and billing more efficiently. It allows you totag and categorize cloud services across regions, and it can be accessed through the TMSconsole or using APIs.

With CTS, you can record operations associated with TMS for later query, audit, andbacktrack operations.

NOTE

TMS is a global-level service and TMS traces are only displayed in the central region of the current site.

Table 4-25 TMS operations that can be recorded by CTS


Creating or deleting apredefined tag

application addTag/deleteTag

Modifying a predefined tag application modifyTag

Creating or deleting aresource tag

application addResourceTage/deleteResourceTag

4.26 Key Operations on SMNSimple Message Notification (SMN) is a type of web service that a user can easily constructand maintain. SMN sends notifications from a cloud.

With CTS, you can record operations associated with SMN for later query, audit, andbacktrack operations.

NOTE

In SMN, deleting a topic will delete all subscription information associated with the topic, and thesubscription information deletion operation will not be recorded by CTS.

Table 4-26 SMN operations that can be recorded by CTS


Creating a topic topic createTopic

Deleting a topic topic deleteTopic

Updating a topic topic updateTopic

Updating attributes of atopic

topic updateTopicAttribute

Deleting all topic attributes topic deleteTopicAttributes



40


Deleting a specified topicattribute

topic deleteTopicAttributeByName

Adding a subscription subscription subscribe

Deleting a subscription subscription unsubscribe

Creating a messagetemplate

message_template createMessageTemplate

Creating message templatesin batches

message_template batchCreateMessageTemplate

Modifying a messagetemplate

message_template updateMessageTemplate

Deleting a messagetemplate

message_template deleteMessageTemplate

Creating an SMS signature sms createSmsSign

Deleting an SMS signature sms deleteSmsSign

Updating an SMS messageevent

sms updateSmsEvent

4.27 Key Operations on DMSDistributed Message Service (DMS) is a Kafka-based and high-performance message servicethat allows multi-user and concurrent access and message queue isolation.

With CTS, you can record operations associated with DMS for later query, audit, andbacktrack operations.

Table 4-27 DMS operations that can be recorded by CTS


Creating a queue queue createQueue

Deleting a queue queue deleteQueue

Creating a consumergroup

group createGroup

Deleting a consumergroup

group deleteGroup



41

4.28 Key Operations on FGSFunction Graph Service (FGS) is a microservice that provides visual workflows to buildevent-triggered microservices.

With CTS, you can record operations associated with FGS for later query, audit, andbacktrack operations.

Table 4-28 FGS operations that can be recorded by CTS


Creating a workflow graph createGraph

Deleting a workflow graph deleteGraph

Creating a trigger event createEvent

Deleting a trigger event deleteEvent

Updating a trigger event updateEvent

Starting a workflowinstance

execution startExecution

Testing a workflow instance execution testExecution

Stopping a workflowinstance

execution stopExecution

Testing the triggering ofevent messages

event eventTest

4.29 Key Operations on DDMDistributed Database Middleware (DDM) solves distributed expansion issues of databases.DDM breaks the capacity and performance bottleneck of traditional databases and achieveshigh concurrent access to mass data.

With CTS, you can record operations associated with DDM for later query, audit, andbacktrack operations.

Table 4-29 DDM operations that can be recorded by CTS


Creating a DDM instance ddm createDdmInstance

Deleting a DDM instance ddm delDdmInstance

Importing an RDS instance ddm importRdsInstance

Deleting an RDS instance ddm delRdsInstance



42


Creating a DDM database ddm createDdmDatabase

Deleting a DDM database ddm delDdmDatabase

Creating a DDM table ddm createDdmTable

Deleting a DDM table ddm delDdmTable

Creating a DDM account ddm addDdmUser

Deleting a DDM account ddm delDdmUser

Updating a DDM account ddm updateDdmUser

4.30 Key Operations on ServiceStageServiceStage is a one-stop PaaS service that provides cloud-based application hosting,simplifying application lifecycle management, from deployment, monitoring, O&M, togovernance. It provides a microservice framework compatible with mainstream open-sourceecosystems and enables quick building of distributed applications. ServiceStage supports fullmicroservice lifecycle management including development, governance, deployment, O&M,and monitoring, and offers large-scale container cluster management and middlewareservices.

The microservices integrated in ServiceStage include AAD, ALM, AMS, ATS, CFE, PE,CSC, CPE, CSE, PSM, SWR, and TRM. Currently, the audit logs of microservices arereported to CTS using ServiceStage as the service type. The service names in the audit logsare gradually replaced with ServiceStage.

With CTS, you can record operations associated with ServiceStage for later query, audit, andbacktrack operations.

Table 4-30 ServiceStage operations that can be recorded by CTS


Querying operation logs cloudAudit queryOperationLogs

Querying security logs cloudAudit querySecurityLogs

Querying system logs cloudAudit querySystemLogs

Exporting all operationlogs

cloudAudit exportAllOperationLogs

Exporting all securitylogs

cloudAudit exportAllSecurityLogs

Exporting all system logs cloudAudit exportAllSystemLogs

Exporting selectedoperation logs

cloudAudit exportSelectOperationLogs



43


Exporting selectedsecurity logs

cloudAudit exportSelectSecurityLogs

Exporting selectedsystem logs

cloudAudit exportSelectSystemLogs

Querying an alarm alarmManagement queryAlarm

Clearing an alarm alarmManagement clearedAlarm

Adding an alarm CloudMonitor AddAlarm

Updating an alarm CloudMonitor UpdateAlarm

Deleting an alarm CloudMonitor DeleteAlarm

Updating metric relations CloudMonitor UpdateSelfDefineMetric

Adding a visual CloudMonitor AddView

Updating a visual CloudMonitor UpdateView

Deleting a visual CloudMonitor DeleteView

Updating the samplingrate

applicationTracingService updateSampling

Deleting the samplingrate

applicationTracingService deleteSampling

Updating the agingperiod

applicationTracingService updateAgingPeriod

Creating a cluster CFE-CLUSTERMGR CreateCluster

Updating a cluster CFE-CLUSTERMGR UpdateCluster

Deleting a cluster CFE-CLUSTERMGR DeleteCluster

Creating a node CFE-CLUSTERMGR CreateNode

Adding a static node CFE-CLUSTERMGR AddStaticNode

Updating a node CFE-CLUSTERMGR UpdateNode

Deleting a host CFE-CLUSTERMGR DeleteOneHost

Deleting all hosts CFE-CLUSTERMGR DeleteAllHosts

Suspending userresources

CFE-CLUSTERMGR SuspendUserResource

Uploading the AK/SK CFE-CLUSTERMGR UploadAKSK

Creating ConfigMaps CFEApiserver CreateConfigmaps

Creating DaemonSets CFEApiserver CreateDaemonsets



44


Creating Deployments CFEApiserver CreateDeployments

Creating events CFEApiserver CreateEvents

Creating ingresses CFEApiserver CreateIngresses

Creating jobs CFEApiserver CreateJobs

Creating namespaces CFEApiserver CreateNamespaces

Creating nodes CFEApiserver CreateNodes

CreatingPersistentVolumeClaims

CFEApiserver CreatePersistentvolumeclaims

Creating pods CFEApiserver CreatePods

Creating ReplicaSets CFEApiserver CreateReplicasets

Creating resource quotas CFEApiserver CreateResourcequotas

Creating a key CFEApiserver CreateSecrets

Creating services CFEApiserver CreateServices

Creating StatefulSets CFEApiserver CreateStatefulsets

Creating a volume CFEApiserver CreateVolumes

Expanding volumes CFEApiserver CreateExtend

Deleting ConfigMaps CFEApiserver DeleteConfigmaps

Deleting DaemonSets CFEApiserver DeleteDaemonsets

Deleting Deployments CFEApiserver DeleteDeployments

Deleting events CFEApiserver DeleteEvents

Deleting ingresses CFEApiserver DeleteIngresses

Deleting jobs CFEApiserver DeleteJobs

Deleting namespaces CFEApiserver DeleteNamespaces

Deleting nodes CFEApiserver DeleteNodes

Deleting pods CFEApiserver DeletePods

Deleting ReplicaSets CFEApiserver DeleteReplicasets

Deleting resource quotas CFEApiserver DeleteResourcequotas

Deleting secrets CFEApiserver DeleteSecrets

Deleting services CFEApiserver DeleteServices

Deleting StatefulSets CFEApiserver DeleteStatefulsets



45


Deleting a volume CFEApiserver DeleteVolumes

Replacing specifiedConfigMaps

CFEApiserver UpdateConfigmaps

Replacing specifiedDaemonSets

CFEApiserver UpdateDaemonsets

Replacing specifiedDeployments

CFEApiserver UpdateDeployments

Replacing specifiedevents

CFEApiserver UpdateEvents

Replacing specifiedingresses

CFEApiserver UpdateIngresses

Replacing specified jobs CFEApiserver UpdateJobs

Replacing specifiednamespaces

CFEApiserver UpdateNamespaces

Replacing specifiednodes

CFEApiserver UpdateNodes

Replacing specifiedPersistentVolumeClaims

CFEApiserver UpdatePersistentvolumeclaims

Replacing specified pods CFEApiserver UpdatePods

Replacing specifiedReplicaSets

CFEApiserver UpdateReplicasets

Replacing specifiedresource quotas

CFEApiserver UpdateResourcequotas

Replacing specifiedsecrets

CFEApiserver UpdateSecrets

Replacing specifiedservices

CFEApiserver UpdateServices

Replacing specifiedStatefulSets

CFEApiserver UpdateStatefulsets

Replacing the specifiedstatus

CFEApiserver UpdateStatus

Creating a policy group pe createPolicyGroup

Deleting a policy group pe deletePolicyGroup

Updating a policy group pe updatePolicyGroup

Enabling a policy group pe enablePolicyGroup

Disabling a policy group pe disablePolicyGroup



46


Creating a policy pe createPolicy

Deleting a policy pe deletePolicy

Updating a policy pe updatePolicy

Enabling a policy pe enablePolicy

Disabling a policy pe disablePolicy

Creating services CSC RequestCreateService

Approving a servicerelease application

CSC CreateService

Rejecting service releaseapplication

CSC RejectCreateService

Deleting an ECS CSC DeleteService

Updating a service CSC RequestUpdateService

Approving a serviceupdate application

CSC UpdateService

Upgrading service broker CSC UpdateBrokerAndConsole

Rejecting service updateapplication

CSC RejectUpdateService

Creating a serviceinstance

CSC RequestCreateInstance

Approving serviceinstance creationapplication

CSC CreateInstance

Rejecting serviceinstance creationapplication

CSC RejectCreateInstance

Deleting a serviceinstance

CSC DeleteServiceInstance

Updating a serviceinstance

CSC RequestUpdateInstance

Approving serviceinstance updateapplication

CSC UpdateInstanceInfo

Canceling serviceinstance update approval

CSC CancelInstanceUpdate

Creating service instancebinding relationship

CSC CreateBind



47


Updating bindinginformation

CSC UpdateBind

Deleting service instancebinding relationship

CSC DeleteBind

Configuring a meteringtask parameter

CSC SetParameter

Clearing the usagehistory before thespecified time

CSC ClearHistory

Creating a job CPE createJob

Updating a job CPE updateJob

Deleting a job CPE deleteJob

Obtaining Dockerbuilding commands

CPE getDockerBuildCommands

Creating a Build CPE createBuild

Updating a Build CPE updateBuild

Deleting a Build CPE deleteBuild

Posting Build logs CPE postBuildLogs

Creating a setting forconnecting to the Github

CPE createSetting

Querying a setting forconnecting to the Github

CPE querySetting

Deleting a setting forconnecting to the Github

CPE deleteSetting

Creating a pipeline CPE createPipeline

Querying a pipelineparameter

CPE queryPipelineParameter

Executing a pipeline CPE executePipeline

Updating a pipeline CPE updatePipeline

Deleting a pipeline CPE deletePipeline

Obtaining a Git token CPE accessGitToken

Obtaining projects CPE getProjects

Obtaining branches CPE getBranches



48


Saving the random codestate

CPE saveState

Querying the randomcode state

CPE queryState

Operating the randomcode state

CPE manageSourceState

Creating a configuration CSE createConfigItems

Modifying aconfiguration

CSE modifyConfigItems

Modifying configurationrules

CSE modifyConfigRules

Deleting a configuration CSE deleteConfigItems

Managing servicegovernance rules

CSE manageServiceGovernanceR-ules

Updating the thresholdconfiguration

CSE updateThresholdConfig

Deleting thresholdsetting

CSE deleteThresholdConfig

Updating a gray releaserule

CSE updateGatelaunchRule

Adding a gray releaserule

CSE addGatelaunchRule

Deleting a gray releaserule

CSE deleteGatelaunchRule

Switching the grayrelease rule type

CSE swithGatelaunchRuleType

Launching a gray releaserule

CSE gatelaunchRuleRelease

Adding a debugging SSHpublic key

CSE addDebugSSHPublicKey

Deleting a debuggingSSH public key

CSE deleteDebugSSHPublicKey

Creating a microservicetag

CSE createMicroserviceTag

Updating a microservicetag

CSE updateMicroserviceTag



49


Deleting a microservicetag

CSE deleteMicroserviceTag

Creating a microserviceblacklist and whitelist

CSE createMicroserviceRule

Updating a microserviceblacklist and whitelist

CSE updateMicroserviceRule

Deleting a microserviceblacklist and whitelist

CSE deleteMicroserviceRule

Modifying amicroservice accesscontract

CSE updateMicroserviceSchema

Deleting a microserviceaccess contract

CSE deleteMicroserviceSchema

Creating servicedependencies

CSE createMicroserviceDependency

Modifying microserviceinstance status

CSE updateMicroserviceInstanceS-tatus

Deregistering amicroservice instance

CSE deleteInstance

Modifying extendedinformation about amicroservice instance

CSE updateMicroserviceInstance-Property

Modifying staticinformation about amicroservice

CSE updateMicroserviceProperty

Creating staticinformation about amicroservice

CSE createMicroservice

Deleting staticinformation about amicroservice

CSE deleteMicroservice

Querying a key PSM QuerySecrets

Creating a key PSM CreateSecrets

Modifying a key PSM UpdateSecrets

Deleting a key PSM DeleteSecrets

Querying a certificate PSM QueryOrders

Creating a certificate PSM CreateOrders



50


Modifying a certificate PSM UpdateOrders

Deleting a certificate PSM DeleteOrders

Querying AES keys PSM QueryAeskeys

Creating AES keys PSM CreateAeskeys

Modifying AES keys PSM UpdateAeskeys

Deleting AES keys PSM DeleteAeskeys

Creating a repository SWR CreateRepository

Modifying a repository SWR UpdateRepository

Deleting a repository SWR DeleteRepository

Creating a softwarepackage

SWR CreatePackage

Modifying a softwarepackage

SWR UpdatePackage

Deleting a softwarepackage

SWR DeletePackage

Creating a version SWR CreateVersion

Updating a version SWR UpdateVersion

Deleting a version SWR DeleteVersion

Uploading a file SWR UploadFile

Downloading a file SWR DownloadFile

Deleting a file SWR DeleteFile

Creating an imagerepository

SWR CreateImageRepository

Modifying an imagerepository

SWR UpdateImageRepository

Deleting an imagerepository

SWR DeleteImageRepository

Uploading an imagepackage

SWR UploadImagePackage

Deleting an image tag SWR DeleteImageTag

Creating repositorypermissions

SWR CreateUserRepositoryAuth

Modifying repositorypermissions

SWR UpdateUserRepositoryAuth



51


Deleting repositorypermissions

SWR DeleteUserRepositoryAuth

Creating a namespace SWR CreateUserNamespace

Deleting a namespace SWR DeleteUserNamesapce

Creating namespacepermissions

SWR CreateUserNamespaceAuth

Modifying namespacepermissions

SWR UpdateUserNamespaceAuth

Deleting namespacepermissions

SWR DeleteUserNamespaceAuth

Creating softwarepackage permissions

SWR CreatePackageAuth

Modifying softwarepackage permissions

SWR UpdatePackageAuth

Deleting softwarepackage permissions

SWR DeletePackageAuth

Creating resource space TRM CreateProject

Updating the quota value TRM UpdateQuotaValue

Updating quotaconsumption

TRM UpdateQuotaUsed

Creating a quota TRM CreateSubscription

Updating the quota status TRM UpdateSubscriptionState

Creating a quotaconfiguration

TRM CreateQuotaConfig

Deleting a quotaconfiguration

TRM DeleteQuotaConfig

Updating a quotaconfiguration

TRM UpdateQuotaConfig

Creating a resourceaccount

TRM CreateAccount

Applying for a resourceaccount

TRM GetAccount

Updating a resourceaccount

TRM UpdateAccount

Deleting a resourceaccount

TRM DeleteAccount



52


Updating the logconfiguration agingperiod

applicationLogService updateLogStorgeSetting

Updating transactionsettings

TXTYPE updateTxTypeSettings

Updating transactionthresholds

TXTYPE updateThresholds

Installing an IC agent icMgrService installICAgent

Updating an IC agent icMgrService updateICAgent

Issuing pinpointconfigurations

icMgrService sendPinpointConfig

Issuing pinpointconfigurations to aspecified project

icMgrService sendPinpointConfigForProject

4.31 Key Operations on API GatewayAPI Gateway is an API hosting service with high performance, availability, and security. Itallows developers and partners to create, manage, and deploy APIs at any scale. With APIGateway, you can implement system integration, micro-service aggregation, and serverlessarchitectures easily and quickly with low costs and risks.

With CTS, you can record operations associated with API Gateway for later query, audit, andbacktrack operations.

Table 4-31 API Gateway operations that can be recorded by CTS


Creating an API group apigApiGroups createApiGroup

Deleting an API group apigApiGroups deleteApiGroup

Modifying the API groupattribute

apigApiGroups updateApiGroup

Deleting the API groupaccess limit

apigApiGroups deleteApiGroupLimit

Updating the API groupaccess limit

apigApiGroups updateApiGroupLimit

Creating an API apigApis createApi

Deleting an API apigApis deleteApi

Modifying an API apigApis updateApi



53


Releasing an API apigApis publishApi

Bringing an API offline apigApis offlineApi

Assigning API access rightsto an application

apigAppAuths grantAuth

Relieving API access rightsto an application

apigAppAuths relieveAuth

Creating an application apigApps createApp

Deleting an application apigApps deleteApp

Updating an application apigApps updateApp

Resetting the applicationsecret key

apigApps resetAppSecret

Creating an environment apigEnvs createEnvironment

Deleting an environment apigEnvs deleteEnvironment

Modifying environmentinformation

apigEnvs updateEnvironmentInfo

Creating an environmentvariable

apigEnvVariables createVariable

Deleting an environmentvariable

apigEnvVariables deleteVariable

Creating the ACL blacklist apigAcls createAcl

Deleting the ACL blacklist apigAcls deleteAcl

Updating the ACL blacklist apigAcls updateAcl

Adding a value to the ACLblacklist

apigAcls addAclValue

Removing a value to theACL blacklist

apigAcls deleteAclValue

Adding the bindingrelationship between APIand ACL

apigAclBindings createAclApply

Deleting the bindingrelationship between APIand ACL

apigAclBindings relieveAclApply

Adding a traffic controlpolicy

apigThrottles createThrottle

Deleting a traffic controlpolicy

apigThrottles deleteThrottle



54


Modifying a traffic controlpolicy

apigThrottles updateThrottle

Binding a traffic controlpolicy to an API

apigThrottleBindings createThrottleApiBinding

Unbinding a traffic controlpolicy from an API

apigThrottleBindings relieveThrottleApiBinding

Creating special settings fora traffic control policy

apigThrottleSpecials createSpecialApply

Deleting special settingsfrom a traffic control policy

apigThrottleSpecials deleteSpecialApply

Modifying special settingsof a traffic control policy

apigThrottleSpecials updateSpecialApply

Modifying default values ofconfiguration items

apigConfig updateConfig

Adding a specialconfiguration item

apigConfigSpecials createSpecialConfig

Deleting a specialconfiguration item

apigConfigSpecials deleteSMConfigSpecial

Modifying a specialconfiguration item

apigConfigSpecials updateSpecialConfig

Purchasing an API group apigMarket purchase

Bringing an API group onshell

apigMarket onsell

Bringing an API group offshell

apigMarket offsell

Changing the quota status apigMarket ChangeStatus

4.32 Key Operations on DevCloudDevCloud enables developers to manage projects and configuration, and check, compile,build, test, deploy, and publish codes easily and quickly on the cloud.

With CTS, you can record operations associated with DevCloud for later query, audit, andbacktrack operations.

Table 4-32 DevCloud operations that can be recorded by CTS


Creating an order projectman createResource



55


Freezing an order projectman freezeResource

Unfreezing an order projectman releaseResource

Closing an order projectman closeResource

Creating a package package createResource

Freezing a package package freezeResource

Unfreezing a package package releaseResource

Closing a package package closeResource

4.33 Key Operations of DEWData Encryption Workshop (DEW) is a full-stack data encryption service in the cloud. Itcovers Key Management Service (KMS), Key Pair Service (KPS), and Dedicated HardwareSecurity Module (Dedicated HSM). DEW uses HSMs to protect your keys, and can beintegrated with other HUAWEI CLOUD services to meet even the most demanding scenarios.Additionally, DEW enables you to develop customized encryption applications.

With CTS, you can record operations associated with DEW for later query, audit, andbacktrack operations.

Table 4-33 DEW operations that can be supported by CTS


Creating a key cmk createKey

Creating a data key cmk createDataKey

Creating a plaintext-freedata key

cmk createDataKeyWithoutPlaintext

Enabling a key cmk enableKey

Disabling a key cmk disableKey

Encrypting a data key cmk encryptDataKey

Decrypting a data key cmk decryptDataKey

Scheduling the deletionof a key

cmk scheduleKeyDeletion

Canceling the scheduleddeletion of a key

cmk cancelKeyDeletion

Changing the alias of akey

cmk updateKeyAlias



56


Modifying thedescription of a key

cmk updateKeyDescription

Precautions for deletinga key

cmk deleteKeyRiskTips

Creating an agency cmk createGrant

Retiring a grant cmk retireGrant

Revoking a grant cmk revokeGrant

Creating random data rng genRandom

4.34 Key Operations on Anti-DDoSAnti-DDoS is a network security service that defends IP addresses against distributed denialof service (DDoS) attacks.

Anti-DDoS monitors traffic directed to specified IP addresses in real time and detects accesstraffic at network egresses to discover DDoS attacks as soon as possible. It then cleansabnormal traffic according to user-configured defense policies so that services run as normal.It also generates reports to present users with a clear evaluation of network security.

With CTS, you can record operations associated with Anti-DDoS for later query, audit, andbacktrack operations.

Table 4-34 Anti-DDoS operations that can be recorded by CTS


Enabling Anti-DDoSdefense

eip enableDefense

Disabling Anti-DDoSdefense

eip disableDefense

Adjusting Anti-DDoSsecurity settings

eip modifyDefense

Enabling Anti-DDoSdefense

eip enableDefense

Disabling Anti-DDoSdefense

eip disableDefense

Adjusting Anti-DDoSsecurity settings

eip modifyDefense



57

4.35 Key Operations on ARSApplication Recognition Service (ARS) is a type of intelligent process management servicethat helps you ensure the security of Elastic Cloud Servers (ECSs). ARS automatically detectswhether programs on ECSs are included in customized whitelists and prevents invalidprograms from running.

With CTS, you can record operations associated with ARS for later query, audit, andbacktrack operations.

Table 4-35 ARS operations that can be recorded by CTS


Configuring ARS ars setConfigArs

Setting the ARS processstatus

ars setProcessArs

Querying historicaloperations

ars operateHistoryInfoArs

4.36 Key Operations on SSASecurity Situation Awareness (SSA) enables you to analyze the security situation. It collectsmass data authorized by other cloud services and provides comprehensive security protectionby intelligently identifying intrusions and attacks. It provides you with professional dataanalysis results and helps you find potential threats.

With CTS, you can record operations associated with SSA for later query, audit, andbacktrack operations.

Table 4-36 SSA operations that can be recorded by CTS


Setting softwarevulnerabilities to befollowed

ssa newVulnerabilitySoftware

Enabling SSA ssa openService

Disabling SSA ssa closeService

4.37 Key Operations on WTPWeb Tamper Protection (WTP) uses file driver technologies to provide comprehensiveprotection for directories specified by public cloud users. It prevents their files, which can



58

include web pages, electronic documents, images, and databases, from being tampered with orcorrupted by hackers or viruses.

With CTS, you can record operations associated with WTP for later query, audit, andbacktrack operations.

Table 4-37 WTP operations that can be recorded by CTS


Enabling WTP vm openWtp

Disabling WTP vm stopWtp

Updating WTP policies vm updateWtpConfig

4.38 Key Operations on WAFWeb Application Firewall (WAF) is designed to keep web services stable and secure incombination with Huawei's years of security protection experience. It examines all HTTP andHTTPS requests to detect and block attacks such as Structure Query Language (SQL)injections, cross-site scripting (XSS), webshell upload, third-party vulnerability exploits, CCattacks, and malicious crawlers.

With CTS, you can record operations associated with WAF for later query, audit, andbacktrack operations.

Table 4-38 WAF operations that can be recorded by CTS


Enabling WAF vm openHwaf

Disabling WAF vm stopHwaf

Updating WAF policies vm updateHwafConfig

4.39 Key Operations on HVDHost Vulnerability Detection (HVD) enables you to detect the security of ECSs. The agentinstalled on ECSs periodically scans OSs for security vulnerabilities and helps you rectifythem in time.

With CTS, you can record operations associated with HVD for later query, audit, andbacktrack operations.

Table 4-39 HVD operations that can be recorded by CTS


Enabling HVD vm openHvd



59


Disabling HVD vm stopHvd

4.40 Key Operations on SCSSSL Certificate Service (SCS) provides you with a one-stop management service for SecureSockets Layer/Transport Layer Security (SSL/TLS) certificates throughout their lifecycle.Jointly developed by Huawei and globally well-known digital certificate agencies, SCSimplements trusted identity authentication and secure data transmission for websites.

With CTS, you can record operations associated with SCS for later query, audit, andbacktrack operations.

Table 4-40 SCS operations that can be recorded by CTS


Purchasing a certificate scs purchaseCert

Uploading a certificate scs uploadCert

Updating a certificate scs updateCert

Deleting a certificate scs deleteCert

Downloading a certificate scs downloadCert

Adding certificate data scs addCertData

Withdrawing a certificateapplication

scs withdraw

4.41 Key Operations on DBSSDatabase Security Service (DBSS) provides sensitive data detection, data anonymization,database auditing, and injection attack prevention. Its main functions include sensitive datadetection and data anonymization, which prevent sensitive data from being disclosed tounauthorized services. DBSS conforms to global data protection compliance, such as PCI-DSS, HIPPA, and SOX.

With CTS, you can record operations associated with DBSS for later query, audit, andbacktrack operations.

Table 4-41 DBSS operations that can be recorded by CTS


Creating a DB instance dbss createInstance

Deleting a DB instance dbss deleteInstance



60


Starting a DB instance dbss startInstance

Stopping a DB instance dbss stopInstance

Restarting a DB instance dbss restartInstance

4.42 Key Operations on HSSHost Security Service (HSS) plug-ins on hosts interact with the cloud protection center toprevent attacks from the network, system, and application layers.

With CTS, you can record operations associated with HSS for later query, audit, andbacktrack operations.

Table 4-42 HSS operations that can be recorded by CTS


Binding HSS basic version hss bindBasicVersion

Unbinding HSS basicversion

hss unbindBasicVersion

Enabling WTP hss hssOpenWtp

Disabling WTP hss hssStopWtp

Updating WTP policies hss hssUpdateWtpConfig

HSS manual detection hss manualDetection

Unblocking IP address hss unblockIp

4.43 Key Operations on SASSecurity Assessment Service (SAS) is a manual "expert" service provided jointly by Huaweiand an information security authority to help you uncover potential security risks in yoursystems. SAS offers risk removal suggestions and tailors security solutions to your websites.

With CTS, you can record operations associated with SAS for later query, audit, andbacktrack operations.

Table 4-43 SAS operations that can be recorded by CTS


Sending an SMSverification code

sas SendSasSms



61


Verifying an SMSverification code

sas AuthSasSms

Creating a service order sas NewSasOrder

Authenticating a site sas AuthSasDomain

Modifying a service order sas ModifySasOrder

Canceling a service order sas CancelSasOrder

Deleting a service order sas DeleteSasOrder

Downloading a report sas DownloadSasReport

Subscribing to SAS sas SubcribeSasOrder

4.44 Key Operations on VSSVulnerability Scan Service (VSS) is used to detect vulnerabilities of the tenant site, such asSQL injection, reflected XSS and CSRF. VSS is good at inspecting websites forvulnerabilities in advance, as well as providing recovery suggestions, so that, in a result, it canimprove security of the website, protect the website ahead from hacker attacks usingvulnerabilities, and prevent loss of interest and data leaks.

With CTS, you can record operations associated with VSS for later query, audit, andbacktrack operations.

Table 4-44 VSS operations that can be recorded by CTS


Creating a domain name domain createDomain

Authenticating a domainname

domain authenticateDomain

Canceling domain nameauthentication

domain cancelAuthentication

Creating a scan task scan createScanTask

Restarting a scan task scan restartScanTask

Canceling a scan task scan cancelScanTask

Marking a falsevulnerability

vulnerability putFalseVuln

Creating a user subscription subscription createUserSubscription

Updating a user subscription subscription updateUserSubscription



62

4.45 Key Operations on DCSDistributed Cache Service (DCS) is an online distributed database service that is based on thecloud computing platform, available immediately after it is enabled, stable and reliable,scalable online, and easy to manage.

With CTS, you can record operations associated with DCS for later query, audit, andbacktrack operations.

Table 4-45 DCS operations that can be recorded by CTS


Creating a DCS instance (on-demand)

DCS createDCSInstance

Creating a DCS instance(duration-based)

DCS createDCSInstance

Modifying information abouta DCS instance

DCS modifyDCSInstanceInfo

Deleting a DB instance DCS deleteDCSInstance

Modifying configuration of aDCS instance

DCS modifyDCSInstanceConfig

Changing the status of a DCSinstance

DCS startDCSInstance\closeDCSInstance\restartDCSInstance

Changing the password of aDCS instance

DCS modifyDCSInstancePassword

4.46 Key Operations on RDSRelational Database Service (RDS) is a cloud-based web service that is reliable, scalable, easyto manage, and ready to use out-of-the-box.

With CTS, you can record operations associated with RDS for later query, audit, andbacktrack operations.

Table 4-46 RDS operations that can be recorded by CTS


Creating DB instances andrestoring data to a new DBinstance (using console,Open API, or Trove API)

instance createInstance



63


Creating read replicas (usingconsole, Open API, or TroveAPI)

instance createReadReplicate

Restarting and scaling up aDB instance, changing theDB instance class, andrestoring data to the old DBinstance (using console,Open API, or Trove API)

instance instanceAction

Resetting the password(using console)

instance resetPassword

Setting the DB versionparameters (using OpenAPI)

instance setDBParameters

Resetting the DN versionparameters (using OpenAPI)

instance resetDBParameters

Setting Backup Policy toOn, Off, or Modify (usingconsole or Open API)

instance setBackupPolicy

Modifying the DB portnumber (using console)

instance changeInstancePort

Binding or unbinding anelastic IP address (usingconsole)

instance setOrResetPublicIP

Modifying a security group(using console)

instance modifySecurityGroup

Creating a tag (usingconsole or Open API)

instance createTag

Deleting a tag (usingconsole or Open API)

instance deleteTag

Modifying a tag (usingconsole or Open API)

instance modifyTag

Deleting a DB instance froma cluster (using console,Open API, or Trove API)

instance deleteInstance

Creating a snapshot (usingconsole or Open API)

backup createManualSnapshot

Copying a snapshot (usingconsole)

backup copySnapshot



64


Deleting a snapshot (usingconsole or Open API)

backup deleteManualSnapshot

Creating a parameter group(using console or TroveAPI)

config createParameterGroup

Modifying a parametergroup (using console orTrove API)

config updateParameterGroup

Deleting a parameter group(using console or TroveAPI)

config deleteParameterGroup

Copying a parameter group(using console)

config copyParameterGroup

Resetting a parameter group(using console)

config resetParameterGroup

Comparing parametergroups (using console)

config compareParameterGroup

Applying a parameter group(using console)

config applyParameterGroup

4.47 Key Operations on DRSData Replication Service (DRS) is an easy-to-use, stable, and efficient database migration andsynchronization service. DRS makes data flow between databases simple, greatly reducingdata transfer costs. With this service, you can quickly transfer data between databases indifferent scenarios.

With CTS, you can record operations associated with DRS for later query, audit, andbacktrack operations.

Table 4-47 DRS operations that can be recorded by CTS


Creating a task job createJob

Editing a task job modifyJob

Deleting a task job deleteJob

Cloning a task job cloneJob

Starting a task job startJob

Retrying a task job retryJob



65

4.48 Key Operations on DDSDocument Database Service (DDS) is compatible with the MongoDB protocol and is secure,highly available, reliable, scalable, and easy to use. It provides DB instance creation, scaling,redundancy, backup, restoration, monitoring, and alarm reporting functions with just a fewclicks on the DDS console.

With CTS, you can record operations associated with DDS for later query, audit, andbacktrack operations.

Table 4-48 DDS operations that can be recorded by CTS


Restoring data to a new DBinstance

instance ddsRestoreToNewInstance

Creating a DB instance instance ddsCreateInstance

Deleting a DB instance instance ddsDeleteInstance

Restarting a DB instance instance ddsRestartInstance

Scaling up a DB instance instance ddsGrowInstance

Extending the DB instancevolume

instance ddsExtendInstanceVolume

Resetting the databasepassword

instance ddsResetPassword

Renaming a DB instance instance ddsRenameInstance

Setting the O&M window instance ddsSetOpsWindow

Switching SSL instance ddsSwitchSsl

Modifying a DB instanceport

instance ddsModifyInstancePort

Creating a backup backup ddsCreateBackup

Deleting a backup backup ddsDeleteBackup

Setting a backup policy backup ddsSetBackupPolicy

Applying a parameter group parameterGroup ddsApplyConfigurations

Copying a parameter group parameterGroup ddsCopyConfigurations

Resetting a parameter group parameterGroup ddsResetConfigurations

Creating a parameter group parameterGroup ddsCreateConfigurations

Deleting a parameter group parameterGroup ddsDeleteConfigurations

Updating a parameter group parameterGroup ddsUpdateConfigurations



66


Binding an EIP instance ddsBindIP

Unbinding an EIP instance ddsUnbindIP

Adding a tag tag ddsAddTag

Deleting a tag tag ddsDeleteTag

Adding a DB instance tag tag ddsAddInstanceTags

Rolling back upon scaling-up failure

instance ddsDeleteExtendedDdsNode

Changing node classes instance ddsResizeInstance

4.49 Key Operations on WorkspaceWorkspace is a cloud computing–based desktop service that is superior to traditional desktopservices. Workspace supports access by various devices, including PCs running Windows orMac, iPad, iPhone, and Android smart devices. It enables you to access, store, and obtain filesand applications anywhere and at any time, that is, mobile working and entertainment.Workspace provides configuration similar to a traditional desktop, including vCPU, GPU,memory, disks, and Windows. You can use it in the same way you use a PC.

With CTS, you can record operations associated with Workspace for later query, audit, andbacktrack operations.

Table 4-49 Workspace operations that can be recorded by CTS


Updating the status of acloud service

workspace updateDesktopMetadata

Subscribing toWorkspace

workspace orderVm

Restarting a VM workspace rebootDesktop

Stopping a VM workspace shutdownDesktop

Starting a VM workspace startDesktop

Deleting a VM workspace deleteDesktop

Updating the status of adesktop

workspace updateDesktopStatus

Deleting user information workspace deleteUser

Exporting userinformation

workspace exportUserInfo



67


Unlocking a user workspace unlockUser

Resetting the password workspace resetUserPassword

Downloading a usertemplate

workspace downloadUserModel

Deleting an on-demandtask

workspace deleteJob

Applying for modifyingthe password (the domainuser)

workspace updateDomainUserPassword

Synchronizing theresource tenants (Identityand Access Management)

workspace synIamResourceTenant

Updating the policygroup

workspace updatePolicy

Enabling Workspace workspace openService

Changing the domainpassword

workspace updateAdPwd

Disabling Workspace workspace tenantClose

Retrying failedWorkspace enabling anddisabling tasks

workspace tenantRetryServiceTask

Restoring theinfrastructure VM

workspace restoreManagerVmBackup

Modifying the desktopattributes

workspace modifyDesktopAttributes

Updating the domainname

workspace updateRecordSet

4.50 Key Operations on Voice CallVoice Call provides secure cloud-based voice communication capabilities, including VoiceCallback, Verification Code, and Voice Notification functions. Enterprises or SP can invokeAPIs of these functions to apply them to in various industries.

With CTS, you can record operations associated with VoiceCall for later query, audit, andbacktrack operations.



68

Table 4-50 Voice Call operations that can be recorded by CTS


Enabling the Voice Callservice

voiceCall createVoiceCallService

Freezing the Voice Callservice

voiceCall freezeVoiceCallService

Unfreezing the Voice Callservice

voiceCall resumeVoiceCallService

4.51 Key Operations on MSGSMSMessage & SMS (MSGSMS) provides message and SMS capabilities in the cloud servicemode. It supports SMS verification code and notification services, and enterprises or SP caninvoke APIs of these services to realize relevant functions in and apply them to variousindustries.

Table 4-51 MSGSMS operations that can be recorded by CTS


Enabling MSGSMS msgSMS createMSGSMSService

4.52 Key Operations on MRSMapReduce Service (MRS) is a data processing and analysis service that is based on a cloudcomputing platform. It is stable, reliable, scalable, and easy to manage.

With CTS, you can record operations associated with MRS for later query, audit, andbacktrack operations.

Table 4-52 MRS operations that can be recorded by CTS


Creating a cluster cluster createCluster

Deleting a cluster cluster deleteCluster

Expanding a cluster cluster scaleOutCluster

Downsizing a cluster cluster scaleInCluster



69

4.53 Key Operations on DLIData Lake Insight (DLI) is a fully hosted, out-of-the-box data analysis service and frees youfrom managing servers. It delivers analysis on cloud data of multiple data formats and fromvarious data sources. DLI supports both standard SQL and Spark interfaces.

With CTS, you can record operations associated with DLI for later query, audit, and backtrackoperations.

Table 4-53 DLI operations that can be recorded by CTS


Creating a database database createDatabase

Deleting a database database dropDatabase

Modifying a database database alterDatabase

Creating a table table createTable

Deleting a table table dropTable

Modifying a table table alterTable

Querying a record in thetable

table selectTable

Inserting a record in thetable

table insertIntoTable

Overwriting a record in thetable

table insertOverwriteTable

Updating a record in thetable

table updateTable

Deleting a record in thetable

table deleteTable

Exporting table data table exportData

Importing table data table importData

Creating a queue resource createQueue

Deleting a queue resource dropQueue

Modifying a queue resource alterQueue

Using a queue resource useQueue

Sharing a queue resource shareQueue

Canceling a task resource cancelJob



70


Freezing and unfreezingresources

resource updateResourceStatus

Cleaning up resources project cleanResource

Sharing data data shareData

Exporting query results data exportResult

Saving the SQL template sqlStore saveSQLTemplate

Updating the SQLtemplate

sqlStore updateSQLTemplate

Deleting the SQL template sqlStore deleteSQLTemplate

Creates a data upload task uploader createJob

Obtaining theauthentication to perform adata upload task

uploader getAuthInfo

Submitting a data uploadtask

uploader commitJob

Updating the quota quota updateQuota

4.54 Key Operations on DPSThe Data Pipeline Service (DPS) helps you move data among different services and convertdata formats. With DPS, you can predefine the data processing task, execution sequence task,and scheduling plan. DPS can process complex data according to predefined tasks.

With CTS, you can record operations associated with DPS for later query, audit, andbacktrack operations.

Table 4-54 DPS operations that can be recorded by CTS


Creating a pipeline pipeline createPipeline

Deleting a pipeline pipeline deletePipeline

Editing a pipeline pipeline putPipelineDefinition

Verifying a pipeline pipeline validatePipelineDefinition

Starting a pipeline pipeline activatePipeline

Stopping a pipeline pipeline deactivatePipeline

Starting a pipeline pipeline schedulePipeline



71


Restoring a pipeline pipeline restorePipeline

Stopping a pipeline pipeline stopSchedulePipeline

Terminating pipelinescheduling

pipeline endSchedulePipeline

Verifying the user status pipeline customerVerifiedStatus

Submitting a pipelineorder

pipeline orderPeriodicPipeline

Setting a quota certificate setQuotas

4.55 Key Operations on CSCloud Stream Service (CS) is a real-time streaming large data analysis platform running onHUAWEI CLOUD. It provides full hosting and pay-as-you-go, and users focus on StreamSQL for big data analysis.

With CTS, you can record operations associated with CS for later query, audit, and backtrackoperations.

Table 4-55 CS operations that can be recorded by CTS


Creating anapplication

job createNewJob

Editing anapplication

job editJob

Deleting anapplication

job deleteJob

Starting anapplication

job startJob

Stopping anapplication

job stopJob

Deletingapplications inbatches

job deleteJobInBatch

Creating a template template createTemplate

Updating a template template updateTemplate

Deleting a template template deleteTemplate



72


Stopping an overdueaccount application

job stopArrearageJob

Recovering anoverdue accountapplication

job recoverArrearageJob

Deleting an overdueaccount application

job deleteArrearageJob



Expanding a cluster cluster scalaUpCluster

Downsizing acluster

cluster scalaDownCluster

Expanding ordownsizing a cluster

cluster scalaCluster

Creating a tenantcluster

cluster createReservedCluster

Updating a tenantcluster

cluster updateReservedCluster

Deleting a tenantcluster

cluster deleteReservedCluster

Updating the userquota

cluster updateUserQuota

Creating an agency agency createagency

4.56 Key Operations on DWSData Warehouse Service (DWS) is an online data processing database based on the publiccloud infrastructure and platform and helps you mine and analyze massive data.

With CTS, you can record operations associated with DWS for later query, audit, andbacktrack operations.

Table 4-56 DWS operations that can be recorded by CTS


Creating/Restoring acluster

cluster createCluster




73


Expanding clustercapacity

cluster growCluster

Restarting a cluster cluster rebootCluster

Creating a snapshot backup createBackup

Deleting a snapshot backup deleteBackup

Setting securityparameters

configurations updateConfigurations

Creating an MRSdata source

dataSource createExtDataSource

Deleting an MRSdata source

dataSource deleteExtDataSource

Updating an MRSdata source

dataSource updateExtDataSource

4.57 Key Operations on DISData Ingestion Service (DIS) solves the problems of transmitting external data into cloudservices. With DIS, you can build customized applications to process or analyze stream datato meet specific demands.

With CTS, you can record operations associated with DIS for later query, audit, and backtrackoperations.

Table 4-57 DIS operations that can be recorded by CTS


Creating a stream stream createStream

Deleting a stream stream deleteStream

Creating an app app createApp

Deleting an app app deleteApp

4.58 Key Operations on CloudTableCloudTable Service is a distributed, scalable, and fully managed key-value data storageservice based on Apache HBase. It provides high-performance random read/write service,which is especially helpful when applications need to store and query a massive amount ofstructured data, semi-structured data, and time series data.

With CTS, you can record operations associated with CloudTable for later query, audit, andbacktrack operations.



74

Table 4-58 CloudTable operations that can be recorded by CTS


Creating a cluster cluster txbing-hbase-40

Deleting a cluster cluster txbing-026-hbase


cluster txbing-023-hbase

Restarting a cluster cluster txbing-023-hbase

Deleting a node instance txbing-023-hbase

Restarting a node instance txbing-023-hbase-regionserver-1-1

Setting the storagequota

cluster txbing-023-hbase

Configuring a feature cluster txbing-026-hbase

4.59 Key Operations on MLSMachine Learning Service (MLS) is an analysis platform service that helps you recordpatterns in data to construct a machine learning model. You can use this model to process newdata and make predictions for service application.

With CTS, you can record operations associated with MLS for later query, audit, andbacktrack operations.

Table 4-59 MLS operations that can be recorded by CTS



Restarting a cluster cluster rebootCluster


Creating a DBinstance

instance createInstance

Deleting a DBinstance

instance deleteInstance

4.60 Key Operations on DLSDeep Learning Service (DLS) provides rich and flexible services including model developing,debugging, training, and inference. It supports image processing, natural language processing,and recommendation.



75

With CTS, you can record operations associated with DLS for later query, audit, andbacktrack operations.

Table 4-60 DLS operations that can be recorded by CTS


Creating a notebookjob

job createNotebookJob

Enabling a notebookjob

job openNotebookJob

Deleting a notebookjob

job deleteNotebookJob

Deleting notebookjob description

job updateNotebookJobDescription

Uploading notebookcode to OBS

job uploadNotebookCode

Downloading codefrom OBS tonotebook

job downloadNotebookCode

Creating a train job job createTrainJob

Starting a train job job startTrainJob

Suspending a trainjob

job pendTrainJob

Resuming a train job job continueTrainJob

Stopping a train job job stopTrainJob

Deleting a train job job deleteTrainJob

Updating train jobdescription

job updateTrainJobDescription

Creating an inferencejob

job createInferenceJob

Starting an inferencejob

job startInferenceJob

Suspending aninference job

job pendInferenceJob

Resuming aninference job

job continueInferenceJob

Stopping an inferencejob

job stopInferenceJob



76


Deleting an inferencejob

job deleteInferenceJob

Updating inferencejob description

job updateInferenceJobDescription

Importing a built-inmodel to OBS

model importBuildInModel

Creating a train jobconfiguration

config createTrainJobConfig

Saving a train jobconfiguration

config saveTrainJobConfig

Deleting a train jobconfiguration

config deleteTrainJobConfig

Loading a train jobconfiguration

config loadTrainJobConfig

Updating a train jobconfiguration

config updateTrainJobConfig

Creating an inferencejob configuration

config createInferenceJobConfig

Saving an inferencejob configuration

config saveInferenceJobConfig

Deleting an inferencejob configuration

config deleteInferenceJobConfig

Loading an inferencejob configuration

config loadInferenceJobConfig

Updating aninference jobconfiguration

config updateInferenceJobConfig

4.61 Key Operations on GESGraph Engine Service (GES) provides distributed, large-scale, and integrated graph searchand analysis. Using the high performance kernel (called Eywa), GES achieves the highconcurrency multiple-hop queries in second level. It provides rich built-in graph algorithms tomeet the needs of multi-domain applications. GES applies to social networking, precisionmarketing, credit insurance, and network or path planning scenarios.

With CTS, you can record operations associated with GES for later query, audit, andbacktrack operations.



77

Table 4-61 GES operations that can be recorded by CTS


Creating a graph cluster createGraph

Deleting a graph cluster deleteGraph

Starting a graph cluster startGraph

Stopping a graph cluster stopGraph

Restoring a graph cluster restoreGraph

Creating a backup backup createBackup

Deleting a backup backup deleteBackup

Querying a graph gremlin queryGraph

Analyzing a graph algorithm analyzeGraph

Downloading results algorithm downloadResult

Creating an index index createIndex

Deleting an index index deleteIndex

4.62 Key Operations on ESElasticsearch Service (ES) is a fully hosted distributed search engine service based on thepublic cloud infrastructure and platform. It provides users with structured and unstructuredtext search, statistics, and report capabilities.

With CTS, you can record operations associated with ES for later query, audit, and backtrackoperations.

Table 4-62 ES operations that can be recorded by CTS


Creating an EScluster

esCluster createCluster

Deleting an EScluster

esCluster deleteCluster


esCluster growCluster

Restarting an EScluster

esCluster rebootCluster



78

4.63 Key Operations on IEFIntelligent Edge Fabric (IEF) provides general on-demand computing capabilities and theirmanagement on cloud edges and edge computing nodes.

With CTS, you can record operations associated with IEF for later query, audit, and backtrackoperations.

Table 4-63 IEF operations that can be recorded by CTS


Creating an edgegroup

edge_group createEdgeGroup

Updating an edgegroup

edge_group updateEdgeGroup

Deleting an edgegroup

edge_group deleteEdgeGroup

Creating an edgedevice

edge_device createEdgeDevice

Deleting an edgedevice

edge_device deleteEdgeDevice

Starting an edgedevice

edge_device startEdgeDevice

Stopping an edgedevice

edge_device stopEdgeDevice

Creating an IoTdevice

iot_device createIoTDevice

Updating an IoTdevice

iot_device updateIoTDevice

Deleting an IoTdevice

iot_device deleteIoTDevice

Creating an app application createApp

Updating an app application updateApp

Deleting an app application deleteApp

Create an applicationversion

application createAppVersion

Updating anapplication version

application updateAppVersion

Deleting anapplication version

application deleteAppVersion



79


Deploying an appversion

application deployAppVersion

Creating tags tag createTag

Deleting a tag tag deleteTag

4.64 Key Operations on CPTSCloud Performance Test Service (CPTS) is a service that tests the performance of HTTP-,HTTPS-, or TCP-based cloud applications. It supports large-scale concurrency testing. CPTSallows you to run performance tests in complex scenarios by customizing packets and packetsequence numbers and combining multiple transactions.

With CTS, you can record operations associated with CPTS for later query, audit, andbacktrack operations.

Table 4-64 CPTS operations that can be recorded by CTS


Creating a project cptsProject createCptsProject

Deleting a project cptsProject deleteCptsProject

Changing a CPTSproject

cptsProject modifyCptsProject

Creating a CPTS task cptsTask createCptsTask

Deleting a CPTS task cptsTask deleteCptsTask

Modifying a CPTStask

cptsTask modifyCptsTask

Creating a CPTStransaction

cptsTemp createCptsTemp

Deleting a CPTStransaction

cptsTemp deleteCptsTemp

Modifying a CPTStransaction

cptsTemp modifyCptsTemp

Creating a CPTScluster

cptsCluster createCptsCluster

Deleting a CPTScluster

cptsCluster deleteCptsCluster

Modifying a CPTScluster

cptsCluster modifyCptsCluster



80

4.65 Key Operations on UPredictUPredict is a real-time platform for AI models, providing high-performance, high availability,maintainable model services and reducing the TTM for a variety of North-based servicesbased on machine learning models and deep learning models, such as e-commercerecommendation, image recognition, and OCR. Users can complete the UPredict servicemodel version management, model service deployment, monitoring, and other managementoperations.

With CTS, you can record operations associated with UPredict for later query, audit, andbacktrack operations.

Table 4-65 UPredict operations that can be recorded by CTS


Adding a service service addService

Deleting a service service deleteService

Updating a service service updateService

Setting the number ofservice instances

service setServiceCount

Restarting a service service restartService

Adding a new model model addModel

Deleting a model model deleteModel

Updating a model model updateModel

Adding a big model model addBigModel

Setting a load balancingpolicy

policy setLBPolicy

Synchronizing a loadbalancing policy

policy syncLBPolicy

Configuring an elasticscaling policy

policy setScalePolicy

4.66 Key Operations on AOSApplication Orchestration Service (AOS) allows you to deploy your applications onHUAWEI CLOUD with a few clicks, simplifying cloud service management. Using templatesto describe and orchestrate applications and related cloud services, AOS facilitates automaticapplication deployment, cloud service creation, and E2E application lifecycle management.

With CTS, you can record operations associated with AOS for later query, audit, andbacktrack operations.



81

Table 4-66 AOS operations that can be recorded by CTS


Creating a template AOS CreateTemplate

Deleting a template AOS DeleteTemplate

Updating a stack AOS UpdateTemplate

Previewing a stack AOS PreviewStack

Creating a stack AOS CreateStack

Deleting a stack AOS DeleteStack

Updating a stack AOS UpdateStack

Performing stack lifecyclemanagement

AOS ExecuteStackAction

Cleaning resources AOS CleanupResources

Freezing or unfreezingtenants

AOS UpdateTenantState

Generating billing data AOS GetBillingData

Configuring a meteringtask parameter

AOS setParameter

Clearing the usage historybefore the specified time

AOS clearHistory

Creating a service AOS requestCreateService

Approving a servicerelease application

AOS createService

Rejecting a service releaseapplication

AOS rejectCreateService

Delete a task with aspecified ID

AOS deleteService

Updating a service AOS requestUpdateService

Approving a serviceupdate application

AOS updateService

Upgrading service broker AOS updateBrokerAndConsole

Rejecting a service updateapplication

AOS rejectUpdateService

Creating service instancebinding relationship

AOS createBind

Regenerating bindinginformation

AOS updateBind



82


Deleting service instancebinding relationship

AOS deleteBind

Applying for a serviceinstance

AOS requestCreateInstance

Creating an instance afterapproval

AOS createInstance

Refusing a service instance AOS rejectCreateInstance

Deleting a service instance AOS deleteServiceInstance

Updating service instanceinformation

AOS requestUpdateInstance

Approving a serviceinstance application

AOS updateInstanceInfo

Canceling a serviceinstance update application

AOS cancelInstanceUpdate

4.67 Key Operations on FunctionStageFunctionStage is an event-driven function hosting and computing service that managescompute resources without requiring administration and maintenance. With FunctionStage,you can quickly build diverse applications and services.

With CTS, you can record operations associated with FunctionStage for later query, audit, andbacktrack operations.

Table 4-67 FunctionStage operations that can be recorded by CTS


Creating a function Functions CreateFunction

Deleting a function Functions DeleteFunction

Modifying functioninformation

Functions ModifyFunctionMetadata

Publishing a functionversion

FunctionVersions PublishFunctionVersion

Deleting a function versionalias

FunctionVersionsAlias DeleteVersionAlias

Deleting a trigger Trigger DeleteTrigger

Creating a trigger Trigger CreateTrigger

Disabling a trigger Trigger DisabledTrigger



83


Enabling a trigger Trigger EnabledTrigger

Executing a function FunctionInstance invokeFunction

4.68 Key Operations on CBSConversational Bot Service (CBS) is an efficient and intelligent dialogue bot service thatprovides tenants with a question-and-answer engine, task-based dialogue engine, and qualityinspection (QI) engine. The QI module adopts efficient and intelligent dialogue analysistechnologies to provide tenants with comprehensive and reliable quality inspection services.QI covers all dialog data. QI adopts non-linear processing (NLP) and machine learningtechnologies to perform intelligent analysis on dialogue data, improving the quality inspectionefficiency and the problem discovering capability of tenants.

With CTS, you can record operations associated with CBS for later query, audit, andbacktrack operations.

Table 4-68 CBS operations that can be recorded by CTS


Enabling CBS qi subscribeService

Creating a data set qi createDataset

Modifying a data set qi modifyDataset

Deleting a data set qi deleteDataset

Creating a rule qi createRule

Deleting a rule qi deleteRule

Executing a task qi executeTask

Reviewing a result qi reviewResult

Deleting a result qi deleteResult

4.69 Key Operations on AADAdvanced Anti-DDoS (AAD) is a value-added service that protects gaming, finance, and e-commerce customers against high-bandwidth DDoS attacks. It diverts traffic to high-defenseIP addresses to clean the traffic, thereby keeping your businesses stable and reliable.

With CTS, you can record operations associated with AAD for later query, audit, andbacktrack operations.



84

Table 4-69 AAD operations that can be recorded by CTS


Starting a high-defenseinstance

cadopen cadOpen

Enabling a high-defenseinstance (CSB callback)

csbopen csbOpen

Modifying the gameCCwhitelist

gameccmodifywhitelist gameCCModifyWhitelist

Adding the gameCCwhitelist

gameccaddwhitelist gameCCAddWhitelist

Enabling or disablinggameCC

gameccswitch gameccSwitch

Deleting a forwarding rule addprotocolrule addProtocolRule

Deleting a forwarding rule deleteprotocolrule deleteProtocolRule

Setting a DNS policy domaindns domainDns

Editing a domainconfiguration

domainconfigedit domainConfigEdit

Uploading a certificate domaincert domainCert

Setting a domain switch instancedomainswitch domainSwitch

Deleting a domain deletedomain deleteDomain

Modifying an elasticbandwidth

modifyelasticbandwidth modifyElasticBandwidth

4.70 Key Operations on FRSFace Recognition Service (FRS) can quickly detect and locate faces in images and identifymultiple attributes by analyzing up to 74 key points of faces. FRS is perfect for identityauthentication, security surveillance, e-commerce, face search, and smart albums.

With CTS, you can record operations associated with FRS for later query, audit, andbacktrack operations.

Table 4-70 FRS operations that can be recorded by CTS


Creating a face set faceset createFaceSet

Deleting a face set faceset deleteFaceSet



85

4.71 Key Operations on AOMApplication Operations Management (AOM) is a one-stop shop for O&M personnel tomonitor application and resource operating statuses in real time. By analyzing dozens ofmetrics, alarms, and logs, you can quickly locate root causes to ensure smooth running ofservices.

You can use AOM to comprehensively monitor and uniformly manage servers, storagedevices, networks, web containers, and applications hosted in Docker and Kubernetes. Thiseffectively prevents problems and helps O&M personnel locate faults in minutes, reducingO&M costs. In addition, AOM provides unified APIs to support interconnection withHuawei-developed monitoring systems or report systems. Unlike traditional monitoringsystems, AOM monitors applications to reflect service statuses. This meets enterpriserequirements for efficiency and fast iteration, helping enterprises effectively support ITservices, better achieve strategic objectives, and protect and maximize IT assets.

With CTS, you can record operations associated with AOM for later query, audit, andbacktrack operations.

NOTE

A trace whose resource type is pe actually records an operation of AOM, but the operation interface is inCCE or ServiceStage.

Table 4-71 AOM that can be recorded by CTS


Creating a dashboard ams addDashboard

Modifying a dashboard ams updateDashboard

Deleting a dashboard ams deleteDashboard

Creating a threshold ams addThreshold

Changing a threshold ams updateThreshold

Deleting a threshold ams deleteThreshold

Creating a policy group pe createPolicyGroup

Deleting a policy group pe deletePolicyGroup

Updating a policy group pe updatePolicyGroup

Enabling a policy group pe enablePolicyGroup

Disabling a policy group pe disablePolicyGroup

Creating a policy pe createPolicy

Deleting a policy pe deletePolicy

Updating a policy pe updatePolicy

Enabling a policy pe enablePolicy



86


Disabling a policy pe disablePolicy

Updating the aging period als updateLogStorgeSetting

4.72 Key Operations on Blockchain ServiceBlockchain Service (BCS) is a high-performance, highly available, and high-security blockchain technology platform service. It helps enterprises and developers efficiently create,deploy, and manage block chain applications and smart business contract services onHUAWEI CLOUD at a low cost.

With CTS, you can record operations associated with BCS for later query, audit, andbacktrack operations.

Table 4-72 BCS operations that can be recorded by CTS


Accessing BCS Blockchains getBlockchains

Viewing BCS details Blockchain getDetailBlockchain

Updating BCS Blockchain updateBlockchain

Deleting BCS Blockchain deleteBlockchain

Obtaining the SDKconfiguration of BCS

Blockchain getBlockchainSdkConfig

Changing the agentpassword

Blockchain modifyAgentPassword

Obtaining the BCScertificate

Blockchain getBlockchainCert

Binding an EIP Blockchain bindEip

Creating a channel Channel createChannel

Scaling in or out peernodes

Blockchain scalePeers

Adding a peer node to achannel

Channel addPeertoChannel

Obtaining the list ofchannels

Channels getChannels

Subscribing to BCS Blockchain orderBlockchainService

Obtaining the list ofmembers

MemberList getMemberList



87


Inviting a member MemberList inviteToMemberList

Obtaining member details MemberInfo getDetailMemberInfo

Deleting memberinformation

MemberInfo deleteMemberInfo

Obtaining a notification Notification getNotifications

Obtaining notificationdetails

Notification getDetailNotification

Deleting a notification Notification deleteOneNotification

Handling a notification Notification operateNotofication

4.73 Key Operations on SWRSoftware Repository for Container (SWR) provides easy, secure, and reliable management ofcontainer images throughout their lifecycles, facilitating quick deployment of containerizedservices.

With CTS, you can record operations associated with SWR for later query, audit, andbacktrack operations.

Table 4-73 SWR operations that can be recorded by CTS


Creating a repository SWR createRepository

Modifying a repository SWR updateRepository

Deleting a repository SWR deleteRepository

Creating a softwarepackage

SWR createPackage

Modifying a softwarepackage

SWR updatePackage

Deleting a softwarepackage

SWR deletePackage

Creating a version SWR createVersion

Updating a version SWR updateVersion

Deleting a version SWR deleteVersion

Uploading a file SWR uploadFile

Downloading a file SWR downloadFile



88


Deleting a file SWR deleteFile

Creating an imagerepository

SWR createImageRepository

Modifying an imagerepository

SWR updateImageRepository

Deleting an imagerepository

SWR deleteImageRepository

Uploading an imagepackage

SWR uploadImagePackage

Deleting an image tag SWR deleteImageTag

Creating repositorypermissions

SWR createUserRepositoryAuth

Changing repositorypermissions

SWR updateUserRepositoryAuth

Deleting repositorypermissions

SWR deleteUserRepositoryAuth

Creating a namespace SWR createUserNamespace

Deleting a namespace SWR deleteUserNamesapce

Creating namespacepermissions

SWR createUserNamespaceAuth

Changing namespacepermissions

SWR updateUserNamespaceAuth

Deleting namespacepermissions

SWR deleteUserNamespaceAuth

Creating software packagepermissions

SWR createPackageAuth

Changing softwarepackage permissions

SWR updatePackageAuth

Deleting software packagepermissions

SWR deletePackageAuth

4.74 Key Operations on RESRecommendation Engine Service (RES) offers a readily-available and standard platform forsetting up personalized recommendation systems. With built-in recommendation templates forvarious industries like e-commerce and news, recommendation has never been easier.



89

With CTS, you can record operations associated with RES for later query, audit, andbacktrack operations.

Table 4-74 RES operations that can be recorded by CTS


Modifying serviceinformation

biz updateBiz

Adding serviceinformation

biz addBiz

Deleting serviceinformation

biz deleteBiz

Adding a scenario scene addScene

Deleting a scenario scene deleteScene

Modifying API parameters parameters updateParameters

Modifying policyinformation

strategy updateStrategy

Modifying a filtering rule scene filtersScene

Updating flow information flow updateFlow

Rolling back a scenario scene rockbackScene

Taking a scenario offline scene offlineScene

Running an offline task strategy executionStrategy

Modifying scenariometrics

index updateIndex

Bringing a scenario online scene onlineScene

4.75 Key Operations on SCSecurity Center (SC) enables you to know your security situations at a glance, with excellentSecOPS experience.

With CTS, you can record operations associated with SC for later query, audit, and backtrackoperations.

Table 4-75 SC operations that can be recorded by CTS


Modifying a certificate scm modifyScmCert

Creating a certificate scm createScmNewCert



90


Completing certificateinformation

scm completeScmCert

Canceling certificatereview

scm cancelScmCert

Deleting a certificate scm deleteScmCert

Sending an SMSverification code

scm sendScmSms

Verifying an SMSverification code

scm authScmSms

Uploading userauthentication information

scm uploadScmUserMessage

Downloading a certificate scm downloadScmCert

Purchasing a certificate scm purchaseScmCert

Uploading a certificate scm uploadScmCert

Revoking a certificate scm revokeScmCert

Pushing a certificate toELB

scm pushScmCertToELB

Unpushing a certificate toELB

scm unpushScmCertToELB

4.76 Key Operations on DLFData Lake Factory (DLF) is a one-stop Big Data collaboration development platform,enabling operations such as data modeling, data integration, script development, jobscheduling, and job monitoring. Thanks to DLF, Big Data is more accessible than ever before,helping you quickly build Big Data processing centers.

With CTS, you can record operations associated with DLF for later query, audit, andbacktrack operations.

Table 4-76 DLF operations that can be recorded by CTS


Creating a pipeline pipeline createPipeline

Deleting a pipeline pipeline deletePipeline

Editing a pipeline pipeline putPipelineDefinition

Verifying a pipeline pipeline validatePipelineDefinition



91


Starting a pipeline pipeline activatePipeline

Stopping a pipeline pipeline deactivatePipeline

Starting a pipeline pipeline schedulePipeline

Restoring a pipeline pipeline restorePipeline

Stopping a pipeline pipeline stopSchedulePipeline

Terminating pipelinescheduling

pipeline endSchedulePipeline

Verifying the user status pipeline customerVerifiedStatus

Submitting a pipelineorder

pipeline orderPeriodicPipeline

Setting a quota pipeline setQuotas

4.77 Relationship between Operations triggered byFusionSphere OpenStack and Native OpenStack APIs

Table 4-77 Relationship between operations triggered by FusionSphere OpenStack and nativeOpenStack APIs

Operation Trace Name ServiceType

ResourceType

OpenStackComponent

Enabling anECS

enableService ECS computeService

nova

Disabling anECS

disableService ECS computeService

nova

Adding thecause ofdisabling anECS

logDisabledInfo ECS computeService

nova

Deleting an ECS deleteService ECS computeService

nova

Creating a flavor createFlavor ECS flavor nova

Deleting a flavor deleteFlavor ECS flavor nova

Adding/Deletingpermissions of atenant to accessspecifications

operateFlavorAccess

ECS flavor nova



92


ResourceType

OpenStackComponent

Creating extraspecifications

createExtraSpecs

ECS flavor nova

Updatingspecified extraspecifications

updateExtraSpec

ECS flavor nova

Deletingspecified extraspecifications

deleteExtraSpec ECS flavor nova

Creating a hostgroup

createAggregate ECS hostAggregates

nova

Updating a hostgroup

updateAggregate

ECS hostAggregates

nova

Deleting a hostgroup

deleteAggregate ECS hostAggregates

nova

Adding a host toa host group/Removing a hostfrom a hostgroup/Settingmetadata of ahost group

operateAggregate

ECS hostAggregates

nova

Creating a keypair

createKeypair ECS keypair nova

Deleting a keypair

deleteKeypair ECS keypair nova

Updating thequota

updateQuotas ECS quotaSets nova

Deleting thequota

revertQuotasToDefaults

ECS quotaSets nova

Creating a VM createServer ECS server nova

Updating a VM updateServer ECS server nova

Deleting a VM deleteServer ECS server nova

Operating a VM operateServer ECS server nova

Setting metadata setMetadata ECS server nova

Updatingmetadata/Settingmetadata of aspecified key

updateMetadata ECS server nova



93


ResourceType

OpenStackComponent

Deletingmetadata of aspecified key

deleteMetadata ECS server nova

Adding an NICto a VM

createInterface ECS server nova

Detaching anNIC from a VM

detachInterface ECS server nova

Clearing thepassword (DB)of a specifiedVM

clearAdminPassword

ECS server nova

Attaching avolume to a VM

attachVolume ECS server nova

Detaching avolume from aVM

detachVolume ECS server nova

Creating a VMgroup

createServerGroup

ECS serverGroup nova

Deleting a VMgroup

deleteServerGroup

ECS serverGroup nova

Creating a VM createServerVolumesBoot

ECS server nova

Creating aconsole

createServerRemoteConsoles

ECS server nova

Resetting thepassword

resetServerPassword

ECS server nova

Creating afloating IPaddress

createFloatingip VPC floatingips neutron

Updating afloating IPaddress

updateFloatingip

VPC floatingips neutron

Deleting afloating IPaddress

deleteFloatingip VPC floatingips neutron

Creating afirewall group

createFirewallGroup

VPC FWaaS v2 neutron

Updating afirewall group

updateFirewallGroup




94


ResourceType

OpenStackComponent

Deleting afirewall group

deleteFirewallGroup


Creating afirewall policy

createFirewallPolicy


Updating afirewall policy

updateFirewallPolicy


Deleting afirewall policy

deleteFirewallPolicy


Inserting afirewall rule intoa firewall policy

insertFirewallPolicyRule


Removing afirewall rulefrom a firewallpolicy

removeFirewallPolicyRule


Creating afirewall rule

createFirewallRule


Updating afirewall rule

updateFirewallRule


Deleting afirewall rule

deleteFirewallRule


Creating a NATGateway

createNatGateway

VPC-OpenStack

natgateways neutron

Updating a NATgateway

updateNatGateway

VPC-OpenStack

natgateways neutron

Deleting a NATgateway

deleteNatGateway

VPC-OpenStack

natgateways neutron

Creating anSNAT rule

createSnatRule VPC-OpenStack

snatrules neutron

Deleting anSNAT rule

deleteSnatRule VPC-OpenStack

snatrules neutron

Creating aDNAT rule

createDnatRule VPC-OpenStack

dnatrules neutron



95


ResourceType

OpenStackComponent

Deleting aDNAT rule

deleteDnatRule VPC-OpenStack

dnatrules neutron

Creating a healthmonitor

createLBaaSHealthMonitor

ULB healthmonitor neutron

Updating aspecified healthmonitor

updateLBaaSHealthMonitor


Deleting aspecified healthmonitor

deleteLBaaSHealthMonitor


Creating alistener

createLBaaSListener

ULB listener neutron

Updating aspecified listener

updateLBaaSListener


Deleting aspecified listener

deleteLBaaSlistener


Creating a loadbalancer

createLBaaSLoadbalancer

ULB loadbalancer neutron

Updating aspecified loadbalancer

updateLBaaSLoadbalancer


Deleting aspecified loadbalancer

deleteLBaaSLoadbalancer


Creating amember

createLBaaSPoolMember

ULB member neutron

Updating aspecifiedmember

updateLBaaSPoolMember

ULB member neutron

Deleting aspecifiedmember

deleteLBaaSPoolMember

ULB member neutron

Creating a VPC createNetwork VPC networks neutron

Updating a VPC updateNetwork VPC networks neutron

Deleting a VPC deleteNetwork VPC networks neutron

Creating a pool createLBaaSPool

ULB pool neutron



96


ResourceType

OpenStackComponent

Updating aspecified pool

updateLBaaSPool

ULB pool neutron

Deleting aspecified pool

deleteLBaaSPool

ULB pool neutron

Creating avirtual port

createPort VPC ports neutron

Updating avirtual port

updatePort VPC ports neutron

Deleting avirtual port

deletePort VPC ports neutron

Creating avRouter

createRouter VPC routes neutron

Updating avRouter

updateRouter VPC routes neutron

Deleting avRouter

deleteRouter VPC routes neutron

Adding avRouterinterface

addRouterInterface

VPC routes neutron

Deleting avRouterinterface

removeRouterInterface

VPC routes neutron

Adding an extraroute to thecurrent vRouter

addExtraRoute VPC routes neutron

Deleting aspecified routefrom the currentvRouter

removeExtraRoute

VPC routes neutron

Creating asecurity grouprule

createSecurity-group-rule

VPC security-group-rules

neutron

Deleting asecurity grouprule

deleteSecurity-group-rule

VPC security-group-rules

neutron

Creating asecurity group

createSecurity-group

VPC security-groups

neutron

Deleting asecurity group

deleteSecurity-group

VPC security-groups

neutron



97


ResourceType

OpenStackComponent

Updating asecurity group

updateSecurity-group

VPC security-groups

neutron

Creating avirtual subnet

createSubnet VPC subnets neutron

Updating avirtual subnet

updateSubnet VPC subnets neutron

Deleting avirtual subnet

deleteSubnet VPC subnets neutron

Creating a VPN createVpnService

VPC vpn neutron

Updating a VPN updateVpnService

VPC vpn neutron

Deleting a VPN deleteVpnService

VPC vpn neutron

Creating aprivate keyexchange policy

createVpnIkepolicy

VPC vpn neutron

Updating aprivate keyexchange policy

updateVpnIkepolicy

VPC vpn neutron

Deleting an IKEpolicy specifiedby the tenant

deleteVpnIkepolicy

VPC vpn neutron

Creating an IKEpolicy

createVpnIpsecpolicy

VPC vpn neutron

Updating aspecified IPsecpolicy

updateVpnIpsecpolicy

VPC vpn neutron

Deleting aspecified IPsecpolicy

deleteVpnIpsecpolicy

VPC vpn neutron

Creating anIPsec connection

createVpnIpsec-site-connection

VPC vpn neutron

Updating anIPsec connection

updateVpnIpsec-site-connection

VPC vpn neutron

Deleting aspecified IPsecconnection

deleteVpnIpsec-site-connection

VPC vpn neutron



98


ResourceType

OpenStackComponent

Creating animage

createImage IMS image glance

Modifyinginformationabout an image/Uploading animage

updateImage IMS image glance

Deleting animage

deleteImage IMS image glance

Adding a tag addTag IMS image glance

Deleting a tag deleteTag IMS image glance

Adding animage member

addMember IMS image glance

Modifyinginformationabout an imagemember

updateMember IMS image glance

Deleting animage member

deleteMember IMS image glance

Creating aconfiguration

createSoftwareConfigs

RTS software_configs

heat

Deleting aconfiguration

deleteSoftwareConfigs

RTS software_configs

heat

Creating adeployment

createSoftwareDeployments

RTS software_deployments

heat

Deleting adeployment

deleteSoftwareDeployments


heat

Updating adeployment

updateSoftwareDeployments


heat

Stackmanagementactions, such ascanceling stackupdate orchecking stackresources

createStacksActions

RTS stacks heat

Sending a signalto resources in astack

createStacksResourcesSignal

RTS stacks heat



99


ResourceType

OpenStackComponent

Creating a stack createStacks RTS stacks heat

Deleting a stack deleteStacks RTS stacks heat

Updating a stack updateStacks RTS stacks heat

Previewing astack

createStacksPreview

RTS stacks heat

Identifying aresource asunhealthy

patchStacksResource

RTS stacks heat

Validating atemplate

createValidate RTS validate heat

Creating abackup

createBackup EVS backup Cinder

Importingvolume backupinformation

import_recordBackup

EVS backup Cinder

Restoring avolume backup

restoreBackup EVS backup Cinder

Deleting abackup

deleteBackup EVS backup Cinder

Deleting aconsistent groupof snapshots

deleteCgsnapshot

EVS cgsnapshot Cinder

Creating aconsistent groupof snapshots

createCgsnapshot

EVS cgsnapshot Cinder

Creating aconsistent group

createConsistencygroup

EVS consistencygroup

Cinder

Deleting aconsistent group

deleteConsistencygroup


Cinder

Updating aconsistent group

updateConsistencygroup


Cinder

Updating thequota level of atenant

updateQuota-class

EVS quota-class Cinder

Updating thequota of a tenant

updateQuota EVS quota Cinder

Creating avolume transfer

createVolume-transfer

EVS volume-transfer

Cinder



100


ResourceType

OpenStackComponent

Deleting avolume transfer

deleteVolume-transfer

EVS volume-transfer

Cinder

Accepting avolume transfer

acceptVolume-transfer

EVS volume-transfer

Cinder

Creating qos-specs

createQos-specs EVS qos-specs Cinder

Deleting qos-specs

deleteQos-specs EVS qos-specs Cinder

Creating asnapshot

createSnapshot EVS snapshot Cinder

Adding pieces ofsnapshotmetadata

createSnapshotMetadata

EVS snapshot Cinder

Forciblydeleting asnapshot

force_deleteSnapshot

EVS snapshot Cinder

Deleting asnapshot

deleteSnapshot EVS snapshot Cinder

Deleting a singlepiece ofsnapshotmetadata

deleteSnapshotSingleMetadata

EVS snapshot Cinder

Updatingsnapshotinformation

updateSnapshot EVS snapshot Cinder

Replacing piecesof snapshotmetadata

updateSnapshotMetadata

EVS snapshot Cinder

Updating asingle piece ofsnapshotmetadata

updateSnapshotSingleMetadata

EVS snapshot Cinder

Rolling back asnapshot

rollbackSnapshot

EVS snapshot Cinder

Activating asnapshot

activeSnapshot EVS snapshot Cinder

Creating avolume type

createType EVS type Cinder



101


ResourceType

OpenStackComponent

Creating extraspecificationsfor a volumetype

createTypeExtra-specs

EVS type Cinder

Deleting avolume type

deleteType EVS type Cinder

Creating avolume

createVolume EVS volume Cinder

Adding pieces ofvolumemetadata

createVolumeMetadata

EVS volume Cinder

Forciblydeleting avolume

force_deleteVolume

EVS volume Cinder

Attaching avolume

attachVolume EVS volume Cinder

Detaching avolume

detachVolume EVS volume Cinder

Reserving avolume

reserveVolume EVS volume Cinder

Pre-detaching avolume

begin_detachingVolume

EVS volume Cinder

Rolling back thevolume pre-detaching

roll_detachingVolume

EVS volume Cinder

Initializing theconnection forattaching avolume

initialize_connectionVolume

EVS volume Cinder

Terminating theconnection fordetaching avolume

terminate_connectionVolume

EVS volume Cinder

Uploading avolume image

Upload_imageVolume

EVS volume Cinder

Expanding thecapacity of avolume

extendVolume EVS volume Cinder

Unreserving avolume

unreserveVolume

EVS volume Cinder



102


ResourceType

OpenStackComponent

Setting the stateof a volume toread-only

update_readonly_flagVolume

EVS volume Cinder

Changing thetype of a volume

retypeVolume EVS volume Cinder

Setting the stateof a volume tobootable

set_bootableVolume

EVS volume Cinder

Deleting avolume

deleteVolume EVS volume Cinder

Deleting a singlepiece of volumemetadata

deleteVolumeSingleMetadata

EVS volume Cinder

Updating avolume

updateVolume EVS volume Cinder

Replacing piecesof volumemetadata

updateVolumeMetadata

EVS volume Cinder

Updating asingle piece ofvolumemetadata

updateVolumeSingleMetadata

EVS volume Cinder

Creating volumetags

createVolume-tags

EVS volume-tags Cinder

Updatingvolume tags

updateVolume-tags


Batch deletingvolume tags

bulkDeleteVolume-tags


Deleting a singlevolume tag

deleteVolume-tagsSingleTag


Updating asingle volumetag

updateVolume-tagsSingleTag


Creatingsnapshot tags

createSnapshot-tags

EVS snapshot-tags Cinder

Updatingsnapshot tags

updateSnapshot-tags


Batch deletingsnapshot tags

bulkDeleteSnapshot-tags




103


ResourceType

OpenStackComponent

Deleting a singlesnapshot tag

deleteSnapshot-tagsSingleTag


Updating asingle snapshottag

updateSnapshot-tagsSingleTag


Batch creatingvolume tags

createVolume-tags


Batch deletingvolume tags

deleteVolume-tags




104

A Change History

Release Date What's New

2018-05-31 This issue is the twenty-sixth official release,which incorporates the following changes:l Supported customized configuration of the

key event notification function and addedsection "Configuring Key EventNotification".

l Interconnected with SC.l Interconnected with DLF.

2018-04-25 This issue is the twenty-fifth official release,which incorporates the following change:Interconnected with the following services:l AOSl FunctionStagel CBSl AADl FRSl AOMl BCSl SWR

2018-03-09 This issue is the twenty-fifth official release,which incorporates the following change:which incorporates the following changes:l Optimized section "Supported Services".l Interconnected with Elasticsearch.l Interconnected with IEF.l Interconnected with UPredict.

Cloud Trace ServiceUser Guide A Change History


105


2018-01-30 This issue is the twenty-fourth officialrelease,which incorporates the following changes:l Added All for Key Event Notification, as

well as function and configurationdescription in section 1.1 Configuring aTracker.

l Interconnected with DESS.l Interconnected with API Gateway.l Interconnected with OBS.

2017-12-30 This issue is the twenty-third official release,which incorporates the following changes:l Interconnected with DDS.l Interconnected with SFS.l Interconnected with MLS.l Interconnected with GES.l Description that only standard OBS

storage buckets can be selected fordumping traces

2017-11-25 This issue is the twenty-second officialrelease, which incorporates the followingchange:l Added the trace file verification function

and sections "Verifying Trace FileIntegrity" and "Verifying CTS Trace FileIntegrity".

l Interconnected CTS with ServiceStage.l Added the description in section

"Enabling CTS" to explain how to enabletrackers for all regions of the current siteby configuring a parameter.

l Added the "User Login" function underKey Event Notification.

2017-10-26 This issue is the twenty-first official release,which incorporates the following changes:l Interconnected CTS with DDM.l Interconnected CTS with VSS.l Interconnected CTS with MLS.



106


2017-09-30 This issue is the twentieth official release,which incorporates the following changes:l Section 1.1 Configuring a Tracker

supports KMS encryption of the dumpedtrace files.

l Added "Is KMS Encryption of Trace FilesCharged?" to FAQs.

l Interconnected CTS with FGS.l Interconnected CTS with DeH.l Interconnected CTS with DWS.l Interconnected CTS with CloudTable.l Interconnected CTS with Object Storage

Migration Service.l Interconnected CTS with SAS

2017-08-30 This issue is the nineteenth official release,which incorporates the following changes:l Interconnected CTS with CS.l Interconnected CTS with DWS.l Interconnected CTS with VoiceCall.l Interconnected CTS with MSGSMS.l In section 1.1 Configuring a Tracker,

added the operation to create an OBSbucket on the page for configuring atracker.

2017-07-20 This issue is the eighteenth official release,which incorporates the following changes:l Interconnected CTS with NIDS.l Interconnected CTS with UQuery.l Interconnected CTS with CDN.l Added description of the notification of

key traces to section 1.1 Configuring aTracker.

2017-06-27 This issue is the seventeenth official release,which incorporates the following change:l Added RDS.

2017-06-14 This issue is the sixteenth official release,which incorporates the following changes:l Interconnected with SCS.l Interconnected with HexaTier.l Interconnected with PTS.l Interconnected with RDS.



107


2017-05-26 This issue is the fifteenth official release,which incorporates the following changes:l Interconnected with WAF.l Interconnected CTS with HVD.

2017-04-28 This issue is the fourteenth official release,which incorporates the following changes:l Interconnected CTS with ARS.l Interconnected CTS with SSA.l Interconnected CTS with WTP.

2017-03-30 This issue is the thirteenth official release,which incorporates the following changes:l Interconnected with CCS.l Interconnected with CRS.

2017-02-27 This issue is the twelfth official release,which incorporates the following changes:l Optimized filtering of traces and modified

the description in section "Querying Real-Time Traces".

l Modified the description of the user fieldin section 3.1 Trace Structure.

2017-02-08 This issue is the eleventh official release,which incorporates the following changes:l Optimized filtering of traces and modified

the description in section "Querying Real-Time Traces".

l Added the description of the trace deliveryperiod in section 1.1 Configuring aTracker.

l Added the description perspective insection 3 CTS Trace Reference andoptimized descriptions of some fields oftraces.



108


2017-02-03 This issue is the tenth official release, whichincorporates the following changes:l Added a FAQ "Why Do Some Operation

Records Occur Twice in the Trace List?",which provides a description of theasynchronous operation scenarios.

l Added the description: The subscriptioninformation deletion operation in the topicdeletion operation in the SMN service isnot recorded by CTS.

l Modified the description in section"Enabling CTS" to: The tracker recordsoperations on cloud resources performedby the tenant who created this tracker.

l Modified descriptions of parameters user,request, and response in section 3.1Trace Structure.

2017-01-20 This is the ninth official release, whichincorporates the following changes:l Allowed CTS to interconnect with ELB,

VBS, CCE, and MRS.l Added redirection to the resource page of

the VBS and IMS console through thehyperlink in the Resource ID column onthe Trace List page.

2016-12-30 This issue is the eighth official release, whichincorporates the following change:Interconnection with more services.

2016-12-15 This issue is the seventh official release,which incorporates the following change:Enabled traces of different services to bedelivered to different folders in an OBSbucket for storage.

2016-11-30 This issue is the sixth official release, whichincorporates the following changes:Optimized display on the console.

2016-11-15 This issue is the eighth official release, whichincorporates the following change:Interconnection with more services.



109


2016-10-30 This issue is the seventh official release,which incorporates the following change:Enabled traces of different services to bedelivered to different folders in an OBSbucket for storage.

2016-10-15 This issue is the third official release, whichincorporates the following changes:Added the trace levels.

2016-09-30 This issue is the second official release, whichincorporates the following changes:Enabled O&M to query all traces.

2016-09-15 This issue is the first official release.



110

Documents

User Guide - HUAWEI CLOUD · User Guide Issue 26 Date 2018-06-01 HUAWEI TECHNOLOGIES CO., ... IMS, EVS, CSBS, VBS, VPC, DNS, ... User Guide 1 Managing Trackers