CDN

操作审计支持查询阿里云内容分发网络cdn（Content Delivery Network）相关事件。您可以快速查询CDN事件并获取事件发生的时间、地域、域名等信息。本文为您举例说明CDN相关事件。

阿里云账号通过控制台添加CDN加速域名

以下示例表示，在北京时间2021年08月05日14:10:01，阿里云账号调用AddCdnDomain接口通过CDN控制台添加了CDN加速域名example.com。

{ "eventId": "3F44719F-9858-5016-AC54-794BBEE449C3", "eventVersion": 1, "responseElements": { "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3" }, "eventSource": "cdn-share.aliyuncs.com", "requestParameters": { "charset": "UTF-8", "AcsHost": "cdn-share.aliyuncs.com", "AcsProduct": "Cdn", "RequestId": "3F44719F-9858-5016-AC54-794BBEE449C3", "ResourceGroupId": "rg-acfmxl27ech****", "Scope": "domestic", "DomainName": "example.com", "AcceptLanguage": "zh-CN", "CdnType": "web", "HostId": "cdn-share.aliyuncs.com", "Sources": [ { "Type": "oss", "Content": "hao-nan.oss-cn-shanghai.aliyuncs.com", "Priority": "20", "Port": 80, "index": 0, "Weight": "10" } ] }, "sourceIpAddress": "192.168.XX.XX", "userAgent": "cdnnext.console.aliyun.com", "eventType": "ApiCall", "referencedResources": { "ACS::CDN::Domain": [ "cdns.example.com" ] }, "userIdentity": { "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2021-08-05T06:10:01Z" } }, "accountId": "128022060925****", "principalId": "128022060925****", "type": "root-account", "userName": "root" }, "serviceName": "Cdn", "additionalEventData": { "Scheme": "http", "CallerBid": "26842" }, "apiVersion": "2018-05-10", "requestId": "3F44719F-9858-5016-AC54-794BBEE449C3", "eventTime": "2021-08-05T06:10:01Z", "isGlobal": true, "acsRegion": "cn-shanghai", "eventName": "AddCdnDomain" }

示例中关键字段含义如下：

userIdentity.type：请求者的身份类型。取值为root-account，表示阿里云账号。
serviceName：事件相关的阿里云服务名称。取值为Cdn，表示CDN。
eventName：事件名称。取值为AddCdnDomain，表示添加CDN加速域名。
referencedResources：相关资源列表。取值为{"ACS::CDN::Domain": ["example.com"}，表示CDN加速域名example.com。
eventTime：事件发生的时间（UTC格式）。取值为2021-08-05T06:10:01Z，表示北京时间2021年08月05日14:10:01。

RAM用户通过控制台添加CDN加速域名

以下示例表示，在北京时间2021年08月05日13:54:39，RAM用户dev调用AddCdnDomain接口通过CDN控制台添加了CDN加速域名example.com。

{ "eventId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E", "eventVersion": 1, "responseElements": { "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E", }, "eventSource": "cdn-share.aliyuncs.com", "requestParameters": { "charset": "UTF-8", "AcsHost": "cdn-share.aliyuncs.com", "AcsProduct": "Cdn", "RequestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E", "Scope": "domestic", "DomainName": "example.com", "AcceptLanguage": "zh-CN", "CdnType": "web", "HostId": "cdn-share.aliyuncs.com", "Sources": [ { "Type": "oss", "Content": "lxhy-h5-****.oss-cn-chengdu.aliyuncs.com", "Priority": "20", "Port": 80, "index": 0, "Weight": "10" } ] }, "errorCode": "DomainAlreadyExist", "sourceIpAddress": "192.168.XX.XX", "userAgent": "cdn.console.aliyun.com", "eventType": "ApiCall", "referencedResources": { "ACS::CDN::Domain": [ "example.com" ] }, "userIdentity": { "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2021-08-05T05:54:39Z" } }, "accountId": "159702607145****", "principalId": "24749552624582****", "type": "ram-user", "userName": "dev" }, "serviceName": "Cdn", "additionalEventData": { "Scheme": "http", "CallerBid": "26842" }, "apiVersion": "2018-05-10", "requestId": "93DA5CD8-7D32-51E1-ACC5-7EFE0E1AD93E", "eventTime": "2021-08-05T05:54:39Z", "isGlobal": true, "acsRegion": "cn-shanghai", "eventName": "AddCdnDomain" }

示例中关键字段含义如下：

userIdentity.type：请求者的身份类型。取值为ram-user，表示RAM用户。
userIdentity.userName：请求者的RAM用户名称。
serviceName：事件相关的阿里云服务名称。取值为Cdn，表示CDN。
eventName：事件名称。取值为AddCdnDomain，表示添加CDN加速域名。
referencedResources：相关资源列表。取值为{"ACS::CDN::Domain": ["example.com"]}，表示CDN实例example.com。
eventTime：事件发生的时间（UTC格式）。取值为2021-08-05T05:54:39Z，表示北京时间2021年08月05日13:54:39。

RAM用户通过AK调用API添加CDN加速域名

以下示例表示，在北京时间2021年08月04日19:07:28，RAM用户Alice通过AK LTAI4GHbFgwYxAHRqcsr****调用AddCdnDomain接口添加了CDN加速域名example.com。

{ "eventId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176", "eventVersion": 1, "responseElements": { "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176", "Message": "Owner verification of the root domain failed.", "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw", "HostId": "cdn.aliyuncs.com", "Code": "DomainOwnerVerifyFail" }, "errorMessage": "Owner verification of the root domain failed.", "eventSource": "cdn.aliyuncs.com", "requestParameters": { "q": 0.9, "AcsHost": "cdn.aliyuncs.com", "AcsProduct": "Cdn", "RequestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176", "DomainName": "example.com", "v": "b3", "CdnType": "web", "HostId": "cdn.aliyuncs.com", "Sources": [ { "type": "domain", "content": "aliyundoc.com" } ] }, "errorCode": "DomainOwnerVerifyFail", "sourceIpAddress": "192.168.XX.XX", "userAgent": "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36 SE 2.X MetaSr 1.0", "eventType": "ApiCall", "referencedResources": { "ACS::CDN::Domain": [ "example.com" ] }, "userIdentity": { "accessKeyId": "LTAI4GHbFgwYxAHRqcsr****", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2021-08-04T11:06:44Z" } }, "accountId": "166878994059****", "principalId": "20223100810693****", "type": "ram-user", "userName": "Alice" }, "serviceName": "Cdn", "additionalEventData": { "Scheme": "https", "CallerBid": "26842" }, "apiVersion": "2018-05-10", "requestId": "2FB7E0AD-F3E1-5164-BBDA-8A1D846F9176", "eventTime": "2021-08-04T11:07:28Z", "isGlobal": true, "acsRegion": "cn-shanghai", "eventName": "AddCdnDomain" }

示例中关键字段含义如下：

userIdentity.accessKeyId：发起API调用的AccessKey ID。取值为LTAI4GHbFgwYxAHRqcsr****。
userIdentity.principalId：AK所属的账号ID。取值为20223100810693****。
userIdentity.type：请求者的身份类型。取值为ram-user，表示RAM用户。
serviceName：事件相关的阿里云服务名称。取值为Cdn，表示CDN。
eventName：事件名称。取值为AddCdnDomain，表示添加CDN加速域名。
referencedResources：相关资源列表。取值为{"ACS::CDN::Domain": ["example.com"]}，表示CDN加速域名example.com。
eventTime：事件发生的时间（UTC格式）。取值为2021-08-04T11:07:28Z，表示北京时间2021年08月04日19:07:28。

RAM用户通过角色扮演添加CDN加速域名

以下示例表示，在北京时间2021年08月02日14:15:46，阿里云账号111526800165****中的RAM用户通过扮演阿里云账号147048327155****下的RAM角色aliyunid-ag-ram-role-admin，添加了CDN加速域名example.com。

{ "eventId": "79229ED7-C2B6-45C5-B665-23AF88783660", "eventVersion": 1, "responseElements": { "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660", "Message": "Owner verification of the root domain failed.", "Recommend": "https://error-center.aliyun.com/status/search?Keyword=DomainOwnerVerifyFail&source=PopGw", "HostId": "cdn.aliyuncs.com", "Code": "DomainOwnerVerifyFail" }, "errorMessage": "Owner verification of the root domain failed.", "eventSource": "cdn.aliyuncs.com", "requestParameters": { "stsTokenPrincipalName": "aliyunid-ag-ram-role-admin/BASEMENT", "AcsHost": "cdn.aliyuncs.com", "AcsProduct": "Cdn", "RequestId": "79229ED7-C2B6-45C5-B665-23AF88783660", "DomainName": "example.com", "CdnType": "web", "RegionId": "cn-zhangjiakou", "HostId": "cdn.aliyuncs.com", "stsTokenPlayerUid": 111526800165****, "Sources": [ { "port": 443, "type": "domain", "content": "aliyundoc.com" } ] }, "errorCode": "DomainOwnerVerifyFail", "sourceIpAddress": "192.168.XX.XX", "userAgent": "AlibabaCloud (Linux; amd64) Java/1.8.0_252-b09 Core/4.5.19 HTTPClient/ApacheHttpClient", "eventType": "ApiCall", "referencedResources": { "ACS::CDN::Domain": [ "example.com" ] }, "userIdentity": { "accessKeyId": "STS.NSrwtDuh5hbwR1gtWwZhS****", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2021-07-25T02:40:34Z" } }, "accountId": "147048327155****", "principalId": "30304522804117****:BASEMENT", "type": "assumed-role", "userName": "aliyunid-ag-ram-role-admin:BASEMENT" }, "serviceName": "Cdn", "additionalEventData": { "Scheme": "http", "CallerBid": "26842" }, "apiVersion": "2018-05-10", "requestId": "79229ED7-C2B6-45C5-B665-23AF88783660", "eventTime": "2021-08-02T06:15:46Z", "isGlobal": true, "acsRegion": "cn-shanghai", "eventName": "AddCdnDomain" }

示例中关键字段含义如下：

userIdentity.type：请求者的身份类型。取值为assumed-role，表示RAM角色。
userIdentity.userName：请求者的用户名。格式为{roleName}:{sessionName}，roleName表示被扮演的角色名称，sessionName表示进行角色扮演时指定的名称。取值为aliyunid-ag-ram-role-admin:BASEMENT，表示被扮演的RAM角色名称是aliyunid-ag-ram-role-admin，进行角色扮演时指定的名称为BASEMENT。
requestParameters.stsTokenPlayerUid：扮演者的阿里云账号ID。取值为111526800165****。
referencedResources：相关资源列表。取值为{"ACS::CDN::Domain": ["example.com"]}，表示CDN加速域名example.com。
serviceName：事件相关的阿里云服务名称。取值为Cdn，表示CDN。
eventName：事件名称。取值为AddCdnDomain，表示添加CDN加速域名。
eventTime：事件发生的时间（UTC格式）。取值为2021-08-02T06:15:46Z，表示北京时间2021年08月02日14:15:46。