检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Periodic security audit can be automatically implemented through APIs. This section describes how to perform security audit on the permissions of IAM users by calling APIs. You can also implement periodic security audit using programmatic methods.
Audit and Monitoring Cloud Trace Service (CTS) records operations performed on cloud resources in your account. The operation logs can be used to perform security analysis, track resource changes, perform compliance audits, and locate faults.
Security Shared Responsibilities Authentication and Access Control Data Protection Resilience Audit and Monitoring Certificates
including: Account administrator (with full permissions for all services, including IAM) IAM users added to the admin group (with full permissions for all services, including IAM) IAM users assigned the Security Administrator role (with permissions to access IAM) If you want to view, audit
Enabling CTS Cloud Trace Service (CTS) is a log audit service provided by Huawei Cloud. It collects, stores, and queries records of operations on IAM, facilitating security analysis, compliance audit, resource tracking, and fault locating.
If you want to view, audit, and track the records of key operations performed on IAM, enable Cloud Trace Service (CTS). For details, see Key IAM Operations Supported by CTS.
All regions Advantages of Identity Federation Access Through Web SSO Access Through API Calling OBS 2.0 Supported Auditing IAM operations are recorded by Cloud Trace Service (CTS), which is a log audit service provided by Huawei Cloud.