ACS-Actiontrail-EnableActionTrail.yml

FormatVersion: OOS-2019-06-01
Description:
  en: Enable action trail
  zh-cn: 开启跟踪
  name-en: ACS-Actiontrail-EnableActionTrail
  name-zh-cn: 开启操作审计跟踪
  categories:
    - security
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
      zh-cn: 地域ID
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  trailName:
    Label:
      en: TrailName
      zh-cn: 创建的跟踪名称
    Type: String
  ossBucketName:
    Label:
      en: OSSBucketName
      zh-cn: 跟踪写入的 OSS bucket 名称
    Type: String
    Default: ''
  roleName:
    Label:
      en: RoleName
      zh-cn: 用户允许ActionTrail服务扮演的RAM角色名称
    Type: String
    Default: aliyunactiontraildefaultrole
  eventRW:
    Label:
      en: EventRW
      zh-cn: 投递事件的读写类型
    Type: String
    Default: All
    AllowedValues:
      - All
      - Write
      - Read
  trailRegion:
    Description:
      en: Example：All、cn-hangzhou
      zh-cn: 例如：All、cn-hangzhou
    Label:
      en: TrailRegion
      zh-cn: 跟踪的地域
    Type: String
    Default: All
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
      zh-cn: OOS扮演的RAM角色
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: createTrail
    Action: 'ACS::ExecuteAPI'
    Description:
      en: Create trail
      zh-cn: 创建跟踪
    Properties:
      Service: Actiontrail
      API: CreateTrail
      Parameters:
        RegionId: '{{ regionId }}'
        Name: '{{ trailName }}'
        OssBucketName: '{{ ossBucketName }}'
        RoleName: '{{ roleName }}'
        EventRW: '{{ eventRW }}'
        TrailRegion: '{{ trailRegion }}'
    Outputs:
      trail:
        Type: Json
        ValueSelector: .
Outputs:
  trails:
    Type: Json
    Value: '{{ createTrail.trail }}'
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - trailName
          - ossBucketName
          - roleName
          - eventRW
          - trailRegion
          - regionId
        Label:
          default:
            zh-cn: 配置参数
            en: Configure Parameters
      - Parameters:
          - OOSAssumeRole
        Label:
          default:
            zh-cn: 高级选项
            en: Control Options