Function Overview¶
Table 1 lists common functions of Config.
To better understand Config functions, you can learn basic concepts first.
Category | Function | Description |
|---|---|---|
Resource list | Querying all resources | You can view all resource information, including the resource name, region, service, resource type, and enterprise project, from the current account. |
Querying details about a resource | You can query resource details, such as the resource name, creation time, and specifications. | |
Filtering resources | You can set a filter criterion (resource name, resource ID, tag, or enterprise project) to quickly find out specific resources. | |
Exporting resource information | You can export the information about required resources in an EXCEL file. | |
Viewing resource compliance data | You can view compliance data of a resource. | |
Viewing relationships of a resource | You can view relationships of a resource. | |
Viewing change records of a resource | You can view change records of a resource. | |
Resource compliance | Adding a rule | You can add a rule to evaluate resource compliance. To add a rule, you need to set a policy and other related parameters. |
Evaluating resources | You can click Evaluate in the Operation column for a rule to evaluate the resources that are within the monitoring scope of the rule. | |
Disabling a rule | You click Disable in the Operation column to disable a rule. | |
Enabling a rule | If you want to use a disabled rule, you can enable it. | |
Modifying a rule | If a rule does not meet your needs, you can change its configurations as needed. | |
Deleting a rule | You can delete a rule which is no longer needed. | |
Noncompliant resources | You can view and export noncompliant resources. | |
Resource recorder | Enabling the resource recorder | You can track resource changes only after the resource recorder is enabled. |
Configuring the resource recorder | You can set the monitoring scope, select an SMN topic, and configure the data storage path (OBS bucket). Then you need to grant permissions to the resource recorder for using SMN to send notifications and storing resource snapshots in the OBS bucket. | |
Modifying the resource recorder | You can modify resource recorder configurations, such as the monitoring scope, resource dump, SMN topic, and permissions. | |
Disabling the resource recorder | You can disable the resource recorder at any time. | |
Advanced Queries | Running an advanced query | You can use ResourceQL to query current configurations of your resources. |
Creating a query | You can add custom queries, so that you can directly run them later. | |
Viewing a query | You can view the name, description, and SQL statement of a query. | |
Modifying a query | If a custom query cannot meet your requirements, you can modify its name, description, and query statement. | |
Deleting a query | If a custom query is no longer needed, you can delete it. | |
CTS | Supported CTS operations | CTS records operations on Config for later query, audit, and backtrack. |
Viewing tracing logs | You can view or export Config operation records of the last seven days on CTS console. | |
IAM | Managing user permissions | You can assign users system-defined or custom policies to decide which operations they can perform on Config. |