- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- FAQs
- Contact Us
- Glossary
- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- FAQs
- Contact Us
- Glossary
Resource Type
Resource type indicates that resources with the same characteristics in the same cloud service are of the same type. The resource type names are specified in the six-segment resource format. For example, computing instances and storage instances are entity resources. Roles and policies are management resources.
Resource types are represented using resource identifiers in Config. For more information, see Supported Resource Types.
Associated Resource
Associated resources are those that have a relationship with the current resource. For example:
1. The current resource is contained in the associated resource. Example: a CVM instance is contained in a VPC.
2. The current resource is related to the associated resource. Example: a CVM instance is related to a CVM security group.
3. The current resource attaches to the associated resource. Example: a CVM instance is attached to an EIP.
4. The current resource contains the associated resource. Example: a VPC contains a NAT gateway.
Resource timeline
Resource timeline refers to the complete lifecycle data of the resource, including the configuration, configuration changes, operations on the resource (addition, deletion, and edition), and results of resource compliance evaluation. The specific configuration information of each node is defined and displayed through a configuration item (ConfigurationItem). For more information, see Viewing Resource Details.
Configuration Item
Configuration item (ConfigurationItem) is the collection of various attributes of a resource at a certain point in time and is composed of the basic information (Metadata), resource attributes (Attribute), associated resources (Relationship), and detailed configuration information (Configuration). For more information, see Viewing Resource Details.
Rule
Rule refers to a rule function used to evaluate whether the resource configuration is compliant. Config uses functions to carry rule codes. Currently, Config supports only managed rules, that is, rule templates predefined by Config. When you create a new rule, you can directly select a managed rule in the Config console. For more information, see Rules.
Managed Rule
Managed rules are predefined in Config and can be directly selected in the Config console when users are creating a new rule. For managed rules currently supported by the system, see Supported Managed Rules.
Compliance Evaluation Result
Compliance evaluation result refers to the result of compliance evaluation on resources related to the rule at a given point in time.
Conformance pack
Conformance pack is a collection of rules tailored to specific compliance evaluation scenarios. Config has provided a predefined conformance pack template. Users can also create custom conformance packs. For the conformance pack template currently supported by the system, see Supported Compliance Package Templates.
Yes
No
Was this page helpful?