Query: 2.16 Ensure a log monitoring and alerts are set up for unauthorized API calls

Description

Real-time monitoring of API calls can be achieved by directing ActionTrail Logs to LogService and establishing corresponding query and alarms. It is recommended that a query and alarm be established for unauthorized API calls.

Query

Tables used in this query:

• alicloud_action_trail
• alicloud_sls_alert

Controls using this query:

• 2.16 Ensure a log monitoring and alerts are set up for unauthorized API calls

SQL