Logging and monitoring

Log monitoring is not set up for unauthorized API calls

Description

Log Service is a real-time data logging service that supports collection, consumption, shipping, search, and analysis of logs. It was detected that log monitoring and alarm are not set up for unauthorized API calls. Monitoring unauthorized API calls will aid in the detection of application errors and may reduce the time required to detect malicious activity.
  • Recommended Mitigation

    It is recommended to set up an alarm in the central project, that will alert on unauthorized API calls. The suggested query is written in this alert's query. For information about alert configuring: <a href="https://www.alibabacloud.com/help/en/log-service/latest/configure-an-alert-in-log-service" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/en/log-service/latest/configure-an-alert-in-log-service</a>