支援終止通知：2027 年 6 月 30 日， AWS 將終止對 AWS re：Post Private 的支援。2027 年 6 月 30 日之後，您將無法再存取 re：Post Private 主控台或 re：Post Private 資源。如需詳細資訊，請參閱 [AWS re：Post 私有終止支援](https://docs.aws.amazon.com/repostprivate/latest/userguide/repost-private-end-of-support.html)。
本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
# 使用 記錄 AWS re：Post Private API 呼叫 AWS CloudTrail
AWS re：Post Private 已與 整合 AWS CloudTrail，此服務可提供使用者、角色或 re：Post Private 中 AWS 服務所採取動作的記錄。CloudTrail 會將 re：Post Private 的所有 API 呼叫擷取為事件。擷取的呼叫包括來自 re：Post Private 主控台的呼叫，以及對 re：Post Private API 操作的程式碼呼叫。如果您建立線索，則可以將 CloudTrail 事件持續交付至 Amazon S3 儲存貯體，包括 re：Post Private 的事件。即使您未設定追蹤，依然可以透過 CloudTrail 主控台中的**事件歷史記錄**檢視最新事件。您可以使用 CloudTrail 所收集的資訊，判斷對 re：Post Private 提出的請求、提出請求的 IP 地址、提出請求的人員、提出請求的時間，以及其他詳細資訊。
若要進一步了解 CloudTrail，請參閱[「AWS CloudTrail 使用者指南」](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)。
## re：Post CloudTrail 中的私有資訊
建立帳戶 AWS 帳戶 時，您的 上會啟用 CloudTrail。當 re：Post Private 中發生活動時，該活動會與**事件歷史記錄**中的其他 AWS 服務事件一起記錄在 CloudTrail 事件中。您可以在 中檢視、搜尋和下載最近的事件 AWS 帳戶。如需詳細資訊，請參閱[使用 CloudTrail 事件歷史記錄](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html)。
若要持續記錄 中的事件 AWS 帳戶，包括 re：Post Private 的事件，請建立追蹤。*線索*能讓 CloudTrail 將日誌檔案交付至 Amazon S3 儲存貯體。依預設，當您在主控台中建立追蹤時，該追蹤會套用至所有的 AWS 區域。線索會記錄 AWS 分割區中所有區域的事件，並將日誌檔案傳送到您指定的 Amazon S3 儲存貯體。此外，您可以設定其他 AWS 服務，以進一步分析和處理 CloudTrail 日誌中收集的事件資料。如需詳細資訊，請參閱下列內容：
+ [建立 AWS 帳戶的追蹤](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html)
+ [CloudTrail 支援的服務和整合](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-aws-service-specific-topics.html)
+ [設定 CloudTrail 的 Amazon SNS 通知](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/configure-sns-notifications-for-cloudtrail.html)
+ [接收多個區域的 CloudTrail 日誌檔案](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/receive-cloudtrail-log-files-from-multiple-regions.html)及[接收多個帳戶的 CloudTrail 日誌檔案](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html)
CloudTrail 會記錄所有 re：Post Private 動作，並記錄在 [AWS re：Post Private API 參考](https://docs.aws.amazon.com/repostprivate/latest/APIReference/Welcome.html)中。re：Post Private 支援將下列動作記錄為 CloudTrail 日誌檔案中的事件：
+ [CreateSpace](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_CreateSpace.html)
+ [DeleteSpace](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_DeleteSpace.html)
+ [DeregisterAdmin](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_DeregisterAdmin.html)
+ [GetSpace](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_GetSpace.html)
+ [ListSpaces](https://docs.aws.amazon.com/repostprivate/latest/APIReference/APIListSpaces.html)
+ [ListTagsForResource](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_ListTagsForResource.html)
+ [RegisterAdmin](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_RegisterAdmin.html)
+ [SendInvites](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_SendInvites.html)
+ [TagResource](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_TagResource.html)
+ [UntagResource](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_UntagResource.html)
+ [UpdateSpace](https://docs.aws.amazon.com/repostprivate/latest/APIReference/API_UpdateSpace.html)
re：Post Private 支援將下列 支援 動作記錄為 CloudTrail 日誌檔案中的事件：
+ [CreateCase](https://docs.aws.amazon.com/awssupport/latest/APIReference/API_CreateCase.html)
+ [AddCommunicationToCase](https://docs.aws.amazon.com/awssupport/latest/APIReference/API_AddCommunicationToCase.html)
+ [ResolveCase](https://docs.aws.amazon.com/awssupport/latest/APIReference/API_ResolveCase.html)
每一筆事件或日誌專案都會包含產生請求者的資訊。身分資訊可協助您判斷下列事項：
+ 是否使用根或 AWS Identity and Access Management (IAM) 使用者登入資料提出請求。
+ 提出該請求時，是否使用了特定角色或聯合身分使用者的暫時安全憑證。
+ 請求是否由其他 AWS 服務提出。
如需詳細資訊，請參閱 [CloudTrail userIdentity 元素](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.html)。
## 了解 re：Post 私有日誌檔案項目
追蹤是一種組態，能讓事件以日誌檔案的形式交付到您指定的 Amazon S3 儲存貯體。CloudTrail 日誌檔案包含一或多個日誌專案。一個事件為任何來源提出的單一請求，並包含請求動作、請求的日期和時間、請求參數等資訊。CloudTrail 日誌檔並非依公有 API 呼叫的堆疊追蹤排序，因此不會以任何特定順序出現。
以下範例顯示的是展示 `CreateSpace` 動作的 CloudTrail 日誌項目。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAQM47QIR7WLEXAMPLE:user",
"arn": "arn:aws:sts::123456789012:assumed-role/User/user",
"accountId": "123456789012",
"accessKeyId": "EXAMPLE_KEY_ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAQM47QIR7WLEXAMPLE",
"arn": "arn:aws:iam::123456789012:role/User",
"accountId": "123456789012",
"userName": "User"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2023-11-06T19:24:39Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2023-11-06T21:37:44Z",
"eventSource": "repostspace.amazonaws.com",
"eventName": "CreateSpace",
"awsRegion": "us-west-2",
"sourceIPAddress": "205.251.233.176",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36",
"requestParameters": {
"spaceName": "Test space name",
"spaceSubdomain": "customsubdomain",
"tagSet": {},
"tier": "2000",
"roleArn": "",
"spaceDescription": "Test space description"
},
"responseElements": {
"spaceId": "SPLPWvQmv9SIWYF30EXAMPLE",
"Access-Control-Expose-Headers": "x-amzn-errortype, x-amzn-requestid, x-amzn-errormessage, x-amzn-trace-id, x-amz-apigw-id, date"
},
"requestID": "71d815e0-6632-4ec9-9fac-92af3e4a86dc",
"eventID": "30a6c3da-ce2e-4931-ba5d-b3cc7cf16ec8",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management"
}
```
以下範例顯示的是展示 `RegisterAdmin` 動作的 CloudTrail 日誌項目。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAQM47QIR7WLEXAMPLE:user",
"arn": "arn:aws:sts::123456789012:assumed-role/User/user",
"accountId": "123456789012",
"accessKeyId": "EXAMPLE_KEY_ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAQM47QIR7WLEXAMPLE",
"arn": "arn:aws:iam::123456789012:role/User",
"accountId": "123456789012",
"userName": "User"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2023-11-07T21:17:19Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2023-11-07T21:24:23Z",
"eventSource": "repostspace.amazonaws.com",
"eventName": "RegisterAdmin",
"awsRegion": "us-west-2",
"sourceIPAddress": "205.251.233.183",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36",
"requestParameters": {
"adminId": "08612310-a0f1-7063-3e54-fb2960444dd1",
"spaceId": "SPlYNZE-ylQEmAXpmEXAMPLE"
},
"responseElements": {
"Access-Control-Expose-Headers": "x-amzn-errortype, x-amzn-requestid, x-amzn-errormessage, x-amzn-trace-id, x-amz-apigw-id, date"
},
"requestID": "9939ebbe-8599-4f9a-827b-4995e3006001",
"eventID": "e1873b18-f80c-4934-9ff2-bf5b35c78031",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management"
}
```
以下範例顯示的是展示 `ListSpaces` 動作的 CloudTrail 日誌項目。
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAQM47QIR7WLEXAMPLE:user",
"arn": "arn:aws:sts::123456789012:assumed-role/User/user",
"accountId": "123456789012",
"accessKeyId": "EXAMPLE_KEY_ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAQM47QIR7WLEXAMPLE",
"arn": "arn:aws:iam::123456789012:role/User",
"accountId": "123456789012",
"userName": "User"
},
"webIdFederationData": {},
"attributes": {
"creationDate": "2023-11-09T22:28:23Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2023-11-09T22:38:34Z",
"eventSource": "repostspace.amazonaws.com",
"eventName": "ListSpaces",
"awsRegion": "us-west-2",
"sourceIPAddress": "205.251.233.176",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36",
"requestParameters": null,
"responseElements": null,
"requestID": "95be587b-c04f-4eb0-9269-12fee33ae2e3",
"eventID": "9777da32-545f-44c4-af0b-1d9109b8cbc3",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management"
}
```
以下範例顯示的是展示 `ResolveCase` 動作的 CloudTrail 日誌項目。您可以使用此日誌項目中的 `sourceIdentity`元素來識別解決案例的使用者。
```
{
"eventVersion": "1.09",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAQM47QIR76DQZ7N5WX:create-support-case-Uk1iHNTWQEOLmR2BR1FDJQ",
"arn": "arn:aws:sts::123456789012:assumed-role/AWSRepostSpaceRole/create-support-case-Uk1iHNTWQEOLmR2BR1FDJQ",
"accountId": "123456789012",
"accessKeyId": "EXAMPLE_KEY_ID",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAQM47QIR76DQZ7N5WX",
"arn": "arn:aws:iam::123456789012:role/AWSRepostSpaceRole",
"accountId": "123456789012",
"userName": "AWSRepostSpaceRole"
},
"attributes": {
"creationDate": "2023-11-17T21:46:42Z",
"mfaAuthenticated": "false"
},
"sourceIdentity": "28e17330-10f1-705d-7cba-3a62a6b10e2e"
}
},
"eventTime": "2023-11-17T21:46:44Z",
"eventSource": "support.amazonaws.com",
"eventName": "ResolveCase",
"awsRegion": "us-west-2",
"sourceIPAddress": "54.68.27.29",
"userAgent": "aws-sdk-nodejs/2.1363.0 linux/v16.20.2 exec-env/AWS_ECS_FARGATE promise",
"requestParameters": {
"caseId": "case-123456789012-muen-2023-75d2c35481b96357"
},
"responseElements": {
"initialCaseStatus": "unassigned",
"finalCaseStatus": "resolved"
},
"requestID": "594b91c6-df1c-47e4-a834-d67d67f34b9d",
"eventID": "7fc9cbe4-c8d5-4d61-a016-e076de272fff",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111111111111",
"eventCategory": "Management",
"tlsDetails": {
"clientProvidedHostHeader": "support.us-west-2.amazonaws.com"
}
}
```