2. 首页 > IT综合教程 > 正文

IT教程FG311-云计算服务管理

教程整理：风哥教程  |  更新时间：2026-01-27  |  教程分类：IT综合教程  |  文档学习：15

1. 云计算服务概述

云计算服务管理涵盖IaaS、PaaS、SaaS三层服务的管理和运维。更多学习教程www.fgedu.net.cn

# 查看云服务配置
# aws configure list
Name Value Type Location
—- —– —- ——–
profile None None
access_key ****************ABCD env AWS_ACCESS_KEY_ID
secret_key ****************WXYZ env AWS_SECRET_ACCESS_KEY
region cn-north-1 env AWS_DEFAULT_REGION

# 查看云账户信息
# aws sts get-caller-identity
{
“UserId”: “AIDACKCEVSQ6C2EXAMPLE”,
“Account”: “123456789012”,
“Arn”: “arn:aws:iam::123456789012:user/fgedu-admin”
}

# 查看可用区域
# aws ec2 describe-regions –query ‘Regions[].RegionName’
[
“ap-northeast-1”,
“ap-northeast-2”,
“ap-southeast-1”,
“ap-southeast-2”,
“cn-north-1”,
“cn-northwest-1”,
“eu-west-1”,
“us-east-1”,
“us-west-1”,
“us-west-2”
]

# 查看服务配额
# aws service-quotas list-service-quotas –service-code ec2
{
“Quotas”: [
{
“ServiceCode”: “ec2”,
“ServiceName”: “Amazon Elastic Compute Cloud (Amazon EC2)”,
“QuotaArn”: “arn:aws:servicequotas:cn-north-1:123456789012:ec2/L-12345678”,
“QuotaCode”: “L-12345678”,
“QuotaName”: “Running On-Demand Standard instances”,
“Value”: 64.0,
“Unit”: “None”,
“Adjustable”: true,
“GlobalQuota”: false
}
]
}

生产环境风哥建议：使用IAM角色和策略进行权限管理，开启多因素认证(MFA)，定期审计账户权限，确保最小权限原则。

2. IaaS服务管理

IaaS（基础设施即服务）管理包括计算、存储、网络等基础资源的管理。学习交流加群风哥微信: itpux-com

# 查看EC2实例列表
# aws ec2 describe-instances –query ‘Reservations[].Instances[].{ID:InstanceId,Type:InstanceType,State:State.Name,IP:PrivateIpAddress,Name:Tags[?Key==`Name`].Value|[0]}’
[
{
“ID”: “i-abc123def456”,
“Type”: “m5.2xlarge”,
“State”: “running”,
“IP”: “10.0.1.100”,
“Name”: “fgedu-web-prod-01”
},
{
“ID”: “i-def456ghi789”,
“Type”: “r5.4xlarge”,
“State”: “running”,
“IP”: “10.0.1.101”,
“Name”: “fgedu-db-prod-01”
}
]

# 查看实例详情
# aws ec2 describe-instances –instance-ids i-abc123def456
{
“Reservations”: [
{
“ReservationId”: “r-1234567890abcdef0”,
“OwnerId”: “123456789012”,
“Groups”: [],
“Instances”: [
{
“InstanceId”: “i-abc123def456”,
“InstanceType”: “m5.2xlarge”,
“LaunchTime”: “2026-01-15T10:00:00.000Z”,
“State”: {
“Code”: 16,
“Name”: “running”
},
“PrivateIpAddress”: “10.0.1.100”,
“PublicIpAddress”: “52.83.123.45”,
“ImageId”: “ami-0123456789abcdef”,
“VpcId”: “vpc-abc123”,
“SubnetId”: “subnet-def456”,
“SecurityGroups”: [
{
“GroupId”: “sg-12345678”,
“GroupName”: “fgedu-web-sg”
}
],
“Tags”: [
{
“Key”: “Name”,
“Value”: “fgedu-web-prod-01”
},
{
“Key”: “Environment”,
“Value”: “production”
}
]
}
]
}
]
}

# 启动新实例
# aws ec2 run-instances \
–image-id ami-0123456789abcdef \
–count 1 \
–instance-type m5.2xlarge \
–key-name fgedu-key \
–security-group-ids sg-12345678 \
–subnet-id subnet-def456 \
–tag-specifications ‘ResourceType=instance,Tags=[{Key=Name,Value=fgedu-web-prod-02},{Key=Environment,Value=production}]’
{
“Instances”: [
{
“InstanceId”: “i-ghi789jkl012”,
“InstanceType”: “m5.2xlarge”,
“State”: {
“Code”: 0,
“Name”: “pending”
},
“PrivateIpAddress”: “10.0.1.102”
}
]
}

# 停止实例
# aws ec2 stop-instances –instance-ids i-abc123def456
{
“StoppingInstances”: [
{
“InstanceId”: “i-abc123def456”,
“CurrentState”: {
“Code”: 64,
“Name”: “stopping”
},
“PreviousState”: {
“Code”: 16,
“Name”: “running”
}
}
]
}

# 启动实例
# aws ec2 start-instances –instance-ids i-abc123def456
{
“StartingInstances”: [
{
“InstanceId”: “i-abc123def456”,
“CurrentState”: {
“Code”: 0,
“Name”: “pending”
},
“PreviousState”: {
“Code”: 80,
“Name”: “stopped”
}
}
]
}

# 查看存储卷
# aws ec2 describe-volumes –query ‘Volumes[].{ID:VolumeId,Size:Size,Type:VolumeType,State:State,InstanceId:Attachments[0].InstanceId}’
[
{
“ID”: “vol-abc123def456”,
“Size”: 100,
“Type”: “gp3”,
“State”: “in-use”,
“InstanceId”: “i-abc123def456”
},
{
“ID”: “vol-def456ghi789”,
“Size”: 500,
“Type”: “io2”,
“State”: “in-use”,
“InstanceId”: “i-def456ghi789”
}
]

# 创建新存储卷
# aws ec2 create-volume \
–size 200 \
–volume-type gp3 \
–availability-zone cn-north-1a \
–tag-specifications ‘ResourceType=volume,Tags=[{Key=Name,Value=fgedu-data-volume}]’
{
“VolumeId”: “vol-ghi789jkl012”,
“Size”: 200,
“VolumeType”: “gp3”,
“State”: “creating”,
“AvailabilityZone”: “cn-north-1a”,
“CreateTime”: “2026-04-03T10:00:00.000Z”
}

# 挂载存储卷
# aws ec2 attach-volume –volume-id vol-ghi789jkl012 –instance-id i-abc123def456 –device /dev/sdf
{
“VolumeId”: “vol-ghi789jkl012”,
“InstanceId”: “i-abc123def456”,
“Device”: “/dev/sdf”,
“State”: “attaching”
}

3. PaaS服务管理

PaaS（平台即服务）管理包括数据库服务、容器服务、消息队列等平台级服务的管理。

# 查看RDS数据库实例
# aws rds describe-db-instances –query ‘DBInstances[].{ID:DBInstanceIdentifier,Engine:Engine,Status:DBInstanceStatus,Class:DBInstanceClass,Storage:AllocatedStorage}’
[
{
“ID”: “fgedu-mysql-prod”,
“Engine”: “mysql”,
“Status”: “available”,
“Class”: “db.r5.4xlarge”,
“Storage”: 500
},
{
“ID”: “fgedu-postgres-prod”,
“Engine”: “postgres”,
“Status”: “available”,
“Class”: “db.r5.2xlarge”,
“Storage”: 300
}
]

# 查看数据库详情
# aws rds describe-db-instances –db-instance-identifier fgedu-mysql-prod
{
“DBInstances”: [
{
“DBInstanceIdentifier”: “fgedu-mysql-prod”,
“DBInstanceClass”: “db.r5.4xlarge”,
“Engine”: “mysql”,
“EngineVersion”: “8.0.35”,
“DBInstanceStatus”: “available”,
“AllocatedStorage”: 500,
“StorageType”: “gp3”,
“MasterUsername”: “admin”,
“Endpoint”: {
“Address”: “fgedu-mysql-prod.cluster-abc123.cn-north-1.rds.amazonaws.com.cn”,
“Port”: 3306
},
“MultiAZ”: true,
“DBSubnetGroup”: {
“DBSubnetGroupName”: “fgedu-db-subnet”
},
“VpcSecurityGroups”: [
{
“VpcSecurityGroupId”: “sg-12345678”,
“Status”: “active”
}
],
“BackupRetentionPeriod”: 7,
“PreferredBackupWindow”: “03:00-04:00”,
“PreferredMaintenanceWindow”: “sun:04:00-sun:05:00”
}
]
}

# 创建数据库快照
# aws rds create-db-snapshot \
–db-instance-identifier fgedu-mysql-prod \
–db-snapshot-identifier fgedu-mysql-prod-snapshot-20260403
{
“DBSnapshot”: {
“DBSnapshotIdentifier”: “fgedu-mysql-prod-snapshot-20260403”,
“DBInstanceIdentifier”: “fgedu-mysql-prod”,
“SnapshotCreateTime”: “2026-04-03T10:00:00.000Z”,
“Engine”: “mysql”,
“AllocatedStorage”: 500,
“Status”: “creating”,
“PercentProgress”: 0
}
}

# 查看EKS集群
# aws eks list-clusters
{
“clusters”: [
“fgedu-prod-cluster”,
“fgedu-dev-cluster”
]
}

# 查看EKS集群详情
# aws eks describe-cluster –name fgedu-prod-cluster
{
“cluster”: {
“name”: “fgedu-prod-cluster”,
“arn”: “arn:aws:eks:cn-north-1:123456789012:cluster/fgedu-prod-cluster”,
“status”: “ACTIVE”,
“version”: “1.28”,
“endpoint”: “https://ABCDEF123456.gr7.cn-north-1.eks.amazonaws.com.cn”,
“roleArn”: “arn:aws:iam::123456789012:role/fgedu-eks-role”,
“resourcesVpcConfig”: {
“subnetIds”: [
“subnet-abc123”,
“subnet-def456”
],
“securityGroupIds”: [
“sg-12345678”
],
“vpcId”: “vpc-abc123”
},
“kubernetesNetworkConfig”: {
“serviceIpv4Cidr”: “172.20.0.0/16”
}
}
}

4. SaaS服务管理

SaaS（软件即服务）管理包括各类云上软件服务的配置和使用管理。学习交流加群风哥QQ113257174

# 查看S3存储桶
# aws s3 ls
2026-01-15 10:00:00 fgedu-backup-bucket
2026-02-01 10:00:00 fgedu-static-assets
2026-03-01 10:00:00 fgedu-logs-bucket

# 查看存储桶详情
# aws s3api get-bucket-versioning –bucket fgedu-backup-bucket
{
“Status”: “Enabled”
}

# 查看存储桶加密配置
# aws s3api get-bucket-encryption –bucket fgedu-backup-bucket
{
“ServerSideEncryptionConfiguration”: {
“Rules”: [
{
“ApplyServerSideEncryptionByDefault”: {
“SSEAlgorithm”: “aws:kms”,
“KMSMasterKeyID”: “arn:aws:kms:cn-north-1:123456789012:key/abc123-def456”
}
}
]
}
}

# 同步本地文件到S3
# aws s3 sync /backup/data/ s3://fgedu-backup-bucket/data/
upload: /backup/data/file1.dat to s3://fgedu-backup-bucket/data/file1.dat
upload: /backup/data/file2.dat to s3://fgedu-backup-bucket/data/file2.dat
upload: /backup/data/dir1/ to s3://fgedu-backup-bucket/data/dir1/

# 查看Lambda函数
# aws lambda list-functions –query ‘Functions[].{Name:FunctionName,Runtime:Runtime,Memory:MemorySize,Timeout:Timeout}’
[
{
“Name”: “fgedu-data-processor”,
“Runtime”: “python3.11”,
“Memory”: 512,
“Timeout”: 300
},
{
“Name”: “fgedu-api-handler”,
“Runtime”: “nodejs18.x”,
“Memory”: 256,
“Timeout”: 30
}
]

# 查看API Gateway
# aws apigateway get-rest-apis
{
“items”: [
{
“id”: “abc123def4”,
“name”: “fgedu-api-prod”,
“description”: “Production API Gateway”,
“createdDate”: “2026-01-15T10:00:00Z”
}
]
}

# 查看CloudFront分发
# aws cloudfront list-distributions –query ‘DistributionList.Items[].{ID:Id,Domain:DomainName,Enabled:Enabled,Origins:Origins.Items[].DomainName}’
[
{
“ID”: “E1ABCD2EFGHIJ3”,
“Domain”: “d123456789abcd.cloudfront.net”,
“Enabled”: true,
“Origins”: [
“fgedu-static-assets.s3.cn-north-1.amazonaws.com.cn”
]
}
]

5. 资源配额管理

资源配额管理确保云资源合理分配和使用。更多学习教程公众号风哥教程itpux_com

# 查看服务配额
# aws service-quotas list-service-quotas –service-code ec2 –region cn-north-1
{
“Quotas”: [
{
“ServiceCode”: “ec2”,
“ServiceName”: “Amazon Elastic Compute Cloud (Amazon EC2)”,
“QuotaCode”: “L-12345678”,
“QuotaName”: “Running On-Demand Standard instances”,
“Value”: 64.0,
“Unit”: “None”,
“Adjustable”: true
},
{
“ServiceCode”: “ec2”,
“QuotaName”: “Total number of EBS snapshots”,
“Value”: 100.0,
“Unit”: “None”,
“Adjustable”: true
},
{
“ServiceCode”: “ec2”,
“QuotaName”: “Total size of all EBS snapshots”,
“Value”: 10000.0,
“Unit”: “GB”,
“Adjustable”: true
}
]
}

# 申请增加配额
# aws service-quotas request-service-quota-increase \
–service-code ec2 \
–quota-code L-12345678 \
–desired-value 128
{
“RequestedQuota”: {
“Id”: “abc123-def456”,
“ServiceCode”: “ec2”,
“ServiceName”: “Amazon Elastic Compute Cloud (Amazon EC2)”,
“QuotaCode”: “L-12345678”,
“QuotaName”: “Running On-Demand Standard instances”,
“DesiredValue”: 128.0,
“Status”: “CASE_OPENED”,
“Created”: “2026-04-03T10:00:00.000Z”
}
}

# 查看资源使用情况
# aws ce get-cost-and-usage \
–time-period Start=2026-03-01,End=2026-04-01 \
–granularity MONTHLY \
–metrics BlendedCost \
–group-by Type=DIMENSION,Key=SERVICE
{
“ResultsByTime”: [
{
“TimePeriod”: {
“Start”: “2026-03-01”,
“End”: “2026-04-01”
},
“Total”: {},
“Groups”: [
{
“Keys”: [
“Amazon Elastic Compute Cloud – Compute”
],
“Metrics”: {
“BlendedCost”: {
“Amount”: “1234.56”,
“Unit”: “USD”
}
}
},
{
“Keys”: [
“Amazon Relational Database Service”
],
“Metrics”: {
“BlendedCost”: {
“Amount”: “567.89”,
“Unit”: “USD”
}
}
},
{
“Keys”: [
“Amazon Simple Storage Service”
],
“Metrics”: {
“BlendedCost”: {
“Amount”: “123.45”,
“Unit”: “USD”
}
}
}
]
}
]
}

6. 成本优化策略

成本优化是云服务管理的重要环节，需要持续关注和优化。

# 查看预留实例
# aws ec2 describe-reserved-instances –query ‘ReservedInstances[].{ID:ReservedInstancesId,Type:InstanceType,State:State,Start:Start,End:End}’
[
{
“ID”: “abc123-def456-ghi789”,
“Type”: “m5.2xlarge”,
“State”: “active”,
“Start”: “2026-01-01T00:00:00.000Z”,
“End”: “2027-01-01T00:00:00.000Z”
}
]

# 查看节省计划
# aws savingsplans describe-savings-plans
{
“savingsPlans”: [
{
“savingsPlanId”: “sp-abc123-def456”,
“savingsPlanType”: “Compute”,
“paymentOption”: “All Upfront”,
“state”: “active”,
“commitment”: “1000.0”,
“currency”: “CNY”,
“start”: “2026-01-01T00:00:00Z”,
“end”: “2027-01-01T00:00:00Z”
}
]
}

# 查看成本优化建议
# aws ce get-rightsizing-recommendation –service AmazonEC2
{
“Summary”: {
“TotalRecommendationCount”: 5,
“EstimatedTotalMonthlySavingsAmount”: “234.56”
},
“RightsizingRecommendations”: [
{
“AccountId”: “123456789012”,
“CurrentInstance”: {
“InstanceId”: “i-abc123def456”,
“InstanceType”: “m5.2xlarge”,
“MonthlyCost”: “156.78”
},
“RightsizingType”: “Modify”,
“TargetInstance”: {
“InstanceType”: “m5.xlarge”,
“MonthlyCost”: “78.39”
},
“EstimatedMonthlySavings”: “78.39”
}
]
}

# 设置预算告警
# aws budgets create-budget \
–account-id 123456789012 \
–budget ‘{
“BudgetName”: “fgedu-monthly-budget”,
“BudgetLimit”: {
“Amount”: 10000,
“Unit”: “CNY”
},
“TimeUnit”: “MONTHLY”,
“BudgetType”: “COST”,
“CostFilters”: {
“Service”: [“Amazon Elastic Compute Cloud – Compute”, “Amazon Relational Database Service”]
}
}’

# 创建预算通知
# aws budgets create-notification \
–account-id 123456789012 \
–budget-name fgedu-monthly-budget \
–notification ‘{
“NotificationType”: “ACTUAL”,
“ComparisonOperator”: “GREATER_THAN”,
“Threshold”: 80,
“ThresholdType”: “PERCENTAGE”
}’ \
–subscriber ‘{
“SubscriptionType”: “EMAIL”,
“Address”: “cloud-admin@fgedu.net.cn”
}’

风哥风哥提示：使用预留实例和节省计划可以大幅降低云服务成本，建议对稳定运行的工作负载使用预留实例，对灵活的工作负载使用节省计划。

7. 安全管理

云服务安全管理是保障业务安全的关键环节。

# 查看安全组配置
# aws ec2 describe-security-groups –group-ids sg-12345678
{
“SecurityGroups”: [
{
“GroupId”: “sg-12345678”,
“GroupName”: “fgedu-web-sg”,
“Description”: “Security group for web servers”,
“VpcId”: “vpc-abc123”,
“IpPermissions”: [
{
“IpProtocol”: “tcp”,
“FromPort”: 80,
“ToPort”: 80,
“IpRanges”: [
{
“CidrIp”: “0.0.0.0/0”,
“Description”: “HTTP access”
}
]
},
{
“IpProtocol”: “tcp”,
“FromPort”: 443,
“ToPort”: 443,
“IpRanges”: [
{
“CidrIp”: “0.0.0.0/0”,
“Description”: “HTTPS access”
}
]
},
{
“IpProtocol”: “tcp”,
“FromPort”: 22,
“ToPort”: 22,
“IpRanges”: [
{
“CidrIp”: “192.168.1.0/24”,
“Description”: “SSH from internal network”
}
]
}
]
}
]
}

# 添加安全组规则
# aws ec2 authorize-security-group-ingress \
–group-id sg-12345678 \
–protocol tcp \
–port 8080 \
–cidr 10.0.0.0/8
{
“Return”: true,
“SecurityGroupRules”: [
{
“GroupId”: “sg-12345678”,
“GroupRuleId”: “sgr-abc123def456”,
“IsEgress”: false,
“IpProtocol”: “tcp”,
“FromPort”: 8080,
“ToPort”: 8080,
“CidrIpv4”: “10.0.0.0/8”
}
]
}

# 查看IAM用户列表
# aws iam list-users –query ‘Users[].{UserName:UserName,UserId:UserId,CreateDate:CreateDate}’
[
{
“UserName”: “fgedu-admin”,
“UserId”: “AIDACKCEVSQ6C2EXAMPLE”,
“CreateDate”: “2026-01-15T10:00:00Z”
},
{
“UserName”: “fgedu-dev”,
“UserId”: “AIDACKCEVSQ6C3EXAMPLE”,
“CreateDate”: “2026-02-01T10:00:00Z”
}
]

# 查看用户权限
# aws iam list-attached-user-policies –user-name fgedu-admin
{
“AttachedPolicies”: [
{
“PolicyName”: “AdministratorAccess”,
“PolicyArn”: “arn:aws:iam::aws:policy/AdministratorAccess”
}
]
}

# 查看访问密钥
# aws iam list-access-keys –user-name fgedu-admin
{
“AccessKeyMetadata”: [
{
“AccessKeyId”: “AKIAIOSFODNN7EXAMPLE”,
“Status”: “Active”,
“UserName”: “fgedu-admin”,
“CreateDate”: “2026-01-15T10:00:00Z”
}
]
}

# 轮换访问密钥
# aws iam create-access-key –user-name fgedu-admin
{
“AccessKey”: {
“AccessKeyId”: “AKIAI44QH8DHBEXAMPLE”,
“SecretAccessKey”: “je7MtGbClwBF/2Zp9Utk/h3yCo8nvbEXAMPLEKEY”,
“Status”: “Active”,
“UserName”: “fgedu-admin”,
“CreateDate”: “2026-04-03T10:00:00Z”
}
}

8. 监控与告警

完善的监控告警体系是保障云服务稳定运行的基础。author:www.itpux.com

# 查看CloudWatch告警
# aws cloudwatch describe-alarms –query ‘MetricAlarms[].{Name:AlarmName,State:StateValue,Metric:MetricName}’
[
{
“Name”: “fgedu-web-cpu-high”,
“State”: “OK”,
“Metric”: “CPUUtilization”
},
{
“Name”: “fgedu-db-storage-low”,
“State”: “OK”,
“Metric”: “FreeStorageSpace”
}
]

# 创建CPU使用率告警
# aws cloudwatch put-metric-alarm \
–alarm-name fgedu-web-cpu-high \
–alarm-description “Alarm when CPU exceeds 80%” \
–metric-name CPUUtilization \
–namespace AWS/EC2 \
–statistic Average \
–period 300 \
–threshold 80 \
–comparison-operator GreaterThanThreshold \
–dimensions Name=InstanceId,Value=i-abc123def456 \
–evaluation-periods 2 \
–alarm-actions arn:aws:sns:cn-north-1:123456789012:fgedu-alerts

# 查看指标数据
# aws cloudwatch get-metric-statistics \
–namespace AWS/EC2 \
–metric-name CPUUtilization \
–dimensions Name=InstanceId,Value=i-abc123def456 \
–start-time 2026-04-02T00:00:00Z \
–end-time 2026-04-03T00:00:00Z \
–period 3600 \
–statistics Average
{
“Label”: “CPUUtilization”,
“Datapoints”: [
{
“Timestamp”: “2026-04-02T10:00:00Z”,
“Average”: 45.23,
“Unit”: “Percent”
},
{
“Timestamp”: “2026-04-02T11:00:00Z”,
“Average”: 52.67,
“Unit”: “Percent”
}
]
}

9. 灾备与高可用

灾备和高可用配置确保业务连续性。

# 查看多可用区配置
# aws rds describe-db-instances –db-instance-identifier fgedu-mysql-prod –query ‘DBInstances[].{MultiAZ:MultiAZ,AvailabilityZone:AvailabilityZone,ReadReplicaDBInstanceIdentifiers:ReadReplicaDBInstanceIdentifiers}’
[
{
“MultiAZ”: true,
“AvailabilityZone”: “cn-north-1a”,
“ReadReplicaDBInstanceIdentifiers”: [
“fgedu-mysql-replica-01”
]
}
]

# 创建只读副本
# aws rds create-db-instance-read-replica \
–db-instance-identifier fgedu-mysql-replica-02 \
–source-db-instance-identifier arn:aws:rds:cn-north-1:123456789012:db:fgedu-mysql-prod \
–availability-zone cn-north-1b
{
“DBInstance”: {
“DBInstanceIdentifier”: “fgedu-mysql-replica-02”,
“DBInstanceStatus”: “creating”,
“AvailabilityZone”: “cn-north-1b”,
“ReadReplicaSourceDBInstanceIdentifier”: “fgedu-mysql-prod”
}
}

# 配置自动故障转移
# aws rds modify-db-instance \
–db-instance-identifier fgedu-mysql-prod \
–multi-az \
–apply-immediately
{
“DBInstance”: {
“DBInstanceIdentifier”: “fgedu-mysql-prod”,
“MultiAZ”: true,
“DBInstanceStatus”: “modifying”
}
}

10. 服务治理与合规

服务治理和合规管理确保云服务符合企业规范和监管要求。

# 查看配置合规性
# aws configservice describe-compliance-by-config-rule –query ‘ComplianceByConfigRules[].{Rule:ConfigRuleName,Compliance:Compliance.ComplianceType}’
[
{
“Rule”: “required-tags”,
“Compliance”: “COMPLIANT”
},
{
“Rule”: “encrypted-volumes”,
“Compliance”: “COMPLIANT”
},
{
“Rule”: “s3-bucket-public-read-prohibited”,
“Compliance”: “COMPLIANT”
}
]

# 查看资源变更历史
# aws configservice get-resource-config-history \
–resource-type AWS::EC2::Instance \
–resource-id i-abc123def456 \
–limit 5
{
“configurationItems”: [
{
“configurationItemCaptureTime”: “2026-04-03T10:00:00.000Z”,
“configurationStateId”: “1234567890123”,
“configurationItemStatus”: “OK”,
“resourceType”: “AWS::EC2::Instance”,
“resourceId”: “i-abc123def456”,
“configuration”: “{\”instanceType\”:\”m5.2xlarge\”,\”state\”:{\”name\”:\”running\”}}”
}
]
}

# 查看CloudTrail审计日志
# aws cloudtrail lookup-events \
–lookup-attributes AttributeKey=Username,AttributeValue=fgedu-admin \
–max-results 5
{
“Events”: [
{
“EventId”: “abc123-def456-ghi789”,
“EventName”: “StartInstances”,
“EventTime”: “2026-04-03T10:00:00Z”,
“Username”: “fgedu-admin”,
“Resources”: [
{
“ResourceType”: “AWS::EC2::Instance”,
“ResourceName”: “i-abc123def456”
}
]
}
]
}

生产环境风哥建议：启用CloudTrail记录所有API调用，使用Config服务监控资源配置变更，定期进行合规审计，确保云服务符合安全规范。

本文由风哥教程整理发布,仅用于学习测试使用,转载注明出处:http://www.fgedu.net.cn/10327.html

相关推荐

联系我们

在线咨询：点击这里给我发消息

微信号：itpux-com

工作日：9:30-18:30，节假日休息