This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Management

User authentication and access rights management, activity history collection/analysis, and real-time resource status monitoring, etc. to provide services that can easily and conveniently manage Samsung Cloud Platform.

1 - Architecture Diagram

1.1 - Overview

Service Overview

Architecture Diagram provides a diagram form so that the relationships between resources can be grasped at a glance. You can check the connections between resources and examine the relationships between components.

Provided Features

Architecture Diagram provides the following functions.

  • Provide resource composition status: It is visualized to easily check the relationships between configured resources.
  • Check resource main information: You can view the resource’s main information from the Architecture Diagram without navigating to the resource detail screen.

Constraints

The constraints of the Architecture Diagram are as follows.

  • We only provide services for some resources of the Samsung Cloud Platform.
    • Provided services: VPC, Subnet, Virtual Server, Port, Security Group, Load Balancer
  • Only up to 50 per resource can be viewed in the Architecture Diagram.

Pre-service

Architecture Diagram has no preceding service.

1.2 - How-to Guides

Users can intuitively grasp the relationships and key information of the resource configuration generated through the Architecture Diagram.

Architecture Diagram Start

To start the Architecture Diagram of Samsung Cloud Platform, refer to the following.

  1. All Services > Management > Architecture Diagram Click the menu. Architecture Diagram Go to the page.
    • Samsung Cloud Platform’s Console Home page you can also navigate by clicking the Architecture Diagram widget.
  2. Check the resource configuration information and relationships in the Architecture Diagram.
    • VPC,Subnet, Virtual Server Represent the relationship of the three types of resources in a diagram.
Notice
  • If you do not have view permission for the topmost hierarchical structure among resources, the Diagram will not be displayed.
  • Resources without diagram location information are displayed separately at the bottom of the diagram. Detailed status of the resource can be checked on each resource’s detail page.

Architecture Diagram Add Item

You can add items to the configuration diagram of the Architecture Diagram.

  1. All Services > Management > Architecture Diagram Click the menu. Architecture Diagram Go to the page.
    • You can also navigate by clicking the Architecture Diagram widget on the Console Home page of Samsung Cloud Platform.
  2. Click the Search Filter button at the top right of the Diagram. Configurable items open as a popup menu in the Architecture Diagram.
    • VPC, Subnet, Virtual Server items are provided by default.
    • Port, Security Group, Load Balancer items, you can select which to add to the diagram.
      ResourceBasic status
      VPCDefault
      • Displayed only if you have VPC permissions
      SubnetDefault
      Virtual ServerDefault
      PortSelect
      Security GroupSelect
      Load BalancerSelect
      Table. Architecture Diagram search filter items

Architecture Diagram Check resource detailed information

In the Architecture Diagram’s configuration diagram, you can view detailed information of each resource.

Notice
If user permission for the resource is not granted, you cannot view detailed information.

To check detailed information, follow the steps below.

  1. Click the All Services > Management > Architecture Diagram menu. Go to the Architecture Diagram page.
    • You can also navigate by clicking the Architecture Diagram widget on the Console Home page of Samsung Cloud Platform.
  2. Click the resource in the Architecture Diagram to view detailed information. A detailed information popup for each resource will open.
    • Click the control button at the top right of the Diagram to expand or collapse the Diagram, display it in a folded state, or zoom in/out.
    • If you place the mouse cursor over a resource, the status of that resource and the resource name are displayed.
ResourceDetailed Information
VPCVPC name, Subnet name, IP range, Subnet type
  • Click the VPC name to view the corresponding VPC details page
  • Click the Create VPC button to create Virtual Server, Cloud Functions, VPC services via Copilot
SubnetVPC name, Subnet name, IP range, Subnet type
  • Click the Subnet name to go to the corresponding Subnet details page
Virtual ServerVPC name, Subnet name, Server name, IP, Security Group
  • Click the server name to go to the corresponding Virtual Server details page
PortVPC name, Subnet name, Port name, fixed IP address
Security GroupSecurity Group name, number of Security Group rules
  • Click the Security Group name to go to the corresponding Security Group details page
Load BalancerVPC name, Subnet name, Load Balancer name, resource status, Service IP, Firewall name
  • Click the Load Balancer name to go to the corresponding Load Balancer details page
Table. Architecture Diagram Resource Detailed Information Items
Reference
  • If you select a specific resource of Port or Security Group, the information about that resource and related resources are displayed as dotted lines.
  • Only the relationships of the total 6 types of resources (VPC, Subnet, Virtual Server, Port, Security Group, Load Balancer) are expressed.
  • Each Virtual Server, Port, Security Group, Load Balancer resource can be displayed up to 100.

1.3 - Release Note

Architecture Diagram

2025.10.23
FEATURE Add support resources
  • Load Balancer resources have been added.
2025.07.01
FEATURE Architecture Diagram Feature Added
  • The relationship between resources can be easily identified by marking it with a dotted line.
  • You can click the name of the resource in the resource detail information popup window to go to the detail page.
  • Through Copilot, you can create VPC and Security Group services or control Virtual Server.
  • You can easily add the Architecture Diagram item from the Configuration Diagram Filter.
2025.02.27
NEW Architecture Diagram Release
  • Architecture Diagram service has been newly launched.
    • Provides a service that can check the relationships between resources.

2 - Cloud Control

2.1 - Overview

Service Overview

Cloud Control service is a managed service that supports building, operating, and managing a multi-account environment easily and securely on the Samsung Cloud Platform.
Cloud Control service automates an organization’s cloud governance (security, compliance, standardization, etc.) and provides consistent centralized account and resource management based on Samsung Cloud Platform best practices.

Features

Cloud Control service provides the following special features.

  • Landing Zone Automatic Setup: Samsung Cloud Platform accounts, organizational units (OU), guardrails, logging, etc. are automatically configured. In a standardized environment, new account creation and invitation of existing accounts are possible.
  • Centralized Governance and Policy Enforcement: Automatically applies security, compliance, and operational policies (guardrails) across the organization. Provides policy violation detection and monitoring capabilities.
  • Multi-Region and Scalability: You can apply the same governance and policies across multiple Samsung Cloud Platform regions.

Provided Features

Cloud Control service provides the following features.

  • Automated Landing Zone (Landing Zone) Construction: Security, logging, and account structure based on Samsung Cloud Platform best practices are automatically set.
  • Guardrail applied
    • Preventive guardrail : block the creation of policy-violating resources itself
    • Detective Guardrail : Automatically detect policy-violating resources and notify
    • Integration with Samsung Cloud Platform Organization’s ACP, Samsung Cloud Platform Config Inspection, etc.
  • Dashboard Provision: You can visually monitor the accounts, OUs, guardrail implementation status, and compliance status of the entire organization.
  • Centralized logging and auditing
    • Logging&Audit, Object Storage, Config Inspection through which provide centralized log storage for all accounts and an audit account
  • ID and Permission Management Integration: By integrating with Samsung Cloud Platform ID Center, you can manage account-based access control and permission groups.
  • Monitoring and Notification (Notification) Feature: Provides real-time alerts for policy violations, Cloud Control setting changes, etc.
Information
Detection Guardrail, Config Inspection integration feature is scheduled for March 2026, Monitoring and Alerting feature is scheduled for July 2026.

Components

Landing Zone(Landing Zone)

Governance, security, network, logging, etc. The basic structure of the standardized Samsung Cloud Platform environment is as follows.

CategoryDetailed description
Management Account
  • Organization and account structure management, policy (SCP) application, new account creation automation
  • Highest authority across the organization, governance-focused operation
Log Account
  • Central collection and storage of all account logs, log integrity and long-term retention
  • Independent account operation, strict access control and encryption
Audit Account
  • Organization-wide security and compliance monitoring and audit, automated security checks
  • Apply principle of least privilege, cross-account role assumption
Table. Cloud Control Landing Zone

Guardrails(Guardrails)

The guardrails that automatically apply policy violation detection and prevention (detection/prevention type) rules, security and compliance standards are as follows.

CategoryDetailed description
Preventive GuardrailRole of preemptively blocking to prevent policy violations
  • Implementation method: Using Access Control Policy(ACP) to prohibit or limit the scope of actions on specific Samsung Cloud Platform services
  • Example:
    • Prohibit creation of root user access keys
    • Block resource creation in specific regions
    • Block public read/write on S3 buckets
  • Feature: Fundamentally prevent the violation act itself, preemptively block policy violations
Detection GuardrailContinuously monitor for policy violations or abnormal configurations, and provide alerts when violations occur
  • Implementation Method: Based on the Samsung Cloud Platform Config Inspection checklist, evaluate resource status and notify via dashboard or alerts when violations are found
  • Example:
    • Detect S3 bucket encryption not applied
    • Detect CloudTrail disabled
    • Detect whether EBS volume encryption is enabled
  • Feature: Detect violating resources in real-time and deliver to the administrator
Table. Cloud Control Guardrail
Notice
Detection Guardrails will be provided in March 2026.

Baseline(Baseline)

The essential resources and configuration sets, such as security, logging, and network, automatically deployed per account, are as follows.

CategoryDetailed description
AuditBaseline
  • Configure security and audit roles, policies on the central audit account
  • Check the security status and compliance status of all accounts centrally
LogArchiveBaseline
  • Aggregate logs of all accounts’ Trail to a central bucket
  • Used for log integrity, long-term storage, and audit tracing
IDCenterBaseline
  • Automatic configuration of resources linked with ID Center
  • Integrate user/group/permission management within the organization
Table. Cloud Control Baseline
Guide
AuditBaseline is scheduled to be provided in July 2026.

Region-specific provision status

Cloud Control service is available in the following environments.

RegionAvailability
Korea West 1 (kr-west1)Provided
Korea East1 (kr-east1)Provided
Korea South1(kr-south1)Provided
South Korea 2(kr-south2)Provided
South Korea South 3(kr-south3)Provided
Table. Cloud Control Region-wise Provision Status

Pre-service

This is a list of services that must be pre-configured before creating the service. For detailed information, please refer to the guide provided for each service and prepare in advance.

Service CategoryServiceDetailed Description
StorageObject StorageObject storage that facilitates data storage and retrieval
ManagementLoggin&AuditA service that collects and analyzes user activity history
ManagementOrganizationA service that organizes accounts by organizational units, manages them hierarchically, and controls resource access permissions.
ManagementID CenterA service that allows you to easily manage access permissions for resources per account centrally.
Table. Cloud Control Preceding Service

2.2 - How-to guides

The user must first create a landing zone to use the Cloud Control service. If a landing zone is created, you can use the management functions of Cloud Control.

Caution
Cloud Control services are not charged, but services such as Logging&Audit, Object Storage, Config Inspection used within Cloud Control may incur costs based on usage.

Create Landing Zone

To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone.

To create a landing zone, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Click the Landing Zone Creation button on the Service Home page. You will be taken to the Landing Zone Creation page.

  3. Fee Review and Organizational Unit Configuration area, after setting the configuration items, click the Next button.

    Category
    Required
    Detailed description
    Home Region-Home Region of Cloud Control
    • Cloud Control designates the default region as the Home Region and cannot be changed
    • All regions other than the default region are under Cloud Control’s management
    Basic Organizational UnitRequiredEnter basic organizational unit within landing zone
    • Case-sensitive English letters, enter within 128 characters
    • Basic organizational unit includes shared Accounts (Log Account, Audit Account)
    • Security: Name of the basic organizational unit for shared Account
    • Can be modified after landing zone creation
    Additional Organizational UnitRequiredEnter additional organizational unit within landing zone
    • Case-sensitive English letters, enter within 128 characters
    • Can be added after landing zone creation
    Table. Landing Zone Creation - Fee Review and Organizational Unit Configuration Items
  4. Shared Account Configuration After setting the configuration items in the area, click the Next button.

    Category
    Required
    Detailed description
    Management Account-Management Account name is displayed and cannot be edited
    Log AccountRequiredLog Account information input
    • Account name: Use Korean, English, numbers, spaces, special characters(+=-_@[](),.) to input within 3 ~ 30 characters
    • Email, Confirm Email: Input within 60 characters according to email address format
    Audit AccountRequiredEnter Log Account information
    • Account name: Use Korean, English, numbers, spaces, special characters(+=-_@[](),.) and enter within 3 to 30 characters
    • Email, Confirm Email: Enter within 60 characters following email address format
    • Cannot use the same email as Log Account
    Table. Landing Zone Creation - Shared Account Configuration Items
Note
  • Log Account is a repository of logs of API activity and resource configuration collected from all Accounts. Log Account cannot be changed.
  • Audit Account is a limited account, and the security and compliance team can obtain access rights to all accounts within the organization through the Audit Account.
  1. Additional configuration area, after setting the configuration items, click the Next button.

    Category
    Required
    Detailed description
    Account access configurationRequiredSelect method to manage access to the Account
    • Account access via ID Center: Create pre-configured groups and permission sets to configure users who perform specific tasks in the Account
      • Automatically assign users when provisioning an Account with Account Factory or registering an existing Account
    • Self-managed Account access: Manage access to the Account via ID Center or other Account access methods
      • Cloud Control does not create directory groups or permission sets for the landing zone
      • No user creation when provisioning an Account with Account Factory or registering
    Trail configuration-Automatic configuration in progress
    Table. Landing Zone Creation - Additional Configuration Items
  2. Input Information Check area, after checking the landing zone configuration information and Service Permissions, check the agreement content for permissions and guidelines.

  3. Click the Complete button. A popup window notifying the creation of the landing zone will open.

  4. After checking the information about creating a landing zone, click the Confirm button. The landing zone creation request is completed.

    • Landing zone creation takes some time, and a notification will be sent when the task is completed.
    • When the landing zone creation is complete, you can check the full menu of Cloud Control and the organization status on the Service Home page.
Caution
  • You cannot cancel while creating a landing zone.
  • If you fail to create a landing zone, delete the landing zone and then create it again.
Reference

When a landing zone is created, you can check the following items in Cloud Control.

  • Two organizational units: shared Account, organizational unit for the Account that the user will provision
  • Shared Account 2: Log Archive and Security Audit Isolation Account
  • Selected IAM management configuration
  • 10 preventive guardrails: Settings for policy application
  • Organization Service Control Policy Activation

Check detailed landing zone information

Landing Zone Settings page allows you to view detailed information about the landing zone.

To check the detailed information of the landing zone, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Service Home on the page click the Landing Zone Settings menu. Navigate to the Landing Zone Settings page.
CategoryDetailed description
serviceservice name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • In Cloud Control, it means the SRN of the resource type
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeService creation time
ModifierUser who edited the service information
Modification DateDate Service Information Was Modified
Home RegionHome region information of the landing zone
Account Access ConfigurationHow to manage access for Account
Trail configurationTrail configuration activation status
  • maintain active status
Landing Zone DeleteDelete landing zone
Table. Landing zone configuration items

Delete landing zone

If you fail to create a landing zone or do not use it, you can delete the landing zone.

Caution
  • Deleted resources cannot be recovered.
  • Organization unit, Account, bucket, ID Center resources are not automatically deleted.
    • If you want to use the same name as an existing resource that hasn’t been deleted when recreating a landing zone, you must delete the existing resource directly before creating the landing zone.
    • Existing resources can be deleted individually from the Organization, Object Storage, and ID Center services.

To delete the landing zone, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Click the Landing Zone Settings menu on the Service Home page. You will be taken to the Landing Zone Settings page.
  3. Landing Zone Settings page, click the Landing Zone Delete button. Landing Zone Delete popup opens.
  4. Landing Zone Deletion displayed in the popup window, enter the Cloud Contorl ID into the deletion confirmation area, then click the Confirm button. The landing zone deletion request is completed.
    • While deleting the landing zone, a description about the landing zone deletion process is displayed on the Service Home page.

Managing Organization Units and Accounts

You can check the list of organization units and accounts, and register and manage them in Cloud Control.

To view and manage the organization unit and Account list, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Service Home page, click the Organization menu. Move to the Organization unit and Account management page.
  3. Organization Unit and Account Management Select the view mode located at the top right of the page.
CategoryDetailed description
View HierarchyDisplay organizational units in a hierarchical structure
Account List ViewDisplay Account list within organization
Account creationCreate a new Account
  • When the Account creation button is clicked, navigate to the Account creation page
Table. Cloud Control organization unit and Account management items

View Hierarchy

Organizational Unit and Account Management page, when you click the View Hierarchy button, you can view and manage organizational units and accounts in a hierarchical structure.

CategoryDetailed description
Create Sub-Organization UnitAdd a new organization unit under the selected organization unit
  • Enabled only when exactly one organization unit is selected in the hierarchy
  • For details, see [Create Organization Unit](/userguide/management/cloud_control/how_to_guides/organization.md#조직-단위-생성하기)
| | More | Manage organizational units or register a new Account
  • Click the button to select **Delete Organizational Unit**, **Register Organizational Unit**, **Re-register Organizational Unit**, **Account registration**
  • For detailed information on managing organizational units, see [Managing Organizational Units](/userguide/management/cloud_control/how_to_guides/organization.md#조직-단위-관리하기) refer
  • For detailed information on Account registration, see [Register Account](/userguide/management/cloud_control/how_to_guides/organization.md#account-등록하기) refer
| |Organization Unit/Account Name|Display organization unit and account names in a measurement structure format
  • Click the **+**, **-** buttons to expand or collapse the hierarchy
  • Click the organization unit/account name to go to the detail page
| |ID/email|Organization unit shows ID, Account shows ID and email| |Status|Organization unit or Account's Cloud Control registration status
  • **Registered**, **Unregistered**, **Registering**, **Registration failed**
  • No status displayed for **Root**
| |Registered organization unit|Cloud Control registration status of sub-organization units
  • **number of registered organization units / total number of organization units** displayed
| |Registered Account|Sub Account's Cloud Control registration status
  • **Number of registered Accounts / total Accounts** displayed
|
Table. Hierarchy View Items

View Account List

Organization Unit and Account Management on the page, when you click the View Account List button, you can view and manage the Account list that constitute Cloud Control.

CategoryDetailed description
Account registrationRegister the selected Account from the Account list to Cloud Control
  • If you select an Account that is in **unregistered** state from the Account list, it becomes active
  • For detailed information about Account registration, see [Register Account](/userguide/management/cloud_control/how_to_guides/organization.md#account-등록하기)
| |Account name|Account name| |Account ID|Account's ID| |Email|Account's user email| |Status|Organization unit or Account's Cloud Control registration status
  • **Registered**, **Unregistered**, **Registering**, **Registration failed**
  • No status displayed for **Root**
|
Table. Account list view items

Organization and Account Detailed Information Check

You can view and edit the detailed information of the organization unit and Account.

To view detailed information, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Service Home page, click the Organization menu. Move to the Organization unit and Account management page.
  3. Organization Unit and Account Management page’s View Hierarchy button, click it.
  4. Click the name of the resource whose detailed information you want to view in the hierarchy list. You will be taken to the detailed page of that resource.

Root Detailed Information

Root detail page allows you to view and manage the detailed information of the organization Root and the sub Account list. Root Details page consists of Basic Information, Sub Account tabs.

Basic Information

You can check the basic information about organization Root and the organizational units and account count registered in Cloud Control.

CategoryDetailed description
serviceservice name
Resource TypeService Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeService creation time
ModifierUser who edited the service information
Modification DateDate Service Information Was Modified
Registered organization unitCloud Control registration status of Root sub-organization units
  • displayed as Number of registered organization units / total organization units
Registered AccountRoot sub Account’s Cloud Control registration status
  • Number of registered Accounts / total number of Accounts displayed
Table. Root Details - Basic Information Tab Items

Sub Account

You can view and manage the list of Accounts under Root and the registration status of Cloud Control.

CategoryDetailed description
Account registrationRegister the selected Account from the Account list to Cloud Control
  • Selecting an Account in the **unregistered** state from the Account list activates it
  • For detailed information about Account registration, see [Register Account](/userguide/management/cloud_control/how_to_guides/organization.md#account-등록하기)
| | Account name| Account name| | Email | Account's user email| | Status | Organization unit or Account's Cloud Control registration status
  • **Registered**, **Unregistered**, **Registering**, **Registration failed**
  • No status displayed for **Root**
|
Table. Root Details - Sub Account Tab Items

Organization Unit Detailed Information

Organizational Unit Details page allows you to view and manage detailed information of the organizational unit, sub Accounts, and applied preventive guardrails. Organization Unit Details page consists of Basic Information, Sub Account, Preventive Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

CategoryDetailed description
serviceservice name
Resource TypeService Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeService creation time
ModifierUser who edited the service information
Modification Date/TimeDate and time the service information was modified
Organizational unit nameName of the organizational unit
Applied GuardrailNumber of guardrail types applied to the current organization unit
Registered organization unitCurrent organization unit’s sub-unit Cloud Control registration status
  • displayed as number of registered organization units / total number of organization units
Registered AccountCurrent organization unit sub Account’s Cloud Control registration status
  • displayed as Number of registered Accounts / total Accounts
Higher organization unitHierarchy of higher organization units of the current organization unit
Re-registrationRe-register the current organization unit to Cloud Contorl
Table. Organization Unit Details - Basic Information Tab Items

Sub Account

You can view and manage the list of sub-accounts of the organization unit.

Notice
Security organization units cannot register Account.
CategoryDetailed description
Account registrationRegister the selected Account from the Account list to Cloud Control
  • If you select an Account in **unregistered** state from the Account list, it becomes active
  • For details on Account registration, see [Register Account](/userguide/management/cloud_control/how_to_guides/organization.md#account-등록하기)
| | Account name | Account name| | Email | Account's user email| | Status | Organization unit or Account's Cloud Control registration status
  • **Registered**, **Unregistered**, **Registering**, **Registration failed**
  • **Root** No status displayed
|
Table. Organization Unit Details - Sub Account Tab Items

Preventive Guardrail

You can view and manage the list of preventive guardrails applied at the organizational unit level.

Notice
Security in the case of organization units, cannot apply or remove the guardrail.
CategoryDetailed description
Target Service NameGuardrail applicable service name
Guardrail NameName of the guardrail
  • Clicking the guardrail name allows you to view detailed information about that guardrail
TypeApplication method
Application methodDisplay of guardrail’s application method
  • inheritance method, you can click to view detailed organizational unit name
RemoveRemove the selected guardrail from the guardrail list
  • Enabled when a guardrail is selected from the guardrail list
Apply Preventive GuardrailNew preventive guardrail can be applied at the organizational level
  • When the button is clicked, navigate to the Apply Preventive Guardrail page
Table. Organization Unit Details - Prevention Guardrail Tab Items

Account Check detailed information

Account Details page you can view the detailed information of the Account and the list of applied preventive guardrails. Account Detail page consists of Basic Information, Prevention Guardrail tabs.

Basic Information

You can view basic and detailed information about the organization unit.

CategoryDetailed description
serviceservice name
Resource TypeService Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeService creation time
EditorUser who edited the service information
Modification DateDate Service Information Was Modified
EmailAccount’s user email
Applied GuardrailNumber of guardrail types applied to the current organization unit
ID Center usernameID Center user email
Upper organizational unitCurrent Account’s upper organization unit hierarchy
RegisterThe organization unit of the current account can be changed
  • For detailed information on changing the organization unit, see Move Account
Table. Account Details - Basic Information Tab Items

Prevention Guardrail

You can view the list of preventive guardrails applied to the Account.

CategoryDetailed description
Target Service NameGuardrail applicable target service name
Guardrail NameName of the guardrail
  • If you click the guardrail name, you can view detailed information about that guardrail
TypeApplication Method
Application methodDisplay of the guardrail’s application method
  • inheritance method, you can click to view the detailed organizational unit name
Table. Account Details - Preventive Guardrail Tab Items

Access Portal Check access information

User and Access page you can check the Access Portal connection URL and the password required for connection.

Access Portal to check the connection information, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Service Home page, click the User and Access menu. Navigate to the User and Access page.
  3. User and Access page’s Integrated Access Management area, check the information.
CategoryDetailed description
PasswordPassword for Access Portal access
Access Portal URLAccess Portal access URL
  • When clicking the URL, Access Portal login page can be viewed in a new tab
Permission SetA collection of admin policies used by ID Center to determine the valid permissions of users who can access a specific Account
Table. Shared Account Items
Note
For detailed information about credential sources and ID Center, refer to ID Center.
Notice

If the landing zone is configured with a self‑managed Account access, refer to the following.

  • Cloud Control does not automatically create directory groups or permission sets.
  • When provisioning an Account via the Account factory or registering an existing Account, the user is automatically assigned.
  • You can manage access to the Account via ID Center or other Account access methods.

Check user credential information

On the User and Access page, you can check the user credential source type and ID Center ID.

To verify user credential information, follow the steps below.

  1. All Services > Management > Cloud Control Please click the menu. Navigate to Cloud Control’s Service Home page.
  2. Click the User and Access menu on the Service Home page. You will be taken to the User and Access page.
  3. User and Access page’s User Credential Management area, check the information.
CategoryDetailed description
Credential SourceTypes of credential sources set in ID Center
  • ID Center’s own directory: Directory within ID Center
  • AD (Active Directory): Active Directory managed directly by the user
ID Center IDID Center’s ID
  • When ID is clicked, go to the ID Center Settings page
User GroupA group formed to classify workers who perform specific tasks in an organization
Table. User Credential Management Items
Reference
  • For detailed information about credential sources and ID Center, see ID Center.
  • Management > IAM You can add users and user groups in the service. For more details, refer to IAM.

Check shared Account

You can view the shared Account information of Cloud Control.

To check the shared Account information, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Go to the Service Home page of Cloud Control.
  2. Click the Shared Account menu on the Service Home page. Navigate to the Shared Account page.
  • Shared Account page is composed of Management Account, Log Account, Audit Account widgets.
    • Each widget displays the Account name, Account ID, and email information, and clicking the widget name navigates to that Account’s detail page.
CategoryDetailed description
Management AccountAccount that creates new accounts and manages billing and access for all accounts in the organization
Log AccountAccount used as the repository for API activity and resource configuration logs collected from all Accounts
Audit AccountLimited account that allows the security and compliance team to obtain read and write access to all accounts
Table. Shared Account Items

2.2.1 - Managing Guardrails

Policy violation detection and prevention (detection/prevention type) rules, and the guardrails automatically applied to security and compliance standards are as follows.

Prevention Guardrail

You can apply preventive guardrails to block in advance so that policy violations do not occur.

Applying preventive guardrails

It can be applied to preventive guardrails at the organizational level. To apply preventive guardrails at the organizational level, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Service Home on the page click Guardrail > Preventive Guardrail menu. Preventive Guardrail List navigate to the page.

  3. After selecting the prevention guardrail to apply to the organizational unit from the Prevention Guardrail List, click the Apply to Organizational Unit button. You will be taken to the Apply to Organizational Unit page.

    • Multiple preventive guardrails can be selected and applied simultaneously.
  4. After selecting the organizational unit to apply the preventive guardrail, click the Complete button.

    Category
    Required
    Detailed description
    Preventive guardrails to apply-List of preventive guardrails to apply at the organizational unit
    Organization Unit NameRequiredSelect organization unit to apply preventive guardrails
    • Registered, Registration Failed status organization units only selectable
    • Click on organization unit name, parent organization unit name to view detailed information
    Table. Prevention Guardrail Application Items

  5. When a pop-up window that notifies the application of the preventive guardrail opens, click the Confirm button.

Check detailed guardrail information

You can view detailed information about the preventive guardrail, the organizational units applied to the preventive guardrail, and the list of Accounts. To disable the preventive guardrail, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.
  2. Service Home on the page click the Guardrail > Preventive Guardrail menu. Navigate to the Preventive Guardrail List page.
  3. Prevention Guardrail List Click the prevention guardrail name to view detailed information. Prevention Guardrail Details page
    • Prevention Guardrail Details page consists of Basic Information, Applicable Organization Unit, Account tabs.

Basic Information

You can view basic and detailed information about preventive guardrails.

CategoryDetailed description
serviceservice name
Resource TypeService Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeService creation time
EditorUser who edited the service information
Modification date/timeDate and time the service information was modified
Guardrail nameGuardrail’s name
typeguardrail type
Target Service NameGuardrail’s target service name
StatusGuardrail application status
DescriptionDescription of guardrails
Table. Guardrail Details - Basic Information Tab Items

Applied Organization Unit

You can view the list of organizational units with preventive guardrails applied.

CategoryDetailed description
Organizational unit nameName of the organizational unit
  • Click the organizational unit name to view detailed information
Parent Organization Unit NameName of the parent organization unit of the organization unit
  • Click the parent organization unit name to view detailed information
StatusOrganization unit’s Cloud Control registration status
  • Registered, Unregistered, Registering, Registration failed
  • No status displayed when Root
Table. Root Details - Sub Account Tab Items

Account

You can check the list of sub Accounts of the organization unit where the preventive guardrail is directly applied.

CategoryDetailed description
Account nameAccount name
EmailAccount’s user email
Organization Unit NameName of the organization unit
  • Click the organization unit name to view detailed information
StatusOrganization unit or Account’s Cloud Control registration status
  • Registered, Unregistered, Registering, Registration failed
  • Root No status displayed
Table. Root Details - Sub Account Tab Items
Note
Preventive guardrails are inherited and applied from all higher organizational units, so even accounts not in the account list can have preventive guardrails applied.

Disable Guardrail

The preventive guardrail applied to the organizational unit can be disabled. To disable the preventive guardrail, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Service Home on the page, click the Guardrail > Preventive Guardrail menu. Navigate to the Preventive Guardrail List page.

  3. Prevention Guardrail List after selecting the prevention guardrail to remove organization unit application, click the More > Remove Organization Unit Application button. You will be taken to the Remove Organization Unit Application page.

    • Multiple preventive guardrails can be selected simultaneously and disabled.
  4. After selecting the organizational unit to remove the preventive guardrail, click the Complete button.

    Category
    Required
    Detailed description
    Preventive guardrails to apply-List of preventive guardrails to deactivate
    Organization Unit NameRequiredSelect organization unit to disable preventive guardrail application
    • Registered, Registration Failed status only organization units can be selected
    • Click organization unit name, parent organization unit name to view detailed information
    Table. Prevention Guardrail Deactivation Items

  5. When the popup notifying the removal of the preventive guardrail is opened, click the Confirm button.

2.2.2 - Managing an Organization

The user must first create a landing zone in order to use the Cloud Control service. When a landing zone is created, you can use Cloud Control’s management functions.

Caution
Cloud Control service is not charged, but services such as Logging&Audit, Object Storage, Config Inspection used within Cloud Control may incur costs based on usage.

Managing organizational units

You can register and manage the organizational units that constitute the Organization in Cloud Control.

Create Organizational Unit

You can create a new organizational unit and register it in Cloud Control.

Create an organizational unit and follow the steps below to register it with Cloud Control.

  1. All Services > Management > Cloud Control Click the menu. Go to Cloud Control’s Service Home page.

  2. Click the Organization menu on the Service Home page. Navigate to the Organization Unit and Account Management page.

  3. Organizational Unit and Account Management page’s top right corner, click the View Hierarchy button.

  4. After selecting the location to add an organizational unit in the hierarchy list, click the Create Sub-Organizational Unit button. The Create Organizational Unit popup opens.

    • Root or only one organizational unit can be selected.
    • Root can be used as a basis to create organizational units within 5 levels below.
  5. Create Organizational Unit After entering the organizational unit information to add in the popup window, click the Confirm button.

    Category
    Required status
    Detailed description
    Parent organization unit name-Name of the parent organization unit for the organization unit to be created
    Organization Unit NameRequiredEnter the name of the organization unit to be created within 128 characters
    • Organization names distinguish between uppercase and lowercase English letters
    DescriptionSelectEnter a description of the organizational unit within 1,000 characters
    Table. Organization unit creation items

  6. When the popup notifying the creation of an organizational unit opens, click the Confirm button.

    • It may take several tens of minutes depending on the number of Accounts under the organizational unit.
    • When the organization unit creation is completed, it will be delivered as a notification.

Register Organizational Unit

You can register organizational units that are not registered in Cloud Control or that failed to register in Cloud Control.

Notice
  • When registering an organizational unit, all parent organizational units of the unit to be registered must be in a registered state.
  • If there is an organization unit in the registering state under the organization unit you want to register, you cannot register.
  • Subordinate organizational units of the organizational unit to be registered must be registered separately.

To register an organizational unit in Cloud Control, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Click the Organization menu on the Service Home page. Navigate to the Organization Unit and Account Management page.

  3. Organizational Unit and Account Management in the top right corner of the page, click the View Hierarchy button.

  4. After selecting the organizational unit to register from the hierarchy list, click the More > Register Organizational Unit button. You will be taken to the Register Organizational Unit page.

  5. Organization Unit Registration Check the information of the organization unit to be registered on the page.

    Category
    Required
    Detailed description
    Sub Account-List of Accounts included under the sub-unit of the organization unit to be registered
    • Automatically registered in Cloud Control when registering the organization unit
    Guardrails to be applied to the organizational unit-List of guardrails inherited from the upper organizational unit and guardrails directly applied to the organizational unit
    • Clicking the guardrail name allows you to view detailed information about that guardrail
    • To remove a guardrail applied to the organizational unit, remove its application from the upper organizational unit
    Table. Organization Unit Registration Items

  6. Terms Agreement after checking the content, check the checkbox and click the Complete button.

  7. When the popup notifying the registration of the organizational unit opens, click the Confirm button. The organizational unit registration request will be completed.

    • Depending on the number of Accounts under the organization unit, it may take more than tens of minutes.
    • When the organization unit registration is completed, it will be delivered as a notification.

Re-register Organization Unit

You can re-register the organizational unit registered in Cloud Control to Cloud Control.

Notice
  • If there is an organization unit in the registering state under the organization unit you want to register, you cannot register.
  • The subordinate organizational unit of the organization unit you want to register must be registered separately.

To re-register an organizational unit in Cloud Control, follow these steps.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Service Home page, click the Organization menu. Navigate to the Organization Unit and Account Management page.

  3. Organization Unit and Account Management page’s top right corner View Hierarchy button click.

  4. After selecting the organizational unit to re-register from the hierarchy list, click the More > Re-register Organizational Unit button. You will be taken to the Re-register Organizational Unit page.

  5. Organizational Unit Re-registration Check the information of the organizational unit to be re-registered on the page.

    Category
    Required status
    Detailed description
    Sub Account-List of Accounts included under the sub-unit to be re-registered
    • Automatically registered in Cloud Control when registering the organizational unit
    Guardrails to be applied to the organizational unit-List of guardrails inherited from the upper organizational unit and guardrails directly applied to the organizational unit
    • Clicking the guardrail name allows you to view detailed information about that guardrail
    • To remove a guardrail applied to the organizational unit, remove its application from the upper organizational unit
    Table. Organization Unit Re-registration Items

  6. Terms Agreement after reviewing the content, check the checkbox and click the Complete button.

  7. When the popup notifying re-registration of the organization unit opens, click the Confirm button. The organization unit re-registration request will be completed.

    • Depending on the number of Accounts under the organization unit, it may take more than tens of minutes.
    • When the organization unit re-registration is completed, it will be delivered as a notification.

Delete organization unit

You can delete the organization unit.

Notice
  • Only organization units that are in an unregistered state in Cloud Control can be deleted.
  • Before deleting the organization unit, remove all sub-elements of that organization unit.

To delete an organizational unit, follow the steps below.

  1. All Services > Management > Cloud Control Please click the menu. Navigate to Cloud Control’s Service Home page.
  2. Click the Organization menu on the Service Home page. Navigate to the Organization Unit and Account Management page.
  3. Organizational unit and Account management in the top right corner of the page, click the View Hierarchy button.
  4. After selecting the organizational unit to delete from the hierarchy list, click the More > Delete Organizational Unit button.
  5. When the popup notifying the deletion of the organizational unit opens, click the Confirm button.

Account Management

You can register and manage the list of Accounts that constitute the Organization in Cloud Control.

Account Create

Account factory to create Account and apply Cloud Control directly without separate work.

To create an Account, follow the steps below.

  1. All Services > Management > Cloud Control Click the menu. Navigate to Cloud Control’s Service Home page.

  2. Click the Account Factory menu on the Service Home page. Navigate to the Account Factory page.

  3. Account Factory on the page Account Creation button click the button. Account Creation page will be navigated.

  4. Account creation on the page, enter the required information for creating an Account and select the organizational unit, then click the Complete button. A popup notifying the Account creation opens.

    Category
    Required
    Detailed description
    Account informationRequiredEnter the name and email information of the Account
    • Account name: Use Korean, English, numbers, spaces, special characters(+=-_@[](),.) to input within 3 ~ 30 characters
    • Email, Confirm Email: Input within 60 characters according to email address format
    ID Center InformationRequiredEnter ID Center user information that can access the Account to be created
    • Username: Enter using English letters, numbers, special characters(+=-_@,.) within 128 characters
    • User Real Name: Enter the user’s actual name (surname and given name)
    • If the Account access configuration uses Self-Managed Account Access, ID Center Information cannot be set
    Organization unit selectionRequiredSelect the parent organization that will include the Account to be created
    • registered status organization units only can be selected
    • Clicking the organization unit name allows navigation to its detail page
    Table. Landing Zone Creation - Fee Review and Organizational Unit Configuration Items
Caution
An Excel file containing Access Portal user login information will be sent to the email entered in the ID Center. Be sure to verify that the email information is correct.
  1. Confirm Click the button. Account creation request is completed.
    • Account creation takes some time, and a notification will be sent when the task is completed.

Account Register

You can register organizational units that are not registered in Cloud Control or failed to register in Cloud Control.

Notice
  • Only accounts of organizational units registered in Cloud Control can be registered.
  • If there is an organizational unit or Account in the registering state under the organizational unit you want to register, you cannot register.
  • If you select and register a different organizational unit from the current one, the corresponding ACcount will be moved to the newly selected organizational unit.

To register an Account, follow the next steps.

  1. All Services > Management > Cloud Control Click the menu. Go to Cloud Control’s Service Home page.

  2. Click the Organization menu on the Service Home page. Navigate to the Organization Unit and Account Management page.

  3. Organization Unit and Account Management page’s top right corner, click the View Account List button.

  4. After selecting the Account to register in Cloud Control from the Account list, click the Account registration button. It navigates to the Account registration page.

    Category
    Required
    Detailed description
    Current organizational unit-Organizational unit that the Account belongs to
    Register organization unit-Select the organization unit to register the Account
    • Only organization units in registration status can be selected
    • Current organization unit: Register as is in the current organization unit
    • Other organization unit: Directly select another organization unit
    Table. Account registration items

  5. Account when the registration notification popup opens Click the Confirm button.

Account Move

You can change the organizational unit of the Account registered in Cloud Control and move it.

Notice
  • If there is an organization unit or Account in the registering state under the organization unit you want to register, you cannot move.
  • If you select and register a different organizational unit from the current one, the corresponding ACcount will be moved to the newly selected organizational unit.

To move the Account, follow the steps below.

  1. All Services > Management > Cloud Control Please click the menu. Navigate to Cloud Control’s Service Home page.
  2. Click the Organization menu on the Service Home page. Navigate to the Organization Unit and Account Management page.
  3. Organization Unit and Account Management on the top right of the page, click the View Account List button.
  4. Click the Account name to change the organizational unit from the Account list. Account Details page will be navigated.
  5. Click the Register button on the Account Details page. You will be taken to the Account Registration page.
  6. Register Organization Unit from the list, after selecting the organization unit to move the Account, click the Complete button.
    • Registration status organizational units can only be selected.
  7. When the popup notifying Account registration opens, click the Confirm button.

Account Exclude

You can exclude the Account from the Organization.

To exclude Account from Organization, follow the steps below.

  1. All Services > Management > Organization Click the menu. Go to the Service Home page of Organization.
  2. Click the Organization Configuration menu on the Service Home page. Navigate to the Organization Configuration page.
  3. Organization Structure page click the Account List View button.
  4. After selecting the Account to exclude from Organization, click the More > Exclude Account button.
  5. When a popup that notifies the exclusion of the Account opens, click the Confirm button.
    Notice

    In the following cases, Account cannot be excluded.

    • Account with unregistered payment method
    • If there is credit assigned to the account
    • When the exclusion point is the cost settlement date (the 1st of each month, Asia/Seoul GMT +09:00)

Account Delete

You can delete the Account.

To delete the Account, follow the steps below.

  1. All Services > Management > Organization Click the menu. Go to the Service Home page of Organization.
  2. Service Home on the page, click the Organizational Structure menu. Navigate to the Organizational Structure page.
  3. Organization Setup on the page click the Account List View button.
  4. After selecting the Account to delete from the Account list, click the More > Delete Account button. The Delete Account popup window opens.
    • After clicking the Account name of the Account to be deleted, you can also delete by clicking the Delete Account button on the Account Details page.
  5. After entering the Account name to delete, click the Confirm button.
Reference

If you delete Account, a Account deletion notification email will be sent to the next user.

  • Administrator who created Organization
  • Root user of the created Account
  • User with delegation for the created Account
Notice
  • When deleting from the Account list, you must select only one Account to delete.
  • Before deletion, all resources within the Account must be deleted.
  • Management Account and accounts that joined through invitation cannot be deleted.

2.2.3 - Account 관리하기

Create Account

You can create an Account with the Account factory and apply Cloud Control directly without any additional steps.

주의
Account는 조직에 추가할 수 있는 최대 Account수를 초과하여 생성할 수 없습니다.

To create an Account, follow the steps below.

  1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

  2. On the Service Home page, click the Account Factory menu. 2. Go to the Account Factory page.

  3. On the Account Factory page, click the Create Account button. 3. Go to the Account creation page.

  4. On the Account creation page, enter the required information to create an Account, select the organizational unit, and then click the Create button.

    Category
    Required
    Detailed description
    Account informationRequiredEnter the account name and email information
    • Account name: Use Korean, English, numbers, spaces, and special characters(+=-_@[](),.) to enter between 3 ~ 30 characters
    • Email: Enter up to 60 characters in a valid email address format
      • Cannot duplicate the root user’s email
      • Enter the same value for Email confirmation
    ID Center informationRequiredEnter ID Center user information for the Account to be created that can access it
    • **Username**: Enter using English letters, numbers, and special characters(\+\=\-\_\@\,\.) within 128 characters
    • **Full name**: Enter the user's actual name (family name and given name)
    • If the Account access configuration uses **self-managed Account access**, **ID Center information** cannot be set
    | | Select organization unit | Required | Select the parent organization unit that will contain the Account to be created
    • Only organization units with **registered** status can be selected
    • Clicking the organization unit name navigates to its detail page
    |
    표. 랜딩 존 생성 - 요금 검토 및 조직 단위 구성 항목
    주의
    ID Center에 입력한 이메일로 Access Portal 사용자 로그인 정보가 포함된 엑셀 파일이 전달됩니다. 이메일 정보가 정확한지 반드시 확인하세요.

  5. When the popup indicating account creation opens, click the Confirm button. 5. Account creation request is completed.

    • Account creation takes some time, and a notification is sent when the task is complete.

Manage Account

You can register and manage the accounts that comprise the organization in Cloud Control.

Register Account

You can register organizational units that are not registered in Cloud Control or that failed to register, into Cloud Control.

안내
  • Only accounts from the organization unit registered in Cloud Control can be added.
  • You cannot register if a subunit of the organizational unit you are trying to register contains an organizational unit or Account that is in the registration in progress state.
  • If you select a different organizational unit from the current one and register, the corresponding ACcount will be moved to the newly selected organizational unit.

To register an Account, follow the steps below.

  1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

  2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.

  3. In the top right corner of the Organization Unit and Account Management page, click the Account List button.

  4. From the Account list, select the Account to register in Cloud Control, then click the Register Account button. 4. Go to the Account Registration page.

    • After clicking the Account name of the Account to be registered, you can also register by clicking the Register button on the Account Details page.
      Category
      Required
      Detailed description
      Current organizational unitOrganizational unit to which the Account belongs
      Register organization unitSelect the organizational unit to register the Account
      • Only organizational units that are in a registered state can be selected
      • Current organizational unit: Register directly in the current organizational unit
      • Other organizational unit: Directly select a different organizational unit
      표. Account 등록 항목
  5. Account 등록을 알리는 팝업창이 열리면 확인 버튼을 클릭하세요.

Account 이동하기

Cloud Control에 등록된 Account의 조직 단위를 변경하여 이동할 수 있습니다.

안내
  • 등록하려는 조직 단위의 하위에 등록중 상태인 조직 단위나 Account가 있으면 이동할 수 없습니다.
  • 현재와 다른 조직 단위를 선택하여 등록할 경우, 해당 ACcount는 새로 선택한 조직 단위로 이동합니다.

To move the account, follow these steps.

  1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
  2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
  3. On the top right of the Organization Unit and Account Management page, click the View Account List button.
  4. In the Account list, click the account name for which you want to change the organizational unit. 4. Navigate to the Account Details page.
  5. On the Account Details page, click the Register button. 5. Go to the Account Registration page.
  6. From the Registered Organizational Unit list, select the organizational unit to which you want to move the Account, then click the Done button.
    • Only organizational units with registered status can be selected.
  7. When a popup notifying the Account registration opens, click the Confirm button.

Unregister Account

You can deactivate an account registered in the organization.

안내

In the following cases, the Account cannot be deactivated.

  • Account with no registered payment method
  • If the account has assigned credit
  • When the exclusion point is the cost settlement date (the 1st of each month, Asia/Seoul GMT +09:00)
To remove an account registered in an organization, follow these steps.

  1. Click the All Services > Management > Organization menu. 1. Navigate to the Service Home page of the Organization.
  2. On the Service Home page, click the Organization Setup menu. 2. Go to the Organizational Structure page.
  3. On the Organization Configuration page, click the View Account List button.
  4. After selecting the Account to exclude from the Organization, click the More > Unregister Account button.
    • After clicking the account name of the account to be deregistered, you can also deregister by clicking the Deregister button on the Account Details page.
  5. When a popup notifying the Account deregistration opens, click the Confirm button.

Delete Account

You can delete the account.

안내
  • When deleting from the Account list, you must select only one Account to delete.
  • All resources within the Account must be deleted before deletion.
  • Management Accounts and Accounts that joined via invitation cannot be deleted.
To delete the Account, follow the steps below.

  1. Click the All Services > Management > Organization menu. 1. Go to the Service Home page of the Organization.
  2. On the Service Home page, click the Organization Setup menu. 2. Go to the Organizational Structure page.
  3. On the Organization Configuration page, click the View Account List button.
  4. After selecting the Account to delete from the Account list, click the More > Delete Account button. 4. Account deletion A popup window opens.
    • After clicking the name of the Account to be deleted, you can also delete it by clicking the Account Delete button on the Account Details page.
  5. Enter the Account name to delete, then click the Confirm button.
참고

When you delete the Account, an Account deletion notification email is sent to the next user.

  • Administrator who created the Organization
  • Root user of the created Account
  • User with delegation for the created Account

Check Shared Account

You can view the shared Account information in Cloud Control. To check the shared account information, follow the steps below.

  1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
  2. On the Service Home page, click the Shared Account menu. 2. Navigate to the Shared Account page.
    • Shared Account page consists of Management Account, Log Account, Audit Account widgets.
    • Each widget displays the account name, account ID, and email information, and clicking the widget name navigates to the detailed page of that account.
      CategoryDetailed description
      Management AccountAccount that creates new Accounts and manages billing and access for all Accounts in the organization
      Log AccountThe account used as the repository for API activity and resource configuration logs collected from all accounts
      Audit AccountA restricted account that enables the security and compliance team to have read and write access to all accounts.
      표. 공유 Account 항목

2.3 - API Reference

API Reference

2.4 - CLI Reference

CLI Reference

2.5 - Release Note

Cloud Control

2025.10.23
NEW Official Service Version Release
  • Cloud Control service official version has been released.
    • You can easily and safely build, operate, and manage a multi-account environment on Samsung Cloud Platform.
    • The organization’s cloud governance (security, compliance, standardization, etc.) can be automated and managed through policy violation detection and monitoring functions.

3 - Cloud Monitoring

3.1 - Overview

Service Overview

Cloud Monitoring service collects usage and change information, and logs of operating infrastructure resources, and generates events when the set threshold is exceeded, notifying users. Through this, users can quickly respond to performance degradation and failures, and can easily establish resource capacity expansion plans for a stable computing environment.

Provided Functions

Cloud Monitoring provides the following functions.

  • Stable Computing Resource Management: You can easily check indicators such as CPU usage, disk usage, and memory usage. Since notifications are automatically sent to designated personnel when events occur in resources being used, you can operate computing resources stably and quickly analyze and respond to failures.
  • Convenient Monitoring: Resource status information can be easily monitored by creating a dashboard. Basic dashboards and user-defined dashboards are provided, and various types of widgets can be set up to easily and quickly create dashboards.
  • Event Metric Management: Event metrics can be easily set up with just a few clicks through the web-based console. Event metric settings for monitoring targets (event patterns, occurrence conditions, occurrence cycles, performance metrics, operation status, etc.) can be changed in various ways to suit the usage environment, and threshold settings and alarm settings can be easily managed.
  • Resource Log Management: Log data of resources can be collected and stored, and searches can be performed on target logs as needed. Additionally, events are quantified for major keywords, and when predefined conditions are met, notifications are automatically sent to designated personnel, providing a more stable usage environment.

Components

Dashboard

The monitoring dashboard allows you to check the operation status, event status, and usage rates of monitoring targets and services.

ItemDescription
RegionLocation of resources
Data Reference TimeReference time of data displayed on the dashboard
RefreshRefresh the dashboard based on the current time
Period SettingSet the data query period and refresh cycle
Monitoring StatusNumber and status of monitoring targets for each service in the account
Event HistoryDisplay recent 7-day events by risk level as a graph
Top 5 Performance UsageDisplay the top 5 monitoring targets with the highest performance usage
Event MapDisplay the number of events for each service by risk level
Event StatusDisplay a list of unprocessed events that have occurred
Table. Cloud Monitoring Dashboard Components

Performance Analysis

Performance analysis allows you to check the main performance items of monitoring targets and view current data and historical data for each performance item. Users can check the performance status of monitoring targets by service or period and analyze the results by comparing specific performance.

Log Analysis

Log analysis collects and checks the logs of monitoring targets and converts them into quantifiable data for monitoring. Basic logs are provided for each monitoring target, and users can create custom logs to collect and check additional logs.

Event Management

An event is a setting that notifies users when the performance value of a monitoring target meets certain conditions. By setting events, users can grasp monitoring information that they must know without missing it. For example, if an event is set to occur when a performance value related to overload exceeds a certain value, users will be notified whenever there is a risk of overload during resource operation, allowing them to respond before problems occur. Event management allows users to create events and set them to notify designated users when specific values occur during monitoring.

Preceding Services

Cloud Monitoring has no preceding services.

3.2 - How-to guides

Samsung Cloud Platform Monitoring is a resource management system that allows users to monitor and analyze the operation status of resources within an account on the Samsung Cloud Platform Console. Users can efficiently manage resources using the dashboard page, widgets, and chart features.

Note
  • Users can monitor resources created in the Samsung Cloud Platform Console with authorized accounts.
  • Users can log in to the Samsung Cloud Platform Console and navigate to Samsung Cloud Platform Monitoring to monitor resources.

Getting Started with Cloud Monitoring

To start using Samsung Cloud Platform Monitoring, follow these steps:

  1. Click on All Services > Management > Cloud Monitoring menu. This will take you to the Service Home page of Cloud Monitoring.
  2. Click on the Open Cloud Monitoring button on the Service Home page. This will take you to the Cloud Monitoring Console page.

Exploring the Cloud Monitoring Console

The top and left menus of the Cloud Monitoring Console are composed as follows:

CategoryDescription
Custom Dashboard ManagementCustom Dashboard
  • View and manage custom dashboards.
SupportSupport
  • Provides links to user guides and OpenAPI guides.
Region ListRegion List
  • Displays the regions being monitored for the current account.
  • Allows selecting regions provided by the account.
User InformationView user information and log out of Samsung Cloud Platform Monitoring.
Side MenuDisplays the main features of Samsung Cloud Platform Monitoring. Each menu can be clicked to navigate to the corresponding page.
  • Monitoring Dashboard: View the operation status, event status, and usage of monitored services and resources. For more information, see Using the Monitoring Dashboard.
  • Performance Analysis: View key performance metrics and current data and history for each metric. For more information, see Analyzing Performance.
  • Log Analysis: Collect and view logs from monitored resources and convert them into metrics for monitoring. For more information, see Analyzing Logs.
  • Event Management: Set up notifications for specific conditions. For more information, see Managing Events.
Table. Exploring the Monitoring Page

Ending Monitoring

To exit the Cloud Monitoring Console, click the Log Out button in the top right corner of the User Information section.

Note
The session timeout for the Cloud Monitoring Console is set to 30 minutes.

Using Common Features

This section describes frequently used features when using the Cloud Monitoring Console.

Viewing Detailed Information

To view detailed information about a monitored resource, navigate to Cloud Monitoring Console > Performance Analysis or Cloud Monitoring Console > Log Analysis > Log Status. Then, click on the monitored resource for which you want to view detailed information.

Note
  • The detailed information for a monitored resource may vary depending on the service type.
  • If the operating system (OS) of the monitored resource is RHCOS (Red Hat Core OS), detailed information may not be available.
ItemDescription
Basic InformationDisplays basic information about the monitored resource
  • Example: Virtual Server - monitored resource, service type, service status, server type, OS information, IP
PerformanceDisplays key performance metrics as graphs
LogsDisplays the log collection volume as graphs
EventsDisplays a list of events that occurred on the monitored resource
AgentProvides Install, Start, Stop, Delete, and Update commands for the agent
Query Period SettingDisplays the query period for date/time data
  • Refreshes the data based on the current time.
  • Enables or disables automatic refresh.
  • Allows setting the data query period or changing the automatic refresh interval. For more information, see Setting the Query Period.
Monitoring Status AreaDisplays the monitoring status for performance, logs, and events.
Table. Monitored Resource Detailed Information
Note
  • Agent management commands are available for Virtual Server, GPU Server, and Bare Metal Server services.
  • For more information on agent installation and management, see Managing Agents.

Sorting Data

You can sort event monitoring, performance analysis, and log analysis results in descending or ascending order. To sort data, follow these steps:

  1. Display the information you want to sort on the page.
  2. Click on the Sort button next to the category name. The sort order changes between descending and ascending each time you click.

Viewing Real-Time Data

You can set the dashboard or detailed information page to automatically refresh the data at a specified interval.

Note
  • The Cloud Monitoring Console allows you to set the monitoring page to refresh periodically.
  • You can refresh the data based on the current time by clicking the Refresh button.

To set the refresh interval, follow these steps:

  1. Click the Settings button in the top right corner of the data representation area.
  2. Select the refresh interval and click OK.
  3. You can enable or disable the automatic refresh feature.

Setting the Query Period

You can set the query period to limit the scope of performance, log, and event data, making it easier to find the information you need. To set the query period, follow these steps:

  1. Click the Settings button in the top right corner of the data representation area.
  2. Select or enter the query period.
Caution
  • When entering the query period manually, it must be at least 30 minutes.
  • If the data query range is fixed for each widget, the widget’s query range takes priority.

3.2.1 - Using the Monitoring Dashboard

The monitoring dashboard allows you to view the operational status and event history of monitored services and resources, as well as the top usage items.

Getting Started with the Monitoring Dashboard

When you navigate to the Cloud Monitoring Console page in the Samsung Cloud Platform Console, the monitoring dashboard is displayed. If you are on a different page, you can click Cloud Monitoring Console > Monitoring Dashboard to move to the monitoring dashboard page.

The monitoring dashboard is composed of the following elements.

ItemDescription
Data Reference TimeDisplays the reference time for the data shown on the dashboard
RefreshRefreshes the dashboard based on the current time
Auto RefreshEnables or disables the auto-refresh feature for the dashboard
Period SettingSets the data retrieval period or changes the refresh cycle
Monitoring StatusDisplays the number of monitored targets and their monitoring status for each service
Event HistoryDisplays the number of events that occurred in the last 7 days as a graph by risk level
Top 5 Performance UsageDisplays the top 5 monitored targets with the highest performance usage as a graph
Event MapDisplays the number of events that occurred for each service by risk level
Event StatusDisplays a list of unprocessed events that have occurred
Table. Monitoring Dashboard Composition
Note
  • The monitoring dashboard is automatically created when you create an account in the Samsung Cloud Platform Console and cannot be deleted.
  • The widgets that make up the monitoring dashboard cannot be changed.
  • To create a dashboard with a specific widget, use a custom dashboard. For more information on custom dashboards, see Using Custom Dashboards.

Understanding Common Dashboard Features

This section describes the features that can be used in the dashboard.

Downloading Widget Images

You can download a widget as an image file (*.png) by clicking the download button in the top-right corner of the widget area.

Viewing Detailed Graph Information

When you hover over a graph with your mouse cursor, detailed information appears in a popup.

Monitoring Status

Displays the number of monitored targets and their monitoring status for each service in use.

ItemDescription
Service CategoryDisplays the service category and the number of monitored targets for each service category
  • Clicking on a service category displays the list of services and the number of monitored targets included in the category
Service ListDisplays the list of services and the number of monitored targets included in the service category
  • Clicking on the number of monitored targets for each service moves to the Performance Analysis page
Monitoring StatusDisplays the number of monitored targets and their current status
  • Clicking on the Down or Unknown items displays the service name in a popup
Event StatusDisplays the number of events that have occurred, classified by risk level (Fatal, Warning, Inform)
Note
  • The performance collection in the monitoring status displays the combined number of performance items for both Agent and Agentless methods.

Event History

Displays the number of events that occurred in the last 7 days as a graph by risk level.

  • When you hover over the graph with your mouse cursor, the event risk level and the number of occurrences for the selected date appear in a popup.
  • Occurrences: The total number of events that occurred
  • Active: The number of events that continue to occur because they meet the event occurrence conditions
  • Inactive: The number of events that no longer occur because they do not meet the event occurrence conditions
  • You can click on the risk level legend area to hide or show the corresponding graph.

Top 5 Performance Usage

Displays the top 5 monitored targets with the highest performance usage as a graph.

  • When you hover over the graph with your mouse cursor, the full name of the selected target and its current performance value appear in a popup.
  • Clicking on the graph opens the Monitored Target Details popup window for the corresponding target.
ItemDescription
CPU Usage/Core [Basic]The percentage of CPU time used, excluding Idle and IOWait states
Memory Used [Basic]The current amount of used memory
Disk Read Bytes [Basic]The number of disk read bytes
Disk Write Bytes [Basic]The number of disk write bytes
Note
  • The monitoring dashboard only displays the performance of Virtual Servers. To display the top 5 performance of other service types, you must select and configure them in a custom dashboard.

Event Map

Displays the number of events that occurred for each service by risk level.

  • When you hover over a square with your mouse cursor, the name of the monitored target appears in a popup.
  • Clicking on a service item in the event map opens the Monitored Target Details popup window for the corresponding service.

Each item’s risk level is as follows.

ItemDescription
No RuleA state where it is impossible to determine whether it is normal or abnormal. It means that there is no threshold setting value, so the state cannot be determined.
NORMALA normal state. It means that the threshold was not exceeded, so no event occurred.
INFORMThe lowest level of risk. It includes simple notification-level information.
WARNINGA medium level of risk.
FATALThe highest level of risk.

Event Status

Displays a list of events that have occurred and are still active.

  • Events are displayed in the order they occurred most recently.

3.2.2 - Analyzing Performance

In Performance Analysis, you can check the main performance items of the monitoring target and view the current data and history of each performance item. Users can check the performance status of the monitoring target they manage by service or period and analyze the results by comparing specific performance.

Getting Started with Performance Analysis

You can start performance analysis by selecting a monitoring target directly or entering search conditions. To analyze performance by searching for a monitoring target, follow these steps:

  1. Click Cloud Monitoring Console > Performance Analysis. You will be moved to the Performance Analysis page.
  2. Enter the search conditions for the monitoring target you want to analyze in the search area, and then click Search.
ItemDescription
Search AreaDetailed search filters are displayed differently in the search area depending on the service type
  • Click the Detailed Search button to perform a detailed search.
  • Multiple condition items can be selected for each detailed search filter
Number of Monitoring Targets DisplayedDisplays the number of search results and the number of performance items that can be viewed at a time in the list
  • The default value for the number of performance items displayed in the list is 20.
  • The number of items listed can be changed to 10, 20, 30, 40, 50, or 100
Search InformationDisplays the search result values for the search condition items
  • Monitoring target, service status, event level
  • Clicking the risk icon displayed in the event risk will open a popup window with the most recent event details for that risk.
Performance IndicatorInformation Displays the main performance indicators for the monitoring target based on the service type
  • Refer to the list of main performance indicators by service and the collection information by instance type and status for DB services
Detailed ViewCheck the detailed information of the corresponding monitoring target
Performance ComparisonSelect a monitoring target to compare performance
Table. Performance Analysis

Checking Performance Details

To check the detailed performance information of a monitoring target, follow these steps:

  1. Click the monitoring target you want to check in the performance analysis list. The Monitoring Details popup window will open.
  2. Click the Performance tab.
    • When you place the mouse cursor over the graph, the values of each performance item will appear in a popup window.
    • You can set the query period or change the refresh cycle by clicking the icon in the top right corner.
    • You can select the graph display method by clicking the Detailed or Summary buttons in the top left corner of the performance chart.
ItemDescription
Basic InformationDisplays basic information about the monitoring target
DetailedDisplays the performance chart of the monitoring target in detail
  • Check one chart in detail
SummaryDisplays the performance chart of the monitoring target in a checkerboard format
  • Check multiple charts at a glance
Query Period Setting
  • Date/Time: Displays the query base time of the data.
  • Refresh: Refreshes the data directly to the current time.
  • Start/Stop: Enables or disables the automatic refresh function.
  • Settings: Sets the data query period or changes the automatic refresh cycle
Performance ComparisonCreates a chart to compare the performance of the monitoring target and makes it possible to compare each performance
Performance ChartDisplays the performance chart of the monitoring target as a graph
  • If there is only one graph, the last collected value is displayed with the unit in the top right corner.
  • If there are multiple graphs, ⓘ is displayed in the top right corner, and when you place the mouse cursor over it, the last collected value of each graph appears in a popup window.
  • When you place the mouse cursor over the graph, the performance item value at the specified time appears in a popup window.
Table. Monitoring Target Details
Note
  • The collection cycle of performance values may vary depending on the service.
  • The data in the chart is expressed in 30 points, and the data collection interval according to the data query range (time) is as follows. (The expression point may vary depending on the collection time error)
    • 30 minutes: approximately 1-minute interval
    • 60 minutes: approximately 2-minute interval
    • 3 hours: approximately 6-minute interval
    • 6 hours: approximately 12-minute interval
    • 12 hours: approximately 24-minute interval
    • 24 hours: approximately 48-minute interval
    • 3 days: approximately 144-minute interval (2 hours 24 minutes)
    • 7 days: approximately 336-minute interval (5 hours 36 minutes)
    • 14 days: approximately 672-minute interval (11 hours 12 minutes)
    • Custom: The user-specified range (minutes) divided by 30
  • Each point’s data is expressed as the maximum value in the query range (time), and you can change the statistical type in the detailed chart.

Comparing Performance

You can check the performance items of each monitoring target and select the desired performance items to compare.

Getting Started with Performance Comparison

You can create a chart to compare the performance of the monitoring target and compare each performance.

Note
  • Only performance items of the same service type can be compared.
  • Performance items may be added depending on the detailed attributes of the service type.
    • Windows OS performance of VM
    • Kibana-related performance of Search Engine

To start performance comparison, follow these steps:

  1. Click Cloud Monitoring Console > Performance Analysis. You will be moved to the Performance Analysis page.

  2. Enter the search conditions for the monitoring target you want to analyze in the search area, and then click Search.

  3. Select all the monitoring targets you want to compare and click Performance Comparison. A popup window will open where you can compare performance.

    ItemDescription
    Monitoring TargetDisplays the service type of the monitoring target to be compared. Click to change the service
    • Changing the service will delete all charts created so far.
    • Click Add to search for and add the monitoring target of the currently selected service
    • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking X or Delete All
    Performance ItemDisplays all performance items collected by the currently selected service
    • Check the performance items you want to compare, and they will be included in the chart.
    Chart Display MethodSelects the display method for the performance comparison chart
    • Detailed: The performance comparison chart is displayed in detail (default)
    • Summary: The performance comparison chart is displayed briefly
    Query Period Setting
    • Date/Time: Displays the query base time of the data
    • Refresh: Refreshes the data directly to the current time.
    • Start/Stop: Enables or disables the automatic refresh function.
    • Settings: Sets the data query period or changes the automatic refresh cycle
    Chart AreaDisplays a chart comparing the performance of the monitoring targets based on the selected performance items
  4. Click Add. A popup window will open where you can add a monitoring target.

  5. Select the monitoring target you want to compare and click OK.

    • If you select Kubernetes Engine, you must also select its subtype.
  6. Check the performance items you want to compare. The corresponding performance items will be added to the chart.

Checking the Chart

The performance comparison result is displayed as a chart. You can change the shape of the created chart or download it as an image or Excel file.

  1. When you place the mouse cursor over the graph, the performance item value at the specified time appears in a popup window.
  2. You can hide or show the graph by clicking the target item in the legend area.
    ItemDescription
    Statistical MethodSets the statistical method to be displayed as a graph
    • Displays statistics from 5 minutes to 6 hours.
    • Basic, Maximum, Minimum, Average, Sum can be selected, and multiple methods can be selected at the same time. The selected items are displayed in the legend area
    Chart TypeSelects the type of graph to be displayed in the chart
    • Line: Line graph
    • Stacked Area: Area graph
    • Scatter: Scatter graph
    Chart DownloadChecks and downloads the raw data of the chart
    • Chart PNG File: Downloads the chart as an image file (PNG).
    • Chart Excel File: Downloads the data of the performance items displayed in the chart as an Excel file. The chart display data is a set of data automatically collected according to the query range.
    • Raw Excel File: Downloads all the data of the performance items displayed in the chart for the query range period as an Excel file.
    Time Series Graph Widget AdditionAdds the chart to a user-defined dashboard as a time series graph widget
    • Clicking will open a popup window to add a time series graph widget.
    DeleteDeletes the performance comparison result chart
    Performance Comparison StatusDisplays the performance comparison result as a graph
    • When you place the mouse cursor over the graph, the performance comparison status at that time is displayed in a popup window.

3.2.3 - Analyzing Logs

In log analysis, the log of the monitoring target is collected and its contents are checked, and it can be monitored by converting it into an indicator, which is a structured data. Basic collection logs are provided for each monitoring target, and users can create custom logs to collect and check desired logs in addition.

Reference
To use log analysis, you must install and operate a log collection agent in advance. For more information on installing and operating log agents, please refer to Managing Agents. To collect logs from Kubernetes Engine, you must set up log collection in the Samsung Cloud Platform Console.

Start log analysis

You can check the log status list or search for the monitoring target log to check. To check the log status list, follow the procedure below.

  1. Click Cloud Monitoring Console > Log Analysis > Log Status. You will be taken to the Log Status page.
  2. Enter the search conditions of the service to be analyzed in the search area, and then click Log Search.
    • A list of services that match the search criteria and search information will be displayed at the bottom.
    • Clicking the Detail View button for each service displays detailed log information for the service.
      ItemDescription
      Search AreaThe search filters displayed in the search area may vary depending on the service type
      • Advanced Search can be done by clicking the Advanced Search button.
      • Each detailed search filter condition item can be selected one or more
      Number of items to display for monitoring targetsDisplays the number of search results and the performance number that can be viewed at once in the list
      • The default is to view 20 at a time.
      • The number of items listed can be changed to view 10, 20, 30, 40, 50, or 100 at a time
      Search InformationDisplays the search result value for the search condition item
      Detailed ViewCheck the detailed information of the corresponding monitoring target
      Log SearchSearch logs by combining keywords and queries and check detailed history
Reference
If a Virtual Server or Node connected to the monitoring target exists, the status diagram will also be displayed in the search information area. The name of the monitoring target can use Korean, English uppercase and lowercase letters, numbers, and special symbols (-, _, .) and can be entered up to a maximum of 100 characters. If the monitoring target does not have permission, information about the target without permission and a permission check message will be displayed as a pop-up.

Check log details

You can view the detailed log records and log graphs of the monitoring target.

Checking the log list

You can check the log details in the monitoring detail pop-up window. To check the monitoring details of the log, follow the next procedure.

  1. Click Cloud Monitoring Console > Log Analysis > Log Status. You will be taken to the Log Status page.

  2. Click on the log to check the detailed information on the Log Status page. The Monitoring Details popup window will open.

  3. Click the log tab. When you place the mouse cursor on the graph, the value of each log item appears in a popup window.

    • You can set the inquiry period or change the refresh cycle by clicking the icon at the top right.
    • You can select the graph display method by clicking the Detail, Summary buttons at the top left of the log chart.
    ItemDescription
    Basic InformationDisplays basic information about the monitoring target
    DetailsThe chart for each log of the monitoring target is unfolded and displayed
    • Check one chart in detail
    SummaryPerformance charts of monitoring targets are displayed in a checkerboard format
    • Check multiple charts at a glance
    Setting the inquiry period
    • Date/Time: Displays the standard time of the data inquiry.
    • Refresh: Refreshes directly to the current time.
    • Start/Stop: Turns the automatic refresh function on or off.
    • Settings: Sets the data inquiry period or changes the automatic refresh cycle
    Performance comparisonCombine keywords and queries to search logs and check detailed history
    Performance-based chartThe log-based chart of the monitoring target is displayed as a graph
    • If you place the mouse cursor over the graph, the log item value at the specified time will appear in a popup window.

Check by searching the log

You can search logs by combining keywords and queries, and check the details.

Reference
The presence and frequency of keywords can be converted into indicators and displayed as charts on the dashboard page, or set up related events to receive notifications.

To search logs, follow the next procedure.

  1. Click Cloud Monitoring Console > Log Analysis > Log Status. You will be taken to the Log Status page.

  2. Click Log Status on the Log Search page. It moves to the Log Search page.

    ItemDescription
    Monitoring targetIndicates the type of service for the monitoring target to be compared
    • Click the monitoring target list to change the service
    • If the service is changed, all charts created so far will disappear.
    • Click the Add button to search for and add the monitoring target of the currently selected service
    • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking X or Delete all.
    Search ConditionSet the condition for the log to be searched
    Setting the inquiry period
    • Date/Time: Displays the standard time of the data inquiry.
    • Refresh: Refreshes directly to the current time.
    • Start/Stop: Turns the auto-refresh function on or off.
    • Settings: Sets the data inquiry period or changes the auto-refresh cycle
    The graph of log occurrenceLog occurrence graph
    Occurrence log messageLog messages that occurred from the monitoring target are displayed by time
  3. Add button is clicked. A popup window that can add a monitoring target will open.

  4. Click the monitoring target and select the log file you want to add.

  5. Once the log file selection is complete, click the Confirm button.

  6. Enter the search conditions and click the Search button. The search results will be displayed on the log volume graph and the occurred log message.

    ItemDescription
    Add MetricAdd a metric to the log search results
    • Use after searching logs
    Execution HistoryCheck the list of search conditions that were recently executed for the search
    • Execution history displays up to 20 most recently executed search conditions
    • Select the desired execution history to input as the current search condition
    Search fieldSelect search field
    ConditionSelect search condition
    • like , !like , = , != , <= , >= , > , < can be selected
    Search valueEnter the keyword to search
    Log SearchSelect an operator (AND, OR) for the newly added search condition
    • Only displayed when a new search condition is added
    Add conditionAdd new search condition

  7. When searching logs, the log history corresponding to the entered condition is displayed as a chart.

    • Log history is displayed in seconds.
      ItemDescription
      Log occurrence graphThe log occurrence during the set period is displayed as a graph
      • If you place the mouse cursor over the graph, the value of each log item appears in a popup window.
      • Clicking on the bar graph of the graph displays the list of logs at that point in time.
      Setting the inquiry period
      • Date/Time: Displays the reference time of the data
      • Refresh: Refreshes directly to the current time.
      • Start/Stop: Turns the automatic refresh function on or off.
      • Settings: Sets the data inquiry period or changes the automatic refresh cycle
      Monitoring targetThe monitoring target list is displayed
      • If you select a monitoring target to check the log message, the contents will be displayed in the log list
      Log listLog messages that occurred in the monitoring target are displayed by time
      • Clicking the button in the log list displays the full message of the log
      • Click download to download the currently displayed log message in Excel and TXT file formats

Check the status of log collection

You can check the collection information of major logs for the past 7 days in a chart.

When you place the mouse cursor on the graph, detailed information appears in a pop-up window. Only collected logs are aggregated, and uncollected logs are not displayed in the current status.

Reference

When you create an * Account, it provides 1GB of virtual capacity by default to store the collected logs.

  • All logs can be stopped and restarted for collection as needed.

To check the log collection status, click Cloud Monitoring Console > Log Analysis > Log Collection Dashboard.

ItemDescription
Accumulated log occurrence amountAmount of logs collected from the 1st of each month, displayed in GB
  • Displays the cumulative usage of the allocated total virtual capacity so far, as a percentage.
Recent 7-day log collection amountThe amount of logs collected over the past 7 days is displayed in a graph by service type
  • The line graph with a notch shows the quantity (kb), and the bar graph shows the cumulative usage rate.
  • Click on the monitoring target in the legend area to display only the corresponding graph
Service-specific log occurrence rateDisplays the log collected over the past 7 days, classified by service
  • When you click on the bar graph representing each service, the monitoring target with the most collected logs within the service is displayed on the log collection TOP 10 chart.
Log Collection Top 10Displays the top 10 monitoring targets with the most logs collected in the last 7 days within the selected service in the log occurrence rate by service as a graph
  • Click on each point on the graph to view the detailed log records
  • Click on the monitoring target in the legend area to display only the corresponding graph
  • Clicking on the graph of the target service moves to the Log Status page
Reference
To perform monitoring related to logs, you must install and operate the log collection agent in advance. For more information on installing and operating log agents, please refer to Managing Agents. The accumulated log is stored up to a maximum of 1GB. If 1GB is exceeded, old logs are automatically deleted from oldest to newest.

Check the status of the indicator settings

You can create metrics to display the occurrence of log patterns over time as a time series. To check the list of metrics, click Cloud Monitoring Console > Log Analysis > Current Metric Settings.

Reference
The metrics converted to time series data can be set as an event or registered on the dashboard for real-time monitoring.
ItemDescription
Search areaThe search filter displayed in the search area may vary depending on the service type
  • Advanced search can be done by clicking the Advanced search button.
  • Each detailed search filter condition item can be selected one or more
Number of items to display for monitoring targetsDisplay search results
  • The default is to display 20 at a time.
  • The number of items listed can be changed to display 10, 20, 30, 40, 50, or 100 at a time
Search InformationDisplays the search result value for the search condition item
AddAdd a new indicator
DeleteSelect and delete indicators in search information

Check the details of the indicator

To view detailed information about the metric, follow these steps.

  1. Cloud Monitoring Console > Log Analysis > Metric Setting Status will be clicked. It moves to the Metric Setting Status page.
  2. On the Indicator Setting Status page, click the indicator name to check detailed information. The Indicator Details popup window will open.

Adding Indicators

You can add new metrics to display the desired log data as a time series.

Reference
The log indicator can only be set for the monitoring target where the log agent is installed or logs are collected. For more information on installing and operating log agents, see Managing Agents.

To add a new metric, follow the procedure below.

  1. Cloud Monitoring Console > Log Analysis > Metric Setting Status will be clicked. It moves to the Metric Setting Status page.

  2. On the Indicator Setting Status page, click the Add button. The Add Indicator popup window opens.

  3. Enter Indicator Name.

    • Indicator names can only use English uppercase and lowercase letters, underscores (_), periods (.), and hyphens (-).
    • To distinguish metrics from general performance, the prefix metricfilter. is automatically added and cannot be deleted or changed.
    ItemDescription
    Indicator NameEnter the name of the new indicator to be created
    Monitoring TargetIndicates the type of service for the monitoring target to be compared
    • Click the monitoring target list to change the service
    • If the service is changed, all charts created so far will disappear.
    • Click the add button to search for and add the monitoring target of the currently selected service
    • The selected monitoring target is displayed on the page and can be deleted by clicking X or delete all
    Search ConditionsSet conditions for logs to be searched
    Set query period
    • Date/Time: Displays the reference time for data query
    • Refresh: Refreshes directly to the current time.
    • Start/Stop: Turns automatic refresh on or off.
    • Settings: Allows setting the data query period or changing the automatic refresh cycle.
    Log Volume GraphWhen searching for logs, the log history that matches the entered conditions is displayed as a chart
    Occurrence Log MessageLog messages that occurred from the monitoring target are displayed by time
  4. Add button is clicked. A popup window that can add monitoring targets will be opened.

  5. Click the monitoring target and select the log file you want to add.

  6. Once the log file selection is complete, click the Confirm button.

  7. Enter the search conditions and click the Search button. The search results will be displayed in the log volume graph and occurrence log message.

    ItemDescription
    Add MetricAdd metrics to log search results
    • Use after searching logs
    Execution HistoryCheck the list of search conditions that were recently executed for searching
    • Execution history displays up to 20 most recently executed search conditions
    • Can input the desired search history as the current search condition
    Search FieldSelect Search Field
    ConditionSelect search condition
    • like , !like , = , != , <= , >= , > , < can be selected
    Search valueEnter the keyword to search
    OperatorSelect an operator (AND, OR) for the newly added search condition
    • Only displayed when a new search condition is added
    Add conditionAdd new search condition
  8. Click the Confirm button. A new metric will be added with a toast popup message.

Modifying Indicator Search Conditions

To modify the search criteria of the indicator, follow the next procedure.

  1. Cloud Monitoring Console > Log Analysis > Metric Setting Status will be clicked. It moves to the Metric Setting Status page.
  2. On the Indicator Setting Status page, click the Indicator Name of the indicator you want to modify. The Indicator Details popup window will open.
  3. Indicator Details popup window, click the Edit button. The Edit Indicator popup window opens.
  4. In the Modify Indicator popup window, modify the search conditions and click the Confirm button. The indicator will be modified along with a toast popup message.

Deleting Indicators

To delete an indicator, follow these steps.

Reference
If there are charts or event policies using the metric you want to delete, you cannot delete the metric.
  1. Cloud Monitoring Console > Log Analysis > Click Metric Setting Status. You will be taken to the Metric Setting Status page.
  2. On the Indicator Setting Status page, select the indicator to be deleted and click the Delete button. The indicator will be deleted along with a toast popup message.

3.2.4 - Managing Events

An event is a setting that alerts users when the performance value of a monitored target meets certain conditions. By setting up events, users can grasp important monitoring information without missing it. For example, if an event is set to occur when a performance value related to overload exceeds a certain threshold, users will receive notifications whenever there is a risk of overload while operating the resource. Users can then take action before problems occur.

In event management, users can create events to alert designated users when specific values occur during monitoring.

Checking Event Status

The event status section displays information about all occurred events, related performance items, and event notification history. To check the event status list, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Status. The Event Status page will be displayed.
  2. On the Event Status page, enter the search conditions for the service you want to check in the search area, and then click the Search button.
    ItemDescription
    Search AreaThe search filter displayed in the search area varies depending on the service type.
    • Click the Detailed Search button to perform a detailed search.
    • Multiple conditions can be selected for each detailed search filter.
    Number of Monitoring Targets DisplayedDisplays the number of search results and the number of performance items that can be viewed at once in the list.
    • The default value for the number of performance items displayed in the list is 20 per page.
    • The number of performance items displayed in the list can be changed to 10, 20, 30, 40, 50, or 100 per page.
    Search InformationDisplays the search result values for the search condition items.
    • Clicking on the message content for each service allows you to check the detailed information of the event.
    Detailed ViewDisplays detailed information about the corresponding monitoring target.
    Table. Event List
Note
  • If a Virtual Server or Node is connected to the monitoring target, the status will also be displayed in the search information area.
  • The name of the monitoring target can include Korean, English ( uppercase and lowercase), numbers, and special characters (-, _, .), with a maximum of 100 characters.

Viewing Event Status List

In the monitoring detail popup window, you can check the event information, occurrence time, and duration. To check the event occurrence status, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Status. The Event Status page will be displayed.
  2. On the Event Status page, click the Event tab.
    ItemDescription
    Event StatusDisplays the event message and occurrence time.
    ActiveDisplays only events that are currently active.
    AllDisplays all events.
    Event DetailsDisplays detailed information about the selected event message.
    Table. Event Tab

Checking Event Details

To check the event details, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Status. The Event Status page will be displayed.
  2. On the Event Status page, click the Event tab.
  3. On the Event Status page, select the event you want to check the details for, and then click Event Details. You can then check the event issuance conditions, performance items, and notification history.
ItemDescription
Monitoring TargetDisplays the name of the monitoring target.
Occurrence ConditionDisplays the occurrence condition of the event.
Performance ItemDisplays a chart for the performance item.
  • Placing the mouse cursor over the graph displays the detailed performance value for each time period.
Notification HistoryDisplays the entire notification history.
Event Setting DetailsDisplays the setting information for the corresponding event.
Table. Event Details

Managing Event Settings

You can set up detailed event settings, such as the monitoring target, performance value that serves as the basis for event occurrence, event risk level, and event notification recipient. When the data collected from the monitoring target meets the conditions set in the event policy, notifications are sent to users via email, SMS, or messaging.

Note
  • Event policies can only be set when a monitoring target is specified, and policies for Auto-Scaling Groups can be set on a group-by-group basis.

Checking Event Settings

To check the event settings, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, enter the search conditions for the service you want to check in the search area, and then click the Search button.
    ItemDescription
    Search AreaThe search filter displayed in the search area varies depending on the service type.
    • Click the Detailed Search button to perform a detailed search.
    • Multiple conditions can be selected for each detailed search filter.
    Number of Monitoring Targets DisplayedDisplays the search results.
    • The default value is 20 per page.
    • The number of performance items displayed in the list can be changed to 10, 20, 30, 40, 50, or 100 per page.
    Monitoring TargetDisplays the name of the monitoring target.
    • Checking the box selects the monitoring target, and the Delete, Activate, and Notification Recipient buttons are activated.
    Performance ItemDisplays the performance item that is the target of the event setting.
    Individual ItemDisplays the individual performance item under the performance item.
    • If there are no individual items, they will not be displayed.
    Type/UnitDisplays the value type and unit of the corresponding performance item.
    Event LevelDisplays the risk level of the corresponding event.
    • The risk level is set by the user when adding an event.
    • Fatal: The most critical level.
    • Warning: The middle level of risk.
    • Information: The lowest level of risk and reference level.
    ThresholdDisplays the reference value used to compare the performance value.
    Notification RecipientDisplays the recipient of the event notification.
    • Placing the mouse cursor over the name displays the entire list.
    Policy StatusDisplays whether the event is activated or not.
    Detailed ViewDisplays detailed event information and allows modification.
    • Clicking Detailed View opens a popup window with detailed information about the corresponding event.
    AddAdds an event.
    DeleteDeletes an event.
    ActivateActivates or deactivates an event.
    Notification RecipientDisplays and manages event notification recipients.
    Table. Event Settings
Note
  • The name of the monitoring target can include Korean, English (uppercase and lowercase), numbers, and special characters (-, _, .), with a maximum of 100 characters.
  • If you do not have permission for the monitoring target, a message will be displayed indicating that you do not have permission, along with the target information.

Checking Detailed Event Settings

You can check detailed information about the monitoring target and event conditions, and modify the event conditions and notification information.

Adding Event Settings

To add event settings, follow these steps:

Note
  • Event policies can only be set when a monitoring target is specified.
  • Policies for Auto-Scaling Groups can be applied on a group-by-group basis.
  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.

  2. On the Event Settings page, click the Add button. The Add Event Settings popup window will be displayed.

    ItemDescription
    Target NameSelect the monitoring target to add event settings for.
    • Clicking the monitoring target list changes the service.
    • Changing the service will delete all event conditions created so far.
    • Click the Add button to search for and add the monitoring target of the currently selected service.
    • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking the X or Delete All button.
    Event Settings AreaSet the performance and occurrence conditions for the event.
    Notification Information AreaSet the notification recipient and notification method for the event.
    Table. Add Event Settings Popup Window

  3. In the monitoring target area, select the service type and then click the Add button. The Add Monitoring Target popup window will be displayed.

  4. Select the monitoring target and then click the Confirm button.

    • You can select multiple monitoring targets at the same time.
    • If there are multiple monitoring targets, the set event will be added to each monitoring target.
    • If you select Kubernetes, you must also select the subtype.
  5. In the performance item area, click the performance item you want to add an event for, and then enter the event occurrence condition.

    • The number of times the performance item is added is displayed next to the performance item name.
    • If you select multiple performance items, you must enter the event occurrence condition for each performance item.
      ItemDescription
      Event Policy TemplateSelect an existing event policy template to apply.
      Performance ItemClick the performance item to set the event occurrence condition.
      Event LevelSet the event level.
      • Fatal: The most critical level.
      • Warning: The middle level of risk.
      • Information: The lowest level of risk and reference level.
      Performance TypeSelect the reference value used to determine whether the event occurs.
      • Collected Value: Uses the current value.
      • Delta Value: Uses the difference between the previous value and the current value.
      ThresholdSet the reference value used to compare the performance value.
      • This is the criterion for determining whether the event occurs.
      • Only numbers and decimal points can be entered.
      Comparison MethodSelect the method used to compare the performance value and the threshold.
      • Range: Checks if the performance value is within the specified range of the threshold.
      • Match: Checks if the performance value matches the threshold.
      • Mismatch: Checks if the performance value does not match the threshold.
      • Greater Than: Checks if the performance value is greater than the threshold.
      • Greater Than or Equal To: Checks if the performance value is greater than or equal to the threshold.
      • Less Than: Checks if the performance value is less than the threshold.
      • Less Than or Equal To: Checks if the performance value is less than or equal to the threshold.
      Individual ItemSpecifies the individual performance item under the performance item as the event condition.
      • This is only activated if the performance item can collect individual items.
      PrefixAdds a prefix to the event message.
      • This is used as a keyword to search for the event in the Event Status page.
      StatisticsSets the statistical method to apply to the collected performance values.
      • If a statistical method is set, the performance value to which the statistical method is applied is compared to the threshold to determine whether the event occurs. If not set, the most recent performance value is compared to the threshold.
      • Statistical Method: Selects one of the maximum, minimum, average, or sum to calculate the collected performance values.
      • Statistical Period: Sets the period for which the statistical method is applied. This is the period from the most recently collected performance value.
      Continuous Occurrence CountSets the number of consecutive monitoring values that meet the event occurrence condition.
      • This value is used as sensitivity to determine whether the event is a momentary anomaly or an actual event.
      Event Occurrence Notification TimeSets the time zone for event policy settings.
      Table. Add Event Settings - Event Settings Area
  6. In the Notification area, you can set up notifications.

    ItemDescription
    Notification Recipient Selection AreaSelect the notification recipient.
    • Clicking the Delete button after selecting the notification recipient deletes the recipient.
    Notification Recipient/GroupDisplays the list of recipients to whom the event notification will be sent.
    Event Risk LevelDisplays the risk level of the set event.
    Notification MethodDisplays the method used to send notifications to the recipient.
    AddAdds a new notification recipient from the address book.
    DeleteDeletes the notification recipient from the list.
    Table. Add Event Settings - Notification Information Area

  7. Check the notification recipient and then click the Confirm button.

Note
  • Only the Root user or IAM user of an account can be added as a notification recipient.
  • Multiple recipients can be selected at the same time.
  1. Set the notification method for each notification recipient based on the event risk level.

    • The notification method can be selected from email, SMS, or messaging, and multiple methods can be selected at the same time.
  2. After setting the notification method, click the Confirm button.

Modifying Event Settings

To modify the event conditions and notification recipient information, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, enter the search conditions for the service you want to modify in the search area, and then click the Search button.
  3. In the event policy list, click the Detailed View button for the event policy you want to modify. The Event Setting Details page will be displayed.
  4. On the Event Setting Details page, click the Modify button. The Modify Event Settings page will be displayed.
  5. On the Modify Event Settings page, enter the modified information and then click the Confirm button.
    • You can modify the event conditions and notification information.

Deleting Event Settings

To delete event settings, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, enter the search conditions for the service you want to delete in the search area, and then click the Search button.
  3. In the event policy list, check the event policy you want to delete and then click the Delete button.
  4. In the confirmation popup window, click the Confirm button.

Changing Event Setting Activation

You can easily change the activation status of event policies.

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, enter the search conditions for the service you want to delete in the search area, and then click the Search button.
  3. In the event policy list, check the event policy you want to change the activation status for and then click the Activate button. The Policy Activation popup window will be displayed.
  4. Select the activation status and then click the Confirm button.
    • You can change the activation status in bulk by clicking the Activate All or Deactivate All button.
Note
Deactivating an event policy will deactivate all active events that occurred due to the selected event policy.

Changing Event Notification Recipients

You can check and change the notification recipients for event occurrences in bulk.

Note
  • The event notification recipient change function is intended to change the notification recipients in bulk. Therefore, existing notification recipients will be deleted and changed to the new notification recipient settings.
  • To check and change the notification recipients for each policy, click the Modify button on the policy details page.
  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.

  2. On the Event Settings page, enter the search conditions for the service you want to delete in the search area, and then click the Search button.

  3. In the event policy list, check the event policy you want to modify and then click the Notification Recipient button. The Notification Recipient page will be displayed.

  4. On the Notification Recipient page, select the user to add as a notification recipient and then click the Confirm button.

    ItemDescription
    Event Policy ListDisplays the list of event policies to change the notification recipients for.
    • Click Add to add policies to change.
    • Clicking the Delete button for a policy deletes the policy.
    User Search AreaEnter the name, email, phone number, or company name to search for users.
    Notification Address BookUse the address book to check and add users.
    Search User ListDisplays the list of users included in the address book or search results.
    • Checking the user adds them to the notification recipient list.
    Notification Recipient ListDisplays the list of users to be added as notification recipients for the event policies displayed in the list.
    • Checking the user and clicking the Delete button removes the user from the list.
    Table. Changing Event Notification Recipients

Managing Event Templates

You can create event templates by setting monitoring targets, performance values that serve as the basis for event occurrence, and event risk levels. When adding or modifying events, you can use event policy templates to easily enter event conditions.

Checking the Event Policy Template List

To check the event policy template list, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.

  2. On the Event Settings page, click Event Policy Template. The Event Policy Template page will be displayed.

  3. On the Event Policy Template page, enter the search conditions for the service you want to check in the search area, and then click Search.

    ItemDescription
    Search AreaEnter the conditions for the event policy template to search
    Add Event Policy TemplateAdd an event policy template
    Template ListDisplays the event policy templates that match the search conditions
    Table. Event Policy Template List

Adding an Event Policy Template

To add an event policy template, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.

  2. On the Event Settings page, click the Event Policy Template button. The Event Policy Template page will be displayed.

  3. On the Event Policy Template page, click the Add Event Policy Template button. The Add Event Policy Template popup window will open.

  4. In the Add Event Policy Template popup window, set the service type and template information to add the event policy template.

    • * indicates required input items.
      ItemDescription
      Service TypeSelect the service type to set the event policy
      Template NameEnter the name of the template to create
      Template DescriptionEnter a description of the template to create
      Table. Adding an Event Policy Template - Service Type and Template Name Settings
  5. In the performance item section, click the performance item to add an event and enter the event occurrence conditions.

    • The number of times the performance item is added is displayed next to the performance name.
    • If multiple performance items are selected, event occurrence conditions must be entered for each performance item.
    • * indicates required input items.
      ItemDescription
      Load Event Policy TemplateSelect an existing event policy template to apply
      Performance ItemClick the performance item to set the event condition
      Event LevelSet the event risk level
      Performance TypeSelect the performance value to use as the basis for event occurrence
      ThresholdSet the threshold value to compare with the collected performance value
      Comparison MethodSelect the comparison method to determine event occurrence
      Individual ItemSpecify individual performance items as event conditions
      PrefixAdd a prefix to the event message
      StatisticsSet the statistical method to apply to the collected performance value
      Continuous Occurrence CountSet the number of consecutive monitoring values that meet the event occurrence conditions
      Event Occurrence Notification TimeSet the time zone for event policy settings
      Table. Adding an Event Policy Template - Performance Item
  6. Set the notification target and method when an event occurs.

    ItemDescription
    AddAdd a new notification target
    DeleteDelete the selected notification target
    Notification Target/GroupDisplays the list of notification targets
    Event Risk LevelDisplays the event risk level to be notified
    Notification MethodDisplays the notification method
    Table. Adding an Event Policy Template - Notification Target Settings

Note
  • Only account members and address book registered in the account can be added as notification targets.
  • Multiple targets can be selected at the same time.
  1. Click the Confirm button. The event policy template will be added, and a toast popup message will be displayed.

Modifying and Deleting an Event Policy Template

To modify or delete an event policy template, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, click the Event Policy Template button. The Event Policy Template page will be displayed.
  3. On the Event Policy Template page, enter the search conditions for the service you want to check in the search area, and then click the Search button.
  4. Click the More button at the top right of the template you want to modify or delete, and then click Modify or Delete.
    • Modify: The template modification popup window will open. Modify the template and click the Confirm button.
    • Delete: The template will be deleted, and a toast popup message will be displayed.
  5. Click the Confirm button. The template will be deleted, and a toast popup message will be displayed.

Sharing an Event Policy Template

To share an event policy template, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Settings. The Event Settings page will be displayed.
  2. On the Event Settings page, click the Event Policy Template button. The Event Policy Template page will be displayed.
  3. On the Event Policy Template page, enter the search conditions for the service you want to check in the search area, and then click the Search button.
  4. Click the More > Share button at the top right of the template you want to share.
  5. Select the user to share with and click the > button. The selected user will be added to the shared target.
  6. Click the Confirm button. The template will be shared, and a toast popup message will be displayed.

Event Filtering

You can filter event notifications for a specific period. During the event filtering period, events will occur, but notifications will not be delivered.

To check the event filtering list, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Filtering. The Event Filtering page will be displayed.
ItemDescription
Filtering TimelineDisplays the registered filtering timeline by date
Filtering ListDisplays the registered filtering information and action status in a list
AddAdds a new event filtering
DeleteDeletes the selected event filtering
Search AreaSearches for event filtering or monitoring targets
Table. Event Filtering List
Note
The filtering timeline chart is displayed based on the time zone set for the logged-in user’s account.

Adding Event Filtering

To add event filtering, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Filtering. The Event Filtering page will be displayed.

  2. On the Event Filtering page, click the Add button. The Add Event Filtering popup window will open.

  3. In the Add Event Filtering popup window, enter the filtering information.

    ItemDescription
    Event FilteringEnter the name of the event filtering
    UsageSet the usage of the event filtering
    Time ZoneSet the time zone for the event filtering
    Repeat TypeSet the repeat type of the event filtering
    PeriodSet the period for the event filtering
    Event Filtering TargetSelect the service type and monitoring target to apply the event filtering
    Table. Adding Event Filtering

  4. Click the Confirm button. The event filtering will be added, and a toast popup message will be displayed.

Note
The event filtering modification task can be used to change the usage of the event filtering.

Modifying Event Filtering

To modify event filtering, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Filtering. The Event Filtering page will be displayed.
  2. On the Event Filtering page, click the name of the filtering you want to modify. The Event Filtering Details popup window will open.
  3. In the Event Filtering Details popup window, click the Modify button. The Modify Event Filtering popup window will open.
  4. In the Modify Event Filtering popup window, enter the modified contents and click the Confirm button. The event filtering will be modified, and a toast popup message will be displayed.

Deleting Event Filtering

To delete event filtering, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Event Filtering. The Event Filtering page will be displayed.
  2. On the Event Filtering page, select the event filtering you want to delete and click the Delete button. The event filtering will be deleted, and a toast popup message will be displayed.
    • Multiple event filterings can be selected at the same time.

Managing Notification Groups

You can manage notification targets as a group when an event occurs. Notification Groups can be used to efficiently manage notification targets and easily set up notifications.

To check the Notification Groups, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Notification Groups. The Notification Groups page will be displayed.
  2. On the Notification Groups page, you can check and manage the notification groups.
    ItemDescription
    Add Notification GroupAdds a new notification group
    Notification GroupDisplays all notification groups created by the user
    Detailed SearchSearches for notification groups by name
    Keyword SearchSearches for notification groups, user names, creation dates, and last modification dates
Note
Notification Groups are only valid within the account, so they can only be composed of users with access permissions to the account. Users who have been deleted from the access permissions are automatically excluded from the address book.

Adding a Notification Group

To add a notification group, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Add Notification Group.
  2. On the Add Notification Group page, enter the notification group name, description, and add users.
  3. Click the Save button. The notification group will be added.

Modifying a Notification Group

You can add users to a notification group or delete registered users from the group.

Adding Users

To add users to a notification group, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Notification Groups.
  2. Click the notification group you want to add users to, and then click Modify.
  3. Select the users to add.
    • Only account members can be added to the address book.
    • You can use the real-time search GUI to quickly find the desired members.
  4. Click the Save button. The user address will be added, and a toast popup message will be displayed.

Deleting a Notification Group

To delete a notification group, follow these steps:

  1. Click Cloud Monitoring Console > Event Management > Notification Groups.
  2. Click the notification group you want to delete.
  3. Select the notification group to delete and click Delete.
    • Multiple addresses can be selected at the same time.
  4. Click the Confirm button. The address will be deleted, and a toast popup message will be displayed.

3.2.5 - Using Custom Dashboards

A custom dashboard is a user-defined dashboard that allows users to select and arrange widgets according to their preferences. Users can customize the monitoring information and share the created custom dashboard with other users.
The following content is covered in Using Custom Dashboards.

Note
Custom dashboards are created separately from the Account dashboard and can display monitoring information from multiple Accounts at once.

Getting Started with Custom Dashboards

Users can create a custom dashboard and add desired widgets to view monitoring information.

Creating a Custom Dashboard

To create a custom dashboard, follow these steps:

  1. Click Custom Dashboard Management in the top-right menu. The Custom Dashboard Management page will be displayed.
  2. Click Add Dashboard. The Add Dashboard popup window will open.
  3. Enter the name of the dashboard to be created and click the Save button.
  4. The created custom dashboard will be displayed in the My Dashboards list.

Adding Widgets

Custom dashboards provide various types of widgets, such as performance statistics, comparison charts, and event lists. Users can add widgets to customize their dashboard according to their monitoring needs.

Note

To add a widget, follow these steps:

  1. Click Custom Dashboard Management in the top-right menu. The Custom Dashboard Management page will be displayed.
  2. Select the custom dashboard to add a widget from the My Dashboards list.
  3. Click the + button or Add Widget button in the top-right corner of the dashboard. The Add Widget popup window will open.
  4. Select the widget to add to the dashboard from the Add Widget popup window.
    • When a widget is selected, detailed settings and previews will be displayed.
    • For each chart, see Custom Widgets for explanations and setup methods.
  5. Click the Confirm button.
Note
Widgets are added to the dashboard with a default size.

Custom Widgets

The following types of widgets can be added to a custom dashboard:

Widget NameDescription
Title BoxDisplays a title box on the custom dashboard.
Event StatusDisplays the status of occurred events.
Monitoring StatusDisplays the number of monitoring targets and their status.
Top 5 PerformanceDisplays the top 5 monitoring targets with the highest performance usage rates.
Event MapDisplays the number of events occurred by service and risk level.
Event HistoryDisplays the number of events occurred by date and risk level.
Time Series GraphDisplays the performance of a selected monitoring target as a time series graph.
Status IndicatorDisplays the statistical values and risk levels of monitoring targets.
Instance MapDisplays the performance values of monitoring targets with different color densities.
Table. Custom Dashboard Widget Types

Title Box

Displays a title box on the custom dashboard.

  • Up to 10 title boxes can be created.
  • Multiple title boxes can be added at the same time.
ItemDescription
TitleEnter the text to be displayed on the title box.
AddAdds a new text box.
DeleteDeletes the corresponding text box.
Table. Custom Dashboard Title Box

Event Status

Displays the status of occurred events.

  • All occurred events can be displayed, or only active events can be displayed.
ItemDescription
Widget NameEnter the name of the widget.
Query RangeSelect the range of events to be displayed on the widget.
Table. Event Status

Monitoring Status

Displays the number of monitoring targets and their status.

ItemDescription
Widget NameEnter the name of the widget.
Table. Monitoring Status

Top 5 Performance

Displays the top 5 monitoring targets with the highest performance usage rates.

ItemDescription
Widget NameEnter the name of the widget.
ServiceSelect the service to check performance.
Performance ItemSelect the performance item to display.
Table. Top 5 Performance

Event Map

Displays the number of events occurred by service and risk level.

ItemDescription
Widget NameEnter the name of the widget.
Table. Event Map

Event History

Displays the number of events occurred by date and risk level.

ItemDescription
Widget NameEnter the name of the widget.
Table. Event History

Time Series Graph

Displays the performance of a selected monitoring target as a time series graph.

  • The time series graph can be changed using the dashboard’s query period setting feature.
  • When the mouse cursor is placed over the graph, the time and target performance values can be checked.
ItemDescription
Widget NameEnter the name of the widget.
ServiceSelect the service to check performance.
Monitoring TargetSelect the monitoring target to display on the graph.
Performance ItemSelect the performance item to display on the graph.
Add OptionRisk intervals can be displayed.
Table. Time Series Graph
Note

The graph type can be changed by clicking the icon in the top-right corner of the preview.

  • Line graph
  • Area graph
  • Cumulative bar graph
  • Scatter graph

Status Indicator

Displays the statistical values and risk levels of monitoring targets.

When the mouse cursor is placed over the status indicator on the monitoring dashboard, detailed information about the item can be checked.

ItemDescription
Widget NameEnter the name of the widget.
ServiceSelect the service to check performance.
Monitoring TargetSelect the monitoring target to display on the graph.
Performance ItemSelect the performance item to display on the graph.
StatisticsSelect the statistical method to display the performance values of the monitoring target.
Add OptionRisk intervals can be displayed.
Table. Status Indicator

Instance Map

Displays the performance values of monitoring targets with different color densities.

  • When the mouse cursor is placed over each heatmap, detailed information about the item can be checked.
ItemDescription
Widget NameEnter the name of the widget.
ServiceSelect the service to check performance.
Monitoring TargetSelect the monitoring target to display on the graph.
Performance ItemSelect the performance item to display on the graph.
Table. Instance Map

Viewing Custom Dashboards

To view a custom dashboard, follow these steps:

  1. Click Custom Dashboard Management in the top-right menu. The Custom Dashboard Management page will be displayed.
  2. Select the custom dashboard to view from the My Dashboards list.
ItemDescription
Dashboard ListDisplays the list of custom dashboards. The list can be clicked to change the dashboard to be viewed.
Dashboard NameDisplays the name of the user-defined dashboard.
Dashboard Settings
  • Date/Time: Displays the reference time for analysis information.
  • Refresh: Refreshes to the current time.
  • Stop/Start: Turns the automatic refresh feature on or off.
  • Settings: Allows setting the data query period or changing the automatic refresh cycle. (See Setting Query Periods)
Add WidgetAdds a new widget to the dashboard.
Edit DashboardAllows editing the currently set custom dashboard.
  • Modify Dashboard: Modifies the name of the currently selected dashboard.
  • Copy Dashboard: Copies the currently selected dashboard and creates a new custom dashboard with the same widgets.
  • Delete Dashboard: Deletes the currently selected dashboard.
  • Share Dashboard: Shares the dashboard with specific users so they can view it. For more information, see Sharing Custom Dashboards.
Custom WidgetsDisplays the widgets that make up the dashboard.
  • The position and size of widgets can be changed, or they can be modified or deleted. For more information, see Managing Custom Widgets.
  • Graphic widgets can be downloaded as image files.
Table. Custom Dashboard Information
Note
The star icon next to the dashboard name can be clicked to add the dashboard to favorites. Favorited dashboards are displayed at the top of the dashboard list.

Downloading Widgets

Graphic widgets can be downloaded as image files (*.png).
When the mouse cursor is placed over a graph widget, a download button will be displayed in the top-right corner. Clicking the download button will download the widget as an image file.

Sharing Custom Dashboards

Custom dashboards can be shared with other users so they can view the dashboard.

Note
Shared dashboards will remain shared even if the user is later removed from the current Account.

To share a custom dashboard, follow these steps:

  1. Click Custom Dashboard Management in the top-right menu. The Custom Dashboard Management page will be displayed.
  2. Select the custom dashboard to share from the My Dashboards list.
  3. Click the Share button next to the dashboard name.
  4. Enter the user ID or email address of the user to share the dashboard with and click the Share button.
  5. Click the Confirm button.

Managing Custom Dashboards

You can modify, copy, or delete custom dashboards.

  1. Click Manage Custom Dashboards from the top right menu. It moves to the Manage Custom Dashboards page.
  2. From the My Dashboard list, select the Custom Dashboard you want to check.
  3. Click the More button on the top right of the dashboard, then select the desired command.
    • Edit Dashboard: Modify the dashboard name.
    • Copy Dashboard: Copy the dashboard to create a new dashboard.
    • Share Dashboard: Share the dashboard with other users.
    • Delete Dashboard: Delete the dashboard.

Managing Custom Widgets

You can change the position and size of widgets or modify and copy them.

Changing Widget Position

You can change the position of a widget by clicking on its name and dragging it.

Changing Widget Size

To change the size of a widget, follow these steps:

  1. Place the mouse cursor over the widget. The Resize button appears at the bottom right of the widget.
  2. Click the Resize button and drag it to adjust the size as needed.

Modifying, Copying, and Deleting Widgets

To modify, copy, or delete a widget, follow these steps:

  1. Place the mouse cursor over the widget. The More button appears at the top right of the widget.
  2. Click the More button, then click the desired command.
    • Edit Widget: Modify the widget’s chart settings.
    • Copy Widget: Copy the widget to create a new widget with the same content.
    • Delete Widget: Delete the widget.

3.2.6 - Managing Agents

An agent is a module that collects performance values, logs, and Windows events from the monitoring target. To use the monitoring function, users must check the installation status of the agent and operate and manage it.

Note
  • If IP access control is set for the monitoring target, agent management cannot be used. If agent management is not available, check the IP access control setting status of the selected monitoring target.
  • The agent management function uses the sudo command, so the sudo package must be installed in advance.

Agent Management Overview

There are performance collection agents, log collection agents, and Windows event log collection agents.

  • Agents must be installed manually by the user on the monitoring target according to their needs.

Managing Agents

Managing Performance Agents

To install and manage agents, follow these steps.

  1. Click Cloud Monitoring Console > Performance Analysis. Move to the Performance Analysis page.
  2. On the Performance Analysis page, select the monitoring target and click the Details button. The Monitoring Target Details popup window opens.
  3. In the Monitoring Target Details popup window, click the Agent tab. Move to the Agent tab.
  1. Click the Performance button on the Agent tab.
  2. Click the Copy icon to the right of the installation command to copy the command.
  3. Paste the copied command into the monitoring target resource.
  4. Run the copied command on the monitoring target resource.
Note
The command uses the sudo command, so the sudo package must be installed.
ItemDescription
InstallationDownloads and runs the script file required for agent installation.
StartRuns the agent start command.
StopRuns the agent stop command.
DeleteRuns the agent delete command.
UpdateDownloads and runs the script file required for agent update.
Table. Managing Performance Agents
Note

To check the agent service status, use the following method:

  • Linux: $ sudo systemctl status metricbeat
  • Windows: Task Manager → service → metricbeat → Status(Running)

Managing Log Agents

To install and manage agents, follow these steps.

  1. Click Cloud Monitoring Console > Performance Analysis. Move to the Performance Analysis page.
  2. On the Performance Analysis page, select the monitoring target and click the Details button. The Monitoring Target Details popup window opens.
  3. In the Monitoring Target Details popup window, click the Agent tab. Move to the Agent tab.
  1. Click the Log button.
  2. Click the Copy icon to the right of the installation command to copy the command.
  3. Paste the copied command into the monitoring target resource.
  4. Run the copied command on the monitoring target resource.
Note
The command uses the sudo command, so the sudo package must be installed.
ItemDescription
InstallationDownloads and runs the script file required for agent installation.
StartRuns the agent start command.
StopRuns the agent stop command.
DeleteRuns the agent delete command.
UpdateDownloads and runs the script file required for agent update.
Table. Managing Log Agents
Note

To check the agent service status, use the following method:

  • Linux: $ sudo systemctl status filebeat
  • Windows: Task Manager → service → filebeat → Status(Running)

To add logs to be monitored, select the log addition action, enter the log name and log path correctly, and click the Generate Command button. Paste the generated command into the monitoring target resource and run it.

Managing Event Agents

To install and manage agents, follow these steps.

  1. Click Cloud Monitoring Console > Performance Analysis. Move to the Performance Analysis page.
  2. On the Performance Analysis page, select the monitoring target and click the Details button. The Monitoring Target Details popup window opens.
  3. In the Monitoring Target Details popup window, click the Agent tab. Move to the Agent tab.
  1. Click the Event button.
  2. Click the Copy icon to the right of the installation command to copy the command.
  3. Paste the copied command into the monitoring target resource.
  4. Run the copied command on the monitoring target resource.
Note
The event agent is available for Windows instances.
ItemDescription
InstallationDownloads and runs the script file required for agent installation.
StartRuns the agent start command.
StopRuns the agent stop command.
DeleteRuns the agent delete command.
UpdateDownloads and runs the script file required for agent update.
Table. Managing Event Agents
Note

To check the agent service status, use the following method:

  • Windows: Task Manager → service → winlogbeat → Status(Running)
Note
Agent command provision is provided separately from the instance status of Virtual Server (Bare Metal Server).

3.2.7 - Appendix A. Monitoring Targets by Service

Compute type

Virtual Server

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceOSAgent
Agentless
1m
LogOSAgentLog Occurrence Time
StatusOSAgentless1m
Fig. Virtual Server Monitoring Information
Reference
If the Virtual Server server type is changed, monitoring performance metric data may not be collected normally for a while. Normal performance metrics will be collected in the next collection cycle (1 minute).

GPU Server

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceOSAgent
Agentless
1m
LogOSAgentLog Occurrence Time
StatusOSAgentless1m
Fig. GPU Server Monitoring Information

Bare Metal Server

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceOSAgent1m
LogOSAgentLog Occurrence Time
StatusOSN/A-
Table. Bare Metal Server Monitoring Information

Multi-node GPU Cluster [Cluster Fabric]

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceOSAgent1m
LogOSAgentLog Occurrence Time
StatusOSN/A-
Fig. Multi-node GPU Cluster [Cluster Fabric] Monitoring Information

Multi-node GPU Cluster [Node]

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceOSAgent1m
LogOSAgentLog Occurrence Time
StatusOSN/A-
Fig. Multi-node GPU Cluster [Node] Monitoring Information

Storage type

All Storage type services have the same monitoring target, collection method, and collection cycle.

  • File Storage
  • Object Storage
  • Block Storage(BM)
  • Block Storage(VM)
DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceStorageAgentless1m
LogStorageN/A-
StatusStorageAgentless1m
Table. Storage type monitoring information

Database type

The monitoring target and collection method, and collection cycle are the same for all types of Database services.

  • PostgreSQL(DBaaS)
  • MariaDB(DBaaS)
  • MySQL(DBaaS)
  • Microsoft SQL Server
  • EPAS
  • CacheStore(DBaaS)
    • Redis
    • Valkey
CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceDatabase Process, OSAgent1m
LogDatabase Process, OSAgentLog Occurrence Time
StatusDatabase ProcessAgent1m
OSAgentless1m
Table. Database type monitoring information

Data Analytics type

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceData Analytics Process, OSAgent1m
LogData Analytics Process, OSAgentWhen a log occurs
StatusData Analytics ProcessAgent1m
OSAgentless1m
Fig. Data Analytics type monitoring information

Container type

Kubernetes Engine

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentless5m
LogCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentlessWhen a log occurs
StatusCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentless5m
Fig. Kubernetes Engine monitoring information

Container Registry

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceContainer RegistryAgentless5m
LogContainer RegistryAgentlessWhen a log occurs
StatusContainer RegistryAgentless5m
Fig. Container Registry Monitoring Information

Networking type

VPC

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceInternet GatewayAgentless5m
LogInternet GatewayN/A-
StatusInternet GatewayN/A-
Table. Internet Gateway Monitoring Information
Caution
Performance monitoring is only possible when the Internet Gateway is created.

Load Balancer(OLD)

Load Balancer(OLD)

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceLoad BalancerAgentless5m
LogLoad BalancerN/A-
StatusLoad BalancerAgentless5m
Fig. Load Balancer Monitoring Information

Load Balancer Listener(OLD)

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceLoad Balancer ListenerAgentless5m
LogLoad Balancer ListenerN/A-
StatusLoad Balancer ListenerAgentless5m
Fig. Load Balancer Listener Monitoring Information

Load Balancer

Load Balancer

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceLoad BalancerAgentless5m
LogLoad BalancerN/A-
StatusLoad BalancerAgentless5m
Fig. Load Balancer Monitoring Information

Load Balancer Listener

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceLoad Balancer ListenerAgentless5m
LogLoad Balancer ListenerN/A-
StatusLoad Balancer ListenerAgentless5m
Fig. Load Balancer Listener Monitoring Information

Load Balancer Server Group

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceLoad Balancer Server GroupAgentless5m
LogLoad Balancer Server GroupN/A-
StatusLoad Balancer Server GroupAgentless5m
Fig. Load Balancer Server Group Monitoring Information

Direct Connect

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceDirect ConnectAgentless5m
LogDirect ConnectN/A-
StatusDirect ConnectN/A-
Fig. Direct Connect Monitoring Information

Cloud WAN

DivisionMonitoring TargetCollection MethodCollection Cycle
PerformanceCloud WANAgentless10m
LogCloud WANN/A-
StatusCloud WANAgentless10m
Fig. Cloud WAN Monitoring Information

Global CDN

CategoryMonitoring TargetCollection MethodCollection Cycle
PerformanceGlobal CDNAgentless5m
LogGlobal CDNN/A-
StatusGlobal CDNAgentless5m
Fig. Global CDN Monitoring Information

3.2.8 - Appendix B. Performance Items by Service

Compute Type

Virtual Server

Agentless (Basic Metrics)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
MemoryMemory Total [Basic]bytes1mAvailable memory in bytes
MemoryMemory Used [Basic]bytes1mCurrently used memory in bytes
MemoryMemory Swap In [Basic]bytes1mSwapped memory in bytes
MemoryMemory Swap Out [Basic]bytes1mSwapped memory in bytes
MemoryMemory Free [Basic]bytes1mUnused memory in bytes
DiskDisk Read Bytes [Basic]bytes1mRead bytes
DiskDisk Read Requests [Basic]cnt1mNumber of read requests
DiskDisk Write Bytes [Basic]bytes1mWrite bytes
DiskDisk Write Requests [Basic]cnt1mNumber of write requests
CPUCPU Usage [Basic]%1mAverage system CPU usage over 1 minute
StateInstance State [Basic]state1mInstance state
NetworkNetwork In Bytes [Basic]bytes1mReceived bytes
NetworkNetwork In Dropped [Basic]cnt1mDropped received packets
NetworkNetwork In Packets [Basic]cnt1mNumber of received packets
NetworkNetwork Out Bytes [Basic]bytes1mSent bytes
NetworkNetwork Out Dropped [Basic]cnt1mDropped sent packets
NetworkNetwork Out Packets [Basic]cnt1mNumber of sent packets
Table. Virtual Server (Agentless) Performance Items
Note
  • For Windows OS, you need to install the Balloon Driver or the monitoring performance agent to provide memory performance indicators.

Agent (Detailed Metrics)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
CPUCore Usage [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCore Usage [System]%1mCPU time spent in kernel space
CPUCore Usage [User]%1mCPU time spent in user space
CPUCPU Corescnt1mNumber of CPU cores on the host. The maximum value of the unnormalized ratio is 100%* of the number of cores. The unnormalized ratio already reflects this value, and the maximum value is 100%* of the number of cores.
CPUCPU Usage [Active]%1mCPU time used, excluding idle and IOWait states (using all 4 cores at 100%: 400%)
CPUCPU Usage [Idle]%1mCPU time spent in idle state
CPUCPU Usage [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCPU Usage [System]%1mCPU time used by the kernel (using all 4 cores at 100%: 400%)
CPUCPU Usage [User]%1mCPU time used by the user (using all 4 cores at 100%: 400%)
CPUCPU Usage/Core [Active]%1mCPU time used, excluding idle and IOWait states (normalized by the number of cores, using all 4 cores at 100%: 100%)
CPUCPU Usage/Core [Idle]%1mCPU time spent in idle state
CPUCPU Usage/Core [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCPU Usage/Core [System]%1mCPU time used by the kernel (normalized by the number of cores, using all 4 cores at 100%: 100%)
CPUCPU Usage/Core [User]%1mCPU time used by the user (normalized by the number of cores, using all 4 cores at 100%: 100%)
DiskDisk CPU Usage [IO Request]%1mCPU time spent executing I/O requests to the device (device bandwidth utilization). If this value is close to 100%, the device is saturated.
DiskDisk Queue Size [Avg]num1mAverage queue length of requests executed on the device
DiskDisk Read Bytesbytes1mBytes read from the device per second
DiskDisk Read Bytes [Delta Avg]bytes1mAverage of system.diskio.read.bytes_delta for individual disks
DiskDisk Read Bytes [Delta Max]bytes1mMaximum of system.diskio.read.bytes_delta for individual disks
DiskDisk Read Bytes [Delta Min]bytes1mMinimum of system.diskio.read.bytes_delta for individual disks
DiskDisk Read Bytes [Delta Sum]bytes1mSum of system.diskio.read.bytes_delta for individual disks
DiskDisk Read Bytes [Delta]bytes1mDelta of system.diskio.read.bytes for individual disks
DiskDisk Read Bytes [Success]bytes1mTotal bytes read successfully. For Linux, it is assumed that the sector size is 512 and the value is the number of sectors read multiplied by 512
DiskDisk Read Requestscnt1mNumber of read requests to the disk device per second
DiskDisk Read Requests [Delta Avg]cnt1mAverage of system.diskio.read.count_delta for individual disks
DiskDisk Read Requests [Delta Max]cnt1mMaximum of system.diskio.read.count_delta for individual disks
DiskDisk Read Requests [Delta Min]cnt1mMinimum of system.diskio.read.count_delta for individual disks
DiskDisk Read Requests [Delta Sum]cnt1mSum of system.diskio.read.count_delta for individual disks
DiskDisk Read Requests [Success Delta]cnt1mDelta of system.diskio.read.count for individual disks
DiskDisk Read Requests [Success]cnt1mTotal number of successful read completions
DiskDisk Request Size [Avg]num1mAverage size of requests executed on the device (in sectors)
DiskDisk Service Time [Avg]ms1mAverage service time of I/O requests executed on the device (in milliseconds)
DiskDisk Wait Time [Avg]ms1mAverage time spent waiting for I/O requests to be executed on the device
DiskDisk Wait Time [Read]ms1mAverage disk read wait time
DiskDisk Wait Time [Write]ms1mAverage disk write wait time
DiskDisk Write Bytes [Delta Avg]bytes1mAverage of system.diskio.write.bytes_delta for individual disks
DiskDisk Write Bytes [Delta Max]bytes1mMaximum of system.diskio.write.bytes_delta for individual disks
DiskDisk Write Bytes [Delta Min]bytes1mMinimum of system.diskio.write.bytes_delta for individual disks
DiskDisk Write Bytes [Delta Sum]bytes1mSum of system.diskio.write.bytes_delta for individual disks
DiskDisk Write Bytes [Delta]bytes1mDelta of system.diskio.write.bytes for individual disks
DiskDisk Write Bytes [Success]bytes1mTotal bytes written successfully. For Linux, it is assumed that the sector size is 512 and the value is the number of sectors written multiplied by 512
DiskDisk Write Requestscnt1mNumber of write requests to the disk device per second
DiskDisk Write Requests [Delta Avg]cnt1mAverage of system.diskio.write.count_delta for individual disks
DiskDisk Write Requests [Delta Max]cnt1mMaximum of system.diskio.write.count_delta for individual disks
DiskDisk Write Requests [Delta Min]cnt1mMinimum of system.diskio.write.count_delta for individual disks
DiskDisk Write Requests [Delta Sum]cnt1mSum of system.diskio.write.count_delta for individual disks
DiskDisk Write Requests [Success Delta]cnt1mDelta of system.diskio.write.count for individual disks
DiskDisk Write Requests [Success]cnt1mTotal number of successful writes
DiskDisk Writes Bytesbytes1mBytes written to the device per second
FileSystemFilesystem Hang Checkstate1mFilesystem (local/NFS) hang check (normal: 1, abnormal: 0)
FileSystemFilesystem Nodescnt1mTotal number of file nodes in the filesystem
FileSystemFilesystem Nodes [Free]cnt1mTotal number of available file nodes in the filesystem
FileSystemFilesystem Size [Available]bytes1mDisk space available for non-privileged users (in bytes)
FileSystemFilesystem Size [Free]bytes1mAvailable disk space (in bytes)
FileSystemFilesystem Size [Total]bytes1mTotal disk space (in bytes)
FileSystemFilesystem Usage%1mPercentage of used disk space
FileSystemFilesystem Usage [Avg]%1mAverage of filesystem.used.pct for individual filesystems
FileSystemFilesystem Usage [Inode]%1mInode usage rate
FileSystemFilesystem Usage [Max]%1mMaximum of filesystem.used.pct for individual filesystems
FileSystemFilesystem Usage [Min]%1mMinimum of filesystem.used.pct for individual filesystems
FileSystemFilesystem Usage [Total]%1m-
FileSystemFilesystem Usedbytes1mUsed disk space (in bytes)
FileSystemFilesystem Used [Inode]bytes1mInode usage
MemoryMemory Freebytes1mTotal available memory (in bytes), excluding system cache and buffer memory (see system.memory.actual.free).
MemoryMemory Free [Actual]bytes1mActual available memory (in bytes). The calculation method varies depending on the OS. For Linux, it is the value of MemAvailable in /proc/meminfo, or the calculated value using available memory and cache/buffer memory if /proc/meminfo is not available. For OSX, it is the sum of available memory and inactive memory. For Windows, it is the same value as system.memory.free.
MemoryMemory Free [Swap]bytes1mAvailable swap memory
MemoryMemory Totalbytes1mTotal memory
MemoryMemory Total [Swap]bytes1mTotal swap memory
MemoryMemory Usage%1mPercentage of used memory
MemoryMemory Usage [Actual]%1mPercentage of actually used memory
MemoryMemory Usage [Cache Swap]%1mCache swap usage rate
MemoryMemory Usage [Swap]%1mPercentage of used swap memory
MemoryMemory Usedbytes1mUsed memory
MemoryMemory Used [Actual]bytes1mActually used memory (in bytes). The value of total memory minus used memory. The available memory is calculated differently depending on the OS (see system.actual.free).
MemoryMemory Used [Swap]bytes1mUsed swap memory
NetworkCollisionscnt1mNetwork collisions
NetworkNetwork In Bytesbytes1mReceived bytes
NetworkNetwork In Bytes [Delta Avg]bytes1mAverage of system.network.in.bytes_delta for individual networks
NetworkNetwork In Bytes [Delta Max]bytes1mMaximum of system.network.in.bytes_delta for individual networks
NetworkNetwork In Bytes [Delta Min]bytes1mMinimum of system.network.in.bytes_delta for individual networks
NetworkNetwork In Bytes [Delta Sum]bytes1mSum of system.network.in.bytes_delta for individual networks
NetworkNetwork In Bytes [Delta]bytes1mDelta of received bytes
NetworkNetwork In Droppedcnt1mDropped received packets
NetworkNetwork In Errorscnt1mNumber of receive errors
NetworkNetwork In Packetscnt1mNumber of received packets
NetworkNetwork In Packets [Delta Avg]cnt1mAverage of system.network.in.packets_delta for individual networks
NetworkNetwork In Packets [Delta Max]cnt1mMaximum of system.network.in.packets_delta for individual networks
NetworkNetwork In Packets [Delta Min]cnt1mMinimum of system.network.in.packets_delta for individual networks
NetworkNetwork In Packets [Delta Sum]cnt1mSum of system.network.in.packets_delta for individual networks
NetworkNetwork In Packets [Delta]cnt1mDelta of received packets
NetworkNetwork Out Bytesbytes1mSent bytes
NetworkNetwork Out Bytes [Delta Avg]bytes1mAverage of system.network.out.bytes_delta for individual networks
NetworkNetwork Out Bytes [Delta Max]bytes1mMaximum of system.network.out.bytes_delta for individual networks
NetworkNetwork Out Bytes [Delta Min]bytes1mMinimum of system.network.out.bytes_delta for individual networks
NetworkNetwork Out Bytes [Delta Sum]bytes1mSum of system.network.out.bytes_delta for individual networks
NetworkNetwork Out Bytes [Delta]bytes1mDelta of sent bytes
NetworkNetwork Out Droppedcnt1mDropped sent packets. This value is not reported by the OS, so it is always 0 on Darwin and BSD.
NetworkNetwork Out Errorscnt1mNumber of transmit errors
NetworkNetwork Out Packetscnt1mNumber of sent packets
NetworkNetwork Out Packets [Delta Avg]cnt1mAverage of system.network.out.packets_delta for individual networks
NetworkNetwork Out Packets [Delta Max]cnt1mMaximum of system.network.out.packets_delta for individual networks
NetworkNetwork Out Packets [Delta Min]cnt1mMinimum of system.network.out.packets_delta for individual networks
NetworkNetwork Out Packets [Delta Sum]cnt1mSum of system.network.out.packets_delta for individual networks
NetworkNetwork Out Packets [Delta]cnt1mDelta of sent packets
NetworkOpen Connections [TCP]cnt1mNumber of open TCP connections
NetworkOpen Connections [UDP]cnt1mNumber of open UDP connections
NetworkPort Usage%1mPort usage rate
NetworkSYN Sent Socketscnt1mNumber of sockets in the SYN_SENT state (when connecting to a remote host)
ProcessKernel PID Maxcnt1mValue of kernel.pid_max
ProcessKernel Thread Maxcnt1mValue of kernel.threads-max
ProcessProcess CPU Usage%1mPercentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value displayed by the top command on Unix systems.
ProcessProcess CPU Usage/Core%1mPercentage of CPU time used by the process since the last event. This value is normalized by the number of cores and ranges from 0 to 100%.
ProcessProcess Memory Usage%1mPercentage of main memory (RAM) used by the process
ProcessProcess Memory Usedbytes1mResident Set size. The amount of memory used by the process in RAM. On Windows, this is the current working set size.
ProcessProcess PIDPID1mProcess PID
ProcessProcess PPIDPID1mParent process PID
ProcessProcesses [Dead]cnt1mNumber of dead processes
ProcessProcesses [Idle]cnt1mNumber of idle processes
ProcessProcesses [Running]cnt1mNumber of running processes
ProcessProcesses [Sleeping]cnt1mNumber of sleeping processes
ProcessProcesses [Stopped]cnt1mNumber of stopped processes
ProcessProcesses [Total]cnt1mTotal number of processes
ProcessProcesses [Unknown]cnt1mNumber of processes with unknown or unsearchable status
ProcessProcesses [Zombie]cnt1mNumber of zombie processes
ProcessRunning Process Usage%1mProcess usage rate
ProcessRunning Processescnt1mNumber of running processes
ProcessRunning Thread Usage%1mThread usage rate
ProcessRunning Threadscnt1mTotal number of threads running in running processes
SystemContext Switchescnt1mNumber of context switches (per second)
SystemLoad/Core [1 min]cnt1mLoad over the last 1 minute, normalized by the number of cores
SystemLoad/Core [15 min]cnt1mLoad over the last 15 minutes, normalized by the number of cores
SystemLoad/Core [5 min]cnt1mLoad over the last 5 minutes, normalized by the number of cores
SystemMultipaths [Active]cnt1mNumber of active paths for external storage connections
SystemMultipaths [Failed]cnt1mNumber of failed paths for external storage connections
SystemMultipaths [Faulty]cnt1mNumber of faulty paths for external storage connections
SystemNTP Offsetnum1mMeasured offset (time difference between the NTP server and the local environment) of the last sample
SystemRun Queue Lengthnum1mLength of the run queue
SystemUptimems1mSystem uptime (in milliseconds)
WindowsContext Switchiescnt1mNumber of CPU context switches (per second)
WindowsDisk Read Bytes [Sec]cnt1mNumber of bytes read from the Windows logical disk per second
WindowsDisk Read Time [Avg]sec1mAverage time spent reading data (in seconds)
WindowsDisk Transfer Time [Avg]sec1mAverage disk wait time
WindowsDisk Usage%1mDisk usage rate
WindowsDisk Write Bytes [Sec]cnt1mNumber of bytes written to the Windows logical disk per second
WindowsDisk Write Time [Avg]sec1mAverage time spent writing data (in seconds)
WindowsPagingfile Usage%1mPaging file usage rate
WindowsPool Used [Non Paged]bytes1mNon-paged pool usage of kernel memory
WindowsPool Used [Paged]bytes1mPaged pool usage of kernel memory
WindowsProcess [Running]cnt1mNumber of currently running processes
WindowsThreads [Running]cnt1mNumber of currently running threads
WindowsThreads [Waiting]cnt1mNumber of threads waiting for processor time
Table. Virtual Server (Agent) Performance Items

GPU Server

Agentless (Basic Metrics)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
MemoryMemory Total [Basic]bytes1mAvailable memory in bytes
MemoryMemory Used [Basic]bytes1mCurrently used memory in bytes
MemoryMemory Swap In [Basic]bytes1mSwapped memory in bytes
MemoryMemory Swap Out [Basic]bytes1mSwapped memory in bytes
MemoryMemory Free [Basic]bytes1mUnused memory in bytes
DiskDisk Read Bytes [Basic]bytes1mRead bytes
DiskDisk Read Requests [Basic]cnt1mNumber of read requests
DiskDisk Write Bytes [Basic]bytes1mWrite bytes
DiskDisk Write Requests [Basic]cnt1mNumber of write requests
CPUCPU Usage [Basic]%1mAverage system CPU usage over 1 minute
StateInstance State [Basic]state1mInstance state
NetworkNetwork In Bytes [Basic]bytes1mReceived bytes
NetworkNetwork In Dropped [Basic]cnt1mDropped received packets
NetworkNetwork In Packets [Basic]cnt1mNumber of received packets
NetworkNetwork Out Bytes [Basic]bytes1mSent bytes
NetworkNetwork Out Dropped [Basic]cnt1mDropped sent packets
NetworkNetwork Out Packets [Basic]cnt1mNumber of sent packets
Table. GPU Server (Agentless) Performance Items

Agent (Detailed Metrics)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
GPUGPU Countcnt1mNumber of GPUs
GPUGPU Memory Usage%1mGPU memory usage rate
GPUGPU Memory Usedbytes1mGPU memory usage
GPUGPU Temperature1mGPU temperature
GPUGPU Usage%1mTotal GPU usage rate (using all 8 GPUs at 100%: 800%)
GPUGPU Usage [Avg]%1mAverage GPU usage rate (%)
GPUGPU Power CapW1mMaximum power capacity of the GPU
GPUGPU Power UsageW1mCurrent power usage of the GPU
GPUGPU Memory Usage [Avg]%1mAverage GPU memory usage rate
GPUGPU Count in usecnt1mNumber of GPUs in use by jobs running on the node
GPUExecution State for nvidia-smistate1mExecution result of the nvidia-smi command
CPUCore Usage [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCore Usage [System]%1mCPU time spent in kernel space
CPUCore Usage [User]%1mCPU time spent in user space
CPUCPU Corescnt1mNumber of CPU cores on the host. The maximum value of the unnormalized ratio is 100%* of the number of cores. The unnormalized ratio already reflects this value, and the maximum value is 100%* of the number of cores.
CPUCPU Usage [Active]%1mCPU time used, excluding idle and IOWait states (using all 4 cores at 100%: 400%)
CPUCPU Usage [Idle]%1mCPU time spent in idle state
CPUCPU Usage [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCPU Usage [System]%1mCPU time used by the kernel (using all 4 cores at 100%: 400%)
CPUCPU Usage [User]%1mCPU time used by the user (using all 4 cores at 100%: 400%)
CPUCPU Usage/Core [Active]%1mCPU time used, excluding idle and IOWait states (normalized by the number of cores, using all 4 cores at 100%: 100%)
CPUCPU Usage/Core [Idle]%1mCPU time spent in idle state
CPUCPU Usage/Core [IO Wait]%1mCPU time spent in wait state (disk wait)
CPUCPU Usage/Core [System]%1mCPU time used by the kernel (normalized by the number of cores, using all 4 cores at 100%: 100%)
CPUCPU Usage/Core [User]%1mCPU time used by the user (normalized by the number of cores, using all 4 cores at 100%: 100%)
DiskDisk CPU Usage [IO Request]%1mThe ratio of CPU time spent executing I/O requests for the device (device bandwidth utilization). If this value is close to 100%, the device is in a saturated state.
DiskDisk Queue Size [Avg]num1mThe average queue length of requests executed for the device.
DiskDisk Read Bytesbytes1mThe number of bytes read from the device per second.
DiskDisk Read Bytes [Delta Avg]bytes1mThe average of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Max]bytes1mThe maximum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Min]bytes1mThe minimum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Sum]bytes1mThe sum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta]bytes1mThe delta value of system.diskio.read.bytes for individual disks.
DiskDisk Read Bytes [Success]bytes1mThe total number of bytes read successfully. On Linux, it is assumed that the sector size is 512 and the value is calculated by multiplying the number of sectors read by 512.
DiskDisk Read Requestscnt1mThe number of read requests for the disk device per second.
DiskDisk Read Requests [Delta Avg]cnt1mThe average of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Max]cnt1mThe maximum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Min]cnt1mThe minimum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Sum]cnt1mThe sum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Success Delta]cnt1mThe delta value of system.diskio.read.count for individual disks.
DiskDisk Read Requests [Success]cnt1mThe total number of successful read requests.
DiskDisk Request Size [Avg]num1mThe average size of requests executed for the device (in sectors).
DiskDisk Service Time [Avg]ms1mThe average service time for input requests executed for the device (in milliseconds).
DiskDisk Wait Time [Avg]ms1mThe average time spent executing requests for the device.
DiskDisk Wait Time [Read]ms1mThe average disk wait time for read operations.
DiskDisk Wait Time [Write]ms1mThe average disk wait time for write operations.
DiskDisk Write Bytes [Delta Avg]bytes1mThe average of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Max]bytes1mThe maximum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Min]bytes1mThe minimum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Sum]bytes1mThe sum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta]bytes1mThe delta value of system.diskio.write.bytes for individual disks.
DiskDisk Write Bytes [Success]bytes1mThe total number of bytes written successfully. On Linux, it is assumed that the sector size is 512 and the value is calculated by multiplying the number of sectors written by 512.
DiskDisk Write Requestscnt1mThe number of write requests for the disk device per second.
DiskDisk Write Requests [Delta Avg]cnt1mThe average of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Max]cnt1mThe maximum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Min]cnt1mThe minimum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Sum]cnt1mThe sum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Success Delta]cnt1mThe delta value of system.diskio.write.count for individual disks.
DiskDisk Write Requests [Success]cnt1mThe total number of successful write requests.
DiskDisk Writes Bytesbytes1mThe number of bytes written to the device per second.
FileSystemFilesystem Hang Checkstate1mFilesystem (local/NFS) hang check (normal: 1, abnormal: 0).
FileSystemFilesystem Nodescnt1mThe total number of file nodes in the file system.
FileSystemFilesystem Nodes [Free]cnt1mThe total number of available file nodes in the file system.
FileSystemFilesystem Size [Available]bytes1mThe available disk space (in bytes) that can be used by non-privileged users.
FileSystemFilesystem Size [Free]bytes1mThe available disk space (in bytes).
FileSystemFilesystem Size [Total]bytes1mThe total disk space (in bytes).
FileSystemFilesystem Usage%1mThe percentage of used disk space.
FileSystemFilesystem Usage [Avg]%1mThe average of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Inode]%1mThe inode usage rate.
FileSystemFilesystem Usage [Max]%1mThe maximum of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Min]%1mThe minimum of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Total]%1m-
FileSystemFilesystem Usedbytes1mThe used disk space (in bytes).
FileSystemFilesystem Used [Inode]bytes1mThe inode usage.
MemoryMemory Freebytes1mThe total available memory (in bytes), excluding memory used by system cache and buffers (see system.memory.actual.free).
MemoryMemory Free [Actual]bytes1mThe actual available memory (in bytes), which varies depending on the OS. On Linux, it is calculated using /proc/meminfo, and on OSX, it is the sum of available and inactive memory. On Windows, it is the same as system.memory.free.
MemoryMemory Free [Swap]bytes1mThe available swap memory.
MemoryMemory Totalbytes1mThe total memory.
MemoryMemory Total [Swap]bytes1mThe total swap memory.
MemoryMemory Usage%1mThe percentage of used memory.
MemoryMemory Usage [Actual]%1mThe percentage of actual used memory.
MemoryMemory Usage [Cache Swap]%1mThe cache swap usage rate.
MemoryMemory Usage [Swap]%1mThe percentage of used swap memory.
MemoryMemory Usedbytes1mThe used memory.
MemoryMemory Used [Actual]bytes1mThe actual used memory (in bytes), which is the total memory minus the used memory. The available memory varies depending on the OS (see system.actual.free).
MemoryMemory Used [Swap]bytes1mThe used swap memory.
NetworkCollisionscnt1mNetwork collisions.
NetworkNetwork In Bytesbytes1mThe number of bytes received.
NetworkNetwork In Bytes [Delta Avg]bytes1mThe average of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Max]bytes1mThe maximum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Min]bytes1mThe minimum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Sum]bytes1mThe sum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta]bytes1mThe delta value of the number of bytes received.
NetworkNetwork In Droppedcnt1mThe number of packets dropped during reception.
NetworkNetwork In Errorscnt1mThe number of errors during reception.
NetworkNetwork In Packetscnt1mThe number of packets received.
NetworkNetwork In Packets [Delta Avg]cnt1mThe average of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Max]cnt1mThe maximum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Min]cnt1mThe minimum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Sum]cnt1mThe sum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta]cnt1mThe delta value of the number of packets received.
NetworkNetwork Out Bytesbytes1mThe number of bytes sent.
NetworkNetwork Out Bytes [Delta Avg]bytes1mThe average of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Max]bytes1mThe maximum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Min]bytes1mThe minimum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Sum]bytes1mThe sum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta]bytes1mThe delta value of the number of bytes sent.
NetworkNetwork Out Droppedcnt1mThe number of packets dropped during transmission. This value is not reported by the OS and is always 0 on Darwin and BSD.
NetworkNetwork Out Errorscnt1mThe number of errors during transmission.
NetworkNetwork Out Packetscnt1mThe number of packets sent.
NetworkNetwork Out Packets [Delta Avg]cnt1mThe average of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Max]cnt1mThe maximum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Min]cnt1mThe minimum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Sum]cnt1mThe sum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta]cnt1mThe delta value of the number of packets sent.
NetworkOpen Connections [TCP]cnt1mThe number of open TCP connections.
NetworkOpen Connections [UDP]cnt1mThe number of open UDP connections.
NetworkPort Usage%1mThe port usage rate.
NetworkSYN Sent Socketscnt1mThe number of sockets in the SYN_SENT state (when connecting to a remote host).
ProcessKernel PID Maxcnt1mThe kernel.pid_max value.
ProcessKernel Thread Maxcnt1mThe kernel.threads-max value.
ProcessProcess CPU Usage%1mThe percentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value displayed by the top command on Unix systems.
ProcessProcess CPU Usage/Core%1mThe percentage of CPU time used by the process since the last event, normalized by the number of cores (0-100%).
ProcessProcess Memory Usage%1mThe percentage of main memory (RAM) used by the process.
ProcessProcess Memory Usedbytes1mThe resident set size, which is the amount of memory used by the process in RAM. On Windows, it is the current working set size.
ProcessProcess PIDPID1mThe process ID.
ProcessProcess PPIDPID1mThe parent process ID.
ProcessProcesses [Dead]cnt1mThe number of dead processes.
ProcessProcesses [Idle]cnt1mThe number of idle processes.
ProcessProcesses [Running]cnt1mThe number of running processes.
ProcessProcesses [Sleeping]cnt1mThe number of sleeping processes.
ProcessProcesses [Stopped]cnt1mThe number of stopped processes.
ProcessProcesses [Total]cnt1mThe total number of processes.
ProcessProcesses [Unknown]cnt1mThe number of processes with unknown or unsearchable states.
ProcessProcesses [Zombie]cnt1mThe number of zombie processes.
ProcessRunning Process Usage%1mThe process usage rate.
ProcessRunning Processescnt1mThe number of running processes.
ProcessRunning Thread Usage%1mThe thread usage rate.
ProcessRunning Threadscnt1mThe total number of threads running in running processes.
SystemContext Switchescnt1mThe number of context switches per second.
SystemLoad/Core [1 min]cnt1mThe load average over the last 1 minute, normalized by the number of cores.
SystemLoad/Core [15 min]cnt1mThe load average over the last 15 minutes, normalized by the number of cores.
SystemLoad/Core [5 min]cnt1mThe load average over the last 5 minutes, normalized by the number of cores.
SystemMultipaths [Active]cnt1mThe number of active paths for external storage connections.
SystemMultipaths [Failed]cnt1mThe number of failed paths for external storage connections.
SystemMultipaths [Faulty]cnt1mThe number of faulty paths for external storage connections.
SystemNTP Offsetnum1mThe measured offset (time difference between the NTP server and the local environment) of the last sample.
SystemRun Queue Lengthnum1mThe length of the run queue.
SystemUptimems1mThe OS uptime (in milliseconds).
WindowsContext Switchiescnt1mThe number of CPU context switches per second.
WindowsDisk Read Bytes [Sec]cnt1mThe number of bytes read from the Windows logical disk per second.
WindowsDisk Read Time [Avg]sec1mThe average time spent reading data (in seconds).
WindowsDisk Transfer Time [Avg]sec1mThe average disk wait time.
WindowsDisk Usage%1mThe disk usage rate.
WindowsDisk Write Bytes [Sec]cnt1mThe number of bytes written to the Windows logical disk per second.
WindowsDisk Write Time [Avg]sec1mThe average time spent writing data (in seconds).
WindowsPagingfile Usage%1mThe paging file usage rate.
WindowsPool Used [Non Paged]bytes1mThe Nonpaged Pool usage of kernel memory.
WindowsPool Used [Paged]bytes1mThe Paged Pool usage of kernel memory.
WindowsProcess [Running]cnt1mThe number of currently running processes.
WindowsThreads [Running]cnt1mThe number of currently running threads.
WindowsThreads [Waiting]cnt1mThe number of threads waiting for processor time.
Table. Performance Items for GPU Server (Agent)

Bare Metal Server

Agent (Detailed Metrics)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
CPUCore Usage [IO Wait]%1mThe ratio of CPU time spent in a waiting state (disk wait).
CPUCore Usage [System]%1mThe percentage of CPU time used by the kernel.
CPUCore Usage [User]%1mThe percentage of CPU time used in the user space.
CPUCPU Corescnt1mThe number of CPU cores on the host. The maximum value for unnormalized rates is 100% * the number of cores. The maximum value for normalized rates is 100%.
CPUCPU Usage [Active]%1mThe percentage of CPU time used, excluding idle and IOWait states (all 4 cores using 100%: 400%).
CPUCPU Usage [Idle]%1mThe ratio of CPU time spent in an idle state.
CPUCPU Usage [IO Wait]%1mThe ratio of CPU time spent in a waiting state (disk wait).
CPUCPU Usage [System]%1mThe percentage of CPU time used by the kernel (all 4 cores using 100%: 400%).
CPUCPU Usage [User]%1mThe percentage of CPU time used in the user area (all 4 cores using 100%: 400%).
CPUCPU Usage/Core [Active]%1mThe percentage of CPU time used, excluding idle and IOWait states (normalized by the number of cores, all 4 cores using 100%: 100%).
CPUCPU Usage/Core [Idle]%1mThe ratio of CPU time spent in an idle state.
CPUCPU Usage/Core [IO Wait]%1mThe ratio of CPU time spent in a waiting state (disk wait).
CPUCPU Usage/Core [System]%1mThe percentage of CPU time used by the kernel (normalized by the number of cores, all 4 cores using 100%: 100%).
CPUCPU Usage/Core [User]%1mThe percentage of CPU time used in the user area (normalized by the number of cores, all 4 cores using 100%: 100%).
DiskDisk CPU Usage [IO Request]%1mThe ratio of CPU time spent executing I/O requests for the device (device bandwidth utilization). If this value is close to 100%, the device is in a saturated state.
DiskDisk Queue Size [Avg]num1mThe average queue length of requests executed for the device.
DiskDisk Read Bytesbytes1mThe number of bytes read from the device per second.
DiskDisk Read Bytes [Delta Avg]bytes1mThe average of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Max]bytes1mThe maximum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Min]bytes1mThe minimum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta Sum]bytes1mThe sum of system.diskio.read.bytes_delta for individual disks.
DiskDisk Read Bytes [Delta]bytes1mThe delta value of system.diskio.read.bytes for individual disks.
DiskDisk Read Bytes [Success]bytes1mThe total number of bytes read successfully. On Linux, it is assumed that the sector size is 512 and the value is calculated by multiplying the number of sectors read by 512.
DiskDisk Read Requestscnt1mThe number of read requests for the disk device per second.
DiskDisk Read Requests [Delta Avg]cnt1mThe average of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Max]cnt1mThe maximum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Min]cnt1mThe minimum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Delta Sum]cnt1mThe sum of system.diskio.read.count_delta for individual disks.
DiskDisk Read Requests [Success Delta]cnt1mThe delta value of system.diskio.read.count for individual disks.
DiskDisk Read Requests [Success]cnt1mThe total number of successful read requests.
DiskDisk Request Size [Avg]num1mThe average size of requests executed for the device (in sectors).
DiskDisk Service Time [Avg]ms1mThe average service time for input requests executed for the device (in milliseconds).
DiskDisk Wait Time [Avg]ms1mThe average time spent executing requests for the device.
DiskDisk Wait Time [Read]ms1mThe average disk wait time for read operations.
DiskDisk Wait Time [Write]ms1mThe average disk wait time for write operations.
DiskDisk Write Bytes [Delta Avg]bytes1mThe average of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Max]bytes1mThe maximum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Min]bytes1mThe minimum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta Sum]bytes1mThe sum of system.diskio.write.bytes_delta for individual disks.
DiskDisk Write Bytes [Delta]bytes1mThe delta value of system.diskio.write.bytes for individual disks.
DiskDisk Write Bytes [Success]bytes1mThe total number of bytes written successfully. On Linux, it is assumed that the sector size is 512 and the value is calculated by multiplying the number of sectors written by 512.
DiskDisk Write Requestscnt1mThe number of write requests for the disk device per second.
DiskDisk Write Requests [Delta Avg]cnt1mThe average of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Max]cnt1mThe maximum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Min]cnt1mThe minimum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Delta Sum]cnt1mThe sum of system.diskio.write.count_delta for individual disks.
DiskDisk Write Requests [Success Delta]cnt1mThe delta value of system.diskio.write.count for individual disks.
DiskDisk Write Requests [Success]cnt1mThe total number of successful write requests.
DiskDisk Writes Bytesbytes1mThe number of bytes written to the device per second.
FileSystemFilesystem Hang Checkstate1mFilesystem (local/NFS) hang check (normal: 1, abnormal: 0).
FileSystemFilesystem Nodescnt1mThe total number of file nodes in the file system.
FileSystemFilesystem Nodes [Free]cnt1mThe total number of available file nodes in the file system.
FileSystemFilesystem Size [Available]bytes1mThe available disk space (in bytes) that can be used by non-privileged users.
FileSystemFilesystem Size [Free]bytes1mThe available disk space (in bytes).
FileSystemFilesystem Size [Total]bytes1mThe total disk space (in bytes).
FileSystemFilesystem Usage%1mThe percentage of used disk space.
FileSystemFilesystem Usage [Avg]%1mThe average of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Inode]%1mThe inode usage rate.
FileSystemFilesystem Usage [Max]%1mThe maximum of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Min]%1mThe minimum of filesystem.used.pct for individual file systems.
FileSystemFilesystem Usage [Total]%1m-
FileSystemFilesystem Usedbytes1mThe used disk space (in bytes).
FileSystemFilesystem Used [Inode]bytes1mThe inode usage.
MemoryMemory Freebytes1mThe total available memory (in bytes), excluding memory used by system cache and buffers (see system.memory.actual.free).
MemoryMemory Free [Actual]bytes1mThe actual available memory (in bytes), which varies depending on the OS. On Linux, it is calculated using /proc/meminfo, and on OSX, it is the sum of available and inactive memory. On Windows, it is the same as system.memory.free.
MemoryMemory Free [Swap]bytes1mThe available swap memory.
MemoryMemory Totalbytes1mThe total memory.
MemoryMemory Total [Swap]bytes1mThe total swap memory.
MemoryMemory Usage%1mThe percentage of used memory.
MemoryMemory Usage [Actual]%1mThe percentage of actual used memory.
MemoryMemory Usage [Cache Swap]%1mThe cache swap usage rate.
MemoryMemory Usage [Swap]%1mThe percentage of used swap memory.
MemoryMemory Usedbytes1mThe used memory.
MemoryMemory Used [Actual]bytes1mThe actual used memory (in bytes), which is the total memory minus the used memory. The available memory varies depending on the OS (see system.actual.free).
MemoryMemory Used [Swap]bytes1mThe used swap memory.
NetworkCollisionscnt1mNetwork collisions.
NetworkNetwork In Bytesbytes1mThe number of bytes received.
NetworkNetwork In Bytes [Delta Avg]bytes1mThe average of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Max]bytes1mThe maximum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Min]bytes1mThe minimum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta Sum]bytes1mThe sum of system.network.in.bytes_delta for individual networks.
NetworkNetwork In Bytes [Delta]bytes1mThe delta value of the number of bytes received.
NetworkNetwork In Droppedcnt1mThe number of packets dropped during reception.
NetworkNetwork In Errorscnt1mThe number of errors during reception.
NetworkNetwork In Packetscnt1mThe number of packets received.
NetworkNetwork In Packets [Delta Avg]cnt1mThe average of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Max]cnt1mThe maximum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Min]cnt1mThe minimum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta Sum]cnt1mThe sum of system.network.in.packets_delta for individual networks.
NetworkNetwork In Packets [Delta]cnt1mThe delta value of the number of packets received.
NetworkNetwork Out Bytesbytes1mThe number of bytes sent.
NetworkNetwork Out Bytes [Delta Avg]bytes1mThe average of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Max]bytes1mThe maximum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Min]bytes1mThe minimum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta Sum]bytes1mThe sum of system.network.out.bytes_delta for individual networks.
NetworkNetwork Out Bytes [Delta]bytes1mThe delta value of the number of bytes sent.
NetworkNetwork Out Droppedcnt1mThe number of packets dropped during transmission. This value is not reported by the OS and is always 0 on Darwin and BSD.
NetworkNetwork Out Errorscnt1mThe number of errors during transmission.
NetworkNetwork Out Packetscnt1mThe number of packets sent.
NetworkNetwork Out Packets [Delta Avg]cnt1mThe average of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Max]cnt1mThe maximum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Min]cnt1mThe minimum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta Sum]cnt1mThe sum of system.network.out.packets_delta for individual networks.
NetworkNetwork Out Packets [Delta]cnt1mThe delta value of the number of packets sent.
NetworkOpen Connections [TCP]cnt1mThe number of open TCP connections.
NetworkOpen Connections [UDP]cnt1mThe number of open UDP connections.
NetworkPort Usage%1mThe port usage rate.
NetworkSYN Sent Socketscnt1mThe number of sockets in the SYN_SENT state (when connecting to a remote host).
ProcessKernel PID Maxcnt1mThe kernel.pid_max value.
ProcessKernel Thread Maxcnt1mThe kernel.threads-max value.
ProcessProcess CPU Usage%1mThe percentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value displayed by the top command on Unix systems.
ProcessProcess CPU Usage/Core%1mThe percentage of CPU time used by the process since the last event, normalized by the number of cores (0-100%).
ProcessProcess Memory Usage%1mThe percentage of main memory (RAM) used by the process.
ProcessProcess Memory Usedbytes1mThe resident set size, which is the amount of memory used by the process in RAM. On Windows, it is the current working set size.
ProcessProcess PIDPID1mThe process ID.
ProcessProcess PPIDPID1mThe parent process ID.
ProcessProcesses [Dead]cnt1mThe number of dead processes.
ProcessProcesses [Idle]cnt1mThe number of idle processes.
ProcessProcesses [Running]cnt1mThe number of running processes.
ProcessProcesses [Sleeping]cnt1mThe number of sleeping processes.
ProcessProcesses [Stopped]cnt1mThe number of stopped processes.
ProcessProcesses [Total]cnt1mThe total number of processes.
ProcessProcesses [Unknown]cnt1mThe number of processes with unknown or unsearchable states.
ProcessProcesses [Zombie]cnt1mThe number of zombie processes.
ProcessRunning Process Usage%1mThe process usage rate.
ProcessRunning Processescnt1mThe number of running processes.
ProcessRunning Thread Usage%1mThe thread usage rate.
ProcessRunning Threadscnt1mThe total number of threads running in running processes.
SystemContext Switchescnt1mThe number of context switches per second.
SystemLoad/Core [1 min]cnt1mThe load average over the last 1 minute, normalized by the number of cores.
SystemLoad/Core [15 min]cnt1mThe load average over the last 15 minutes, normalized by the number of cores.
SystemLoad/Core [5 min]cnt1mThe load average over the last 5 minutes, normalized by the number of cores.
SystemMultipaths [Active]cnt1mThe number of active paths for external storage connections.
SystemMultipaths [Failed]cnt1mThe number of failed paths for external storage connections.
SystemMultipaths [Faulty]cnt1mThe number of faulty paths for external storage connections.
SystemNTP Offsetnum1mThe measured offset (time difference between the NTP server and the local environment) of the last sample.
SystemRun Queue Lengthnum1mThe length of the run queue.
SystemUptimems1mThe OS uptime (in milliseconds).
WindowsContext Switchiescnt1mThe number of CPU context switches per second.
WindowsDisk Read Bytes [Sec]cnt1mThe number of bytes read from the Windows logical disk per second.
WindowsDisk Read Time [Avg]sec1mThe average time spent reading data (in seconds).
WindowsDisk Transfer Time [Avg]sec1mThe average disk wait time.
WindowsDisk Usage%1mThe disk usage rate.
WindowsDisk Write Bytes [Sec]cnt1mThe number of bytes written to the Windows logical disk per second.
WindowsDisk Write Time [Avg]sec1mThe average time spent writing data (in seconds).
WindowsPagingfile Usage%1mThe paging file usage rate.
WindowsPool Used [Non Paged]bytes1mThe Nonpaged Pool usage of kernel memory.
WindowsPool Used [Paged]bytes1mThe Paged Pool usage of kernel memory.
WindowsProcess [Running]cnt1mThe number of currently running processes.
WindowsThreads [Running]cnt1mThe number of currently running threads.
WindowsThreads [Waiting]cnt1mThe number of threads waiting for processor time.
Table. Performance Items for Bare Metal Server
Note
To monitor the performance of Bare Metal Server, please install the Agent. Refer to Agent Management for the installation guide.

Storage type

File Storage

Performance item group namePerformance item nameCollection unitCollection cycleDescription
VolumeInstance Statestate1mFile storage volume status
VolumeIOPS [Other]iops1mIOPS (other)
VolumeIOPS [Read]iops1mIOPS (read)
VolumeIOPS [Total]iops1mIOPS (total)
VolumeIOPS [Write]iops1mIOPS (write)
VolumeLatency Time [Other]usec1mLatency time (other)
VolumeLatency Time [Read]usec1mLatency time (read)
VolumeLatency Time [Total]usec1mLatency time (total)
VolumeLatency Time [write]usec1mLatency time (write)
VolumeThroughput [Other]MB/s1mThroughput (other)
VolumeThroughput [Read]MB/s1mThroughput (read)
VolumeThroughput [Total]MB/s1mThroughput (total)
VolumeThroughput [Write]MB/s1mThroughput (write)
VolumeVolume Totalbytes1mTotal bytes
VolumeVolume Usage%1mUsage rate
VolumeVolume Usedbytes1mUsed amount
Table. File Storage performance items

Object Storage

Performance item group namePerformance item nameCollection unitCollection cycleDescription
RequestRequests [Delete]cnt1mNumber of HTTP DELETE requests executed on objects in the bucket
RequestRequests [Download Avg]bytes1mAverage download usage per bucket
RequestRequests [Get]cnt1mNumber of HTTP GET requests executed on objects in the bucket
RequestRequests [Head]cnt1mNumber of HTTP HEAD requests executed on objects in the bucket
RequestRequests [List]cnt1mNumber of LIST requests executed on objects in the bucket
RequestRequests [Post]cnt1mNumber of HTTP POST requests executed on objects in the bucket
RequestRequests [Put]cnt1mNumber of HTTP PUT requests executed on objects in the bucket
RequestRequests [Total]cnt1mTotal number of HTTP requests executed on the bucket
RequestRequests [Upload Avg]bytes1mAverage upload usage per bucket
UsageBucket Usedbytes1mAmount of data stored in the bucket (in bytes)
UsageObjectscnt1mNumber of objects stored in the bucket
Table. Object Storage performance items

Database type

PostgreSQL(DBaaS)

Performance item group namePerformance item nameCollection unitCollection cycleDescription
ActivelockActive Lockscnt1mNumber of active locks
ActivelockActive Locks [Access Exclusive]cnt1mNumber of access exclusive locks
ActivelockActive Locks [Access Share]cnt1mNumber of access share locks
ActivelockActive Locks [Total]cnt1mTotal number of active locks
ActivelockExclusive Lockscnt1mNumber of exclusive locks
ActivelockRow Exclusive Lockscnt1mNumber of row exclusive locks
ActivelockRow Share Lockscnt1mNumber of row share locks
ActivelockShare Lockscnt1mNumber of share locks
ActivelockShare Row Exclusive Lockscnt1mNumber of share row exclusive locks
ActivelockShare Update Exclusive Lockscnt1mNumber of share update exclusive locks
ActiveSessionActive Sessionscnt1mNumber of active sessions
ActiveSessionActive Sessions [Total]cnt1mTotal number of active sessions
ActiveSessionIdle In Transaction Sessionscnt1mNumber of idle in transaction sessions
ActiveSessionIdle In Transaction Sessions [Total]cnt1mTotal number of idle in transaction sessions
ActiveSessionIdle Sessionscnt1mNumber of idle sessions
ActiveSessionIdle Sessions [Total]cnt1mTotal number of idle sessions
ActiveSessionWaiting Sessionscnt1mNumber of waiting sessions
ActiveSessionWaiting Sessions [Total]cnt1mTotal number of waiting sessions
ConnectionConnection Usage%1mDB connection usage rate
ConnectionConnection Usage [Total]%1mTotal DB connection usage rate
DB AgeDB Age Maxage1mDatabase age (frozen XID) value
LockWait Lockscnt1mNumber of sessions waiting for locks (per DB)
LockWait Locks [Long Total]cnt1mNumber of sessions waiting for locks for more than 300 seconds
LockWait Locks [Long]cnt1mNumber of sessions waiting for locks for more than 300 seconds
LockWait Locks [Total]cnt1mTotal number of sessions waiting for locks
Long TransactionTransaction Time Max [Long]sec1mLongest transaction time (in seconds)
Long TransactionTransaction Time Max Total [Long]sec1mLongest transaction time (in seconds)
ReplicaApply Lag Timesec1mApply lag time
ReplicaCheck No Replicationcnt1mCheck no replication value
ReplicaCheck Replicationstate1mCheck replication state value
SlowquerySlowqueriescnt1mNumber of slow queries (more than 5 minutes)
StateInstance State [PID]PID1mPostgres process PID
TablespaceTablespace Usedbytes1mTablespace usage
TablespaceTablespace Used [Total]bytes1mTotal tablespace usage
TablespaceTablespace Used Bytes [MB]bytes1mFilesystem directory usage (in MB)
TablespaceTablespaces [Total]cnt1mTotal number of tablespaces
Table. PostgreSQL(DBaaS) performance items
Note
Refer to Virtual Server performance items for DB instance performance items.

MariaDB(DBaaS)

Performance item group namePerformance item nameCollection unitCollection cycleDescription
ActivelockActive Lockscnt1mNumber of active locks
ActivesssionActive Sessionscnt1mNumber of connected threads
ActivesssionConnection Usage [Total]%1mDB connection usage rate
ActivesssionConnectionscnt1mNumber of connections
ActivesssionConnections [MAX]cnt1mMaximum number of connected threads
DatafileBinary Log Used [MB]bytes1mBinary log usage (in MB)
DatafileData Directory Used [MB]bytes1mDatadir usage (in MB)
DatafileOpen Filescnt1mNumber of open files
DatafileOpen Files [MAX]cnt1mMaximum number of open files
DatafileOpen Files Usage%1mOpen file usage rate
DatafileRelay Log Used [MB]bytes1mRelay log usage (in MB)
StateInstance State [PID]PID1mMariadbd process PID (or mysqld process PID for versions prior to 10.5.2)
StateSafe PIDPID1mMariadbd_safe process PID (or mysqld_safe process PID for versions prior to 10.5.2)
StateSlave Behind Master secondssec1mTime difference between master and slave (in seconds)
TablespaceTablespace Usedbytes1mTablespace usage
TablespaceTablespace Used [Total]bytes1mTotal tablespace usage
TransactionRunning Threadscnt1mNumber of running threads
TransactionSlowqueriescnt1mNumber of slow queries (more than 10 seconds)
TransactionSlowqueries [Total]cnt1mTotal number of slow queries
TransactionTransaction Time [Long]sec1mLongest transaction time (in seconds)
TransactionWait Lockscnt1mNumber of sessions waiting for locks for more than 60 seconds
Table. MariaDB(DBaaS) performance items
Note
Refer to Virtual Server performance items for DB instance performance items.

MySQL(DBaaS)

Performance item group namePerformance item nameCollection unitCollection cycleDescription
ActivelockActive Lockscnt1mNumber of active locks
ActivesssionActive Sessionscnt1mNumber of connected threads
ActivesssionConnection Usage [Total]%1mDB connection usage rate
ActivesssionConnectionscnt1mNumber of connections
ActivesssionConnections [MAX]cnt1mMaximum number of connected threads
DatafileBinary Log Used [MB]bytes1mBinary log usage (in MB)
DatafileData Directory Used [MB]bytes1mDatadir usage (in MB)
DatafileOpen Filescnt1mNumber of open files
DatafileOpen Files [MAX]cnt1mMaximum number of open files
DatafileOpen Files Usage%1mOpen file usage rate
DatafileRelay Log Used [MB]bytes1mRelay log usage (in MB)
StateInstance State [PID]PID1mMysqld process PID
StateSafe PIDPID1mSafe program PID
StateSlave Behind Master secondssec1mTime difference between master and slave (in seconds)
TablespaceTablespace Usedbytes1mTablespace usage
TablespaceTablespace Used [Total]bytes1mTotal tablespace usage
TransactionRunning Threadscnt1mNumber of running threads
TransactionSlowqueriescnt1mNumber of slow queries (more than 10 seconds)
TransactionSlowqueries [Total]cnt1mTotal number of slow queries
TransactionTransaction Time [Long]sec1mLongest transaction time (in seconds)
TransactionWait Lockscnt1mNumber of sessions waiting for locks for more than 60 seconds
Table. MySQL(DBaaS) performance items
Note
Refer to Virtual Server performance items for DB instance performance items.

CacheStore(DBaaS)

Performance item group namePerformance item nameCollection unitCollection cycleDescription
CacheStoreActive Defragmentation Keys [Hits]cnt1mNumber of keys defragmented
CacheStoreActive Defragmentation Keys [Miss]cnt1mNumber of keys skipped during defragmentation
CacheStoreActive Defragmentationd [Hits]cnt1mNumber of values reassigned during defragmentation
CacheStoreActive Defragmentations [Miss]cnt1mNumber of defragmentation processes started and stopped
CacheStoreAllocated Bytes [OS]bytes1mBytes allocated by CacheStore and recognized by the operating system (resident set size)
CacheStoreAllocated Bytes [Redis]bytes1mTotal bytes allocated by CacheStore
CacheStoreAOF Buffer Sizebytes1mAOF buffer size
CacheStoreAOF File Size [Current]bytes1mCurrent AOF file size
CacheStoreAOF File Size [Lastest Startup]bytes1mAOF file size at the last startup or rewrite
CacheStoreAOF Rewrite Buffer Sizebytes1mAOF rewrite buffer size
CacheStoreAOF Rewrite Current Timesec1mTime spent on the current AOF rewrite process
CacheStoreAOF Rewrite Last Timesec1mTime spent on the last AOF rewrite process
CacheStoreCallscnt1mNumber of commands executed (not rejected)
CacheStoreCalls [Failed]cnt1mNumber of failed commands (CacheStore 6.2-rc2)
CacheStoreCalls [Rejected]cnt1mNumber of rejected commands (CacheStore 6.2-rc2)
CacheStoreChanges [Last Saved]cnt1mNumber of changes since the last dump
CacheStoreClient Output Buffer [MAX]cnt1mLongest output list among current client connections
CacheStoreClient Input Buffer [MAX]cnt1mLargest input buffer among current client connections (CacheStore 5.0)
CacheStoreClients [Sentinel]cnt1mNumber of client connections (sentinel)
CacheStoreConnected Slavescnt1mNumber of connected slaves
CacheStoreConnections [Blocked]cnt1mNumber of clients waiting for blocking calls (BLPOP, BRPOP, BRPOPLPUSH)
CacheStoreConnections [Current]cnt1mNumber of client connections (excluding slave connections)
CacheStoreCopy On Write Allocated Size [AOF]bytes1mCOW allocation size (in bytes) during the last RDB save operation
CacheStoreCopy On Write Allocated Size [RDB]bytes1mCOW allocation size (in bytes) during the last RDB save operation
CacheStoreCPU Time [Average]cnt1mAverage CPU usage per command execution
CacheStoreCPU Time [Total]usec1mTotal CPU time used by these commands
CacheStoreCPU Usage [System Process]%1mSystem CPU usage by background processes
CacheStoreCPU Usage [System]%1mSystem CPU usage by the CacheStore server
CacheStoreCPU Usage [User Process]%1mUser CPU usage by background processes
CacheStoreCPU Usage [User]%1mUser CPU usage by the CacheStore server
CacheStoreDataset Usedbytes1mDataset size (in bytes)
CacheStoreDisk Usedbytes1mDatadir usage
CacheStoreEvicted Keyscnt1mNumber of evicted keys due to maxmemory limit
CacheStoreFsyncs [Delayed]cnt1mDelayed fsync counter
CacheStoreFsyncs [Pending]cnt1mNumber of fsync operations pending in the background I/O queue (in bytes)
CacheStoreFull Resyncscnt1mNumber of full resynchronizations with slaves
CacheStoreKeys [Expired]cnt1mTotal number of key expiration events
CacheStoreKeys [Keyspace]cnt1mNumber of keys in the keyspace
CacheStoreLastest Fork Duration Timeusec1mTime taken by the last fork operation (in microseconds)
CacheStoreLookup Keys [Hit]cnt1mNumber of successful key lookups in the main dictionary
CacheStoreLookup Keys [Miss]cnt1mNumber of failed key lookups in the main dictionary
CacheStoreLua Engine Memory Usedbytes1mMemory used by the Lua engine
CacheStoreMaster Last Interaction Time Agosec1mTime elapsed since the last interaction with the master (in seconds)
CacheStoreMaster Last Interaction Time Ago [Sync]sec1mTime elapsed since the last interaction with the master (in seconds)
CacheStoreMaster Offsetpid1mCurrent replication offset of the server
CacheStoreMaster Second Offsetpid1mOffset of the replication ID that will be accepted
CacheStoreMaster Sync Left Bytesbytes1mNumber of bytes remaining to be synchronized
CacheStoreMemory Fragmentation Rate%1mRatio of used_memory_rss to used_memory
CacheStoreMemory Fragmentation Rate [Allocator]%1mFragmentation ratio
CacheStoreMemory Fragmentation Usedbytes1mDifference between used_memory_rss and used_memory (in bytes)
CacheStoreMemory Fragmentation Used [Allocator]bytes1mResident bytes
CacheStoreMemory Max Valuebytes1mMemory limit
CacheStoreMemory Resident [Allocator]bytes1mResident memory
CacheStoreMemory RSS Rate [Allocator]%1mResident ratio
CacheStoreMemory Used [Active]bytes1mActive memory
CacheStoreMemory Used [Allocated]bytes1mAllocated memory
CacheStoreMemory Used [Resident]bytes1mResident bytes
CacheStoreNetwork In Bytes [Total]bytes1mTotal network input (in bytes)
CacheStoreNetwork Out Bytes [Total]bytes1mTotal network output (in bytes)
CacheStoreNetwork Read Ratecnt1mNetwork read rate (in KB/sec)
CacheStoreNetwork Write Ratecnt1mNetwork write rate (in KB/sec)
CacheStorePartial Resync Requests [Accepted]cnt1mNumber of accepted partial resynchronization requests
CacheStorePartial Resync Requests [Denied]cnt1mNumber of denied partial resynchronization requests
CacheStorePeak Memory Consumedbytes1mMaximum memory consumed by CacheStore
CacheStoreProcessed Commandscnt1mNumber of commands processed per second
CacheStoreProcessed Commands [Total]cnt1mTotal number of commands processed
CacheStorePub/Sub Channelscnt1mGlobal number of pub/sub channels with client subscriptions
CacheStorePub/Sub Patternscnt1mGlobal number of pub/sub patterns with client subscriptions
CacheStoreRDB Saved Duration Time [Current]sec1mTime taken by the current RDB save operation (in seconds)
CacheStoreRDB Saved Duration Time [Last]sec1mTime taken by the last RDB save operation (in seconds)
CacheStoreReceived Connections [Total]cnt1mTotal number of connections received
CacheStoreRejected Connections [Total]cnt1mTotal number of connections rejected
CacheStoreReplication Backlog Actove Countcnt1mReplication backlog active flag
CacheStoreReplication Backlog Master Offsetcnt1mMaster offset of the replication backlog buffer
CacheStoreReplication Backlog Sizebytes1mSize of the replication backlog buffer (in bytes)
CacheStoreReplication Backlog Size [Total]bytes1mTotal size of the replication backlog buffer (in bytes)
CacheStoreSlave Prioritycnt1mPriority of the instance as a failover target
CacheStoreSlave Replication Offsetpid1mReplication offset of the slave instance
CacheStoreSlow Operationscnt1mNumber of slow operations
CacheStoreSockets [MIGRATE]cnt1mNumber of sockets opened for migration
CacheStoreTracked Keys [Expiry]cnt1mNumber of keys being tracked for expiry (only for writable slaves)
StateInstance State [PID]PID1mPID of the redis-server process
StateSentinel State [PID]PID1mPID of the sentinel process
Table. CacheStore (DBaaS) Performance Items
Note
Refer to the performance items of the Virtual Server for the performance items of the DB instance.

EPAS

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
ActivelockAccess Exclusive Lockscnt1mNumber of access exclusive locks
ActivelockAccess Share Lockscnt1mNumber of access share locks
ActivelockActive Lockscnt1mNumber of active locks
ActivelockActive Locks [Total]cnt1mTotal number of active locks
ActivelockExclusive Lockscnt1mNumber of exclusive locks
ActivelockRow Exclusive Lockscnt1mNumber of row exclusive locks
ActivelockRow Share Lockscnt1mNumber of row share locks
ActivelockShare Lockscnt1mNumber of share locks
ActivelockShare Row Exclusive Lockscnt1mNumber of share row exclusive locks
ActivelockShare Update Exclusive Lockscnt1mNumber of share update exclusive locks
ActivesessionActive Sessionscnt1mNumber of active sessions
ActivesessionActive Sessions [Total]cnt1mTotal number of active sessions
ActivesessionIdel In Transaction Sessionscnt1mNumber of idle in transaction sessions
ActivesessionIdle In Transaction Sessions [Total]cnt1mTotal number of idle in transaction sessions
ActivesessionIdle Sessionscnt1mNumber of idle sessions
ActivesessionIdle Sessions [Total]cnt1mTotal number of idle sessions
ActivesessionWaiting Sessionscnt1mNumber of waiting sessions
ActivesessionWaiting Sessions [Total]cnt1mTotal number of waiting sessions
ConnectionConnection Usage%1mDB connection usage rate (%)
ConnectionConnection Usage [Total]%1mTotal DB connection usage rate (%)
ConnectionConnection Usage Per DB%1mDB connection usage rate per DB (%)
DB AgeDB Age Maxage1mDatabase age (frozen XID) value
LockWait Lockscnt1mNumber of sessions waiting for locks
LockWait Locks [Long Total]cnt1mTotal number of sessions waiting for locks for a long time
LockWait Locks [Long]cnt1mNumber of sessions waiting for locks for a long time
LockWait Locks [Total]cnt1mTotal number of sessions waiting for locks
LockWait Locks Per DB [Total]cnt1mTotal number of sessions waiting for locks per DB
Long TransactionTransaction Time Max [Long]sec1mMaximum transaction time (in minutes)
Long TransactionTransaction Time Max Total [Long]sec1mMaximum transaction time (in minutes)
ReplicaApply Lag Timesec1mApply lag time
ReplicaCheck No Replicationcnt1mCheck no replication value
ReplicaCheck Replicationstate1mCheck replication state value
SlowquerySlowqueriescnt1mNumber of slow queries
StateInstance state [PID]PID1mPID of the edb-postgres process
TablespaceTablespace Used Bytes [MB]bytes1mFilesystem directory usage (in MB)
TablespaceTablespace [Total]cnt1mTotal number of tablespaces
TablespaceTablespace Usedbytes1mUsed tablespace size
TablespaceTablespace Used [Total]bytes1mTotal used tablespace size
Table. EPAS Performance Items

Microsoft SQL Server

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
ActivelockActive Lockscnt1mNumber of active locks
ActivesssionActive Sessionscnt1mNumber of active sessions
ActivetransactionActive Transactions [Total]cnt1mTotal number of active transactions
ConnectionConnected Userscnt1mNumber of users connected to the system
DatafileDatavolume Size [Free]bytes1mAvailable space
DatafileDBFiles [Not Online]cnt1mNumber of data files that are not online
DatafileTablespace Usedbytes1mUsed data volume size
LockLock Processes [Blocked]cnt1mNumber of SQL processes blocked by other processes
LockLock Waits [Per Second]cnt1mNumber of lock waits per second
SlowqueryBlocking Session IDID1mID of the session blocking the query
SlowquerySlowqueriescnt1mNumber of slow queries
SlowquerySlowquery CPU Timems1mCPU time taken by slow queries
SlowquerySlowquery Execute Context IDID1mID of the execution context of slow queries
SlowquerySlowquery Memory Usagebytes1mMemory usage of slow queries
SlowquerySlowquery Session IDID1mID of the session executing slow queries
SlowquerySlowquery Wait Duration Timems1mWait duration time of slow queries
StateInstance State [Cluster]state1mState of the MSSQL cluster
StateInstance State [PID]PID1mPID of the sqlservr.exe process
StatePage IO Latch Wait Timems1mAverage wait time for page IO latches
TransactionTransaction Time [MAX]cnt1mMaximum transaction time
Table. Microsoft SQL Server

Data Analytics type

Event Streams

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
BrokerConnections [Zookeeper Client]cnt1mNumber of ZooKeeper connections
BrokerFailed [Client Fetch Request]cnt1mNumber of failed client fetch requests
BrokerFailed [Produce Request]cnt1mNumber of failed produce requests
BrokerIncomming Messagescnt1mNumber of incoming messages
BrokerLeader Electionscnt1mNumber of leader elections
BrokerLeader Elections [Unclean]cnt1mNumber of unclean leader elections
BrokerLog Flushescnt1mNumber of log flushes
BrokerNetwork In Bytesbytes1mTotal network input (in bytes)
BrokerNetwork Out Bytesbytes1mTotal network output (in bytes)
BrokerRejected Bytesbytes1mTotal rejected bytes
BrokerRequest Queue Lengthcnt1mRequest queue length
BrokerZookeeper Sessions [Closed]cnt1mNumber of closed ZooKeeper sessions
BrokerZookeeper Sessions [Expired]cnt1mNumber of expired ZooKeeper sessions
BrokerZookeeper Sessions [Readonly]cnt1mNumber of read-only ZooKeeper sessions
BrokerIncomming Messages Rate [Topic]cnt1mIncoming message rate per topic
BrokerIncomming Byte Rate [Second]bytes1mIncoming byte rate per second
BrokerOutgoing Byte Rate [Second]bytes1mOutgoing byte rate per second
BrokerRejected Byte Rate [Second]bytes1mRejected byte rate per second
DiskDisk Usedbytes1mDatadir usage
StateAKHQ State [PID]PID1mPID of the akhq process
StateInstance State [PID]PID1mPID of the kafka process
StateZookeeper State [PID]PID1mPID of the zookeeper process
Table. Event Streams

Search Engine

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
ClusterShardscnt1mNumber of shards in the cluster
ClusterShards [Primary]cnt1mNumber of primary shards in the cluster
ClusterIndex [Total]cnt1mTotal number of indices in the cluster
ClusterLicense Expiry Date [ms]ms1mLicense expiry date (in milliseconds)
ClusterLicense Statusstate1mLicense status
ClusterLicense Typetype1mLicense type
FileSystemDisk Usagebytes1mDatadir usage
NodeDocuments [Deleted]cnt1mTotal number of deleted documents
NodeDocuments [Existing]cnt1mTotal number of existing documents
NodeFilesystem Bytes [Available]bytes1mAvailable filesystem bytes
NodeFilesystem Bytes [Free]bytes1mFree filesystem bytes
NodeFilesystem Bytes [Total]bytes1mTotal filesystem bytes
NodeJVM Heap Used [Init]bytes1mInitial JVM heap usage (in bytes)
NodeJVM Heap Used [MAX]bytes1mMaximum JVM heap usage (in bytes)
NodeJVM Non Heap Used [Init]bytes1mInitial JVM non-heap usage (in bytes)
NodeJVM Non Heap Used [MAX]bytes1mMaximum JVM non-heap usage (in bytes)
NodeSegmentscnt1mTotal number of segments
NodeSegments Bytesbytes1mTotal size of segments (in bytes)
NodeStore Bytesbytes1mTotal size of the store (in bytes)
StateInstance state [PID]PID1mPID of the Elasticsearch process
TaskQueue Timems1mQueue time
KibanaKibana state [PID]PID1mPID of the Kibana process
KibanaKibana Connectionscnt1mNumber of connections
KibanaKibana Memory Heap Allocated [Limit]bytes1mMaximum allocated heap size (in bytes)
KibanaKibana Memory Heap Allocated [Total]bytes1mTotal allocated heap size (in bytes)
KibanaKibana Memory Heap Usedbytes1mUsed heap size (in bytes)
KibanaKibana Process Uptimems1mProcess uptime
KibanaKibana Requests [Disconnected]cnt1mNumber of disconnected requests
KibanaKibana Requests [Total]cnt1mTotal number of requests
KibanaKibana Response Time [Avg]ms1mAverage response time
KibanaKibana Response Time [MAX]ms1mMaximum response time
Table. Search Engine

Container type

Kubernetes Engine

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
ClusterCluster Namespaces [Active]cnt5mNumber of active namespaces
ClusterCluster Namespaces [Total]cnt5mTotal number of namespaces
ClusterCluster Nodes [Ready]cnt5mNumber of ready nodes
ClusterCluster Nodes [Total]cnt5mTotal number of nodes
ClusterCluster Pods [Failed]cnt5mNumber of failed pods
ClusterCluster Pods [Pending]cnt5mNumber of pending pods
ClusterCluster Pods [Running]cnt5mNumber of running pods
ClusterCluster Pods [Succeeded]cnt5mNumber of succeeded pods
ClusterCluster Pods [Unknown]cnt5mNumber of unknown pods
ClusterInstance Statestate5mCluster state
NamespaceNamespace Pods [Failed]cnt5mNumber of failed pods in the namespace
NamespaceNamespace Pods [Pending]cnt5mNumber of pending pods in the namespace
NamespaceNamespace Pods [Running]cnt5mNumber of running pods in the namespace
NamespaceNamespace Pods [Succeeded]cnt5mNumber of succeeded pods in the namespace
NamespaceNamespace Pods [Unknown]cnt5mNumber of unknown pods in the namespace
NamespaceNamespace GPU Clock FrequencyMHz5mGPU clock frequency
NamespaceNamespace GPU Memory Usage%5mGPU memory usage
NodeNode CPU Size [Allocatable]cnt5mAllocatable CPU size
NodeNode CPU Size [Capacity]cnt5mCPU capacity
NodeNode CPU Usage%5mCPU usage
NodeNode CPU Usage [Request]%5mCPU request ratio
NodeNode CPU Usedstate5mCPU utilization
NodeNode Filesystem Usage%5mFilesystem usage
NodeNode Memory Size [Allocatable]bytes5mAllocatable memory size
NodeNode Memory Size [Capacity]bytes5mMemory capacity
NodeNode Memory Usage%5mMemory usage
NodeNode Memory Usage [Request]%5mMemory request ratio
NodeNode Memory Workingsetbytes5mNode memory working set
NodeNode Network In Bytesbytes5mNode network RX bytes
NodeNode Network Out Bytesbytes5mNode network TX bytes
NodeNode Network Total Bytesbytes5mNode network total bytes
NodeNode Pods [Failed]cnt5mNumber of failed pods in the node
NodeNode Pods [Pending]cnt5mNumber of pending pods in the node
NodeNode Pods [Running]cnt5mNumber of running pods in the node
NodeNode Pods [Succeeded]cnt5mNumber of succeeded pods in the node
NodeNode Pods [Unknown]cnt5mNumber of unknown pods in the node
PodPod CPU Usage [Limit]%5mPod CPU usage limit ratio
PodPod CPU Usage [Request]%5mPod CPU request ratio
PodPod CPU Usagemc5mPod CPU usage
PodPod Memory Usage [Limit]%5mPod memory usage limit ratio
PodPod Memory Usage [Request]%5mPod memory request ratio
PodPod Memory Usagebytes5mPod memory usage
PodPod Network In Bytesbytes5mPod network RX bytes
PodPod Network Out Bytesbytes5mPod network TX bytes
PodPod Network Total Bytesbytes5mPod network total bytes
PodPod Restart Containerscnt5mNumber of container restarts in the pod
WorkloadWorkload Pods [Running]cnt5m-
Table. Kubernetes Engine performance items

Container Registry

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
Container RegistryImage Pulls [Denied]cnt1mNumber of denied image tag (digest) pulls
Container RegistryImage Pushs [Allowed]cnt1mNumber of allowed image tag (digest) pushes
Container RegistryImage Pushs [Denied]cnt1mNumber of denied image tag (digest) pushes
Container RegistryImage Scans [Allowed]cnt1mNumber of allowed image tag (digest) scans
Container RegistryImage Scans [Denied]cnt1mNumber of denied image tag (digest) scans
Container RegistryImage Tags [Deleted]cnt1mNumber of deleted image tags (digests)
Container RegistryImages [Created]cnt1mNumber of created images
Container RegistryImages [Deleted]cnt1mNumber of deleted images
Container RegistryLogins [Allowed]cnt1mNumber of allowed registry logins
Container RegistryLogins [Denied]cnt1mNumber of denied registry logins
Container RegistryRepositories [Created]cnt1mNumber of created repositories
Container RegistryRepositories [Deleted]cnt1mNumber of deleted repositories
StateInstance Statestate1mStatus check
Table. Container Registry performance items

Networking Type

Internet Gateway

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
Internet GatewayNetwork In Total Bytes [Internet Delta]bytes5mCumulative traffic from Internet Gateway to VPC over 5 minutes (Internet)
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Internet GatewayNetwork In Total Bytes [Internet]bytes5mRX bytes total
Internet GatewayNetwork Out Total Bytes [Internet Delta]bytes5mCumulative traffic from VPC to Internet Gateway over 5 minutes (Internet)
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Internet GatewayNetwork Out Total Bytes [Internet]bytes5mTX bytes total
Table. Internet Gateway performance items

Load Balancer (OLD)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
Load BalancerCurrent Connectioncnt5mCurrent number of connections
Load BalancerTotal Connectioncnt5mTotal number of connections
Load BalancerTotal Connection [Delta]cnt5mTotal number of connections (delta value)
Load BalancerNetwork In Bytesbytes5mIn bytes
Load BalancerNetwork In Bytes [Delta]bytes5mCumulative traffic from client to Load Balancer over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Load BalancerNetwork Out Bytesbytes5mOut bytes
Load BalancerNetwork Out Bytes [Delta]bytes5mCumulative traffic from Load Balancer to client over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Load BalancerInstance Statestate5mLoad Balancer status
Table. Load Balancer performance items

Load Balancer Listener (OLD)

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
ListenerConnections [Current]cnt5mCurrent number of connections
ListenerConnections [Total Delta]cnt5mTotal number of connections (delta value)
ListenerConnections [Total]cnt5mTotal number of connections
ListenerInstance Statestate5mLB Listener status
ListenerNetwork In Bytesbytes5mIn bytes
ListenerNetwork In Bytes [Delta]bytes5mCumulative traffic from client to Load Balancer over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
ListenerNetwork Out Bytesbytes5mOut bytes
ListenerNetwork Out Bytes [Delta]bytes5mCumulative traffic from Load Balancer to client over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Table. Load Balancer Listener performance items

Direct Connect

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
Direct ConnectNetwork In Bytesbytes5mCumulative traffic from Direct Connect to VPC
Direct ConnectNetwork In Bytes [Delta]bytes5mCumulative traffic from Direct Connect to VPC over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Direct ConnectNetwork Out Bytesbytes5mCumulative traffic from VPC to Direct Connect
Direct ConnectNetwork Out Bytes [Delta]bytes5mCumulative traffic from VPC to Direct Connect over 5 minutes
※ Average traffic bps conversion formula: cumulative traffic (bytes) / 300 (seconds) * 8 (bits)
Table. Direct Connect performance items

Load Balancer

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
StateInstance Statestate5mLB status
Load BalancerCurrent Connectioncnt5mCurrent number of connections
Load BalancerTotal L4 Connectioncnt5mTotal number of L4 connections
Load BalancerTotal L7 Connectioncnt5mTotal number of L7 connections
Load BalancerTotal TCP Connectioncnt5mTotal number of TCP connections
Load BalancerTotal Connectioncnt5mTotal number of connections
Load BalancerBytes processed in forward directionbytes5mForward network bytes
Load BalancerPackets processed in forward directioncnt5mForward network packets
Load BalancerBytes processed in reverse directionbytes5mReverse network bytes
Load BalancerPackets processed in reverse directioncnt5mReverse network packets
Load BalancerTotal failure actionscnt5mTotal number of failure actions
Load BalancerCurrent Requestcnt5mCurrent number of requests
Load BalancerCurrent responsecnt5mCurrent number of responses
Load BalancerTotal Requestcnt5mTotal number of requests
Load BalancerTotal Request Successcnt5mTotal number of successful requests
Load BalancerPeak Connectioncnt5mPeak number of connections
Load BalancerCurrent Connection Rate%5mCurrent SSL connection rate
Load BalancerLast response timems5mLast response time
Load BalancerFastest response timems5mFastest response time
Load BalancerSlowest response timems5mSlowest response time
Load BalancerCurrent SSL Connectioncnt5mCurrent number of SSL connections
Load BalancerTotal SSL Connectioncnt5mTotal number of SSL connections
Table. Load Balancer performance items

Load Balancer Listener

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
StateInstance Statestate5mLB status
Load BalancerCurrent Connectioncnt5mCurrent number of connections
Load BalancerTotal L4 Connectioncnt5mTotal number of L4 connections
Load BalancerTotal L7 Connectioncnt5mTotal number of L7 connections
Load BalancerTotal TCP Connectioncnt5mTotal number of TCP connections
Load BalancerTotal Connectioncnt5mTotal number of connections
Load BalancerBytes processed in forward directionbytes5mForward network bytes
Load BalancerPackets processed in forward directioncnt5mForward network packets
Load BalancerBytes processed in reverse directionbytes5mReverse network bytes
Load BalancerPackets processed in reverse directioncnt5mReverse network packets
Load BalancerTotal failure actionscnt5mTotal number of failure actions
Load BalancerCurrent Requestcnt5mCurrent number of requests
Load BalancerCurrent responsecnt5mCurrent number of responses
Load BalancerTotal Requestcnt5mTotal number of requests
Load BalancerTotal Request Successcnt5mTotal number of successful requests
Load BalancerPeak Connectioncnt5mPeak number of connections
Load BalancerCurrent Connection Rate%5mCurrent SSL connection rate
Load BalancerLast response timems5mLast response time
Load BalancerFastest response timems5mFastest response time
Load BalancerSlowest response timems5mSlowest response time
Load BalancerCurrent SSL Connectioncnt5mCurrent number of SSL connections
Load BalancerTotal SSL Connectioncnt5mTotal number of SSL connections
Table. Load Balancer Listener performance items

Load Balancer Server Group

Performance Item Group NamePerformance Item NameCollection UnitCollection CycleDescription
Server GroupInstance Statestate5mLB Server Group status
Server GroupPeak Connectioncnt5mServer group peak number of connections
Server GroupHealthy hostcnt5mServer group number of healthy hosts
Server GroupUnhealthy hostcnt5mServer group number of unhealthy hosts
Server GroupRequest Countcnt5mNumber of requests
Server GroupResponse Countcnt5mNumber of responses
Server Group2xx Response Countcnt5mNumber of 2xx responses
Server Group3xx Response Countcnt5mNumber of 3xx responses
Server Group4xx Response Countcnt5mNumber of 4xx responses
Server Group5xx Response Countcnt5mNumber of 5xx responses
Table. Load Balancer Server Group performance items

3.2.9 - Appendix C. Service-specific status check

Compute type

Virtual Server

Performance Item NameDescriptionValue
Instance State [Basic]Instance StatusNOSTATE, RUNNING, BLOCKED, PAUSED, SHUTDOWN, SHUTOFF, CRASHED, PMSUSPENDED, LAST
Fig. Virtual Server Status Check

GPU Server

Performance Item NameDescriptionValue
Instance State [Basic]Instance StatusNOSTATE RUNNING, BLOCKED, PAUSED, SHUTDOWN, SHUTOFF, CRASHED, PMSUSPENDED, LAST
Fig. GPU Server Status Check

Bare Metal Server

Performance Item NameDescriptionValue
N/AN/AN/A
Fig. Bare Metal Server Status Check
Caution
Bare Metal Server does not provide status information through Cloud Monitoring.

Multi-node GPU Cluster [Cluster Fabric]

Performance Item NameDescriptionValue
N/AN/AN/A
Fig. Multi-node GPU Cluster [Cluster Fabric] status check
Caution
Multi-node GPU Cluster [Cluster Fabric] does not provide status information through Cloud Monitoring.

Multi-node GPU Cluster [Node]

Performance Item NameDescriptionValue
N/AN/AN/A
Fig. Multi-node GPU Cluster [Node] Status Check
Caution
Multi-node GPU Cluster [Node] does not provide status information through Cloud Monitoring.

Storage type

File Storage

Performance Item NameDescriptionValue
Instance StateFile Storage volume status* 1: Online in case
* 0: other status values (Offline)
Fig. File Storage status check

Object Storage

Performance Item NameDescriptionValue
N/AN/AN/A
Table. Object Storage status check
Caution
Object Storage does not provide status information through Cloud Monitoring.

Block Storage(BM)

Performance Item NameDescriptionValue
Instance StateBlockstorage Volume Status* 1: running (normal)
* 0: down (abnormal)
Fig. Block Storage(BM) Status Check

Block Storage(VM)

Performance Item NameDescriptionValue
Instance StateBlockstorage volume status* 1: running (normal)
* 0: down (abnormal)
Table. Block Storage(VM) Status Check

Database type

PostgreSQL(DBaaS)

Performance Item NameDescriptionValue
Instance State [PID]postgres process PID* PID: when the postgres process exists
* -1: when the process does not exist
Fig. PostgreSQL(DBaaS) Status Check

MariaDB(DBaaS)

Performance Item NameDescriptionValue
Safe PIDmariadb_safe process PID* PID: when the mariadb_safe process exists
* -1: when the process does not exist
Instance State [PID]mariadb process PID* PID: when the mariadb process exists
* -1: when the process does not exist
Fig. MariaDB(DBaaS) Status Check

MySQL(DBaaS)

Performance Item NameDescriptionValue
Instance State [PID]mysqld process PID* PID: when the mysqld process exists
* -1: when the process does not exist
Fig. MySQL(DBaaS) Status Check

Microsoft SQL Server(DBaaS)

Performance Item NameDescriptionValue
Instance State [Cluster]MSSQL cluster configuration status* PID: when the mssql process exists
* -1: when the process does not exist
Instance State [PID]sqlservr.exe process pid* For Microsoft SQL Server, the secondary server is also running with PID, so it’s impossible to check the status with only PID
Fig. Microsoft SQL Server(DBaaS) status check

EPAS(DBaaS)

Performance Item NameDescriptionValue
Instance State [PID]Postgres process PID* PID: When the postgres process exists
* -1: When the process does not exist
Fig. EPAS(DBaaS) Status Check

CacheStore(DBaaS)

Redis

Performance Item NameDescriptionValue
Instance State [PID]Redis-server process PID* -1: in case the process does not exist
Sentinel State [PID]Sentinel process PID* -1: in case the process does not exist
Fig. Redis Status Check

Valkey

Performance Item NameDescriptionValue
Instance State [PID]Valkey-server process PID* -1: in case the process does not exist
Sentinel State [PID]Sentinel process PID* -1: in case the process does not exist
Table. Valkey Status Check

Data Analytics type

Event Streams

Performance Item NameDescriptionValue
AKHQ State [PID]akhq process PID* PID: akhq process exists
* -1: process does not exist
Instance State [PID]kafka process PID* PID: when the kafka process exists
* -1: when the process does not exist
Zookeeper State [Pid]zookeeper process PID* PID: when the zookeeper process exists
* -1: when the process does not exist
Fig. Event Streams Status Check

Search Engine

Performance Item NameDescriptionValue
Instance State [PID]Elasticsearch process PID* PID: When the Elasticsearch process exists
* -1: When the process does not exist
Kibana State [PID]Kibana process PID* PID: When the Kibana process exists
* -1: When the process does not exist
Fig. Search Engine Status Check

Elasticsearch

Performance Item NameDescriptionValue
Instance State [PID]Elasticsearch process PID* -1: in case the process does not exist
Kibana State [PID]Dashboard process PID* -1: in case the process does not exist
Fig. Elasticsearch Status Check

Opensearch

Performance Item NameDescriptionValue
Instance State [PID]Opensearch process PID* -1: in case the process does not exist
Dashboard State [PID]Dashboard process PID* -1: in case the process does not exist
Table. Opensearch status check

Vertica(DBaaS)

Performance Item NameDescriptionValue
Instance State [PID]Vertica Process PID* -1: when the process does not exist
Fig. Vertica(DBaaS) status check

Container type

Kubernetes Engine

Performance Item NameDescriptionValue
Instance StateCluster Status* 1: Status check query sum(up{job=“kubernetes-apiservers”}) returns a value greater than 0
* 0: Status check query sum(up{job=“kubernetes-apiservers”}) returns a value less than or equal to 0
Fig. Kubernetes Engine status check

Container Registry

Performance Item NameDescriptionValue
Instance StateContainer Registry Status* 1: running (normal)
* 0: down (abnormal)
Fig. Container Registry Status Check

Networking type

Internet Gateway

Performance Item NameDescriptionValue
N/AN/AN/A
Fig. Internet Gateway Status Check
Caution
Internet Gateway does not provide status information through Cloud Monitoring.

Load Balancer(OLD)

Performance Item NameDescriptionValue
Instance StateLoad Balancer statusDetermined by provisioning_status in API call result
  • 1: ACTIVE
  • 0: ETC|
Fig. Load Balancer(OLD)

Load Balancer Listener(OLD)

Performance Item NameDescriptionValue
Instance StateLoad Balancer Listener statusDetermined by provisioning_status in API call results
* 1: ACTIVE
* 0: ETC
Fig. Load Balancer Listener(OLD)

Load Balancer

Performance Item NameDescriptionValue
Instance StateLoad Balancer statusDetermined by provisioning_status in API call result
  • 1: ACTIVE
  • 0: ETC|
Fig. Load Balancer

Load Balancer Listener

Performance Item NameDescriptionValue
Instance StateLoad Balancer Listener status, determined by provisioning_status in API call results
* 1: ACTIVE
* 0: ETC
Fig. Load Balancer Listener

Load Balancer Server Group

Performance Item NameDescriptionValue
Instance StateStatus of Load Balancer Server Group, determined by provisioning_status in API call results
* 1: ACTIVE
* 0: ETC
Fig. Load Balancer Server Group

Direct Connect

Performance Item NameDescriptionValue
N/AN/AN/A
Fig. Direct Connect Status Check
Caution
Direct Connect does not provide status information through Cloud Monitoring.

Cloud WAN

Performance Item NameDescriptionValue
Instance StateAttachment connection status* 0: down
* 1: up
* 2: testing
* 3: unknown
Fig. Cloud WAN Status Check

Global CDN

Performance Item NameDescriptionValue
Instance StateGlobal CDN Status* 1: running (normal)
* 0: down (abnormal)
Fig. Global CDN Status Check

3.3 - API Reference

API Reference

3.4 - Release Note

Cloud Monitoring

2025.07.01
FEATURE Cloud Monitoring Integration Service Added
  • In July 2025, a linked service with Cloud Monitoring was added.
    • Additional linked services: Compute(Multi-node GPU Cluster [Cluster Fabric], Multi-node GPU Cluster [Node]), Storage(Block Storage(BM), Block Storage(VM)), Networking(Cloud WAN, Global CDN), Database(Valkey), Data Analytics(Opensearch, Vertica(DBaaS))
2025.02.27
FEATURE Cloud Monitoring Integration Service Added
  • In February 2025, a linked service with Cloud Monitoring was added.
    • Additional linked services: Container(Container Registry), Database(EPAS, Microsoft SQL Server), Data Analytics(Event Streams, Search Engine), Networking(Load Balancer, Load Balancer Listener, Load Balancer Server Group, VPN)
2024.10.01
NEW Cloud Monitoring Service Official Version Release
  • Cloud Monitoring service has been released. It collects usage and change information of operating infrastructure resources, and supports a stable cloud operating environment through event occurrence/notification when exceeding the set threshold.

4 - IAM

4.1 - Overview

Service Overview

IAM (Identity and Access Management) is a service that controls the accessible range of services and resources by verifying the identity of registered users on the Samsung Cloud Platform and granting access rights. Administrators can create and manage user, permission group, policy, and role items in detail through IAM.

The user can create a new user if they are a Root user or a user who has been granted user registration authority from the Root user. Policies cannot be directly granted to users, but by adding users to a user group and linking policies to that user group, specific users can be granted access or management rights to resources. In other words, the tasks that can be performed within an Account vary depending on which user group the user belongs to and which policies are linked to that user group.

Provided Features

IAM provides the following features.

  • User Authentication: Provides multi-factor authentication (MFA) when accessing the console and API, and also blocks unauthorized access by only allowing access from permitted IP ranges.
  • Access Control: Users are added to user groups based on their tasks to limit their access rights to the parts necessary for their tasks. Administrators can manage and grant custom policies.
  • Role Management: You can switch to another role from your account to access the Account.
  • Credential Provider Supplied: It can be accessed and used in the Console Account through the credential provider.
  • Access Control Policy Management: Creates access control policies for each service, including control/action/resource type and authentication method/IP. This enables the application of the principle of least privilege when granting access rights to cloud resources, allowing for access control based on user.

Component

The user can create and manage user groups, users, and policies through Identity and Access Management(IAM).

User Group

In the user group, you can register users and add policies. You can register users by forming a user group suitable for each task, and grant and manage the same authority to users by linking a policy suitable for the task.

User

The administrator can create users and add them to user groups. The administrator can automatically generate or directly create a user’s password and provide account access information to the user.

User Policy

You can create policies for services provided. Authority management is possible according to control type, applied resources, and authentication type.

Role

It is fictional user information with separate permissions, and is not affected by the permissions of the original user account.

Preceding service

Identity and Access Management(IAM) has no preceding service.

4.2 - How-to Guides

Users can create and manage user groups, users, policies, and My Info. through Identity and Access Management (IAM).

Getting Started with IAM

  1. Click on the All Services > Management > IAM menu. This will take you to the Service Home page of IAM.
  2. On the Service Home page, My Info., Account information, Quick Link, and IAM status are provided as widgets.
CategoryDetailed Description
My Info.The username, email, and user group information of the user logged in to the Samsung Cloud Platform Console. Clicking the More button will take you to the My Info. page
Account InformationProvides the user’s Account ID, Account alias, and IAM user login URL if the user is an IAM user
  • Account ID: The user’s Account ID
  • Account Alias: A name assigned to the Account. An alias can be used to manage the Account more easily
    • Edit: If the Account alias is edited, the current alias can no longer be used for IAM user login URL See Editing Account Alias for more information
    • Delete: If the Account alias is deleted, IAM users can no longer log in using the Account alias. See Deleting Account Alias for more information
  • IAM User Login URL allows login without entering Account information
  • For more information about Accounts, see Account
Quick LinkDescription of My Info. and a button to click to go to the corresponding page.
  • For more information about My Info., see My Info.
IAM StatusThe number of user groups, users, and policies
Table. IAM Service Home Widget Items

Editing Account Alias

You can edit the Account alias in the Service Home > Account widget of IAM.

  1. Click on the All Services > Management > IAM menu. This will take you to the Service Home page of IAM.
  2. On the Service Home page, click the Edit button for the Account alias in the Account widget. This will take you to the Edit Account Alias popup window.
  3. In the Edit Account Alias popup window, confirm the instructions and edit the Account alias, then click the OK button.
    Note
    When editing the Account alias, the current alias can no longer be used for Console login URL.
    After editing, if the alias is not used in another Account, you can use the previous alias again.

Deleting Account Alias

You can delete the Account alias in the Service Home > Account widget of IAM.

  1. Click on the All Services > Management > IAM menu. This will take you to the Service Home page of IAM.
  2. On the Service Home page, click the Delete button for the Account alias in the Account widget. This will take you to the Delete Account Alias popup window.
  3. In the Delete Account Alias popup window, confirm the instructions and click the OK button.
    Warning

    Deleting the Account alias will prevent IAM users from logging in using the Account alias.

    • The IAM login URL will also be unavailable.

4.2.1 - User Group

Users can enter required information for user groups and select detailed options through the Samsung Cloud Platform Console to create the corresponding service.

Creating a User Group

To create a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the Create User Group button on the User Group List page. You will be navigated to the Create User Group page.
    • Enter the required information in the Enter Basic Information, Add User, Connect Policy, Enter Additional Information areas.
      Category
      Required
      Description
      User Group NameRequiredEnter user group name
      • Enter a value between 3-24 characters using Korean, English, numbers, and special characters (+=,.@-_)
      DescriptionOptionalDescription of the user group name
      • Can enter up to 1,000 characters as a detailed description of the user group name
      UsersOptionalUsers to add to the user group
      • A list of users registered in the Account is displayed, and when a checkbox is selected, the username of the selected user is displayed at the top of the screen
      • Click the X button for each user at the top of the screen or uncheck the checkbox in the user list to cancel the selection of the selected user
      • If there is no user to add, click Create User at the bottom of the user list to first register a new user
        • After user creation is complete, refresh the user list and select the user when the user is displayed
      PoliciesOptionalPolicies to connect to the user group
      • A list of policies registered in the Account is displayed, and when a checkbox is selected, the policy name of the selected policy is displayed at the top of the screen
      • Click the X button for each policy at the top of the screen or uncheck the checkbox in the policy list to cancel the selection of the selected policy
      • If there is no policy to connect, click Create Policy at the bottom of the policy list to first register a new policy
        • After policy creation is complete, refresh the policy list and select the policy when the policy is displayed
      TagsOptionalTags to add to the user group
      • Up to 50 tags can be added per resource
      Table. User Group Creation Information Entry Items
  4. Click the Create button.
  5. When a popup window announcing creation opens, click the OK button. You will be navigated to the User Group List page.

Viewing User Group Details

In user groups, you can view the user group list and detailed information and modify them. The User Group Details page consists of Basic Information, Users, Policies, Tags tabs.

To view detailed information of the user group service, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name for which you want to view detailed information on the User Group List page. You will be navigated to the User Group Details page.
    • The User Group Details page displays basic information and consists of Basic Information, Users, Policies, Tags tabs.

Basic Information

On the User Group List page, you can view the basic information of the selected user group and, if necessary, modify the user group name and description.

CategoryDescription
ServiceService name
Resource TypeResource type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource name
  • In user groups, refers to user group name
Resource IDUnique resource ID
CreatorUser who created the service
Creation Date/TimeDate/Time when the service was created
ModifierUser who modified the service information
Modification Date/TimeDate/Time when the service information was modified
User Group NameName of the user group
DescriptionDescription of the user group name
Table. User Group Basic Information Tab Items

Users

On the User Group List page, you can view the users included in the selected user group and, if necessary, add or delete users.

  • For details on Users, refer to Users.
CategoryDescription
ExcludeExclude users from the user group
  • Activated when a user is selected from the user list
Add UserAdd other users to the user group
  • Clicking the button navigates to the Add User page
UsernameName of the user
User GroupNumber of user groups to which the user belongs
  • Clicking the item allows viewing the names of the user groups to which the user belongs
Creation Date/TimeDate/Time when the user was created
Table. User Group Details - Users Tab Items

Policies

On the User Group List page, you can view the policy connection information of the selected user group and, if necessary, modify the policy connection information for the user group.

  • For details on Policies, refer to Policies.
    CategoryDescription
    DisconnectDisconnect the connection of the selected policy
    • Activated when a policy is selected from the policy list
    Connect PolicyConnect a new policy to the user group
    • Clicking the button navigates to the Connect Policy page
    Policy NameName of the policy
    Policy TypeType of the connected policy
    • Basic: Basic policy provided by Samsung Cloud Platform
    • Custom: Policy directly created by the user
    DescriptionDescription of the policy
    Creation Date/TimeDate/Time when the policy was created
    Modification Date/TimeDate/Time when the policy was modified
    Table. User Group Details - Policies Tab Items

Tags

On the User Group List page, you can view the tag information of the selected user group and add, modify, or delete tags.

CategoryDescription
Tag ListTag list
  • Can view Key, Value information of tags
  • Up to 50 tags can be added per resource
  • When entering tags, search and select from previously created Key and Value lists
Table. User Group Tags Tab Items

Managing User Groups

You can change the name of a user group or add users, connect policies, and modify tags. If user group management is needed, you can perform tasks on the User Group List or User Group Details page.

Modifying Basic Information

You can modify the name and description of a user group. To modify the name and description of a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name for which you want to modify basic information on the User Group List page. You will be navigated to the User Group Details page.
  4. After viewing the basic information to modify on the User Group Details page, click the Edit button.
    • User Group Name: Can change the user group name. Clicking the Edit button opens the Edit User Group Name popup window.
    • Description: Can modify the description of the user group. Clicking the Edit button opens the Edit Description popup window.
  5. Modify to the content you want to change in the popup window, then click the OK button.

Managing Users

You can add or exclude users from a user group.

Adding Users

To add users to a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name to which you want to add users on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Users tab on the User Group Details page. You will be navigated to the Users tab.
  5. Click the Add User button on the Users tab. You will be navigated to the Add User page.
  6. Select the user you want to add from the Users list on the Add User page, then click the Complete button. A popup window announcing user addition opens.
CategoryDescription
Added UsersDisplay users included in the user group
UsersSelect a user to add to the user group from the list of users registered in the Account
  • When a checkbox is selected, the selected user group name is displayed at the top of the list
  • Click the X button of the username added at the top of the list or uncheck the checkbox in the user list to cancel that user
  • If the desired user does not exist, click the Create User item at the bottom of the user list to first register a new user
    • After user creation is complete, refresh the user list and select the created user
Table. Add User Detail Items
  1. Click the OK button in the popup window announcing user addition. You can view the added user in the list on the Users tab.

Excluding Users

To exclude users from a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name from which you want to exclude users on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Users tab on the User Group Details page. You will be navigated to the Users tab.
  5. Select the user to exclude from the displayed user list on the Users tab, then click the Exclude User button.
  6. The selected User is excluded and the user list is refreshed.

Managing Policies

You can connect policies to a user group or disconnect connected policies.

Connecting Policies

To connect policies to a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name to which you want to connect policies on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Policies tab on the User Group Details page. You will be navigated to the Policies tab.
  5. Click the Connect Policy button on the Policies tab. You will be navigated to the Connect Policy page.
  6. Select the policy to connect to the user group, then click the Complete button. A popup window announcing policy connection opens.
CategoryDescription
Connected PoliciesDisplay policies directly connected to the user group
PoliciesSelect a policy to connect to the user group from the list of policies registered in the Account
  • When a checkbox is selected, the selected policy name is displayed at the top of the list
  • Click the X button of the policy name added at the top of the list or uncheck the checkbox in the policy list to cancel that policy
  • If there is no policy to connect, click the Create Policy item at the bottom of the policy list to first register a new policy
    • After policy creation is complete, refresh the policy list and select the created policy
Table. Connect Policy Detail Items
  1. Click the OK button in the popup window announcing policy connection. You can view the connected policy in the list on the Policies tab.

Disconnecting Policies

To disconnect connected policies from a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name for which you want to disconnect policy connections on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Policies tab on the User Group Details page. You will be navigated to the Policies tab.
  5. Select the policy to disconnect from the displayed policy list on the Policies tab, then click the Disconnect button.
  6. The selected Policy is disconnected and the policy list is refreshed.

Managing Tags

You can modify the tags of a user group. To modify tags in a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name for which you want to modify tag information on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Tags tab on the User Group Details page. You will be navigated to the Tags tab.
  5. Click the Edit Tags button on the Tags tab.
  6. After adding or modifying tags, click the Save button. A popup window announcing tag modification opens.
    • You can modify the Key, Value of previously registered tags.
    • You can add a new tag by clicking the Add Tag button.
    • Clicking the X button in front of the added tag deletes that tag.
  7. Click the OK button. You can view the modified tag information in the list.

Deleting a User Group

To delete a user group, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Click the user group name to delete on the User Group List page. You will be navigated to the User Group Details page.
  4. Click the Delete User Group button on the User Group Details page.
  5. The user group is deleted and you will be navigated to the User Group List page.

To delete multiple user groups simultaneously, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the User Group menu on the Service Home page. You will be navigated to the User Group List page.
  3. Check the user groups to delete from the user group list.
  4. After confirming the selected user groups, click the Delete button.
  5. The selected user groups are deleted and the User Group List page is refreshed.

4.2.2 - User

Users can create services by entering required information for policies and selecting detailed options through Samsung Cloud Platform Console.

Creating a User

To create a user, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).

  2. On the Service Home page, click the User menu. You will be taken to the User List page.

  3. On the User List page, click the Create User button. You will be taken to the Create User page.

  4. Enter the required information in the Enter Basic Information, Permission Settings, Enter Additional Information areas on the Create User page, then click the Create button. A popup window announcing user creation opens.

    Category
    Required
    Description
    UsernameRequiredName of the user
    • Enter a value within 64 characters using English, numbers, and special characters (+=,.@-_)
    DescriptionOptionalDescription of the username
    • Enter up to 1,000 characters as a detailed description of the username
    PasswordRequiredPassword for the user, there are 2 creation methods
    • Auto Generate: Password is automatically generated and can be checked at the time of user creation
    • Direct Input: Create password directly
    Password Change SettingOptionalPassword change setting on first user login
    • If not set, the user cannot change the password on first login and can reset it again through Reset Password
    Add to User GroupOptionalSelect a user group to include the user from the list of user groups registered in the Account
    • When the checkbox is selected, the selected user group name is displayed at the top of the list
    • Click the X button of the user group name added at the top of the list, or uncheck the checkbox in the user group list to cancel that user group
    • If there is no user group to link, you can first register a new user group by clicking the Create User Group item at the bottom of the user group list
      • When user group creation is complete, refresh the user group list and then select the created user group
    Direct Policy LinkOptionalSelect a policy to directly link to the user from the list of policies registered in the Account
    • When the checkbox is selected, the selected policy name is displayed at the top of the list
    • Click the X button of the policy name added at the top of the list, or uncheck the checkbox in the policy list to cancel that policy
    • If there is no policy to link, you can first register a new policy by clicking the Create Policy item at the bottom of the policy list
      • When policy creation is complete, refresh the policy list and then select the created policy
    TagsOptionalTags to add to the user group
    • Can add up to 50 tags per resource
    Table. Create User Information Entry Items

  5. Click the Create button in the popup window announcing user creation. The IAM User Login Information popup window opens.

  6. After checking the IAM user login information, click the Confirm button. You will be taken to the User List page.

    CategoryDescription
    Account IDAccount ID value
    UsernameCreated user name
    PasswordPassword of the created user
    • Click the View icon to check the password
    IAM User Login URLLogin URL information of the IAM user
    Excel DownloadDownload IAM user login information as an Excel file
    Email SendSend an Excel file containing IAM user login information via email
    • After clicking the button, enter the address to receive the email
    Table. IAM User Login Information Items

Password Creation Rules
  • If you enter the wrong password 5 or more times, you are automatically logged out.
  • Must include at least 1 each of uppercase English, lowercase English, numbers, and special characters (! @ # $ % & * ^).
  • Length is 9~20 characters.
  • Cannot use ID or username as password.
  • Cannot use the same character 3 or more times.
  • Cannot use easily guessable passwords.
  • Cannot use recently used passwords.
  • Cannot use 4 or more consecutive characters/numbers.
  • Password change cycle is 90 days.

Viewing User Details

In Users, you can view and modify the user list and detailed information. The User Details page is composed of Basic Information, User Group, Tags tabs.

To view detailed information of the user service, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to view detailed information. You will be taken to the User Details page.
    • The User Details page displays basic information and is composed of Basic Information, User, Policy, Tags tabs.

Basic Information

You can view the basic information of the user selected on the User List page, and if necessary, modify the user’s description and options.

CategoryDescription
ServiceService name
Resource TypeResource type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource name
  • In Users, means username
Resource IDUnique resource ID
CreatorUser who created the service
Creation DateDate and time when the service was created
ModifierUser who modified the service information
Modification DateDate and time when the service information was modified
UsernameName of the user
Last LoginDate and time when the user last logged in
DescriptionDescription of the username
PasswordDate and time when the password was last changed
Password Reuse RestrictionRestrict reuse of recently used passwords
  • Click the Modify icon to change the number of password history to restrict
EmailEmail authentication status
Mobile Phone NumberMobile phone number authentication status
Table. User Details - Basic Information Tab Items

User Group

You can view the user groups registered for the user selected on the User List page, and if necessary, add or exclude user groups.

  • For more information about User Groups, see User Group.
CategoryDescription
ExcludeExclude the user from the user group
  • Activated when selecting a user group in the user group list
Add User GroupAdd the user to another user group
  • Click the button to go to the Add User Group page
User Group NameName of the user group
Linked PolicyNumber of policies linked to the user group
  • Click the item to check the linked policy name and go to the corresponding Policy Details page
DescriptionDescription of the user group
Modification DateDate and time when the user group was modified
Table. User Details - User Group Tab Items

Policy

You can view the policy information of the user selected on the User List page, and add, change, or delete it.

CategoryDescription
UnlinkUnlink the selected policy
  • Activated when selecting a policy in the policy list
MoreCan unlink direct connection or exclude from user group
  • Unlink Direct Connection: If the connection method is Direct, unlink the direct connection of that policy
  • Exclude from User Group: Exclude the user from the user group
Link PolicyLink a new policy to the user
  • Click the button to go to the Link Policy page
Policy NameName of the policy
  • Click the policy name to view the policy details page
TypeType of the policy
DescriptionDescription of the policy
Connection MethodPolicy connection method
  • Direct: User directly linked to policy
  • Group: Linked to policy through group
  • Direct, Group: Both direct connection and group connection applied
  • Click the group name to go to that group details page
Modification DateDate and time when the policy was last modified
Table. User Details - Policy Tab Items

Tags

You can view the tag information of the user selected on the User List page, and add, change, or delete it.

CategoryDescription
Tag ListTag list
  • Can check Key, Value information of tags
  • Can add up to 50 tags per resource
  • When entering tags, search and select from the list of previously created Keys and Values
Table. User Details - Tags Tab Items

Managing Users

You can change the user’s basic information, add user groups, and modify tags. If user management is required, you can perform tasks on the User List or User Details page.

Modifying Basic Information

You can modify the user’s basic information.

Warning
The username cannot be modified.

Modifying Description

To modify the user’s description, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to modify the description. You will be taken to the User Details page.
  4. On the User Details page, check the description and click the description Modify button. The Modify Description popup window opens.
  5. After changing the description in the Modify Description popup window, click the Confirm button.

Modifying Password

To modify the user’s password, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to modify the password. You will be taken to the User Details page.
  4. On the User Details page, click the password Modify button. The Reset Password popup window opens.
  5. After modifying the password, click the Confirm button. The IAM User Login Information popup window opens.
    • Password has the following 2 settings.
      • Auto Generate: A random password is generated.
      • Direct Input: Created with the password directly entered by the user. Must include at least 1 each of uppercase English, lowercase English, numbers, and special characters (! @ # $ % & * ^). Refer to the password creation rules.
    • Password Change Setting: It is recommended to change the password on first login after resetting the password.
Password Creation Rules
  • Must include at least 1 each of uppercase English, lowercase English, numbers, and special characters (! @ # $ % & * ^).
  • Length is 9~20 characters.
  • Cannot use ID or username as password.
  • Cannot use the same character 3 or more times.
  • Cannot use easily guessable passwords.
  • Cannot use recently used passwords.
  • Cannot use 4 or more consecutive characters/numbers.
  • Password change cycle is 90 days.
  1. After checking the user creation information, click the Confirm button. Password change is completed.
    CategoryDescription
    Account IDAccount ID value
    UsernameCreated user name
    PasswordPassword of the created user
    • Click the View icon to check the password
    IAM User Login URLLogin URL information of the IAM user
    Excel DownloadDownload IAM user login information as an Excel file
    Email SendSend an Excel file containing IAM user login information via email
    • After clicking the button, enter the address to receive the email
    Table. IAM User Login Information Items

Restricting Password Reuse

Specify the number of password history to check to prevent reuse of recently used passwords. To restrict user password reuse, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to modify password reuse restriction. You will be taken to the User Details page.
  4. On the User Details page, click the password reuse restriction Modify button. The Modify Password Reuse Restriction popup window opens.
    • Password Reuse Restriction: Select the number of recently used password history as a number within 1~24.
  5. Click the Confirm button. You can check that the Password Reuse Restriction number has changed.

Managing User Groups

You can add a user to a user group or exclude the user from a user group.

Adding User Group

To add a user to a user group, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to add a user group. You will be taken to the User Details page.
  4. On the User Details page, click the User Group tab. You will be taken to the User Group tab.
  5. On the User Group tab, click the Add User Group button. You will be taken to the Add User Group page.
  6. On the Add User Group page, select the user group to add from the User Group list, then click the Complete button. A popup window announcing user group addition opens.
CategoryDescription
Added User GroupDisplay the user group to which the user belongs
Add to User GroupSelect a user group to add the user from the list of user groups registered in the Account
  • When the checkbox is selected, the selected user group name is displayed at the top of the list
  • Click the X button of the user group name added at the top of the list, or uncheck the checkbox in the user group list to cancel that user group
  • If there is no desired user group, you can first register a new user group by clicking the Create User Group item at the bottom of the user group list
    • When user group creation is complete, refresh the user group list and then select the created user group
Table. Add User Group Detail Items
  1. Click the Confirm button in the popup window announcing user group addition. You can check the added user group in the list on the User Group tab.

Excluding User Group

To exclude a user from a user group, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to exclude a user group. You will be taken to the User Details page.
  4. On the User Details page, click the User Group tab. You will be taken to the User Group tab.
  5. On the User Group tab, select the user group to exclude from the retrieved user group list, then click the Exclude User Group button.
  6. The selected User Group is excluded and the user group list is retrieved again.

Managing Policies

You can link policies to users or unlink linked policies.

Linking Policy

You can link a policy by including a user in a user group or directly linking to a policy.

To link a policy to a user, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).

  2. On the Service Home page, click the User menu. You will be taken to the User List page.

  3. On the User List page, click the username for which you want to link a policy. You will be taken to the User Details page.

  4. On the User Details page, click the Policy tab. You will be taken to the Policy tab.

  5. On the Policy tab, click the Link Policy button. You will be taken to the Link Policy page.

  6. After selecting the user group and policy to link to the user, click the Complete button. A popup window announcing policy linking opens.

    CategoryDescription
    Added User GroupDisplay the user group to which the user belongs
    Add to User GroupSelect a user group using the policy to link from the list of user groups registered in the Account
    • When the checkbox is selected, the selected user group name is displayed at the top of the list
    • Click the X button of the user group name added at the top of the list, or uncheck the checkbox in the user group list to cancel that user group
    • If there is no desired user group, you can first register a new user group by clicking the Create User Group item at the bottom of the user group list
      • When user group creation is complete, refresh the user group list and then select the created user group
    Directly Linked PolicyDisplay policies directly linked to the user
    Direct Policy LinkSelect a policy to directly link to the user from the list of policies registered in the Account
    • When the checkbox is selected, the selected policy name is displayed at the top of the list
    • Click the X button of the policy name added at the top of the list, or uncheck the checkbox in the policy list to cancel that policy
    • If there is no policy to link, you can first register a new policy by clicking the Create Policy item at the bottom of the policy list
      • When policy creation is complete, refresh the policy list and then select the created policy
    Table. Link Policy Detail Items

  7. Click the Confirm button in the popup window announcing policy linking. You can check the linked policy in the list on the Policy tab.

Unlinking Policy

You can unlink a policy linked to the user.

To unlink a policy linked to the user, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to unlink the policy. You will be taken to the User Details page.
  4. On the User Details page, click the Policy tab. You will be taken to the Policy tab.
  5. After selecting the policy to unlink from the Policy list, click the Unlink button. A popup window announcing unlinking opens.
    • After clicking the More button, you can unlink the directly linked policy or exclude only the user groups containing the user.
  6. After checking the policy information to be unlinked, click the Confirm button. The policy is unlinked.
Guide
Policies linked through user groups can be unlinked by excluding the user from the group. If you exclude the user from the user group, all policies linked only through that group are unlinked.

Managing Tags

You can modify the user’s tags. To modify tags in Users, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username for which you want to modify tag information. You will be taken to the User Details page.
  4. On the User Details page, click the Tags tab. You will be taken to the Tags tab.
  5. On the Tags tab, click the Modify Tags button.
  6. After adding or modifying tags, click the Save button. A popup window announcing tag modification opens.
    • You can modify the Key, Value of previously registered tags.
    • Click the Add Tag button to add a new tag.
    • Click the X button in front of the added tag to delete that tag.
  7. Click the Confirm button. You can check the modified tag information in the list.

Deleting a User

To delete a user, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. On the User List page, click the username to delete. You will be taken to the User Details page.
  4. On the User Details page, click the Delete User button.
  5. The user is deleted and you are taken to the User List page.

To delete multiple users at the same time, follow the steps below.

  1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the User menu. You will be taken to the User List page.
  3. Check the users to delete in the user list.
  4. After checking the selected users, click the Delete button.
  5. The selected users are deleted and the User List page is retrieved again.

4.2.3 - Policy

Users can enter required information for policies and select detailed options through the Samsung Cloud Platform Console to create the corresponding service.

Creating a Policy

To create a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).

  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.

  3. Click the Create Policy button on the Policy List page. You will be navigated to the Create Policy page.

  4. Enter the required information in the Enter Basic Information, Enter Additional Information areas, then click the Next button. You will be navigated to the Permission Settings area.

    Category
    Required
    Description
    Policy NameRequiredEnter policy name
    • Enter a value between 3-128 characters using Korean, English, numbers, and special characters (+=,.@-_)
    DescriptionOptionalDescription of the policy name
    • Enter up to 1,000 characters as a detailed description of the policy name
    TagsOptionalTags to add to the policy
    • Up to 50 tags can be added per resource
    Table. Policy Creation Information Entry Items - Basic Information and Additional Information

  5. Select the service for which to set permissions. Permission setting items are displayed under the selected service name.

    • You can select the desired service or set it for all services.
  6. Enter the required information in the Permission Settings area.

    Category
    Required
    Description
    Control TypeRequiredSelect policy control type
    • Allow Policy: Policy that allows defined permissions
    • Deny Policy: Policy that denies defined permissions
    Deny policy takes precedence for the same target
    ActionRequiredSelect actions provided by each service
    • Actions where individual resource selection is possible are displayed in purple
    • Actions targeting all resources are displayed in black
    • Add Action Directly: Can specify multiple actions at once using wildcard *
    Applied ResourceRequiredResource to which the action is applied
    • All Resources: Apply to all resources for the selected action
    • Individual Resource: Apply only to specified resources for the selected action
      • Individual resources are only possible when selecting purple actions where individual resource selection is possible among actions
      • Click the Add Resource button to specify target resources by resource type
    Authentication TypeRequiredAuthentication method of the target to which the policy is applied
    • All Authentication: Apply regardless of authentication method
    • Authentication Key Authentication: Apply to authentication key authentication users
    • Temporary Key Authentication, Console Login: Apply to temporary key authentication or Console login users
    Applied IPRequiredIP that allows policy application
    • User-defined IP: User directly registers and manages IP
      • Applied IP: IP to which the policy is applied by user registration, can be registered in IP address or range format
      • Excluded IP: IP to exclude from Applied IP, can be registered in IP address or range format
    • All IP: Do not restrict IP access
      • Allow access for all IPs, but if an exception is needed, register Excluded IP to restrict access for registered IPs
    Additional ConditionsOptionalAdd conditions for Attribute-Based Access Control (ABAC)
    • Condition Key: Select from Global condition Key and service condition Key lists
    • Qualifier: Default, any value in request, all values in request
    • Operator: Bool, Null
    • Value: True, False
    Table. Policy Creation Information Entry Items - Permission Settings
    Caution

    Permission settings provide Basic Mode and JSON Mode.

    • After writing in Basic Mode, when entering JSON Mode or moving screens, services with the same conditions are merged into one and services where settings are not completed are deleted.
    • If content written in JSON Mode does not match JSON format, you cannot switch to Basic Mode.

  7. In the Permission Settings area, first select the Service for which to set permissions.

    • You can create a policy by loading an existing registered policy through Load Policy. For details on Load Policy, refer to Loading Policy.
  8. Click the Next button. You will be navigated to the Confirm Entered Information page.

  9. After confirming the entered information, click the Create button.

  10. When a popup window announcing policy creation opens, click the OK button. You will be navigated to the Policy List page.

Loading Policy

You can load an existing policy to reference it for policy creation. To load an existing policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the Create Policy button on the Policy List page. You will be navigated to the Create Policy page.
  4. Enter the required information in the Enter Basic Information, Enter Additional Information areas.
  5. Click the Next button. You will be navigated to the Permission Settings area.
  6. Click the Load Policy button. The Load Policy popup window will open.
  7. A list of policies registered in the Account is displayed. Select the policy you want to load and click OK.
  8. The loaded policy is entered in the Permission Settings area and can be edited.
Note
When you execute Load Policy, all previously entered content is deleted and replaced with the settings of the selected policy.

Registering Individual Resources as Applied Resources

You can register individual resources as applied resources in the Permission Settings area. To register individual resources as applied resources, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the Create Policy button on the Policy List page. You will be navigated to the Create Policy page.
  4. Enter the required information in the Enter Basic Information, Enter Additional Information areas.
  5. Click the Next button. You will be navigated to the Permission Settings area.
  6. Select the Service for which to set permissions in the Permission Settings area.
  7. In Action selection, select an Action where Individual Resource selection is possible.
    • Actions where individual resource selection is possible are displayed in purple.
  8. Click Individual Resource in Applied Resource.
  9. Click the Add Resource button. The Add Resource popup window will open.
  10. Add resources to which the policy will be applied in the Add Resource tab. Adding resources is possible in two ways: Select Resource and Direct Input.
    • Select Resource: Check and select resources displayed by Resource Type.
    • Direct Input: Directly enter target resources by Resource Type to add them.
      • Wildcards *, ? can be used. If you check Select All, all resources of that resource type are added, and newly added resources thereafter are automatically included.
        Note
        When changing the addition method, entered content is deleted.
  11. After confirming the entered information, click the OK button.

Viewing Policy Details

In policies, you can view the policy list and detailed information and modify them. The Policy Details page consists of Basic Information, Permissions, Connected Targets, Tags tabs.

To view detailed information of the policy service, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to view detailed information on the Policy List page. You will be navigated to the Policy Details page.
    • The Policy Details page displays basic information and consists of Basic Information, Permissions, Connected Targets, Tags tabs.

Basic Information

On the Policy List page, you can view the basic information of the selected policy and, if necessary, modify the policy name and description.

CategoryDescription
ServiceService name
Resource TypeResource type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource name
  • In policies, refers to policy name
Resource IDUnique resource ID
CreatorUser who created the service
Creation Date/TimeDate/Time when the service was created
ModifierUser who modified the service information
Modification Date/TimeDate/Time when the service information was modified
Policy NameName of the policy
Policy TypeType of the policy
  • Basic: Basic policy provided by Samsung Cloud Platform
  • Custom: Policy directly created by the user
DescriptionDescription of the policy name
Table. Policy Details - Basic Information Tab Items

Permissions

On the Policy List page, you can view the permission information of the selected policy and, if necessary, modify permissions.

  • Click the Expand button of the service name for which you want to view permission information to display detailed policy information.
    Note
    Permission settings provide basic mode and JSON mode.
    CategoryDescription
    Edit PermissionsPermissions can be edited
    • Clicking the button navigates to the Edit Permissions page
    View ModePolicy control type
    • Basic Mode: Display policy items and detailed information in basic UI
    • JSON Mode: Display in JSON editor format
    Control TypePolicy control type
    • Allow Policy: Policy that allows defined permissions
    • Deny Policy: Policy that denies defined permissions
    ActionProvided functions for each service that is the target of the policy
    Applied ResourceResource to which the action is applied
    • All Resources: Apply to all resources for the selected action
    • Individual Resource: Apply only to specified resources for the selected action
    Authentication TypeAuthentication method of the target to which the policy is applied
    • All Authentication: Apply regardless of authentication method
    • Authentication Key Authentication: Apply to authentication key authentication users
    • Temporary Key Authentication, Console Login: Apply to temporary key authentication or Console login users
    Applied IPIP that allows policy application
    • User-defined IP: User directly registers and manages IP
      • Applied IP: IP to which the policy is applied by user registration, can be registered in IP address or range format
      • Excluded IP: IP to exclude from Applied IP, can be registered in IP address or range format
    • All IP: Do not restrict IP access
      • Allow access for all IPs, but if an exception is needed, register Excluded IP to restrict access for registered IPs
    Table. Policy Details - Permissions Tab Items

Connected Targets

On the Policy List page, you can view the user groups registered to the selected policy and, if necessary, add or exclude user groups.

CategoryDescription
UsersList of users connected to the policy
  • Can view username, user group, creation date/time
  • Clicking the Connect User button navigates to the Connect User page
  • After selecting a user from the list, can disconnect by clicking the Disconnect button
User GroupsList of user groups connected to the policy
  • Can view user group name, connected policies, description, modification date/time
  • Clicking the Connect User Group button navigates to the Connect User Group page
  • After selecting a user group from the list, can disconnect by clicking the Disconnect button
RolesDisplay list of roles connected to the policy
  • Can view role name, connected policies, description, modification date/time
  • Clicking the Connect Role button navigates to the Connect Role page
  • After selecting a role from the list, can disconnect by clicking the Disconnect button
Table. Policy Details - Connected Targets Tab Items

Tags

On the Policy List page, you can view the tag information of the selected policy and add, modify, or delete tags.

CategoryDescription
Tag ListTag list
  • Can view Key, Value information of tags
  • Up to 50 tags can be added per resource
  • When entering tags, search and select from previously created Key and Value lists
Table. Policy Details - Tags Tab Items

Managing Policies

You can change the name of a policy or modify permissions, connected targets, and tags. If policy management is needed, you can perform tasks on the Policy List or Policy Details page.

Modifying Basic Information

You can modify the name and description of a policy. To modify the name and description of a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to modify basic information on the Policy List page. You will be navigated to the Policy Details page.
  4. After viewing the basic information to modify on the Policy Details page, click the Edit button.
    • Policy Name: Can change the policy name. Clicking the Edit button opens the Edit Policy Name popup window.
    • Description: Can modify the description of the policy. Clicking the Edit button opens the Edit Description popup window.
  5. Modify to the content you want to change in the popup window, then click the OK button.

Managing Permissions

You can modify the permissions of a policy. To modify the permissions of a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to modify policy permissions on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Permissions tab on the Policy Details page. You will be navigated to the Connected Permissions tab.
  5. Click the Edit Permissions button on the Policy Details page. You will be navigated to the Edit Permissions page.
  6. After modifying the necessary permissions on the Edit Permissions page, click the Next button. You will be navigated to the Confirm Entered Information page.
    • For detailed descriptions of each item in permission information, refer to Creating a Policy.
  7. After confirming the modified permission information on the Confirm Entered Information page, click the Complete button. You will be navigated to the Permissions tab.

Managing User Connections

  • On the Policy > Connected Targets tab, you can view users registered to the policy and, if necessary, connect or disconnect users.
  • For details on Users, refer to Users.

Connecting Users

To connect users to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name to which you want to connect users on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Click the Connect User button on the Connected Targets tab. You will be navigated to the Connect User page.
  6. Select the user you want to connect from the Users list on the Connect User page, then click the Complete button. A popup window announcing user connection opens.
    CategoryDescription
    Connected User GroupsDisplay users connected to the policy
    User GroupsSelect a user to connect the policy from the list of users registered in the Account
    • When a checkbox is selected, the selected username is displayed at the top of the list
    • Click the X button of the username added at the top of the list or uncheck the checkbox in the user list to cancel that user
    • If the desired user does not exist, click the Create User item at the bottom of the user list to first register a new user
      • After user creation is complete, refresh the user list and select the created user
    Table. User Connection Detail Items
  7. Click the OK button in the popup window announcing user connection. You can view the connected user in the list on the Users tab.

Disconnecting Users

To disconnect users connected to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to disconnect user connections on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Select the user to disconnect from the user group list on the Connected Targets tab, then click the Disconnect button. A popup window announcing disconnection opens.
  6. Click the OK button in the popup window announcing disconnection. The connection of the selected user is disconnected and the user group list is refreshed.

Managing User Group Connections

  • On the Policy > Connected Targets tab, you can view user groups registered to the policy and, if necessary, connect or disconnect user groups.
  • For details on User Groups, refer to User Groups.

Connecting User Groups

To connect user groups to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name to which you want to connect user groups on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Click the Connect User Group button on the Connected Targets tab. You will be navigated to the Connect User Group page.
  6. Select the user group you want to connect from the User Groups list on the Connect User Group page, then click the Complete button. A popup window announcing user group connection opens.
    CategoryDescription
    Connected User GroupsDisplay user groups connected to the policy
    User GroupsSelect a user group to connect the policy from the list of user groups registered in the Account
    • When a checkbox is selected, the selected user group name is displayed at the top of the list
    • Click the X button of the user group name added at the top of the list or uncheck the checkbox in the user group list to cancel that user group
    • If the desired user group does not exist, click the Create User Group item at the bottom of the user group list to first register a new user group
      • After user group creation is complete, refresh the user group list and select the created user group
    Table. User Group Connection Detail Items
  7. Click the OK button in the popup window announcing user group connection. You can view the connected user group in the list on the User Groups tab.

Disconnecting User Groups

To disconnect user groups connected to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to disconnect user group connections on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Select the user group to disconnect from the user group list on the Connected Targets tab, then click the Disconnect button. A popup window announcing disconnection opens.
  6. Click the OK button in the popup window announcing disconnection. The connection of the selected user group is disconnected and the user group list is refreshed.

Managing Role Connections

  • On the Policy > Connected Targets tab, you can view roles registered to the policy and, if necessary, connect or disconnect roles.
  • For details on Roles, refer to Roles.

Connecting Roles

To connect roles to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name to which you want to connect roles on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Click the Connect Role button on the Connected Targets tab. You will be navigated to the Connect Role page.
  6. Select the role you want to connect from the Roles list on the Connect Role page, then click the Complete button. A popup window announcing role connection opens.
    CategoryDescription
    Connected RolesDisplay roles connected to the policy
    RolesSelect a role to connect the policy from the list of roles registered in the Account
    • When a checkbox is selected, the selected role is displayed at the top of the list
    • Click the X button of the role name added at the top of the list or uncheck the checkbox in the role list to cancel that role
    • If the desired role does not exist, click the Create Role item at the bottom of the role list to first register a new role
      • After role creation is complete, refresh the role list and select the created role
    Table. Role Connection Detail Items
  7. Click the OK button in the popup window announcing role connection. You can view the connected role in the list on the Roles tab.

Disconnecting Roles

To disconnect roles connected to a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name for which you want to disconnect role connections on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Connected Targets tab on the Policy Details page. You will be navigated to the Connected Targets tab.
  5. Select the role to disconnect from the role list on the Connected Targets tab, then click the Disconnect button. A popup window announcing disconnection opens.
  6. Click the OK button in the popup window announcing disconnection. The connection of the selected role is disconnected and the role list is refreshed.

Managing Tags

You can modify the tags of a policy.

To modify tags in a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name to which you want to add users on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Tags tab on the Policy Details page. You will be navigated to the Tags tab.
  5. Click the Edit Tags button on the Tags tab.
  6. After adding or modifying tags, click the Save button. A popup window announcing tag modification opens.
    • You can modify the Key, Value of previously registered tags.
    • You can add a new tag by clicking the Add Tag button.
    • Clicking the X button in front of the added tag deletes that tag.
  7. Click the OK button. You can view the modified tag information in the list.

Deleting a Policy

To delete a policy, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Click the policy name to delete on the Policy List page. You will be navigated to the Policy Details page.
  4. Click the Delete Policy button on the Policy Details page.
  5. The policy is deleted and you will be navigated to the Policy List page.

To delete multiple policies simultaneously, follow these steps:

  1. Click the All Services > Management > IAM menu. You will be navigated to the Service Home page of Identity and Access Management (IAM).
  2. Click the Policy menu on the Service Home page. You will be navigated to the Policy List page.
  3. Select the policies to delete from the policy list.
  4. After confirming the selected policies, click the Delete Policy button.
  5. The selected policies are deleted and the Policy List page is refreshed.

4.2.4 - Role

The user can create a role with separate permissions and switch from their own account to another role to access the Account.

Creating a role

To create a role, follow the following procedure.

  1. All services > Management > IAM menu is clicked. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the Create Role button. It moves to the Create Role page.
  4. Role Creation page where you enter information for role creation, click the Complete button.
  • Enter Basic Information Input.
    Classification
    Necessity
    Detailed Description
    Role NameRequiredEnter the name of the role
    • Use English letters, numbers, and special characters (+=-_@,.) to enter within 64 characters
    DescriptionSelectionEnter a description of the role within 1,000 characters
    Maximum session persistence timeRequiredEnter the session time allowed for the user when switching roles in the console
    • Time selection: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
    • Job input: Input possible in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
    Table. Basic Information Items for Role Creation
  • Execution Entity를 연결하세요.
    Classification
    Mandatory
    Detailed Description
    ClassificationEssentialSelect the performing entity
    • Current Account, Different Account, User SRN, Credential Provider, Service
    ValueRequiredEnter the Value value for the performing entity
    • Current Account: Display the current Account ID
    • Different Account: Enter the Account ID to use this role
    • User SRN: Enter the SRN of the user registered in the Console
    • Credential Provider: Select the credential provider name
    • Service: Select Virtual Server or Cloud Functions
    AddSelectA button to add the performing entity
    • Up to 20 additional connections are possible
    Table. Role Creation Performing Subject Connection Items
  • Policy을 연결하세요 -> * Connect the policy.
    Classification
    Mandatory
    Detailed Description
    PolicyRequiredSelect a policy to link to the role
    • If you select the check box, the selected policy name will be displayed at the top of the list
    • You can cancel the policy by clicking the X button for the added policy name at the top of the list or by unchecking the check box in the policy list
    • If there is no policy to link, you can click the Create Policy item at the bottom of the policy list to register a new policy first
      • After policy creation is complete, you can refresh the policy list and select the created policy
    Table. Role Creation Policy Link Items
  • Additional information를 입력하세요.
    Classification
    Mandatory
    Detailed Description
    TagSelectionTags to add to the role
    • Up to 50 tags can be added per resource
    Table. Role Creation Additional Information Items
  1. When the popup window notifying role creation opens, click the Confirm button.

Check detailed role information

Role List page where you can check and modify the detailed information of the selected role.

To check the detailed information of the role, follow the next procedure.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the identity provider to verify. It moves to the Identity Provider Details page.
  • Role Details page displays basic information, and consists of Basic Information, Performing Entity, Policy, Tag tabs.

Basic Information

You can check and modify the basic information of the role.

ClassificationDetailed Description
ServiceService Name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
  • Role means role name
Resource IDUnique Resource ID
CreatorThe user who created the service
Creation TimeThe time when the service was created
ModifierUser who modified the service information
Revision TimeThe time when service information was revised
Role NameRole’s Name
DescriptionDescription of the role proof provider
  • Edit button to change description possible
Maximum session durationThe role session duration allowed for an IAM user switching roles in the Console
  • Edit button can be clicked to change the duration
  • Time selection: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
  • Job input: Input possible in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
Table. Role Details - Basic Information Tab Items

Performing Entity

You can confirm and manage the subject of role performance.

ClassificationDetailed Description
DivisionName of the executing entity
ValueValue of the performing entity
Modify ExecutorModify the executor button
  • When the button is clicked, it moves to the Executor Connection page
Table. Role Details - Performing Entity Tab Items

Policy

ClassificationDetailed Description
DisconnectDisconnects the selected policy from the role
  • Activated when a policy is selected from the policy list
Policy ConnectionConnect a new policy to the role
  • When the button is clicked, move to the Policy Connection page
Policy NamePolicy’s Name
  • Click on the policy name to check the policy details page
TypeType of Policy
DescriptionDescription of the policy
Modification TimeThe time when the policy was last modified
Table. Role Details - Policy Tab Items

Tag

You can check, add, change, or delete the tag information of the credential provider.

ClassificationDetailed Description
Tag ListTag list
  • Check Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • Search and select from existing Key and Value lists when entering tags
Table. Role Supervisor - Tag Tab Items

Managing Roles

You can change the basic information of the role, or modify or delete the performing entity, connected policies, or tag information of the role.

Modify basic information

You can modify the maximum session persistence time and description in the role details. To modify the basic information, follow the following procedure.

  1. All services > Management > IAM menu is clicked. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the user role name to modify the basic information. It moves to the Role Details page.
  4. Role Details page, check the basic information to be modified, and then click the Modify button.
  • Maximum session duration: You can set the role session duration allowed for an IAM user switching roles in the Console. When you click the Edit button, the Edit maximum session duration popup window opens.
  • Description: You can modify the description of the role. When the Modify button is clicked, the Description Modification popup window opens.
  1. In the popup window, modify it to the content to be changed, then click the confirm button.

Managing the Performing Entity

You can add, modify, or delete the subject of the role’s performance.

To manage the performing subject of a role, follow the following procedure.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the user name to modify the performing subject. It moves to the Role Details page.
  4. Role Details page, click the Performing Entity tab. It moves to the Performing Entity tab.
  5. Execution Entity tab, click the Modify Execution Entity button. It moves to the Modify Execution Entity page.
  6. Modify the performing entity page, modify the performing entity, and then click the Complete button. A pop-up window announcing the modification of the performing entity will open.
Classification
Mandatory
Detailed Description
ClassificationEssentialSelect the performing entity
  • Current Account, Different Account, User SRN, Credential Provider, Service
ValueRequiredEnter the Value value for the performing entity
  • Current Account: Display the current Account ID
  • Different Account: Enter the Account ID to use this role
  • User SRN: Enter the SRN of the user registered in the Console
  • Credential Provider: Select the credential provider name
  • Service: Select Virtual Server or Cloud Functions
AddSelectButton to add the performing entity
  • Up to 20 additional connections can be added
  • Performing entity can be deleted by clicking the X button of the added performing entity
Table. Items to be revised by the performing entity
  1. Click the Confirm button in the pop-up window notifying the modification of the performing entity. You can check the modified performing entity in the list of the Performing Entity tab.

Managing Policies

You can link policies to roles or unlink linked policies.

Connect Policy

You can link policies to a role.

To link a policy to a role, follow these procedures.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).

  2. Service Home page, click the role menu. It moves to the role list page.

  3. Role List page, click the role name to link the policy. It moves to the User Detail page.

  4. Role Details page, click the Policy tab. It moves to the Policy tab.

  5. Policy tab, click the Policy Link button. It moves to the Policy Link page.

  6. After selecting the policy to be linked to the role, click the Complete button. A popup window announcing the policy connection will open.

    ClassificationDetailed Description
    Connected PolicyDisplays the policy connected to the role
    PolicySelect a policy to be linked to the role from the list of policies registered in the Account
    • When you select a check box, the selected policy name is displayed at the top of the list
    • The selected policy can be canceled by clicking the X button at the top of the list or by unchecking the check box in the policy list
    • If there are no policies to link, click the Create Policy item at the bottom of the policy list to register a new policy first
      • After policy creation is complete, you can refresh the policy list and select the created policy
    Table. Policy Link Details

  7. Click the Confirm button in the pop-up window notifying policy connection. You can check the connected policy in the list of the Policy tab.

Policy Disconnecting

You can release the policies connected to the user.

To release the policy linked to the user, follow the following procedure.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the role name to disconnect the policy link. It moves to the Role Details page.
  4. Role Details page, click the Policy tab. It moves to the Policy tab.
  5. Policy list, select the policy to disconnect, then click the Disconnect button. A pop-up window notifying disconnection will open.
  6. After checking the policy information to be disconnected, click the Confirm button. The policy will be disconnected.

Managing tags

You can add, modify, or delete the role’s tag.

To manage the role’s tags, follow the following procedure.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the Role menu. It moves to the Role List page.
  3. Role List page, click the role name to modify the tag information. It moves to the Role Details page.
  4. Role Details page, click the Tags tab. It moves to the Tags tab.
  5. Tag tab, click the Edit Tag button.
  6. After adding or modifying the tag, click the Save button. A popup window announcing the tag modification will open.
  • You can modify the Key, Value of the previously registered tag.
  • Add tag button to click and add a new tag.
  • Clicking the X button in front of the added tag will delete the tag.
  1. Confirm button, you can check the modified tag information in the list.

Switching roles

To switch roles in the Samsung Cloud Platform Console, follow the following procedure.

  1. Click the profile-shaped button at the top right of the Console. My menu popup window will open.

  2. My menu popup window, click the role switch button. Role switch popup window opens.

  3. Role Switching In the role switching popup window, enter the role switching information and click the Confirm button.

    Classification
    Mandatory
    Detailed Description
    Account IDrequiredEnter the Account ID that the user wants to enter with role switching
    Role NameMandatoryEnter the role name that the user wants to enter through role switching
    AliasSelectName to be used when the user enters with role switching
    ColorRequiredSelect a color to use as the background of the Account when entering the role
    • Not selected: Apply the existing Account background color
    Table. Role Transition Information Items

  4. When the popup window notifying role switching opens, click the Confirm button.

Check the role

Console you can check the role information switched by clicking the profile-shaped button at the top right of the console.

Provided FunctionDescription
Account IDAccount ID logged in to Samsung Cloud Platform Console
Role NameAlias set when switching roles
  • If accessed by ID Center user as a role, it is displayed as Authority Set Name
  • Session expiration time is displayed at the bottom
Time ZoneTime zone set by the user
  • Example: Asia/Seoul (GMT +09:00)
  • Edit Time Zone can be changed by clicking
AccountAccount information
  • For more detailed information, please refer to Account
Cost ManagementYou can check the usage and billing details, payment history, and cost analysis, and manage Credits, budgets, Accounts, and payment methods
Login user informationRole switched IAM user name and user’s Account ID
Switch to my accountSwitch to the IAM user account and move to the Console Home page
  • Display after role switching
Role SwitchingCan be switched to another role
Log outLog out from Samsung Cloud Platform Console
Table. My Info. items when role switching

Delete role

To delete a role, follow the following procedure.

  1. All services > Management > IAM menu is clicked. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Role List page, click the role name to be deleted. It moves to the Role Details page.
  4. Role Details page, click the Delete Role button.
  5. The role is deleted, and it moves to the role list page.

To delete multiple roles at the same time, follow the procedure below.

  1. All services > Management > IAM menu, click. It moves to the Service Home page of Identity and Access Management(IAM).
  2. Service Home page, click the role menu. It moves to the role list page.
  3. Check the role to be deleted from the role list.
  4. Confirm the selected role, and click the role deletion button.
  5. The selected role is deleted and the role list page is newly retrieved.

4.2.5 - Credential Provider

You can access and use the Account resource through the credential provider.

Create Credential Provider

To create a credential provider, follow the steps below.

  1. All Services > Management > IAM Click the menu. Navigate to the Service Home page of Identity and Access Management (IAM).
  2. Click the Credential Provider menu on the Service Home page. Navigate to the Credential Provider List page.
  3. On the Credential Provider List page, click the Create Credential Provider button. You will be taken to the Create Credential Provider page.
  4. After entering information in the Basic Information Input, Additional Information Input areas, click the Generate button.
Category
Required
Detailed description
Credential Provider NameRequiredName of the credential provider
  • Enter a value within 128 characters using English letters, numbers, and special characters (,-_)
DescriptionSelectEnter a description of the credential provider within 1,000 characters
TypeRequiredSelect credential provider type
  • SAML: Establish trust between Samsung Cloud Platform account and SAML 2.0 compatible credential provider
MetadataOptionalAttach metadata file provided by IdP
  • Attach File button to click to upload only one file
  • Only up to 10 MB, UTF-8 XML documents can be uploaded
  • Metadata must include issuer name, expiration information, and the key for verifying SAML authentication responses received from the IdP
TagSelectTag to add to the credential provider group
  • Up to 50 tags can be added per resource
Table. Credential Provider Creation Information Input Items
Reference
Credential Provider in OIDC type is scheduled to be provided in 2026.
  1. When the popup notifying the creation of a credential provider opens, click the Confirm button.

Check credential provider details

You can view and edit detailed information of the credential provider. The credential provider page consists of basic information, tags tabs.

To view detailed information of the credential provider, follow the steps below.

  1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).
  2. Click the Credential Provider menu on the Service Home page. You will be taken to the Credential Provider List page.
  3. Credential Provider List Click the credential provider you want to view on the page. Credential Provider Details You will be taken to the page.
    • Credential Provider Details page displays basic information and consists of Basic Information tab, Tag tab.

Basic Information

You can view and edit the basic information of the credential provider.

CategoryDetailed description
serviceservice name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
  • In a credential provider, it refers to the credential provider name
Resource IDUnique Resource ID
CreatorUser who created the service
Creation TimeService Creation Time
EditorUser who modified the service information
Modification Date/TimeDate/Time when service information was edited
Credential Provider NameName of the Credential Provider
  • Click the Edit button to change the name
TypeType of credential provider
DescriptionCredential provider description
  • Edit button can be clicked to change the description
Login URLLogin URL
MetadataMetadata
  • View Metadata button when clicked opens the currently applied metadata information in a popup window
  • Edit button to upload a metadata file
    • Only files 10 MB or less, UTF‑8 XML documents can be uploaded
    • Metadata must include the issuer name, expiration information, and a key for verifying SAML authentication responses received from the IdP
Table. Credential Provider Basic Information Tab Items
Reference
Credential provider information used in the ID Center cannot be modified.

Tag

You can view the tag information of the credential provider and add, modify, or delete it.

CategoryDetailed description
Tag ListTag List
  • Can view the tag’s Key, Value information
  • Up to 50 tags can be added per resource
  • When entering a tag, search and select from the existing list of Keys and Values
Table. Credential Provider Tag Tab Items

Delete Credential Provider

Notice
Credential provider information used in the ID Center cannot be modified.

To delete a credential provider, follow the steps below.

  1. Click the All Services > Management > IAM menu. Go to the Service Home page of Identity and Access Management (IAM).
  2. Click the Credential Provider menu on the Service Home page. You will be taken to the Credential Provider List page.
  3. Credential Provider List page, click the credential provider name to delete. It moves to the Credential Provider Details page.
  4. Click the Delete Credential Provider button on the Credential Provider Details page.
  5. Credential provider is deleted, and you are taken to the Credential Provider List page.

To delete multiple credential providers simultaneously, follow the steps below.

  1. Click the All Services > Management > IAM menu. Go to the Service Home page of Identity and Access Management (IAM).
  2. Click the Credential Provider menu on the Service Home page. Navigate to the Credential Provider List page.
  3. Check the credential provider to delete from the credential provider list.
  4. Verify the selected credential provider and click the Delete Credential Provider button.
  5. The selected credential provider is deleted and the Credential Provider List page is refreshed.

4.2.6 - My Info.

My Info. provides basic user information and authentication key management functions.

Checking My Info.

Users can view and modify their basic information on the My Info. screen, and manage authentication keys.

To view My Info. information, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
    • The My Info. page displays basic information and consists of Basic Information, Users, Policies, Tags tabs.
Notice
My Info. page can also be accessed from My menu > My Info. at the top of the Console screen and from My Info. on the Console Home.

Basic Information

In the My Info. > Basic Information tab, you can view a user’s basic details and, if needed, edit the email, password, mobile phone number, password reuse limit, and time zone.

ItemDescription
User NameName of the user
SRNUser’s SRN
EmailUser’s email
Mobile Phone NumberUser’s mobile phone number
PasswordUser’s password
Password Reuse LimitNumber of times a password cannot be reused for the user
Time ZoneUser’s time zone
TermsUser’s terms
Table: My Info. Basic Information Tab Items
Notice
For instructions on how to modify basic information, see Modify Basic Information.

Authentication Key Management

In the My Info. > Authentication Key Management tab, you can view a user’s authentication key information and create new keys if needed.

ItemDescription
Authentication KeyKeys created by the user
Security SettingsSecurity settings for authentication keys
  • Authentication Method: temporary key, authentication key
  • Allowed Access IP: IPs that control user access
Table: My Info. Authentication Key Management Tab Items

Access IP Control

In the My Info. > Access IP Control tab, you can register and manage IPs that can access the Console.

ItemDescription
Console Access IP ControlWhether the Access IP Control feature is enabled
  • Toggle button can change to ON or OFF
  • If enabled, at least one IP must be registered
Access IP ListList of allowed IPs
  • Enter an IP to allow and click Add to register
  • Single IP or CIDR format (10.0.0.0/16) can be registered up to 50 entries
  • Delete all: removes all IPs in the list
  • Click X next to an IP to delete
Table: Console Access IP Control Modification Items
Notice
  • The Access IP Control feature is available only to Root users and IAM users. ID Center users and role users cannot use it.
  • Even if the Access IP Control feature is not used, you can still add and manage IPs.
  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the My Info. page, click the Access IP Control tab to go to the Access IP Control page.
  4. On the Access IP Control page, click the Edit button of Console Access IP Control. The Password Confirmation popup appears.
  5. Enter your password and click Confirm. The Console Access IP Control Edit popup opens.
  6. Set the Access IP Control feature to On and register the IPs you want to allow.
  7. After registration is complete, click Confirm.
Warning
If the password is entered incorrectly five or more times, you will be logged out automatically.

Modifying Basic Information

In the My Info. > Basic Information tab, you can edit email, password, mobile phone number, password reuse limit, and time zone.

Modifying Email

You can change the user’s email.

To modify the user’s email, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the Basic Information tab of the My Info. page, click Edit Email. The Edit Email popup appears.
  4. In the Edit Email popup, enter the characters shown in the captcha and click Confirm.
  5. Enter the Email and click Authenticate. An authentication code is sent to the entered Email.
  6. Enter the authentication code sent to the entered Email and click Confirm.
  7. In the Edit Email popup, click Confirm. The Password Confirmation popup appears.
  8. In the Password Confirmation popup, enter the password and click Confirm. You return to the Basic Information tab.
Warning
  • If the password is entered incorrectly five or more times, you will be logged out automatically.
  • Enter your email information accurately. If the authentication code is not received, check your spam folder.

Modifying Password

You can change the user’s password.

To modify the user’s password, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the Basic Information tab of the My Info. page, click Edit Password. The Change Password popup appears.
  4. In the Change Password popup, enter Current Password, New Password, and Confirm Password.
  5. Click Confirm in the Change Password popup. You return to the Basic Information tab.
Warning

Password change precautions

  • If the current password is entered incorrectly five or more times, you will be logged out automatically.
  • Must include at least one uppercase letter, one lowercase letter, one number, and one special character (! @ # $ % & * ^).
  • Length must be 9–20 characters.
  • Cannot use ID or username as password.
  • Cannot use the same character more than three times consecutively.
  • Cannot use easily guessable passwords.
  • Cannot reuse recent passwords.
  • Cannot have sequences of four or more consecutive characters/numbers.
  • Password change cycle is 90 days.

Modifying Mobile Phone Number

You can change the user’s mobile phone number.

To change the user’s mobile phone number, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the Basic Information tab of the My Info. page, click Change Mobile Phone Number. The Change Mobile Phone Number popup appears.
  4. In the Change Mobile Phone Number popup, enter the captcha characters and click Confirm.
  5. Choose a verification method for the mobile phone number:
    • Verify via SMS: Sends verification code via SMS.
    • Verify via Knox Teams: Sends verification code via Knox Teams.
  6. Enter the new mobile phone number and click Verify.
  7. Enter the verification code sent via SMS or Knox Teams and click Confirm.
  8. In the Change Mobile Phone Number popup, click Confirm. The Password Confirmation popup appears.
  9. In the Password Confirmation popup, enter the password and click Confirm. You return to the Basic Information tab.
Notice
Verify via Knox Teams is available only when using a Knox email account.
Warning
  • If the password is entered incorrectly five or more times, you will be logged out automatically.
  • Enter your mobile phone number accurately. If the verification code is not received, check your spam folder.

Modifying Password Reuse Limit

You can change the number of times a password cannot be reused for the user.

To modify the password reuse limit, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the Basic Information tab of the My Info. page, click Edit Password Reuse Limit. The Edit Password Reuse Limit popup appears.
  4. In the Edit Password Reuse Limit popup, select the number of recent passwords that cannot be reused.
  5. Click Confirm in the Edit Password Reuse Limit popup. You return to the Basic Information tab.

Modifying Time Zone

You can change the user’s time zone.

To modify the time zone, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the Basic Information tab of the My Info. page, click Edit Time Zone. The Edit Time Zone popup appears.
  4. Select the desired time zone.
  5. Click Confirm in the Edit Time Zone popup. You return to the Basic Information tab.

Managing Authentication Keys

In the My Info. > Authentication Key Management tab, you can create authentication keys and manage security settings.

Creating an Authentication Key

You can generate an authentication key for the user.

To create an authentication key, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. Click the Authentication Key Management tab on the My Info. page to go to the Authentication Key Management tab.
  4. Click the Create Authentication Key button. You are taken to the Create Authentication Key page.
  5. On the Create Authentication Key page, enter the Expiration Period and Usage.
    • The Expiration Period can be a number between 1 and 365.
    • Selecting Permanent for the Expiration Period makes the key usable indefinitely.
  6. Review the authentication key creation details and click Create. You return to the Authentication Key Management tab.
Reference
  • You can create up to 2 authentication keys.
  • After creating a new authentication key, you must apply the updated API authentication key to any services you are using.
  • Security settings allow you to configure the authentication method and allowed access IP.
  • With a created authentication key, you can issue temporary keys via API, up to 5 per authentication key.

Viewing Authentication Key Details

To view detailed information of an authentication key, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. Click the Authentication Key Management tab on the My Info. page to go to the Authentication Key Management tab.
  4. In the Authentication Key Management tab, click the authentication key you want to view. You are taken to the Authentication Key Detail page.
    • The Authentication Key Detail page consists of Basic Information and Authentication Key Management tabs.

Basic Information

In the Basic Information tab of the Authentication Key Detail, you can view the basic information of the selected authentication key.

ItemDescription
Authentication Key UsageIndicates whether the authentication key is in use
  • Click Use or Disable to set
Delete Authentication KeyDelete the authentication key
Authentication KeyAccess Key and Secret Key information
  • Click the Authentication Key button, then enter your password in the Password Confirmation popup to view
UsagePurpose of the authentication key
Creation DateDate and time when the user created the authentication key
Expiration DateExpiration date and time of the authentication key
Secret VaultWhether Secret Vault service is used
  • If Secret Vault service is used, the authentication key cannot be disabled or deleted
Table: Authentication Key Management > Basic Information Items
Warning
If the password is entered incorrectly five or more times, you will be logged out automatically.

User Temporary Keys

The User Temporary Keys tab of the Authentication Key Detail displays a list of temporary keys for the selected authentication key.

Notice
Temporary keys can only be created via API; the User Temporary Keys tab allows only viewing and deletion.
ItemDescription
DeleteDelete the selected temporary key from the list
  • Enabled when a temporary key is selected
MoreView usage status of the selected temporary key
  • Enabled when a temporary key is selected
Access KeyUnique string for API calls
Secret KeySecurity token used with the Access Key
  • Click View to open a Password Confirmation popup, then enter your password to view
Creation DateDate and time when the user created the authentication key
Expiration DateExpiration date and time of the authentication key
StatusWhether the authentication key is active
Table: Authentication Key Management > User Temporary Key Details
Warning
If the password is entered incorrectly five or more times, you will be logged out automatically.

Secret Vault Temporary Keys

The Secret Vault Temporary Keys tab of the Authentication Key Detail displays a list of Secret Vault temporary keys for the selected authentication key.

Notice
  • When the Secret Vault service is used, you can view it.
  • Temporary keys can only be created via API; the Secret Vault tab allows only viewing and deletion.
ItemDescription
DeleteDelete the selected temporary key from the list
  • Enabled when a temporary key is selected
MoreView usage status of the selected temporary key
  • Enabled when a temporary key is selected
Access KeyUnique string for API calls
Secret KeySecurity token used with the Access Key
  • Click View to open a Password Confirmation popup, then enter your password to view
Creation DateDate and time when the user created the authentication key
Expiration DateExpiration date and time of the authentication key
StatusWhether the authentication key is active
Table: Authentication Key Management > Secret Vault Temporary Key Details
Warning
If the password is entered incorrectly five or more times, you will be logged out automatically.

Modifying Authentication Key Security Settings

You can register security settings for a user’s authentication key.

To register security settings for a user’s authentication key, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. In the My Info. page, click the Authentication Key Management tab to go to the Authentication Key Management tab.
  4. Click the Edit Security Settings button in the Authentication Key Management tab. You are taken to the Edit Authentication Key Security Settings page.
  5. On the Edit Authentication Key Security Settings page, enter Authentication Method and Allowed Access IP.
    • Authentication Method: temporary key, authentication key
      • Access is allowed only when the authentication method set for the API call matches.
      • Temporary key: authentication using a temporary key issued with an authentication key and verification code.
      • Authentication key: authentication using the authentication key created in the Console.
    • Allowed Access IP: IPs that control user access
      • When On, only the specified IP range is allowed.
      • If On is set but no IPs are registered, all IPs are denied.
      • When Off, all IPs are allowed.
      • Up to 50 IPs can be registered.
      • IP address or CIDR can be entered.
  6. Review the authentication key security settings and click Confirm. You return to the Authentication Key Management tab.
Reference
  • South Korea (kr-south) region limitation
    • When Allowed Access IP is set to On, only IP addresses can be entered. CIDR cannot be entered.
Warning
  • It is recommended to use temporary key authentication and enable Allowed Access IP.
  • When authenticating with an authentication key, email or SMS verification steps are omitted, which may pose security risks.
  • If Allowed Access IP is not used, any IP can connect, posing security risks.
  • When Allowed Access IP is used, if no IPs are registered, all access is blocked.
  • Authentication keys with Secret Vault temporary keys cannot be disabled or deleted until the Secret Vault service is terminated for each region within the account.

Deleting an Authentication Key

Notice
  • An authentication key can be deleted only when it is in the Disabled state. Disable the key before deletion.
  • If the Secret Vault service is used, the authentication key cannot be disabled. Terminate the Secret Vault service first.

To delete an authentication key, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. Click the Authentication Key Management tab on the My Info. page to go to the Authentication Key Management tab.
  4. In the authentication key list on the Authentication Key Management tab, click the authentication key you want to delete. You are taken to the Authentication Key Detail page.
  5. On the Authentication Key Detail page, click the Delete Authentication Key button.
  6. The authentication key is deleted and you return to the Authentication Key Management tab.

To delete multiple keys at once, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the My Info. menu to go to the My Info. page.
  3. Click the Authentication Key Management tab on the My Info. page to go to the Authentication Key Management tab.
  4. In the authentication key list on the Authentication Key Management tab, check the authentication keys you want to delete.
  5. Confirm the selected authentication keys and click the Delete Authentication Key button.
  6. The selected authentication keys are deleted and the Authentication Key Management tab refreshes.

Managing Access IPs

In the My Info. > Access IP Control tab, you can register and manage IPs that can access the Console.

The Access IP Control feature allows you to restrict Console access to registered IP ranges only.

Notice
  • The Access IP Control feature is available only to Root users and IAM users. ID Center users and role users cannot use it.
  • Even if the Access IP Control feature is not used, you can still add and manage IPs.

To use the Access IP Control feature and manage IPs, follow these steps.

  1. Click the All Services > Management > IAM menu. This navigates to the Service Home page of Identity and Access Management (IAM).
  2. On the Service Home page, click the **My Info." menu. My Info. page opens.
  3. In the My Info. page, click the Access IP Control tab. The Access IP Control page opens.
  4. On the Access IP Control page, click the Edit button of Console Access IP Control. The Password Confirmation popup appears.
  5. Enter your password and click Confirm. The Console Access IP Control Edit popup opens.
  6. After setting the Access IP Control feature to On, register the IPs you want to allow.
  7. After registration is complete, click Confirm.
Warning
If the password is entered incorrectly five or more times, you will be logged out automatically.

4.2.7 - JSON Writing Guide

Policies are divided into identity-based policies and resource-based policies.

  • Identity-based policy: Policy granted to a principal (subject) that performs actions such as users, groups, roles, etc.
  • Resource-based policy: Policy granted to a resource that determines whether to allow or deny (Effect) actions on a specific resource to a principal (subject)
Note
Generally, identity-based policies do not need to specify a separate Principal attribute, but resource-based policies must specify a Principal attribute.

Resource-based Policy

A resource-based policy is a policy that grants permission to a specified principal (requester) to perform specific operations on that resource. Therefore, resource-based policies are directly granted to resources, and only users defined in the policy can execute the policy, and the user to whom the policy is granted becomes the security principal.

Warning
Resource-based policies specify the principal through the Principal attribute, so you must enter the Principal attribute when creating the policy.
Color mode
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["object-store:UploadObject"],
            "Principal": {
                "scp":"srn:e::1234:::scp-iam:user/abc3d3442"
            },
            "Effect": "Allow",
            "Resource": "srn:e:::::object-store:bucket/foo"
        }
    ]
}
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["object-store:UploadObject"],
            "Principal": {
                "scp":"srn:e::1234:::scp-iam:user/abc3d3442"
            },
            "Effect": "Allow",
            "Resource": "srn:e:::::object-store:bucket/foo"
        }
    ]
}
Example: Allowing UploadObject action on bucket resource to specific user only

Resource-based Policy Structure

The syntax structure and item-by-item description of resource-based policies are as follows.

Color mode
{
  "Version": "2024-07-01",                                 # Version of policy syntax (fixed to 2024-07-01)
  "Statement": [
    {
      "Sid": "statement1",                                 # Policy element ID
      "Effect": "Allow",                                   # Policy effect
      "Action": ["iam:showUser"],                          # Action content defined in the policy
      "Principal": {
          "scp":"srn:e::1234:::iam:user/ROOT"              # Principal that is the target of the policy
      }
      "Resource": "srn:e::kr-west1:::scp-iam:group/foo",   # Resource where policy action is allowed
      "Condition": {                                       # Policy condition
          "StringEquals": {
            "iam:userName": [
              "scp_test_user"
              ]
          }
        }
    }
  ]
}
{
  "Version": "2024-07-01",                                 # Version of policy syntax (fixed to 2024-07-01)
  "Statement": [
    {
      "Sid": "statement1",                                 # Policy element ID
      "Effect": "Allow",                                   # Policy effect
      "Action": ["iam:showUser"],                          # Action content defined in the policy
      "Principal": {
          "scp":"srn:e::1234:::iam:user/ROOT"              # Principal that is the target of the policy
      }
      "Resource": "srn:e::kr-west1:::scp-iam:group/foo",   # Resource where policy action is allowed
      "Condition": {                                       # Policy condition
          "StringEquals": {
            "iam:userName": [
              "scp_test_user"
              ]
          }
        }
    }
  ]
}
Resource-based Policy Syntax Structure
ItemDescriptionRequired
Version
  • “Defines the version of the policy language
  • Used with a different meaning than policy version, current version is ““2024-07-01”
Required
StatementMain element information of the policyRequired
Statement.SidPolicy element ID (unique ID for elements within the same policy)Optional
Statement.EffectPolicy application effect ( Allow : Allow / Deny : Deny )Required
Statement.PrincipalSecurity principalRequired
Statement.ActionPolicy application target action (must specify at least one of Action/NotAction)Optional
Statement.ResourceList of resources that are the target of policy judgmentRequired
Statement.ConditionPolicy judgment condition informationOptional
Table. Description of Policy Structure Items

Version

Version is used with a different meaning than policy version, and the current version is “2024-07-01”.

{
   "Version" : "2024-07-01"
}

Statement

Statement is information about the main elements of the policy and can be defined in the form of a single element or an array of individual elements.

"Statement" : [{statement}]
"Statement" : [{statement}, {statement}, {statement}]
Note
If there are 2 or more policy elements, write multiple elements in the array. In this case, the operation between each element is defined as OR.

Statement.Effect

Statement.Effect defines whether the policy operation is allowed.

"Effect" : "Allow" # Allow
"Effect" : "Deny"  # Deny
Warning
Write with case sensitivity.

Statement.Principal

Statement.Principal specifies the principal that is allowed or denied access to the resource in a resource-based policy. The principals that can be specified in the Principal element are as follows:

  • Root user
  • IAM user
  • IAM role
  • Service account
Warning
  • Principal can have one or more values, and if there are one or more, write them as an array.
  • Principal cannot use wildcards (*).
"Principal" : { "scp": "srn:e::1234:::iam:user/root_user_id" }

"Principal" : {
    "scp": [
        "srn:e::1234:::iam:user/abc33333",
        "srn:e::1234:::iam:user/kef12344"
    ]
}

"Principal": {
    "Service": [
      "apigateway.samsungsdscloud.com"
    ]
}

Statement.Action

Statement.Action defines the action to be evaluated in the policy check.

  • Write with case sensitivity.
  • Write the action in the format of the action name defined in the action definition.
Warning
Only actions of the service providing the corresponding resource can be entered for the action (however, actions such as adding tags and integrated resource lookup provided by common functions can be added).
"Action" : ["{action_expression}"]                               # Single action
"Action" : ["{action_expression}", "{action_expression}", ... ]  # Multiple actions

Statement.Resource

Statement.Resource defines the SRN that specifies a specific resource or set of resources to which the policy applies.

  • Write with case sensitivity.
  • Write resource_expression in wildcard ("*") or SRN format.
Warning
  • The SRN of the resource to which the resource-based policy is granted must be included, and if there are sub-resources of that resource, they can be written including sub-resources.
  • Resources can be written in Resources only for resources described in the action definition defined in the policy, and for undefined resources, they are ignored during policy evaluation.
  • Wildcards (*) can also be used for sub-resources.
"Resource" : ["{resource_expression}"]                                 # Single resource
"Resource" : ["{resource_expression}", "{resource_expression}", ... ]  # Multiple resources
Note

In resource_expression, wildcard forms can be displayed in each element of the SRN, and the supported form varies depending on the type of element.

  • SRN elements not supporting wildcard Among SRN elements, offering, account_id, and service-type do not support wildcards.
"Resource" : ["srn:*::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]   # offering wildcard notation (X)
"Resource" : ["srn:e::*:kr-west1::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]                                  # account wildcard notation (X)
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::*:instance/d12937a6db0940499fdb0e18ad57b101"]   # service type notation (X)
  • SRN elements supporting wildcard
    • Among SRN elements, resource-type, resource-identifier, and region support wildcards for entire or partial.
    • For partial wildcards, you can write expressions like “foo , foo*, foo, fo”.
#  region
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:*::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]     # Entire (O)
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-*::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]  # Partial (O)

# resource-type
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:*/d12937a6db0940499fdb0e18ad57b101"]     # Entire (O)
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:ins*/d12937a6db0940499fdb0e18ad57b101"]  # Partial (O)

# resource-identifier
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/*"]                             # Entire (O)
"Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/d12*101"]                       # Partial (O)

When it is a single resource, action_definition resources definition form for user lookup

Color mode
kind: scp-iam:action-definition
service: iam
paths:
  /v1/users/{user_id}:
    get:
      resources:
      - "iam:user":
           resource_id: "path['user_id']"  # Scope of resources supported in user lookup action
kind: scp-iam:action-definition
service: iam
paths:
  /v1/users/{user_id}:
    get:
      resources:
      - "iam:user":
           resource_id: "path['user_id']"  # Scope of resources supported in user lookup action
Example of resources definition when single resource
Color mode
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["iam:showUser"],
            "Effect": "Allow",
            "Resource": [
                    "*",  #  Expression for all resources,
                    "srn:e:::::scp-iam:user/94c2ae8e7d5d471683a6135446183a12", # Expression for specific user resource
                    "srn:e:::::scp-iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource -> If you write that resource in user lookup action, the written content is ignored during policy evaluation.
             ]
        }
    ]
}
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["iam:showUser"],
            "Effect": "Allow",
            "Resource": [
                    "*",  #  Expression for all resources,
                    "srn:e:::::scp-iam:user/94c2ae8e7d5d471683a6135446183a12", # Expression for specific user resource
                    "srn:e:::::scp-iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource -> If you write that resource in user lookup action, the written content is ignored during policy evaluation.
             ]
        }
    ]
}
Example of policy resource definition when single resource

When it is multiple resources, action_definition resources definition form for user policy lookup

When defining multiple different resources, define the resource type written in the policy.

Warning
  • When judging the policy, it is judged as successful only if the content written in the policy satisfies the condition based on the resources defined in the action definition file.
  • If not all resources defined in the action definition file are written in the policy, it is judged as not meeting the policy condition.
kind: scp-iam:action-definition
service: iam
paths:
  /v1/user/{user_id}/policy/{policy_id}
    get:
      resources:
      - "iam:user":
         resource_id : "path['user_id']"
      - "iam:policy":
         resource_id : "path['policy_id']"
  • Normal: Specific user specific policy example
Color mode
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["iam:ShowUserPolicy"],
            "Effect": "Allow",
            "Resource": [
                    "srn:e:::::iam:user/94c2ae8e7d5d471683a6135446183a12",  # Expression for specific user resource
                    "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
             ]
        }
    ]
}
{
  "Version": "2024-07-01",
  "Statement": [
        {
            "Sid": "statement1",
            "Action": ["iam:ShowUserPolicy"],
            "Effect": "Allow",
            "Resource": [
                    "srn:e:::::iam:user/94c2ae8e7d5d471683a6135446183a12",  # Expression for specific user resource
                    "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
             ]
        }
    ]
}
Normal: Specific user specific policy example
  • Normal: All users specific policy example

    Color mode
    {
      "Version": "2024-07-01",
      "Statement": [
            {
                "Sid": "statement1",
                "Action": ["iam:ShowUserPolicy"],
                "Effect": "Allow",
                "Resource": [
                        "srn:e:::::iam:user/*",                                 # Expression for all user resources
                        "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
                 ]
            }
        ]
    }
    {
      "Version": "2024-07-01",
      "Statement": [
            {
                "Sid": "statement1",
                "Action": ["iam:ShowUserPolicy"],
                "Effect": "Allow",
                "Resource": [
                        "srn:e:::::iam:user/*",                                 # Expression for all user resources
                        "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
                 ]
            }
        ]
    }
    Normal: All users specific policy example

  • Abnormal: user resource not described example

    Color mode
    {
      "Version": "2024-07-01",
      "Statement": [
            {
                "Sid": "statement1",
                "Action": ["iam:ShowUserPolicy"],
                "Effect": "Allow",
                "Resource": [
                        "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
                 ]
            }
        ]
    }
    {
      "Version": "2024-07-01",
      "Statement": [
            {
                "Sid": "statement1",
                "Action": ["iam:ShowUserPolicy"],
                "Effect": "Allow",
                "Resource": [
                        "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # Expression for specific policy resource
                 ]
            }
        ]
    }
    Abnormal: user resource not described example

Statement.Condition

Statement.Condition defines application conditions for a specific target to which the policy applies within the policy.

  • Write with case sensitivity.
  • Write a condition expression to compare the attribute condition key (or global condition key), value of the resource defined in the policy with the actual request (or resource attribute) value using condition operators.
"Condition" : {
	"{qualifier:}{operator}" : {
    	"{condition-key}" : ["{condition-value}"],
	    "{condition-key2}" : ["{condition-value}"]
	}
}
ItemRequiredCase SensitiveDescription
operatorRequiredOCondition operator
  • If 2 or more operators are defined, AND operation
condition-keyRequiredXPolicy condition key (global condition key, resource attribute condition key)
  • If 2 or more condition-keys are defined, AND operation
condition-valueRequiredDepends on operatorPolicy condition value
qualifierOptionalO
  • Qualifier, when the condition value extracted from the request context is 2 or more
  • Definition method for operand and comparison condition
Table. Description of Statement.Condition Option Items
Guide

When 2 or more values are defined for a Condition Key of the same Condition Operator, the judgment between Values operates as OR. However, if the Operator is of Negative Operator type, the operation operates as NOR, not OR.

  • Positive Operator type and example (when userName is “foo” or “bar” and company is “Samsung”)
    Positive Operator type
"Condition": {
   "StringEquals": {
      "iam:userName": [  # When User's name is foo or bar
          "foo", "bar"
      ],
      "iam:userCompany": [  # When User's company is Samsung
          "Samsung"
      ]
    }
  }
  • Negative Operator type and example (all IPs where IP is not in the 1.1.1.1/24 and 2.2.2.2/24 ranges)
    Negative Operator type
"Condition": {
   "NotIpAddress": {
      "scp:SourceIp": [  # When request IP is neither 1.1.1.1 nor 2.2.2.2
          "1.1.1.1/24", "2.2.2.2/24"
      ]
    }
  }

Condition Operator

Condition operators provide 7 types (string, numeric, date, Bool, IP, SRN, Null) operators.

  • String operators

    Condition OperatorOperator TypeDescription
    StringEqualsPositive OperatorExact match, case sensitive
    StringNotEqualsNegative OperatorMismatch
    StringEqualsIsIgnoreCasePositive OperatorExact match, case insensitive
    StringNotEqualsIsIgnoreCaseNegative OperatorMismatch, case insensitive
    StringLikePositive OperatorCase sensitive match, wildcard with multi-character match (*) can be included in value
    StringNotLikeNegative OperatorCase sensitive mismatch, wildcard with multi-character match (*) can be included in value
    Table. String Operators

  • Numeric operators

    Condition OperatorOperator TypeDescription
    NumericEquals  Positive OperatorMatch
    NumericNotEqualsNegative OperatorMismatch
    NumericLessThan  Positive OperatorLess than match
    NumericLessThanEquals  Positive OperatorLess than or equal match
    NumericGreaterThanPositive OperatorGreater than match
    NumericGreaterThanEquals Positive OperatorGreater than or equal match
    Table. Numeric Operators

  • Date operators

    Condition OperatorOperator TypeDescription
    DateEquals  Positive OperatorMatch specific date
    DateNotEqualsNegative OperatorMismatch
    DateLessThanPositive OperatorMatch before specific date/time
    DateLessThanEqualsPositive OperatorMatch on or before specific date/time
    DateGreaterThanPositive OperatorMatch after specific date/time
    DateGreaterThanEqualsPositive OperatorMatch on or after specific date/time
    Table. Date Operators

  • Bool operators

    Condition OperatorOperator TypeDescription
    BoolPositive OperatorTrue, False match
    Table. Bool Operators

  • IP operators

    Condition OperatorOperator TypeDescription
    IpAddress  Positive OperatorSpecified IP address or range
    NotIpAddressNegative OperatorAll IP addresses except specified IP address or range
    Table. IP Operators

  • SRN operators

    Condition OperatorOperator TypeDescription
    SrnEquals, SrnLike  Positive OperatorSRN match
    SrnNotEquals, SrnNotLike Negative OperatorSRN mismatch
    Table. SRN Operators

  • Null operators

    Condition OperatorOperator TypeDescription
    NullPositive Operator
    • When key is missing or value is null → True
    • When key exists and value is not null → False
    Table. Null Operators

Condition Key

Condition keys are divided into global condition keys and resource attribute keys.

Note
Condition keys are not case sensitive.
Global Condition Key

A condition key predefined in Samsung Cloud Platform that defines data such as request information, resource common information (ex-tag), network information, etc.

Condition KeyData TypeSingular/PluralDescriptionExample
scp:UserIdstringsingleRequest user id“scp:UserId” : [“efda56a968cd45b2873d9bf5fab58e95”]
scp:UserNamestringsingleRequest user name“scp:UserName” : [“foo”]
scp:MultiFactorAuthPresentboolstringWhether request was made through MFA authentication“scp:MultiFactorAuthPresent” : [“True”]
scp:RequestedRegionstringsingleRequest region“scp:RequestedRegion” : [“kr-west1”]
scp:RequestAttribute/{AttributeKey}stringsingleRequest attribute value (AttributeKey)
  • body
  • query
  • header
“scp:RequestAttribute/body[‘foo’]” : [“true”]
scp:TagKeysstringsingle / multipleRequest tag key“scp:TagKeys” : [“tag-key”]
scp:RequestTagstringsingleRequest tag key value“scp:RequestTag/tag-key” : [“tag-value”]
scp:ResourceTag/{TagKey}stringsingleResource tag key value“scp:ResourceTag/foo” : [“bab”]
scp:SourceIpip_addresssingleIP of the subject currently requesting“scp:SourceIp” : [“1.1.1.1/24”]
scp:CurrentTimedatetimesingleRequest time (UTC based, ISO 8601 format)“scp:CurrentTime” : [“2025-11-06T16:10:38Z”]
Table. Types and Formats of Supported Global Condition Keys
Resource Attribute Key

An attribute key for a specific resource, used when checking condition values based on resource attribute values.

"{service}:{resource_type}{attribute_name}"
Guide
Resource attributes can only be defined for targets with abac:true in attributes defined in Resource definition, and if undefined attribute values are entered, that condition policy is ignored (Not found).
  • Resource attribute name usage example
"iam:userLastname"  (O) # Attribute name defined in resource (service: iam, resource: user, attribute_name : lastname)
"iam:userLASTNAME"  (O) # Attribute name defined in resource (case insensitive)
"iam:userLast_name" (X) # If not an attribute name defined in resource
"iam:userEmail"     (X) # If abac is false
"iam:state"         (X) # If abac field is not defined
Color mode
kind: scp-resourcemanager:resource-definition
service_type: scp-iam
name: scp-iam:user
resources_uri: /v1/users
resource_type: user
display_name:
  ko: '사용자'
  en: 'User'
product_id: IAM
attributes:
  state:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.state
  firstname:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.first_name
    abac: true
  lastname:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.last_name
    abac: true
  email:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.email
    abac: false
kind: scp-resourcemanager:resource-definition
service_type: scp-iam
name: scp-iam:user
resources_uri: /v1/users
resource_type: user
display_name:
  ko: '사용자'
  en: 'User'
product_id: IAM
attributes:
  state:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.state
  firstname:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.first_name
    abac: true
  lastname:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.last_name
    abac: true
  email:
    type: string
    uri: /v1/users/{resource_id}
    method: GET
    jsonpath: $.email
    abac: false
scp-iam:user resource_definition example
Note
  • Resource attribute names use attribute data defined in attributes defined in Resource definition.
  • For more information about Resource definition, see the Resource Definition guide.
Condition Key Definition Example
  • Global condition key example: A policy that allows group detail lookup only when the value of the key (Environment) of a specific policy resource tag is “Local” or “Dev”
Color mode
{
  "Version": "2024-07-01",
  "Statement": [
    {
      "Sid": "statement1",
      "Action": ["iam:showPolicy"],
      "Effect": "Allow",
      "Resource": ["*"],
      "Condition": {
          "StringEquals": {
            "scp:ResourceTag/Environment": [  # Definition form using global condition key (scp:ResourceTag)
              "Local", "Dev"
            ]
          }
      }
    }
  ]
}
{
  "Version": "2024-07-01",
  "Statement": [
    {
      "Sid": "statement1",
      "Action": ["iam:showPolicy"],
      "Effect": "Allow",
      "Resource": ["*"],
      "Condition": {
          "StringEquals": {
            "scp:ResourceTag/Environment": [  # Definition form using global condition key (scp:ResourceTag)
              "Local", "Dev"
            ]
          }
      }
    }
  ]
}
Global condition key example
  • Resource attribute key example
    Color mode
    {
      "Version": "2024-07-01",
      "Statement": [
        {
          "Sid": "statement1",
          "Action": ["server:showInstance"],
          "Effect": "Allow",
          "Resource": ["*"],
          "Condition" : {
               "StringEquals" : {
                   "virtual-servers:instanceFlavor" : ["m1.small"] # When the flavor attribute of the instance resource of the virtual-servers service is "m1.small"
                }
           }
        }
      ]
    }
    {
      "Version": "2024-07-01",
      "Statement": [
        {
          "Sid": "statement1",
          "Action": ["server:showInstance"],
          "Effect": "Allow",
          "Resource": ["*"],
          "Condition" : {
               "StringEquals" : {
                   "virtual-servers:instanceFlavor" : ["m1.small"] # When the flavor attribute of the instance resource of the virtual-servers service is "m1.small"
                }
           }
        }
      ]
    }
    Resource attribute key example

Policy Condition Value

Defines the value for the condition key.

Note
When multiple policy condition values are defined, each condition value operates as OR.
"Condition" :  {
   "StringEquals" : {
        "scp:resourceTag/key1": ["value1", "value2", "value3"]    # When the value of the resource tag key is key1 is value1 or value2 or value3
 }

Qualifier

Defines the operation method when the request context value extracted from the Condition key has multiple values (omit when request context value is 1). Qualifiers are divided into ForAnyValue, ForAllValues, and if no qualifier is written, ForAnyValue is defined as the default value.

  • ForAnyValue: True when at least one of the values extracted from the request context matches the Operand defined in the Condition
  • ForAllValues: True when the values extracted from the request context are a subset of the Operand list defined in the Condition
{
  ...
  "Condition" :  {
       "ForAllValues:StringEquals" : {
            "scp:TagKeys": ["key1", "key2", "key3"]
        }
  }
}
Qualifier Operation Example
  • When the request value extracted from “scp:TagKeys” is 1: Operates as OR for each Operand regardless of qualifier
  • When the request value extracted from “scp:TagKeys” is 2 or more: Result difference according to qualifier
Color mode
# When the extracted request context value is ["key1", "key2", "key4"]
Operand: ["key1", "key2", "key3"]
   # key1 among request context values is included in Operand, so True
   # key2 among request context values is included in Operand, so True
   # key4 among request context values is not included in Operand, so False

ForAnyValue judges as True if at least 1 of the 3 request context values matches
ForAllValues judges as final True only if all 3 request context values are True
# When the extracted request context value is ["key1", "key2", "key4"]
Operand: ["key1", "key2", "key3"]
   # key1 among request context values is included in Operand, so True
   # key2 among request context values is included in Operand, so True
   # key4 among request context values is not included in Operand, so False

ForAnyValue judges as True if at least 1 of the 3 request context values matches
ForAllValues judges as final True only if all 3 request context values are True
ForAnyValue, ForAllValues operation example

4.3 - API Reference

API Reference

4.4 - CLI Reference

CLI Reference

4.5 - Release Note

IAM

2025.10.23
FEATURE IP access control feature added and other features enhanced
  • When creating a user or changing a password, related information can be shared by email.
  • The entities that perform the role function have been added as Virtual Server and Cloud Function.
  • When the role is changed, you can check the session expiration time in My Menu.
  • You can register and manage IP addresses that can access the Console.
  • The Root user and IAM user with the same information (phone number, email) can switch to each other even after logging in.
2025.07.01
FEATURE Role, Authentication Provider Functionality Provided
  • Role function has been added.
  • The user can switch from their account to another role to access the Account.
  • Credential provider feature has been added.
  • You can create an identity provider and access the Account resource in the Console through the created identity provider.
  • You can directly connect users and policies.
  • When creating a policy, you can add conditions for attribute-based access control (ABAC).
2025.04.28
FEATURE My info feature change
  • The mandatory conditions for creating a user password have been changed.
  • When modifying the authentication key, CIDR input is applied selectively.
  • When the user’s email or phone number is changed, a password re-confirmation procedure has been added.
2025.02.27
FEATURE IAM user group, user, policy, and authentication key feature changes
  • IAM(Identity and Access Management) function change
  • Added user group and user function, policy creation function.
  • App authentication key and storage authentication key are integrated to provide as an authentication key.
  • Samsung Cloud Platform common feature change
  • Account and Service Home, tags etc common CX change items have been reflected.
2024.07.02
NEW Official Release of IAM Service
  • IAM(Identity and Access Management) service has been released.
  • provides user authentication and authorization management
  • provides access control policy management
2024.07.02
NEW IAM Beta Service Release
  • IAM(Identity and Access Management) service has been released.
  • provides user authentication and authorization management
  • access control policy management provided

5 - ID Center

5.1 - Overview

Service Overview

ID Center is a service that allows you to easily manage access permissions for account-based resources on the Samsung Cloud Platform from a central location. You can manage to perform tasks according to user permissions by creating authority policies for each service and assigning accounts and policies associated with the Organization service to users.

Features

  • Easy Access Control: Through SAML (Security Assertion Markup Language) based qualification authentication, it is possible to access the resources of multiple accounts within the organization by granting authentication and authorization from the Samsung Cloud Platform.
  • Efficient Account Management: Integrated management of costs and resource usage from all accounts owned by the organization is possible by linking with the Organization service.
  • Account Security Enhancement: Security can be enhanced by allowing only authorized ID Center users to access through the Access Portal, which is provided separately from the Samsung Cloud Platform Console. Through the Access Portal, it is possible to prevent other users outside the customer organization from accessing the account in the first place.

Composition

Configuration Diagram
Figure. ID Center Configuration Diagram

Provided Features

ID Center provides the following functions.

  • User and User Group Management: User and user group management can be created and service-specific authority management policies can be configured. Users must have MFA (Multi-Factor Authentication) applied to strengthen account access management.
  • Account Assignment Management: You can assign and manage accounts corresponding to each user’s task.
  • Permission Set Management: You can create and manage permission sets using default policies or custom policies for each account, or by configuring policies directly.
  • Access Portal Provided: An Access Portal is provided instead of Samsung Cloud Platform Console, allowing only ID Center users to access.

Components

User

The administrator can create users and add them to user groups. The administrator can automatically generate or manually create user passwords and provide users with Access Portal connection information. Additionally, administrators can assign users to accounts that match each task.

Reference
For more information on user management, see How-to guides > Managing Users.

User Group

You can link users and accounts through user groups. You can configure user groups suitable for each task and register users to assign them to accounts.

Reference
For more information about user groups, see How-to guides > Managing user groups.

Permission Set

You can create a set of permissions by utilizing the default policies and custom policies existing in the Account or by directly composing a policy.

Reference
For more information about permission sets, see How-to guides > Managing Permission Sets.

Regional Provision Status

ID Center can be provided in the following environment.

RegionAvailability
Western Korea(kr-west1)Provided
Korea East(kr-east1)Provided
South Korea (kr-south1)Provided
South Korea (kr-south2)Provided
South Korea, southern region 3(kr-south3)Not provided
Table. ID Center Regional Provision Status

Preceding Service

This is a list of services that must be pre-configured before creating this service. Please refer to the guide provided for each service and prepare in advance.

Service CategoryServiceDetailed Description
ManagementOrganizationA service that organizes accounts by organizational unit, manages them hierarchically, and controls resource access permissions
Table. ID Center Preceding Service

5.2 - How-to guides

The user can enter the required information of ID Center through the Samsung Cloud Platform Console, select detailed options, and create the service.

ID Center Create

You can create and use an ID Center in the Samsung Cloud Platform Console.

Guide
ID Center can only be managed in the region where the ID Center was created.
Reference
Only the Organization’s Management Account can create an ID Center.

To create an ID Center, follow the steps below.

  1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
  2. Click the ID Center Application button on the Service Home page. Navigate to the ID Center Creation page.
  3. ID Center creation page, after entering the basic information, click the Complete button.
    Category
    Required
    Detailed description
    ID Center nameRequiredEnter the name of the ID Center
    • Enter using English letters, numbers, special characters (+=-_@,.) within 3~128 characters
    DescriptionSelectEnter a description of the organizational unit within 1,000 characters
    Credential SourceRequiredSelect Credential Source Type
    • ID Center’s own directory: Use directory within ID Center
    • AD (Active Directory): Use Active Directory managed directly by the user
      • Automatically synchronize AD information upon creation
    Table. ID Center creation basic information
  4. When the popup notifying the creation of ID Center opens, click the Confirm button.
  5. Service Home Check the ID Center dashboard on the page.
    CategoryDetailed description
    ID Center InformationDisplays the name, ID, and Access Portal URL of the ID Center
    • Clicking the ID Center Information item navigates to the ID Center Settings page where detailed ID Center information can be viewed
    UserNumber of users created in ID Center
    • Clicking the user count moves to the User List page
    • Clicking the Create item moves to the User Creation page. Create User refer
    User GroupNumber of user groups created in ID Center
    • Clicking the group count moves to the User Group List page
    • Clicking the Create item moves to the User Group Creation page. See Create User Group
    Permission SetNumber of permission sets created in ID Center
    • Click the number of permission sets to go to the Permission Set List page
    Table. ID Center Service Home Dashboard Items

ID Center Check detailed information

You can view detailed information of the ID Center and manage permissions.

To view detailed information of the ID Center and manage permissions, follow the steps below.

  1. All Services > Management > ID Center Click the menu. Navigate to ID Center’s Service Home page.
  2. Service Home page, click the ID Center Settings menu. Navigate to the ID Center Settings page.
CategoryDetailed description
ID Center DeleteButton to delete ID Center
  • Not displayed on delegated accounts
serviceservice name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation timeTime the service was created
EditorUser who modified the service information
Modification Date and TimeDate and time when service information was edited
ID Center nameID Center name
  • Edit Click the button to change usage
RegionRegion that created the ID Center
DescriptionDescription of ID Center
  • By clicking the Edit button, you can change the usage status
Organization IDOrganization’s ID
Credential SourceType of Credential Source
  • Edit Click the button to change the credential source type
  • ID Center’s own directory: Directory within ID Center
  • AD (Active Directory): Active Directory managed directly by the user
    • AD Reset: Reset AD Information A popup opens, allowing AD information to be edited
    • After reset is complete, synchronization proceeds
  • Synchronization: Synchronize with AD
Access Portal URLURL to access the Access Portal
Delegated AuthorityDisplay Account Name, Account ID, Email, Delegation Date/Time information of the Account that delegated ID Center management authority
  • For delegated Accounts, the managing Account’s information is displayed and delegation or cancellation is not possible
  • Permission Delegation: Permission can be delegated to an Account within ID Center
    • Displayed when there is no delegation information
    • When the button is clicked, you can select an Account on the Permission Delegation page to set delegation
  • Cancel Permission Delegation: Cancel permission delegation
Table. ID Center configuration items

Managing Credential Sources

You can change the credential source type or change and manage the setting values of the AD (Active Directory) type.

AD (Active Directory) Apply for Integration

To use a user-managed AD (Active Directory) integration, you must first prepare the VPC and Load Balancer, then submit a request via SR. To apply for AD integration, follow the steps below.

  1. Secure a VPC to integrate with the user’s AD.

    • If network connection is required, connect to the network where the user’s AD exists via the Direct Connect service.
    • For more details, refer to Create Direct Connect.
  2. Configure the Load Balancer.

    1. Create a Load Balancer and an LB server group.
    2. Add the IP to be linked with AD as a member of the connected resources of the LB server group.
    3. Create a Listener from the connected resources of the Load Balancer and connect the LB server group.
      Guide
      • Through the Load Balancer service, call information for AD synchronization from ID Center can pass through the user’s VPC to call the user’s AD.
      • For detailed information on creating and using the Load Balancer service, please refer to Using Load Balancer Service.
  3. Configure the PrivateLink Service in the user’s VPC.

    1. Create the PrivateLink Service of the user VPC that will be called from ID Center.
    2. When creating a PrivateLink Service, select the Load Balancer created in step 2 as the connection resource.
  4. When the preparation work is finished, click the All Services > Management > Support Center menu. Move to the Service Home page.

  5. From the Service Home page, click the Service Request menu. Navigate to the Service Request List page.

  6. Click the Service Request button on the Service Request List page.

    • Select and enter the information required for the service request.
      Category
      Required
      Detailed description
      TitleRequiredTitle for service request
      • Enter within 64 characters using Korean, English, numbers, special characters (+=,.@-_)
      RegionRequiredSelect the region to request the service
      ServiceRequiredManagement service group’s ID Center service selection
      Work CategoryRequiredID Center AD Integration Request Optional
      ContentRequiredInformation input for ID Center AD linkage application
      Table. ID Center AD Integration Application Items
  7. Check the input information and click the Request button.

    • When creation is complete, check on the Service Request List page.
Notice
After requesting the service, you cannot edit or delete the content you wrote.

Change Credential Source Type

You can change the credential source or modify the settings.

Caution
If you change the credential source, all configuration information and resources such as previously set users, user groups, account assignments, and permission sets will be deleted.

Follow the steps below to change the credential source type.

  1. All Services > Management > ID Center Click the menu. Navigate to ID Center’s Service Home page.
  2. Click the ID Center Settings menu on the Service Home page. Navigate to the ID Center Details page.
  3. ID Center Details page, click the Edit button of the Credential Source item. Credential Source Change popup opens.
  4. After selecting the credential source type to use, click the Confirm button. A popup window notifying the credential source change will open.

CategoryDetailed description
ID Center own directoryUse directory within ID Center
  • No separate setting items
AD (Active Directory)Use Active Directory that the user manages directly
  • Connection URL: Enter the LDAP server address (e.g., ldap:// or ldaps:)
  • Bind DN: Enter the DN (Distinguished Name) of the administrator or service account used to access the LDAP server
  • Bind credentials: Enter the password for the account corresponding to the Bind DN
  • User DN: Enter the directory path where the user account is located (e.g., OU=Employees, OU=Accounts, DC=sub, DC=org)
  • Username LDAP attribute: Enter the user account identifier (e.g., sAMAccountName, uid)
  • RDN LDAP attribute: Enter the RDN (Relative Distinguished Name, the top-level attribute in the user DN)
  • User object classes: Enter the list of LDAP classes that define user objects, separated by commas (,) (e.g., persion, organizationPersion, usersAMAccount)
Table. Credential Source Type Change Items
5. After checking the contents of the precautions when changing and checking the check box, click the Confirm button. Go to the Service Home page to start changing the credential source type. * The change time varies depending on the scale, and you can confirm it through a notification once the change is completed. * You cannot navigate to another menu page while changes are being made.

AD (Active Directory) Information Synchronization

You can synchronize AD information.

Reference
  • AD information is automatically synchronized daily from 0:00 to 06:00 (Asia/Seoul, GMT +09:00).
  • If a new AD information connection is required, click the AD Reset button to change the AD information, then synchronize.

To synchronize AD information, follow the steps below.

  1. All Services > Management > ID Center Click the menu. Navigate to ID Center’s Service Home page.
  2. Click the ID Center Settings menu on the Service Home page. Navigate to the ID Center Details page.
  3. ID Center Details on the page, click the Sync button next to the sync time of the Credential Source item. The AD Information Sync popup window opens.
  4. After checking the synchronization notification, click the Confirm button. AD information synchronization will start.
    • The change time varies depending on the scale.

Manage Permissions

You can delegate the administrative rights of the ID Center to another Account, or revoke the delegated rights.

Delegating Permissions

You can delegate the management authority of the ID Center to another account.

Follow the steps below to delegate management rights to another account.

  1. All Services > Management > ID Center Click the menu. Navigate to ID Center’s Service Home page.
  2. Click the ID Center Settings menu on the Service Home page. Navigate to the ID Center Details page.
  3. Click the Permission Delegation button on the ID Center Details page. You will be taken to the Permission Delegation page.
    • Permission Delegation button is displayed only when there is no Account that has currently delegated authority.
  4. Permission Delegation on the page, after selecting the account to delegate authority to, click the Complete button.
    CategoryDetailed description
    Account nameAccount name
    Account IDAccount’s ID
    emailAccount email
    Additional DateAccount creation or registration date/time in Organization
    Add TypeMethod of adding Account in Organization
    • Create: Add by creating new on Add Account page
    • Join: Add an already created Account
    Table. ID Center Delegated Authority Account List
Note
When you click the View Hierarchy button, you can view the Account list in a hierarchical structure.

Cancel Delegation

You can revoke the administrative privileges of the ID Center delegated to another Account.

To cancel the delegation of administrative authority, follow the steps below.

  1. All Services > Management > ID Center Click the menu. Navigate to the Service Home page of ID Center.
  2. Click the ID Center Settings menu on the Service Home page. Navigate to the ID Center Details page.
  3. Click the Cancel Delegation button on the ID Center Details page.
  4. If a popup notifying the revocation of delegation opens, click the Confirm button.

ID Center Delete

Caution
An account delegated with the management of the ID Center cannot delete the ID Center.
Caution
When ID Center is deleted, all users, user groups, and permission sets within the ID Center are deleted, and all entries assigned to the Account are deleted.

To delete the ID Center, follow these steps.

  1. All Services > Management > ID Center menu, click. Go to ID Center’s Service Home page.
  2. Service Home on the page, click the ID Center Settings menu. Navigate to the ID Center Settings page.
  3. ID Center Settings on the page click the ID Center Delete button. ID Center Delete popup window opens.
  4. ID Center Delete After entering the name of the ID Center to delete in the popup window, click the Confirm button. Navigate to the Service Home page.
    • ID Center deletion time varies depending on the scale, and you can confirm via notification when deletion is complete.
    • While deleting the ID Center, you cannot navigate to other menu pages.

5.2.1 - ID Center User Management

ID Center’s user can be checked and managed.

Create User

You can create a user and add it to the ID Center.

To create a user, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User menu. It moves to the User List page.
  3. User List page, click the Create User button. It moves to the Create User page.
  4. User Created page, enter the basic information and additional information, then click the Complete button.
    Classification
    Necessity
    Detailed Description
    UsernameRequiredEnter the user’s name
    • Use English letters, numbers, and special characters (+=-_@,.) within 128 characters
    • The username cannot be changed after creation
    DescriptionSelectionEnter a description of the user within 1,000 characters
    PasswordRequiredPassword creation method selection
    • Automatic generation: Automatically generate a password and provide it in a popup window when user creation is complete
    • Direct input: Refer to the password creation rules and enter directly
    User Real NameRequiredEnter the user’s last name and first name in real name
    Affiliation Information InputSelectEnter business unit, department, administrator, and employee number information, each within 128 characters
    User Group SelectionSelectSelect the user group to which you want to add users
    Table. User-generated information
Password Creation Rules
  • Uppercase letters (English), lowercase letters (English), numbers, special characters (! @ # $ % & * ^) must each be included at least once.
  • The length is 9~20 characters.
  • ID or username cannot be used as a password.
  • The same character cannot be used three times or more.
  • Easily guessable passwords cannot be used.
  • Recently used passwords cannot be used.
  • 4 characters or more of continuous characters/numbers cannot be used.
  • The password change cycle is 90 days.
  1. When the popup window notifying user addition opens, click the Confirm button. The ID Center user login information popup window will open.
  2. ID Center check the user login information, then click the confirm button.
ClassificationDetailed Description
Access Portal URLURL information to access the Access Portal
User NameCreated User Name
passwordthe password of the authenticated user
  • view icon to check the password
Excel DownloadDownload ID Center user login information as an Excel file
Email transmissionAn Excel file containing ID Center user login information is sent via email
  • After clicking the button, enter the email address to receive the email
Table. ID Center user login information items

Check user details

You can check and manage detailed information about the user, user groups, and account information.

To check the user details, follow the next procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User menu. It moves to the User List page.
  3. User List page, click the username to check the detailed information. It moves to the User Details page.
  • User Details page displays basic information, and consists of Basic Information, User Group, Account tabs.

Basic Information

You can check the user’s basic information and modify the user’s description and options if necessary.

CategoryDetailed Description
Delete UserButton to delete the user
  • In the case of an AD-linked account, deletion is not possible
User NameThe user’s name
User Real NameThe user’s actual name
  • Edit button to modify the name
  • In the case of an AD-linked account, modification is not possible
DescriptionA description of the username
  • Edit button can be clicked to modify the description
Last LoginThe time when the user last logged in
PasswordPassword last changed time
  • In the case of an AD-linked account, it cannot be confirmed
  • Click the **Edit** button to change the password
  • For more information, see [Change Password](#비밀번호-변경하기) reference
| | Password reuse restriction | The number of recently used passwords that cannot be set as a password
  • In the case of an AD-linked account, it is not possible to check
| | Email | Email authentication status
  • In the case of an AD-linked account, the email information provided by AD is displayed and cannot be modified
| | Mobile Phone Number | Mobile Phone Number Authentication Status | | affiliation information | user's business unit, department, administrator, employee number information
  • In the case of an AD linked account, it is not possible to confirm
  • Click the **Edit** button to modify affiliation information
|
Table. User's basic information tab items

User Group

The user can check the registered user group and add or exclude the user group as needed.

Reference
User Group details can be found in User Group, please refer to it.
CategoryDetailed Description
ExclusionExclude the selected user group from the user group list
  • Enabled when one or more user groups are selected
Add user groupAdd a user group to register users
User Group NameName of the User Group
descriptiondescription of the user group
Revision TimeThe time when the user group was revised
Fig. User's user group tab items

Account

You can check the Account assigned to the user and add a set of permissions or assign an Account as needed.

Note
ClassificationDetailed Description
Add permission setAdd a new permission set to the Account
  • Activated when selecting an Account from the Account list
View more > Exclude all direct applicationsExclude all permission sets directly applied to the Account
  • If all permission sets are excluded, the Account assignment is cancelled
Account assignmentAssign a new account to the user
Account nameAccount’s name
Set of permissionsNumber of sets of permissions applied to the Account
  • If you place the mouse cursor on the set of permissions, a popup opens that allows you to exclude the set of permissions
Application methodMethod of applying the set of privileges to the Account
  • Direct: Policies directly linked to the Account
  • Group: Policies linked through user groups
Fig. User's Account tab items

Change password

You can change the user’s password.

To change the user’s password, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User menu. It moves to the User List page.
  3. User List page, click the username to change the password. It moves to the User Details page.
  4. User Details page, click the Password item’s Edit button. The Password Reset popup window opens.
  5. Password Reset popup window, set the password, then click the Confirm button. ID Center User Login Information popup window will open.
  • Auto Generation: Automatically generate a password
  • Direct Input: Refer to the password creation rules and enter directly
Password Creation Rules
  • Uppercase letters (English), lowercase letters (English), numbers, special characters (! @ # $ % & * ^) must each be included at least once.
  • The length is 9~20 characters.
  • ID or username cannot be used as a password.
  • The same character cannot be used three times or more.
  • Easily guessable passwords cannot be used.
  • Recently used passwords cannot be used.
  • 4 characters or more of continuous characters/numbers cannot be used.
  • The password change cycle is 90 days.
  1. ID Center user login information popup window, check the user information after, confirm button click.
ClassificationDetailed Description
Access Portal URLURL information to access the Access Portal
User NameCreated User Name
passwordthe password of the authenticated user
  • view icon to check the password
Excel DownloadDownload ID Center user login information as an Excel file
Email transmissionAn Excel file containing ID Center user login information is sent via email
  • After clicking the button, enter the email address to receive the email
Table. ID Center user login information items

Add user group

You can add a new user group.

To add a user group, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the User menu. It moves to the User List page.

  3. User List page, click the username to add to the user group. It moves to the User Details page.

  4. User Details page, click the User Group tab. The user group list will be displayed.

  5. Add User Group button will be clicked. It moves to the Add User Group page.

  6. Add User Group page, select the user group to be added from the user group list, and then click the Complete button.

    Classification
    Necessity
    Detailed Description
    Added user group-Name of the user group that the user was added to
    User GroupRequiredSelect a user group to add users to
    • If selected, add to Added User Group item
    Table. Items to Add User Group

  7. When the popup window notifying the addition of a user group opens, click the Confirm button.

Add permission set

You can add a set of permissions to the Account.

To add a set of permissions to the Account, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the User menu. It moves to the User List page.

  3. User List page, click the username to add the permission set. It moves to the User Details page.

  4. User Details page, click the Account tab. The list of accounts will be displayed.

  5. Select the Account to add a set of permissions from the Account list, then click the Add Permission Set button. It moves to the Add Permission Set page.

  6. Add Permission Set page’s permission set list, select the permission set you want to add, then click the Complete button.

    Classification
    Necessity
    Detailed Description
    Selected Account-Account name to add permission set
    Applied permission set-Name of the permission set applied to the selected Account
    Permission SetRequiredSelect one or more permission sets to apply to the Account
    • When selected, add to the Applied Permission Set item
    Table. Adding Permission Set Items

  7. When the popup window notifying the addition of the authority set opens, click the Confirm button.

Account assignment

You can assign a new Account to the user.

To assign a new Account, follow the next procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User menu. It moves to the User List page.
  3. User List page, click the username to assign the Account. It moves to the User Details page.
  4. User Details page, click the Account tab. The list of accounts will be displayed.
  5. Account Assignment 버튼을 클릭하세요. Account Assignment 페이지로 이동합니다.
  6. Account assignment page where you assign the account to be assigned and the set of privileges to be applied to the account, click the Complete button.
    Classification
    Mandatory
    Detailed Description
    Account SelectionRequiredSelect the Account to be assigned to the user
    • Hierarchical Structure View: Display Accounts in the form of the organization’s hierarchical structure
    • Account List View: Display Accounts in a list format
    Permission Set SelectionRequiredSelect the permission set to be applied to the selected Account
    Table. Assigning User Account Items
Notice
If there is no IAM policy name that matches the custom policy name of the selected permission set, you cannot assign an Account.
  1. Account 할당을 사용자 그룹 추가를 알리는 팝업창이 열리면 확인 버튼을 클릭하세요 -> 7. When the popup window notifying the addition of a user group to the account allocation opens, click the Confirm button.

Delete user

To delete a user, follow the following procedure.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User menu. It moves to the User List page.
  3. Select one or more users to delete from the user list.
  4. After confirming the selected users, click the delete button.
  • You can also delete them individually from the user details page of the user to be deleted.
  1. When a popup window notifying user deletion opens, click the Confirm button.

5.2.2 - ID Center User Group Management

ID Center’s user group can be checked and managed.

Create a user group

You can create a user group and add it to the ID Center.

To create a user group, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the User Group menu. It moves to the User Group List page.

  3. User Group List page, click the Create User Group button. Move to the Create User Group page.

  4. Create User Group page, enter the basic information and additional information, then click the Complete button.

    Classification
    Necessity
    Detailed Description
    User Group NameRequiredEnter the name of the user group
    • Use English letters, numbers, and special characters (+=-_@,.) to enter within 3-30 characters
    DescriptionSelectEnter a description of the user group within 1,000 characters
    Add UserSelectSelect a user to add to the user group
    • Displays a list of users registered in the account
    • If there are no users to add when linked to AD, add the user from the AD provider and proceed with synchronization on the ID Center Settings > Credential Source page
    Table. User Group Creation Information

  5. When the popup window notifying the addition of a user group opens, click the Confirm button.

Check user group detailed information

You can check and manage detailed information about the user group and user group, account information.

To check the user group details, follow the following procedure.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User Group menu. It moves to the User Group List page.
  3. User Group List page, click the user group name to check the detailed information. It moves to the User Group Details page.
  • User Group Details page displays basic information, and consists of Basic Information, User, Account tabs.

Basic Information

You can check the basic information of the user group and modify the description and options of the user group if necessary.

ClassificationDetailed Description
Delete user groupA button to delete the user group
User Group NameThe name of the user group
User Group IDThe ID of the user group
CreatorThe user who created the service
Creation TimeThe time when the service was created
EditorUser who modified the service information
Revision TimeTime when service information was revised
User Group NameThe name of the user group
  • Edit button can be clicked to modify the name
DescriptionA description of the user group name
  • Edit button can be clicked to modify the description
Table. Basic information tab items of user group

User

You can check the users registered in the user group and add or exclude users as needed.

Reference
User details can be found in the User guide.
ClassificationDetailed Description
ExclusionExcludes the user selected from the user list
  • Activated when one or more users are selected
Add UserAdd a user group to be registered in the user group
UsernameUser’s Name
User GroupNumber of user groups the user is registered to
Creation TimeThe time when the user was created
Table. User tab items of the user group

Account

You can check the Account assigned to the user and add a set of permissions or assign an Account as needed.

Reference
ClassificationDetailed Description
Add permission setAdd a new permission set to the Account
  • Activated when selecting an Account from the Account list
More > Cancel AssignmentCancel the assignment of the selected Account
  • If all permission sets are excluded, the account assignment is automatically canceled
Account assignmentAssign a new Account to the user group
Account nameAccount’s name
Permission SetNumber of permission sets applied to the Account
  • When you place the mouse cursor on the permission set, a popup opens to exclude the permission set
Table. Account tab items of the user group

Add User

You can add a new user to the user group.

To add a user, follow the following procedure.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.

  2. Service Home page, click the User Group menu. It moves to the User Group List page.

  3. User Group List page, click the user group name to add a user, it will move to the User Group Details page.

  4. User Group Details page, click the User tab. The user list will be displayed.

  5. Add User button should be clicked. It moves to the Add User page.

  6. Add User page’s user list, select the user you want to add, then click the Complete button.

    Classification
    Mandatory
    Detailed Description
    Added User-Name of the user group to which the user is added
    UserRequiredList of user groups to which no users have been added
    • Display the list of users registered in the account
    • When selected, add to the added user item
    • If there are no users to add when linked to AD, add the user from the AD provider and proceed with synchronization on the ID Center Settings > Credential Source page
    Table. Add User Items

  7. Check if the added user has been added to the list.

Add permission set

You can add a set of permissions to the Account.

To add a set of permissions to an Account, follow these procedures.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the User Group menu. It moves to the User Group List page.

  3. User Group List page, click the user group name to add the permission set. It moves to the User Group Details page.

  4. User Group Details page, click the Account tab. The account list will be displayed.

  5. Select the Account to add a set of permissions from the Account list, then click the Add Permission Set button. It moves to the Add Permission Set page.

  6. Add Permission Set page, select the permission set you want to add from the list of permission sets, and then click the Complete button.

    Classification
    Mandatory
    Detailed Description
    Selected Account-Account name to add permission set
    Applied permission set-Name of the permission set applied to the selected Account
    Permission SetRequiredSelect one or more permission sets to apply to the Account
    • When selected, add to the Applied Permission Set item
    Table. Adding Permission Set Items

  7. Please check if the added set of permissions has been applied to the Account.

Account assignment

You can assign a new account to the user group.

To assign a new Account, follow the next procedure.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User Group menu. It moves to the User Group List page.
  3. User Group List page, click the user group name to assign to the Account. It moves to the User Group Details page.
  4. User Group Details page, click the Account tab. The account list will be displayed.
  5. Account Assignment 버튼을 클릭하세요. Account Assignment 페이지로 이동합니다.
  6. Account assignment page where you assign an account and select a set of permissions to be applied to the account, click the Complete button.
    Classification
    Necessity
    Detailed Description
    Account SelectionRequiredSelect the Account to be assigned to the user group
    • Hierarchical View: Display Accounts in the form of the organization’s hierarchical structure
    • Account List View: Display Accounts in the form of a list
    Permission Set SelectionRequiredSelect the permission set to be applied to the selected Account
    Table. Assigning Account Items
Notice
If there is no IAM policy name that matches the custom policy name of the selected permission set, you cannot assign an Account.
  1. Check if the added Account has been assigned to the user.

Delete user group

To delete a user group, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the User Group menu. It moves to the User Group List page.
  3. Select one or more user groups to delete from the user group list.
  4. After verifying the selected user group, click the Delete User Group button.
  • You can also delete them individually from the User Group Details page of the user group to be deleted.
  1. When a pop-up window notifying the deletion of the user group opens, click the Confirm button.

5.2.3 - ID Center Account assignment

ID Center’s Account can be checked and assigned to a user or a user group.

Account assignment

You can assign an Account to a user or a user group.

To assign an Account, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the Account assignment menu. It moves to the Account list page.
  3. Account list page, select the account to be assigned, and then click the Assign to user or group button. It moves to the Assign to user or group page.
  4. Assign to user or group page’s Select assignment target area, select the assignment target, then click the Next button.
  • You must select at least one user or user group to assign to the Account.
    Classification
    Necessity
    Detailed Description
    Account to Assign-Name of the Account to assign to a user or a group of users
    UserSelectSelect the user to assign the Account to
    User GroupSelectSelect the user group to assign the Account
    Table. Selecting account allocation target items
  1. Permission Set Selection area, select the permission set to be applied to the Account, and then click the Next button.

    Classification
    Mandatory
    Detailed Description
    Account to Assign-Name of the Account to assign to a user or a group of users
    Permission SetRequiredSelect one or more permission sets to apply to the Account
    Table. Account Permission Set Selection Items

  2. Input Information Confirmation area, check the assignment target and authority set, then click the Complete button.

  3. Account allocation notification popup window opens, click the Confirm button.

Account detailed information check

You can check and manage detailed information about the account, the target to be assigned, and the set of authorities.

To check the detailed information of the Account, follow the next procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the Account assignment menu. It moves to the Account information page.
  3. Account information 페이지에서 상세 정보를 확인할 Account를 클릭하세요. Account details 페이지로 이동합니다.
  • Account Details page displays basic information, and consists of Basic Information, Assignment Targets, Permission Sets tabs.

Basic Information

Account’s basic information can be checked.

ClassificationDetailed Description
Account nameAccount full name
Account IDAccount’s ID
CreatorThe user who created the Account
Creation TimeTime when the Account was created
EditorUser who modified the Account
Revision TimeTime when the Account was revised
Table. Account Basic Information Tab Items

Assignment Target

Account can check and manage the assigned user and user group.

Reference
User details can be found in the User guide.
ClassificationDetailed Description
Revoke AssignmentRevoke the account assignment for the selected user or user group
  • Activated when an account is selected from the account list
View more > Add permission setAdd a permission set to the selected Account
  • Activated when selecting an Account from the Account list
Assign to user or groupAssign the selected Account to a new user or user group
Assignment Target NameAssignment Target’s Name
Target TypeType of assigned target (user, user group)
Permission SetNumber of permission sets applied to the Account
  • A popup to exclude the permission set opens when the mouse cursor is placed on the permission set
Table. Account Allocation Target Tab Items

Authority Set

Account applied authority set can be checked and excluded if necessary, However the correct translation is: The set of permissions applied to the Account can be checked and excluded if necessary,

ClassificationDetailed Description
Exclusion of permission setExcludes the selected permission set from the Account
  • Activated when a permission set is selected from the permission set list
  • If all permission sets are excluded, Account assignment is automatically canceled
Permission Set NameThe name of the permission set
DescriptionDescription of the set of permissions
Revision TimeThe time the permission set was last modified
Table. Account Permission Set Tab Items

Add permission set

You can add a set of permissions to an account assigned to a user or a group of users.

To add a set of permissions to an Account, follow these procedures.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the Account assignment menu. It moves to the Account list page.

  3. Account list page, click the Account to be assigned. It moves to the Account details page.

  4. Account details page, click the target allocation tab. The list of allocation targets will be displayed.

  5. After selecting the assignment target to which you want to add a permission set from the list of assignment targets, click the More > Add Permission Set button. It moves to the Add Permission Set page.

  6. Add Permission Set page, select the permission set you want to add from the list of permission sets, then click the Complete button.

    Classification
    Mandatory
    Detailed Description
    Assignment Target-Name of the assignment target to which the permission set is to be added
    Applied permission set-Name of the permission set applied to the selected Account
    Permission SetRequiredSelect one or more permission sets to apply to the Account
    • When selected, add to the Applied Permission Set item
    Table. Adding Permission Set Items

  7. When the popup window notifying the addition of the permission set opens, click the Confirm button.

  8. Please confirm that the added set of permissions has been applied to the Account.

Add additional assignments to a user or group

You can additionally assign an Account to new users or user groups.

To assign an Account to a new user or a group of users, follow the next procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the Account assignment menu. It moves to the Account list page.
  3. Account list 페이지에서 할당할 Account를 클릭하세요. Account details 페이지로 이동합니다. -> 3. Account list page, click the Account to be assigned. It moves to the Account details page.
  4. Account details page, click the target allocation tab.
  5. Assignment target tab, click the Assign to user or group button. Move to the Assign to user or group page.
  6. Select Target area, select the target to be assigned, then click the Next button.
  • You must select at least one user or user group to assign to the Account.
    Classification
    Necessity
    Detailed Description
    Assigned User-The current account assigned user name
    UserSelectSelect a user to assign to the Account
    • When selected, it is added to the Assigned User item
    • If there are no users to add when linked to AD, add the user from the AD provider and proceed with synchronization on the ID Center Settings > Credential Source page
    Assigned User Group-Name of the user group to which the current Account is assigned
    User GroupSelectSelect the user group to assign the Account to
    • When selected, it is added to the Assigned User Group item
    Table. Selecting Items for Account Allocation
  1. Permission Set Selection area, select the permission set to be applied to the Account, and then click the Next button.

    Classification
    Mandatory
    Detailed Description
    Permission SetRequiredSelect one or more permission sets to apply to the Account
    Table. Account Permission Set Selection Items

  2. Input Information Confirmation area, check the assignment target and authority set, then click the Complete button.

  3. Account allocation notification popup window opens, click the Confirm button.

Account assignment cancellation

To cancel the account assignment for a user or a user group, follow the following procedure.

  1. All services > Management > ID Center menu, click. It moves to the Service Home page of ID Center.
  2. Service Home page, click the Account assignment menu. It moves to the Account list page.
  3. Account list 페이지에서 할당할 Account를 클릭하세요. Account details 페이지로 이동합니다. -> 3. Account list page, click the Account to be assigned. It moves to the Account details page.
  4. Account details page, click the Target allocation tab. The list of allocation targets will be displayed.
  5. Select the assignment target to be canceled from the list of assignment targets and then click the Cancel Assignment button.
  6. Account allocation cancellation notification popup window opens, click the Confirm button.

5.2.4 - ID Center Permission Set Management

You can check and manage the set of permissions for the ID Center.

Create a set of permissions

You can create a set of permissions and add it to the ID Center.

To create a set of permissions, follow these steps.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.
  2. On the Service Home page, click the Authority set menu. It moves to the Authority Set List page.
  3. On the Authority Set List page, click the Create Authority Set button. It moves to the Create Authority Set page.
  4. On the Create Permission Set page, in the Enter Basic Information section, enter the basic information and then click the Next button.
Classification
Necessity
Detailed Description
Permission Set NameRequiredEnter the name of the permission set
  • Use English, numbers, and special characters (+=-_@,.) to enter within 32 characters
Enter a description of the permission set within 1,000 characters
Maximum Session DurationRequiredEnter the session time allowed for the user when accessing the Console through the Access Portal
  • Time selection: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
  • Direct input: Input possible in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
Table. Permission Set Basic Information Items
  1. In the 권한 세트 설정 area, select a policy to use and set the policy, then click the 다음 button.
Classification
Necessity
Detailed Description
Default PolicyOptionalConnects the default policy provided by Samsung Cloud Platform Console
  • Use item is selected and then select the default policy to be linked to the authority set from the list
Custom PolicyOptionalLink the custom policy created under the Account
  • Use item is selected and the custom policy to be linked to the permission set is entered directly
  • If there is no IAM policy name matching the entered custom policy name in the Account, the permission set cannot be applied
Inline PolicyOptionalSet the policy to be applied to the permission set directly
  • Select the Use item and configure it according to the policy setting mode
  • JSON Mode: Configure directly using the JSON Editor
Table. Permission Set Setting Items
Notice
The permission set can have up to 20 policies linked to it, which is the sum of the default policies and custom policies.
  1. On the Service Home page, click the Permission Set menu. It moves to the Permission Set List page.
  2. When the popup window for creating a set of permissions opens, click the Confirm button.

Check details of permission set

You can check and manage detailed information about the permission set, user group, and account information.

To view detailed information about a set of permissions, follow these steps.

  1. Click all services > Management > ID Center menu. It moves to the Service Home page of ID Center.
  2. Click Individual Resource in Applied Resource.
  3. On the Authority Set List page, click the authority set to view detailed information. It moves to the Authority Set Details page.
    • Authority Set Details page displays basic information and consists of Basic Information, Authority, Account tabs.

Basic Information

You can check and modify the basic information of the permission set.

ClassificationDetailed Description
Permission Set DeleteButton to delete the permission set
ServiceService Name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
  • In policies, it means policy name
Resource IDUnique Resource ID
CreatorUser who created the service
Creation TimeTime when the service was created
ModifierUser who modified the service information
Modified TimeTime when service information was modified
Permission Set NamePolicy Name
Maximum session persistence timeThe session time allowed for users when accessing the Console through the Access Portal
  • Modify button can be clicked to change the persistence time
    • Time selection: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
    • Direct input: possible to input in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
DescriptionDescription of policy name
  • Edit button can be clicked to modify the description
Table. Basic information tab items of the authority set

Authority

You can view and manage policies attached to a set of permissions.

ClassificationDetailed Description
Default PolicyThe default policy linked to the set of permissions
  • After selecting a policy from the default policy list, you can disconnect by clicking the Disconnect button
  • New default policy can be linked by clicking the Link Policy button
User-defined policyUser-defined policies linked to the authority set
  • It is possible to disconnect by selecting a policy from the user-defined policy list and clicking the Disconnect button
  • New user-defined policies can be linked by clicking the Policy Link button
Inline PolicyService name of inline policy connected to the authority set
  • Delete button can be clicked to delete the connected inline policy
  • Policy Edit button can be clicked to modify the inline policy
  • If there is no connected inline policy, the Policy Create button can be clicked to create one
Table. Authority information items of the authority set

Account

You can check and modify the account information of the authority set.

ClassificationDetailed Description
Account nameAccount Name
Account IDAccount ID
EmailAccount’s Email
Table. Account tab items of the permission set

Connect Basic Policy

You can attach a new default policy to the set of permissions.

To link a basic policy, follow these procedures.

  1. Click on 모든 서비스 > Management > ID Center menu. It moves to the Service Home page of ID Center.
  2. On the Service Home page, click the 권한 세트 menu. It moves to the 권한 세트 목록 page.
  3. On the Authority Set List page, click the authority set to link to the basic policy. It moves to the Authority Set Details page.
  4. Authority Set Details page, click the Authority tab.
  5. Click the Policy Link button in the Basic Policy area. It moves to the Basic Policy Link page.
  6. On the Basic Policy Linkage page, select the policy you want to link from the list of basic policies, and then click the Complete button.
Classification
Necessity
Detailed Description
Connected Base Policy-Name of the base policy connected to the authority set
Default Policy LinkRequiredSelect the default policy to link to the authority set
  • If selected, it will be added to the Linked Default Policy item
Fig. Attaching a Default Policy to a Permission Set Item
  1. When the policy connection notification popup window opens, click the Confirm button.

Connect custom policies

You can attach a new custom policy to a set of permissions.

To link a custom policy, follow these steps.

  1. Click all services > Management > ID Center menu. It moves to the Service Home page of ID Center.
  2. On the Service Home page, click the Authority Set menu. It moves to the Authority Set page.
  3. On the Authority Set List page, click the authority set to which you want to attach a custom policy. It moves to the Authority Set Details page.
  4. Authority Set Details page, click the Authority tab.
  5. Click the Policy Link button in the Custom Policy area. It moves to the Custom Policy Link page.
  6. Custom Policy Connection page, select the policy you want to connect from the list of custom policies, and then click the Complete button.
Classification
Necessity
Detailed Description
Connected User-Defined Policy-Default Policy Name Connected to the Authority Set
User-defined policy linkingRequiredEnter the user-defined policy to be linked to the permission set directly
  • When selected, add to the Linked User-Defined Policy item
  • Click the Add button to enter additional user-defined policies to be linked
Table. Items for attaching custom policies to permission sets
  1. When the policy connection notification popup window opens, click the Confirm button.

Creating an inline policy

You can modify the inline policies attached to a set of permissions.

To modify the in-line policy, follow the next procedure.

  1. Click all services > Management > ID Center menu. It moves to the Service Home page of ID Center.
  2. On the Service Home page, click the Authority Set menu. It moves to the Authority Set List page.
  3. On the Authority Set List page, click the authority set you want to modify the in-line policy for. It moves to the Authority Set Details page.
  4. Authority Set Details page, click the Authority tab.
  5. In the 인라인 정책 area, click the 정책 생성 button. This will take you to the 인라인 정책 생성 page.
  6. On the 인라인 정책 생성 page, in the 권한 설정 section, select the policy setting method and the service to apply, then click the 다음 button.
Classification
Necessity
Detailed Description
Basic Mode/JSON ModeRequiredSelect the policy setting method
  • Basic Mode: Use the mode provided by the Console to set
  • JSON Mode: Set directly using the JSON Editor
ServiceRequiredSelect the service to set the policy
  • Add Service: Add a service to set the policy
Table. Inline Policy Creation - Service Settings
Caution

In policy settings, we provide default mode and JSON mode.

  • When entering JSON mode or moving the screen after writing in basic mode, services with duplicated control requirements are integrated into one, and services with incomplete settings are deleted.
  • JSON mode where the contents written in does not match the JSON format can not be converted to default mode.
  1. After setting the permissions, click the Next button.
Classification
Necessity
Detailed Description
Control TypeRequiredPolicy Control Type Selection
  • Allow Policy: a policy that allows defined permissions
  • Deny Policy: a policy that denies defined permissions
Deny policy is applied first for the same target
ActionRequiredSelect actions provided by each service
  • Actions that allow individual resource selection are displayed in purple
  • Actions that target all resources are displayed in black
  • Add Action Directly: You can specify multiple actions at once using the Wildcard *
Applied ResourceRequiredResource to which the action is applied
  • All Resources: Apply to all resources for the selected action
  • Individual Resource: Apply only to the specified resource for the selected action
    • Individual resources are only possible when selecting individual resources in purple actions
    • Click the Add Resource button to specify the target resource by resource type
Authentication TypeRequiredAuthentication method for the target users to apply the policy
  • All Authentication: Applies regardless of the authentication method
  • API Key Authentication: Applies to users who use API key authentication
  • Temporary Key Authentication, Console Login: Applies to users who use temporary key authentication or console login
Applied IPRequiredIP that allows policy application
  • Custom IP: IP registered and managed directly by the user
    • Applied IP: IP registered directly by the user, to which control policies are applied, and can be registered in IP address or range format
    • Excluded IP: IP to be excluded from Applied IP, which can be registered in IP address or range format
  • All IP: No IP access restriction
    • All IPs are allowed access, but if exceptions are needed, Excluded IP can be registered to restrict access to registered IPs
Additional ConditionsOptionalAdd conditions for Attribute-Based Access Control (ABAC)
  • Condition Key: Select from Global condition key and service condition key list
  • Qualifier: Default, Any value in request, All values in request
  • Operator: Bool, Null
  • Value: True, False
Table. Policy Creation - Permission Setting
  1. Check Input Information page, check the entered information and click the Complete button.
  2. If the policy modification notification popup window opens, click the Confirm button.

Registering individual resources as applied resources

You can register individual resources as applied resources when setting permissions.

To register individual resources as applied resources, follow the next procedure.

  1. Select an action where individual resources can be selected from the action options.
  • Actions that allow individual resource selection are displayed in purple.
  1. In Applied Resource, click Individual Resource.
  2. Click the Add Resource button. The Add Resource popup window will open.
Classification
Necessity
Detailed Description
Free TypeRequiredSelect the type of resource to add
SRN-Unique resource ID in Samsung Cloud Platform
  • Automatically updated based on the input items below
AccountRequiredAccount ID setting
  • Current Account: Current Account ID is automatically entered and cannot be modified
  • All Accounts: Added to all accounts (not recommended)
  • Direct Input: Account ID is directly entered using English lowercase letters and numbers within 100 characters (Wildcard input is not allowed)
RegionSelectDirectly enter the region information of the resource within 100 characters
  • Select All checks to add resources from all regions
Resource IDRequiredDirectly enter the resource ID to be added within 100 characters
  • Select All If checked, all resources of the corresponding resource type are added
Fig. Policy Creation - Registering Individual Resources as Applied Resources

Delete permission set

Notice
If a set of permissions is applied to an Account, it cannot be deleted.

To delete a set of permissions, follow these steps.

  1. All services > Management > ID Center menu is clicked. It moves to the Service Home page of ID Center.
  2. On the Service Home page, click the 권한 세트 menu. It moves to the 권한 세트 목록 page.
  3. Select one or more authorization sets to delete from the authorization set list.
  4. After confirming the selected set of permissions, click the Delete button. You can also delete them individually from the Delete permission set’s Permission set details page.
  5. When the popup window notifying the deletion of the permission set opens, click the Confirm button.

5.2.5 - ID Center Access Portal use

You can access and use Account resources through the Access Portal.

Notice
  • To use Access Portal, you must be registered as a user in the ID Center of the Samsung Cloud Platform Console.
  • For more information about user registration, please refer to Create User.

Access Portal first access

When accessing the Access Portal for the first time, you must apply for the Access Portal access URL through a service request and then log in.

Access Portal connection URL application

Samsung Cloud Platform Console where you can apply for Access Portal access URL through a service request.

To apply for Access Portal connection URL, please follow the next procedure.

  1. All services > management > ID Center menu, click. It moves to the Service Home page of ID Center.

  2. Service Home page, click the ID Center settings button. It moves to the ID Center settings page.

  3. Access Portal URL item, click the URL application button. It moves to the service request page of the Support Center.

    Classification
    Necessity
    Detailed Description
    titlerequiredTitle for Access Portal URL application
    • Use Hangul, English, numbers, and special characters (+=,.@-_) to enter within 64 characters
    RegionRequiredSelect a region to apply for Access Portal URL
    ServiceRequiredManagement service group’s ID Center service selection
    Task ClassificationRequiredApply for Access Portal URL Optional
    ContentRequiredInformation input for Access Portal URL application
    Table. Access Portal URL Request Items

  4. Check the input information and click the request button.

Notice
  • After requesting the service, you cannot modify or delete the written content.
  • After requesting a service, you can check the details of the request on the Service Request List page of the Support Center. Please refer to Checking Service Request Details for more information.

Access Portal Initial Login

Access Portal for the first time, please follow the following procedure.

  1. On the login page, enter your username and password.
Notice
Username and Password information, please contact the ID Center administrator.
  1. Select a means to send the authentication number, and click the Send Authentication Number button.

  2. Enter the received authentication number and click the next button. A pop-up window for multi-authentication (MFA) self-authentication will open.

  3. Multi-factor authentication (MFA) for self-identification In the popup window for MFA self-identification, complete the personal information input and terms confirmation for MFA, then click the Confirm button. The Password Change popup window will open.

    Item
    Mandatory
    Description
    Automatic input preventionRequiredEnter the characters output in the image into the input window and click the Confirm button
    Mobile phone numberRequiredEnter mobile phone number
    • Enter the mobile phone number and click the authentication button to issue an authentication number
    • Enter the authentication number issued to your mobile phone and click the confirm button
    • If the authentication number is valid, the identity verification is complete
    EmailRequiredEnter the email to be used for self-authentication within 60 characters
    • For accounts linked to the AD type as the authentication source, select Provide email information registered on the AD side as Read-Only
    RegionRequiredRegion selection for personal information collection
    Personal information collection and useRequiredAfter checking the terms and conditions for personal information collection and use, check I agree
    Table. Self-authentication items for multi-factor authentication (MFA)

  4. Password Change popup window, enter the password change information and click the Confirm button. The Access Portal Terms of Service popup window will open.

    Item
    Mandatory
    Description
    Existing passwordRequiredEnter the password received from the ID Center administrator
    New PasswordRequiredEnter directly referring to the password creation rules
    Password ConfirmationRequiredRe-enter the password to use
    Table. Password Change Items

Password Creation Rules
  • Uppercase letters (English), lowercase letters (English), numbers, special characters (! @ # $ % & * ^) must each be included at least once.
  • The length is 9~20 characters.
  • ID or username cannot be used as a password.
  • The same character cannot be used three times or more.
  • Easily guessable passwords cannot be used.
  • Recently used passwords cannot be used.
  • 4 characters or more of consecutive characters/numbers cannot be used.
  • The password change cycle is 90 days.
  1. Access Portal terms of use after confirmation, confirm button click. Access Portal page to move.

Access Portal Login

Guidance
  • If you are accessing the Access Portal for the first time, refer to Access Portal initial access to apply for the Access Portal URL first, and then log in.

To log in to Access Portal, follow the following procedure:

  1. Enter the Access Portal connection URL received through the service request in the browser’s address input window. It moves to the Access Portal login page.
  2. On the login page, enter your username and password.
  3. Select a means to send the authentication number and click the next button. It moves to the authentication number confirmation page.
  • If you do not receive the authentication number or it has expired, click the Resend Authentication Number button to request the authentication number again.
  1. Enter the received authentication number and click the login button; you will be taken to the Access Portal page.
ID/Password Find
  • ID or password is lost, in the case of password find button, click, Access Portal registered email or phone number to change using available.
  • Accounts linked to AD type certification source have password retrieval restricted, please contact the ID Center administrator.
Caution
  • Please enter your password and authentication number correctly. If you enter your password or authentication number incorrectly more than 5 times, your account will be locked for security reasons.
  • If the account is locked, it provides the user with the locked account information.

Access Portal usage

When you log in to Access Portal, you are taken to the Access Portal page. Access Portal page is composed of Account tab and My Info tab.

Account

You can check the account and set of permissions assigned to the user and access the Samsung Cloud Platform Console with the account’s set of permissions.
Temporary Key Issuance can be used to obtain a temporary key to access the Account.

ClassificationDetailed Description
Account listAssigned account name and ID to the user, root user email information
  • When clicking on the account name, the set of permissions applied to the account is displayed
Permission Set ListPermission set applied to Account
  • Clicking on the permission set name moves to the Samsung Cloud Platform Console page
  • Temporary Key Issuance: Issuing a temporary key that can use the Account
Table. Account tab items

My Info.

You can check the user’s basic information and modify the user’s description and options if necessary.

ClassificationDetailed Description
User NameThe user’s name
EmailEmail to be used for self-authentication
  • Modify button can be clicked to change email
  • In the case of an AD-linked account, the email information provided by AD is displayed and cannot be modified
Mobile phone numberMobile phone number to use for self-authentication
  • Edit button to change email
Last LoginThe time when the user last logged in
PasswordPassword last changed time
  • In the case of an AD-linked account, it cannot be confirmed
  • Click the Edit button to change the password
  • Refer to the password creation rules when changing the password
Password Reuse RestrictionThe number of recently used passwords that cannot be set as a password
  • In the case of an AD-linked account, it cannot be checked
  • Click the Edit button to change the number
  • Up to 24 recently used passwords that cannot be set can be configured
Time ZoneUser Time Zone(Time Zone)
  • Modify button to change time zone possible
Terms and ConditionsTerms and Conditions agreement status
  • View Content item can be clicked to check the terms and conditions
Table. My Info. Tab Items
Password Generation Rules
  • Uppercase letters (English), lowercase letters (English), numbers, special characters (! @ # $ % & * ^) must each be included at least once.
  • The length is 9~20 characters.
  • ID or username cannot be used as a password.
  • You cannot use the same character three times or more.
  • Easily guessable passwords cannot be used.
  • Recently used passwords cannot be used.
  • 4 characters or more of continuous characters/numbers cannot be used.
  • The password change cycle is 90 days.

Account

You can check the account and permission set assigned to the user and access the Samsung Cloud Platform Console with the account’s permission set or receive an access token for access.

ClassificationDetailed Description
Account listAssigned account name and ID to the user, and root user email information
  • When clicking on the account name, the set of permissions applied to the account is displayed
Permission Set ListPermission set applied to Account
  • Clicking on the permission set name moves to the Samsung Cloud Platform Console page
  • Temporary Key Issuance: Issuing a temporary key that can use the Account
Table. Account Tab Items

Issue Certificate

You can obtain an API key to access the Samsung Cloud Platform Console from the Access Portal. To receive the IMSI key, follow the next procedure.

  1. Enter the Access Portal access URL received through the service request in the browser’s address input window. It moves to the Access Portal login page.
  2. Log in to Access Portal. Access Portal page will be moved.
  3. Access Portal page, click the Account tab. It moves to the Account tab.
  4. Click the Issue License Key button of the license set for which you want to issue a license key in the license set list. A pop-up window announcing the issue of the license key will open.
  5. Check the account name, then click the Confirm button. The ID Center Issuance popup window will open.
  6. Check the issuance information, then click the Confirm button.
Caution
  • ID Center issuance popup window’s information cannot be checked again, so please be careful.
  • In case the license key issuance information is lost, the license key must be re-issued.

5.3 - Release Note

ID Center

2025.10.23
FEATURE AD (Active Directory) Credential Linkage Provision
  • You can choose to use AD (Active Directory) as a credential source.
  • AD (Active Directory) is used so that users can directly manage the authentication source.
2025.07.01
NEW ID Center Service Official Launch
  • ID Center service has been officially launched.
  • You can manage to perform tasks according to user permissions by creating authority policies for each service and assigning policies and accounts linked to the Organization service to users.
  • Security can be enhanced to allow only authorized ID Center users to access through the Access Portal.

6 - Logging&Audit

6.1 - Overview

Service Overview

Logging&Audit saves the history of all tasks performed by the user, allowing it to be used for change tracking, troubleshooting, security checks, and more on cloud resources. The collected task history can be checked for 90 days, and can be stored in the user’s Object Storage through Trail creation and management.

Provided Features

Logging&Audit provides the following functions.

  • Work Log Collection: All logs that occur are collected and stored in real-time. For the entire log collected from multiple servers and services, search is possible through web-based Console by various conditions such as resource type, resource name, period, and worker name.
  • Activity Record Audit: All recorded activity history is stored for 90 days and can be checked at any time through the Console.
  • Log Management: While using cloud services, numerous logs generated can be stored in the user’s Object Storage by creating a Trail.
  • Log Integrity Verification: After creating a trail, you can verify if the log files stored in Object Storage have been changed, modified, or deleted through the log file verification function.

Component

Activity History

It can be used for change tracking, troubleshooting, security checks, and more by storing all activity records performed by users in cloud resources. It stores activity records for 90 days without separate settings, and effective log management is possible by analyzing logs using various search functions.

Trail

Trail allows you to store user activity records that occur through Console and API calls in Object Storage for a long time. In addition, you can select the services and accounts you want to save and use them to track changes to cloud resources, troubleshoot, and perform security checks.

Preceding Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance for more details.

Service CategoryServiceDetailed Description
StorageObject StorageObject storage that is convenient for data storage and search
Fig. Logging&Audit Preceding Service

6.2 - How-to guides

The user can check the activity history through the Samsung Cloud Platform Console, and store the corresponding activity history using the Trail service without any time restrictions. When problems such as security risks or resource change history occur, you can check this activity history to identify the cause of the problem.

Note
Activity records will be deleted after 90 days. If long-term storage is necessary, create a Trail and store it in Object Storage. For more information, see Creating a Trail.

Activity Record Inquiry

To check the list of user’s activity history, please follow the following procedure.

  1. All services > Management > Logging&Audit menu is clicked. It moves to the Service Home page of Logging&Audit.
  2. Service Home page, click the activity record menu. It moves to the activity record list page.
  3. Activity Record List page where you can check the activity record.
    ClassificationDetailed Description
    file downloadsave activity history list in JSON or CSV file format
    Period FilterSelect the list search period
    • All, Last 30 minutes, Last 1 hour, Last 12 hours, Direct Input to choose from
    • Direct Input: Start and end times can be entered
    Time ZoneSelect a searchable time zone
    Search input windowEnter search terms to search the list
    Detailed SearchSearch by category by entering search terms or selecting information to search the list
    Setting IconSetting of column items to be displayed in the list
    Table. List of activity record items
Guidance
  • The list is automatically refreshed every 1 minute.
  • The list will only show the list of selected regions.

Activity Record Comparison

You can select up to 5 work histories from the activity record list to compare information.
If you check and select the work history you want to compare, it will be added to the Activity Comparison page, where you can compare and check the information.

Activity record detailed information check

You can check the list of all activity records and detailed information. The activity record details page consists of work history details, activity record details tabs.

To check the detailed information of the activity record, follow the next procedure.

  1. All services > Management > Logging&Audit menu is clicked. It moves to the Service Home page of Logging&Audit.
  2. Service Home page, click the activity history menu. It moves to the activity history list page.
  3. Activity Record List page, click on the activity record to check the detailed information. It moves to the Activity Record Details page.
  • Activity Details page consists of Work History Details, Work Details tabs.

Work History Details

Work History Details page where you can check the detailed information of the work history.

ClassificationDetailed Description
Job Execution TimeLog Occurrence Time
Worker InformationWorker Account
ServiceService Name
Role NameRole Name of the User Who Entered the Role
Resource NameResource Title
RegionWork Region
Resource TypeResource Type
Work RecordWork Details
Resource IDResource’s unique ID
work resultwork result
Event TopicEvent Content
Table. Work History Detail Tab Items

Work history details

Work History Details page where you can check the detailed information of the work history.

ClassificationDetailed Description
Basic Mode JSON ModeSelect view mode for job history details
code copycode copy available when JSON mode is selected
accountIdAccount ID
productNameservice name
requestedByRequester ID
resourceNameresource name
resourceTypeService Type
statework result
Table. Work history detailed tab items

6.2.1 - Trail Management

Users can view activity logs through the Samsung Cloud Platform Console and store those activity logs using the Trail service without time constraints. Since activity logs are retained for 90 days, for long-term storage you must create a Trail service and store them in Object Storage.

Trail Create

You can store activity logs without time restrictions using the Trail service of Logging&Audit in the Samsung Cloud Platform Console.

To create a Trail, follow the steps below.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to Logging&Audit’s Service Home page.
  2. Click the Trail menu on the Service Home page. Go to the Trail List page.
  3. Click the Trail List page’s Create Trail button. It navigates to the Create Trail page.
    • Service Information Input Enter or select the required information in the area.
      Category
      Required
      Detailed description
      Trail nameRequiredTrail name
      • Enter 5-26 characters using English letters, numbers, and the special character (-)
      Target RegionRequiredRegion where activity occurred
      • Services that are created without specifying a region select the target region as All
      • If a specific region selection is needed, select from the region list
      • The target region can be changed after creation
      Target Resource TypeRequiredResource type of activity logs to be stored in Trail
      • Default: **All**
      • If you want to change to specify only certain resource types, click the **Select** button to choose the resource types to store
      • Refer to the [Service-specific Resource Type List](#서비스-별-자원-형-목록)
      • The target resource type can be changed after creation
      | |Target User |Required |User of activity logs to be stored in Trail
      • Default: **All**
      • If you want to change to specify only certain users, click the **Select** button to choose the users to store
      • Target users can be changed after creation
      | |Storage Bucket Region |Required |Location (region) of the Object Storage bucket where activity logs will be stored
      • The storage bucket cannot be changed after creation
      | |Storage bucket |Required |Object Stroage bucket name to store activity logs
      • Storage bucket cannot be changed after creation
      | |Save format |Required |File type to save (JSON, CSV)
      • The save format can be changed after creation
      | |Log file verification| Select|Whether to use log file verification
      • **Use** is selected, a Digest file is stored in the same bucket to verify changes and deletions of the Trail log file
      • The usage of log file verification can be changed after creation
      | |ServiceWatch log collection| Select|Trail logs are sent to ServiceWatch's log group. By sending Trail logs to ServiceWatch's log group, you can monitor via ServiceWatch and receive notifications when specific activities occur
      • If you select **Use**, you can view the automatically generated ServiceWatch log group name. You can also select the **IAM role** required for ServiceWatch log collection.
      • The **IAM role** for ServiceWatch log collection requires the following settings
        • Select **Service** for the **Category** of the **Principal**, and set **Value** to loggingaudit.samsungsdscloud.com
      • Attach a policy to **Policy** with the following **Permissions**
        • servicewatch:CreateBulkServiceLogEvents
        • servicewatch:CollectLogGroupLogStream
      • The use of ServiceWatch log collection can be changed after creating the Trail
      |
      Table. Trail Service Information Input Items
    • Additional Information Input Enter or select the required information in the area.
      Category
      Required or not
      Detailed description
      DescriptionSelectionEnter additional information or description about Trail
      TagSelectAdd Tag
      • Up to 50 can be added per resource
      • After clicking the Add Tag button, enter or select Key, Value values
      Table. Trail additional information input items
Reference
If the saved file type is CSV, open the log file in a text editor (e.g., Notepad++).
Reference

If ServiceWatch is set to use log collection, refer to the following for IAM policy permissions.

{
	"Statement": [
		{
			"Action": [
				"servicewatch:CreateBulkServiceLogEvents","
				"servicewatch:CollectLogGroupLogStream"
			],
			"Effect": "Allow",
			"Resource": [
				"*""
			],
			"Sid": "VisualEditor0"
		}
	],
	"Version": "2024-07-01"
}
  1. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
    • When creation is complete, check the created resources on the Trail list page.

Trail Check detailed information

Trail service can view and edit the full list and detailed information. Trail Details page consists of Detailed Information, Tags, Activity History tabs.

To check the detailed Trail information, follow the steps below.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to Logging&Audit’s Service Home page.
  2. Click the Trail menu on the Service Home page. Navigate to the Trail List page.
  3. Click the resource to view detailed information on the Trail list page. You will be taken to the Trail detail page.
    • Trail Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.
      CategoryDetailed description
      Trail statusStatus of the Trail created by the user
      • Active: Trail operating
      • Stopped: Trail stopped
      Trail ControlButton to change Trail status
      • Start: Start a stopped Trail. Activity records are saved again from the day the Trail is started.
      • Stop: Stop a running Trail. Activity recording is stopped, and previously saved activity records are retained.
      Trail DeleteButton to delete Trail
      Table. Trail status information and additional functions

Detailed Information

Trail list page lets you view detailed information of the selected resource and, if needed, modify the information.

CategoryDetailed description
ServiceService Name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
  • In the Trail service, it means Trail SRN
Resource NameResource Name
  • In the Trail service, it means the Trail name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation TimeService Creation Time
EditorUser who edited the service information
Modification DateDate/Time when service information was modified
Trail nameTrail name
Target RegionRegion where activity logs occurred
  • The target region of activity logs stored in Trail can be specified when creating a Trail, and can also be changed. It can be changed via the Edit button, and for more details see Edit Target Region.
Target Resource TypeResource type of activity logs stored in Trail
  • If you want to change, click the Edit button to select the resource type to save. For more details, refer to Edit Target Resource Type.
Target UserUser of activity logs stored in Trail
  • If you want to change, click the Edit button to select the user to save. See Target User Edit.
Storage Bucket RegionRegion of the Object Storage bucket where activity logs are stored
Storage bucketObject Stroage bucket name that stores activity logs
Save FormatFile type saved in bucket (JSON, CSV)
  • If you want to change the file type saved in the bucket, set it via the Edit button. For more details, see Edit Save Format.
DescriptionAdditional information or description about the Trail
Log file verificationWhether to use log file verification
  • Use case, a Digest file is stored in the same bucket to verify changes and deletions of Trail log files
ServiceWatch Log CollectionSend Trail logs to ServiceWatch’s log group
  • If you select Use, Trail logs are sent to ServiceWatch’s log group, allowing monitoring via ServiceWatch and receiving notifications when specific activities occur. For more details, see ServiceWatch Log Collection Modification.
Initial collection date and timeThe initial collection date and time of activity logs stored in Trail
Final collection timestampFinal collection timestamp of activity logs stored in Trail
Final execution resultFinal execution result of the activity history stored in Trail
Table. Trail detailed information tab items

Tag

On the Trail list page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag ListTag List
  • You can check the Key and Value information of tags
  • Up to 50 tags can be added per resource
  • When entering tags, search and select from the previously created Key and Value list
Table.

Work History

Trail list page allows you to view the operation history of the selected resource.

CategoryDetailed description
Work History ListResource Change History
  • Work details, work date and time, resource type, resource name, work result, and worker information can be checked
  • Provides detailed search function via the Detailed Search button
  • Click the relevant resource in the Work History List. The Work History Details popup window will open.
Table. Trail Work History Tab Detailed Information Items

Trail Resource Control

Depending on the state of the Trail, you can start or stop. To control the Trail’s resources, follow the steps below.

Trail Start

You can start a stopped Trail. Activity logs from the day you started the Trail will be saved again.

  1. All Services > Management > Logging&Audit Please click the menu. Navigate to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. Navigate to the Trail List page.
  3. On the Trail 목록 page, click the resource (Trail) to restart the stopped Trail. You will be taken to the Trail 상세 page.
  4. On the Trail Details page, click the Start button at the top to start the server. Check the status of the changed Trail in the Status Display field.
    • When the Trail start is completed, the status changes from Stopped to Active.
    • For detailed information about the Trail status, please refer to Check Trail detailed information.

Trail Stop

You can stop a Trail that is active. It stops recording activity history for the Trail, while preserving any previously saved activity history.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to Logging&Audit’s Service Home page.
  2. Click the Trail menu on the Service Home page. You will be taken to the Trail List page.
  3. Trail list page, click the resource (Trail) to stop operation. Navigate to the Trail detail page.
  4. On the Trail Details page, click the Stop button at the top to stop the server. In the Status Display section, check the status of the changed Trail.
    • When the trail stop is completed, the status changes from Active to Stopped.
    • For detailed information about the Trail status, please refer to Check Trail detailed information.

Trail Resource Management

If you need control and management functions for the created Trail resource, you can perform the tasks on the Trail Details page.

Edit target region

You can modify the target region of the Trail. To modify the target region of the Trail, follow the steps below.

  1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. Go to the Trail List page.
  3. Click the resource (Trail) to change the target region on the Trail list page. You will be taken to the Trail details page.
  4. Click the Edit button of Target Region on the Trail Detail page. It moves to the Target Region Edit popup.
  5. From the region list, select the region to change, and click the Confirm button. It moves to the Trail Details page.
  6. On the Trail Details page, check the changed target region.
Reference
Changes to event logs stored in Trail are applied from the time they are created or modified, and are saved in one-hour intervals.

Edit Target Resource Type

You can modify the target resource type of the Trail. To modify the target resource type of the Trail, follow the steps below.

  1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. It moves to the Trail List page.
  3. Trail list page, click the resource (Trail) whose target resource type you want to change. You will be taken to the Trail details page.
  4. Click the Edit button of Target Resource Type on the Trail Details page. It will navigate to the Target Resource Type Edit popup.
  5. Add or change the target resource type, select it, and verify that the selected resource type appears in the Selection Items at the bottom.
  6. If you have completed adding or changing the target resource type, click the Confirm button. You will be taken to the Trail Details page.
  7. Check the changed Target Resource Type on the Trail Details page.

Edit Target Users

You can modify the target users of Trail. To modify the target users of Trail, follow the steps below.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. Navigate to the Trail List page.
  3. On the Trail List page, click the resource (Trail) to change the target user. It moves to the Trail Details page.
  4. Click the edit button of the target user on the Trail details page. The target user edit popup opens.
  5. Add or change the target user, select it, and verify that the selected user appears in the Selection at the bottom.
  6. If you have completed adding or modifying the target user, click the Confirm button. You will be taken to the Trail Details page.
  7. Check the changed Target User on the Trail Details page.

Edit Save Format

You can modify the log file format stored in Trail’s bucket. To modify Trail’s storage format, follow the steps below.

  1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. Navigate to the Trail List page.
  3. Trail List page, click the resource (Trail) to change the log file storage format. You will be taken to the Trail Details page.
  4. Click the Edit button of Save format on the Trail Details page. The Save format Edit popup opens.
  5. Change the file format and click the Confirm button. Move to the Trail details page.
  6. Check the changed save format on the Trail Details page.

Trail Edit Description

Trail’s description can be edited. To edit the description of Trail, follow the steps below.

  1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. Go to the Trail List page.
  3. Click the resource (Trail) to modify the description on the Trail List page. It moves to the Trail Details page.
  4. Click the Edit button of Description on the Trail Details page. Edit Description popup opens.
  5. Complete editing the description and click the Confirm button. Navigate to the Trail Details page.
  6. Please check the changed Description on the Trail Details page.

Modify log file verification

You can modify whether Trail’s log file verification is used. To modify the usage of Trail’s log file verification, follow the steps below.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to Logging&Audit’s Service Home page.
  2. Click the Trail menu on the Service Home page. Navigate to the Trail List page.
  3. Click the resource (Trail) to change the log file validation usage on the Trail list page. You will be taken to the Trail details page.
  4. On the Trail Detail page, click the Log File Verification Edit button. It will move to the Log File Verification Edit popup.
  5. If you select Use, a Digest file is stored in the same bucket to verify changes and deletions of the Trail log file. Choose whether to use, and click the Confirm button. You will be taken to the Trail Details page.
  6. Please check the changed Log File Verification on the Trail Details page.

ServiceWatch Modify log collection

You can modify whether ServiceWatch log collection is used. To modify the ServiceWatch log collection usage for a Trail, follow these steps.

  1. All Services > Management > Logging&Audit Click the menu. Navigate to Logging&Audit’s Service Home page.
  2. Click the Trail menu on the Service Home page. It moves to the Trail List page.
  3. Click the resource (Trail) to change the ServiceWatch log collection usage on the Trail List page. You will be taken to the Trail Details page.
  4. Click the Edit button of ServiceWatch log collection on the Trail Detail page. You will be taken to the ServiceWatch log collection Edit popup.
  5. If you select Use, a ServiceWatch log group name that will receive the Trail logs is automatically generated and can be viewed. Also select the IAM role required for ServiceWatch log collection, and click the Confirm button. It navigates to the Trail details page.
    • ServiceWatch log collection IAM role requires the following settings.
      • Performer’s type is selected as Service, and Value is set to loggingaudit.samsungsdscloud.com.
      • Policy connects a policy set configured with the following permissions.
        • servicewatch:CreateBulkServiceLogEvents
        • servicewatch:CollectLogGroupLogStream
          Color mode
          {
          	"Statement": [
          		{
          			"Action": [
          				"servicewatch:CreateBulkServiceLogEvents",
          				"servicewatch:CollectLogGroupLogStream"
          			],
          			"Effect": "Allow",
          			"Resource": [
          				"*
          			],
          			"Sid": "VisualEditor0"
          		}
          	],
          	"Version": "2024-07-01"
          }
          {
          	"Statement": [
          		{
          			"Action": [
          				"servicewatch:CreateBulkServiceLogEvents",
          				"servicewatch:CollectLogGroupLogStream"
          			],
          			"Effect": "Allow",
          			"Resource": [
          				"*
          			],
          			"Sid": "VisualEditor0"
          		}
          	],
          	"Version": "2024-07-01"
          }
          Code block. IAM policy > Permissions
  6. Trail Details page where ServiceWatch log collection has changed. Please check.

Trail Delete

You can reduce operating costs by deleting unused Trails. However, deleting a Trail may cause the running service to stop immediately, so you should consider the impact of service interruption thoroughly before proceeding with the termination.

Caution
After deleting the trail, data cannot be recovered, so please be careful.

To delete the Trail, follow the steps below.

  1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
  2. Click the Trail menu on the Service Home page. You will be taken to the Trail list page.
  3. Click the resource (Trail) you want to delete on the Trail List page. You will be taken to the Trail Details page.
  4. Click the Delete Trail button on the Trail Details page.
  5. When deletion is complete, check if the resource has been deleted on the Trail list page.
Caution
If you delete Trail, activity history saving will stop. Proceed with the deletion after fully considering the impact that occurs during service interruption.

List of resource types by service

Service-specific resource type list. When Trail creation and Target Resource Type are modified, this is the list of selectable target resource types.

CategoryTarget Resource TypeScope
AI&MLOps Platformaiml-brightix:aimlops-platformRegion
API Gatewayapigateway:apiregion
Archive Storagearchivestorage:bucketRegion
Backupbackup:backupregion
Backupbackup:backup-agentregion
Bare Metal Serverbaremetal:baremetalRegion
Block Storage(BM)baremetal-blockstorage:volumeRegion
Block Storage(BM)baremetal-blockstorage:volume-groupRegion
CacheStorecachestore:cache-storeregion
Certificate Managercertificatemanager:certificateregion
Cloud Functionsscf:cloud-functionRegion
Cloud LAN-Campusclancampus:campus-networkRegion
Cloud LAN-Datacenterclandc:cloud-lan-networkregion
Cloud LAN-Datacenterclandc:interfaceregion
Cloud LAN-Datacenterclandc:vcableregion
Cloud LAN-Datacenterclandc:vdeviceregion
Cloud WANclanwan:attachmentRegion
Cloud WANclanwan:networkregion
Cloud WANclanwan:segmentregion
Cloud WANclanwan:segment-locationregion
Cloud WANclanwan:segment-sharingregion
CloudMLaiml-brightix:cloud-mlregion
Config Inspectionconfiginspection:config-inspectionRegion
Container Registryscr:container-registryRegion
Cost Savingsbillingplan:cost-savingsregion
Data Flowdataanalytics-brightix:data-flowregion
Data Flow Servicedataanalytics-brightix:data-flow-serviceRegion
Data Opsdataanalytics-brightix:data-opsregion
Data Ops Servicedataanalytics-brightix:data-ops-serviceRegion
DevOps Servicedevopsservice:devops-serviceRegion
Direct Connectdirect-connect:direct-connectRegion
EPAS(DBaaS)epas:epasregion
Edge Serveredgeserver:edge-serverregion
Event Streamseventstreams:event-streamsRegion
File Storagefilestorage:volumeRegion
Firewallfirewall:firewallregion
GPU Servergpuserver:imageRegion
GPU Servergpuserver:serverRegion
GSLBgslb:gslbregion
Global CDNcdn:cdnregion
Hosted Zonedns:hosted-zoneRegion
Identity Access Managementiam:access-keyregion
Identity Access Managementiam:groupregion
Identity Access Managementiam:policyregion
Identity Access Managementiam:roleregion
Identity Access Managementiam:userregion
Key Management Servicekms:kmsregion
Kubernetes Engineske:clusterregion
Kubernetes Engineske:nodepoolregion
LB Health Checkloadbalancer:lb-health-checkregion
LB Listenerloadbalancer:lb-listenerregion
LB Server Grouploadbalancer:lb-server-groupregion
Load Balancer Listener Oldloadbalancer-old:listenerRegion
Load Balancer Oldloadbalancer-old:loadbalancerRegion
Load Balancer Poolloadbalancer-old:poolregion
Load Balancerloadbalancer:loadbalancerregion
Logging&Auditloggingaudit:tralregion
MariaDB(DBaaS)mariadb:mariadbregion
Marketplacemarketplace:product-serviceregion
Microsoft SQL Server(DBaaS)sqlserver:sqlserverRegion
Multi-node GPU Clustermultinodegpucluster:gpu-nodeRegion
Multi-node GPU Clustermultinodegpucluster:cluster-fabricRegion
MySQL(DBaaS)mysql:mysqlregion
Network Loggingnetwork-logging:network-loggingRegion
Object Storageobjectstorage:bucketRegion
Organizationorganization:delegation-policyregion
Organizationorganization:invitationiregion
Organizationorganization:organizationregion
Organizationorganization:organization-accountregion
Organizationorganization:ouRegion
Organizationorganization:service-control-policyRegion
Planned Computebillingplan:planned-computeregion
PostgreSQL(DBaaS)postgresql:postgresqlregion
Private 5G Cloudprivate-fivegen-cloud:private-fivegen-cloudRegion
Private DNSdns:private-dnsRegion
Private NATvpc:private-natRegion
Public Domain Namedns:public-domain-nameRegion
Public IPvpc:publicipregion
Quick Querydataanalytics-brightix:quick-queryRegion
Repositoryscr:repositoryRegion
Search Enginesearchengine:search-engineRegion
Secret Vaultsecretvault:secretvaultregion
Security Groupsecurity-group:security-groupRegion
SingleIDsingleid:singleidRegion
Support Planbillingplan:support-planRegion
Trailloggingaudit:trailregion
Transit Gatewayvpc:trasit-gatewayRegion
VPCvpc:vpcregion
VPCvpc:internet-gatewayregion
VPCvpc:vpc-endpointregion
VPCvpc:vpc-peeringregion
VPCvpc:nat-gatewayregion
VPCvpc:portregion
VPCvpc:subnetregion
VPCvpc:private-natregion
VPCvpc:privatelink-endpointregion
VPCvpc:privatelink-serviceregion
VPCvpc:publicipregion
VPCvpc:transit-gatewayregion
VPNvpn:vpn-gatewayregion
VPNvpn:vpn-tunnelregion
Verticavertica:verticaregion
Virtual Servervirtualserver:serverRegion
Virtual Servervirtualserver:auto-scaling-groupRegion
Virtual Servervirtualserver:launch-configurationRegion
Virtual Servervirtualserver:imageregion
Virtual Servervirtualserver:keypairRegion
Virtual Servervirtualserver:server-groupRegion
Virtual Servervirtualserver:volumeregion
Table. List of resource types by service

6.3 - API Reference

API Reference

6.4 - CLI Reference

CLI Reference

6.5 - Release Note

Logging&Audit

2026.03.19
FEATURE Logging&Audit ServiceWatch Log Collection Integration
  • Logging&Audit ServiceWatch log collection integration
    • Set Trail logs to be sent to ServiceWatch’s log group, enabling monitoring through ServiceWatch and receiving alerts when specific activities occur.
2025.07.01
FEATURE Logging&Audit New release service addition linkage
  • Logging&Audit Newly released service additional integration
    • API Gateway, Archive Storage, Backup Agent, Cloud Functions, Cloud LAN-Datacenter, Cloud WAN, CloudML, Cost Savings, GSLB, Global CDN, IAM > role, Load Balancer > LB Health Check, Marketplace, Organization, Private DNS, Private NAT, Public Domain Name, Quick Query, Secret Vault, SingleID, Support Plan, Transit Gateway, VPC Peering, Vertica
  • When viewing activity logs, we added a period filter/time zone and a feature to compare activity logs.
2025.04.28
FEATURE Logging&Audit New Release Service Additional Integration
  • Logging&Audit New launch service additional integration
    • Data Flow, Data Ops
2025.02.27
FEATURE Logging&Audit New Release Service Additional Integration
  • Logging&Audit Newly launched service additional integration
    • AI&MLOps Platform, Multi-node GPU Cluster, VPN, Cloud LAN-Campus, KMS, Event Streams, Serch Engine, EPAS, Microsoft SQL Server
  • Samsung Cloud Platform Common Feature Change
    • Account, IAM and Service Home, tags, etc. have been reflected in common CX changes.
2024.10.01
NEW Logging&Audit Service Official Version Release
  • Logging&Audit service has been launched. It stores/searches all activity logs performed by customers (Console, API, CLI), and provides functions such as change tracking of cloud resources, troubleshooting, security checks, etc.
2024.07.02
NEW Beta version release
  • Logging&Audit service has been launched. It stores/searches all activity logs performed by customers (Console, API, CLI), and provides functions such as change tracking of cloud resources, troubleshooting, security checks, etc.

7 - Notification Manager

7.1 - Overview

Service Overview

Notification Manager is a management service that provides notifications to users based on the criteria set in the notification policy for each account when a notification occurs.

Provided Features

Notification Manager provides the following functions.

  • Notification Group Management: You can create and manage notification groups. You can add or remove users from the notification group.
  • Notification Policy Management: You can set a notification policy to receive specific notifications that occur within the account. When creating a notification policy, if you link a notification group, users within the notification group can receive notifications set in the notification policy.

Component

Notification Manager provides notification groups and notification policies.

Alert Group

You can create and manage notification groups, and add or remove users from notification groups. The main functions are as follows.

  • Create Alert Group: You can create an alert group and add users.
  • Alert Group > Add User: You can add users to the created alert group.
  • Please refer to How-to guides > Notification Group for how to create and use a notification group.

Notification Policy

You can create and manage notification policies, and pause or resume notification policies. The main features are as follows.

  • Notification Policy Creation: You can create a notification policy and link a notification group.
  • Stop using notification policy: You can stop using the notification policy that is currently in use.
  • Notification Policy Usage: You can reuse a notification policy that is currently paused.
  • Please refer to How-to guides > Notification Policy for how to create and use a notification policy.

Preceding Service

Notification Manager has no preceding services.

7.2 - How-to Guides

Users can create a notification group by entering essential information and selecting detailed options through the Samsung Cloud Platform Console.

Creating a Notification Group

You can create a notification group using the Samsung Cloud Platform Console.

  1. All Services > Management > Notification Manager menu, click. It will move to the Notification Group List page of Notification Manager.
  2. On the Notification Group List page, click the Create Notification Group button. It will move to the Create Notification Group page.
  3. On the Create Notification Group page, enter the necessary information for service creation and select detailed options.
    • In the Basic Information section, enter the necessary information.

      Category
      Required
      Description
      Notification Group NameRequiredNotification group name
      • Use Korean, English, numbers, and special characters (+=,.@-_) within 3-24 characters
      DescriptionOptionalEnter a description of the notification group
      • Maximum length is 1,000 characters
      Table. Notification Group Basic Information Items

    • In the Add User section, select the users to be added to the notification group.

      Category
      Required
      Description
      Add UserOptionalUsers added to the notification group
      • Search for the desired user and select them to add
      • Users in the notification group can be deleted using the Delete button
      • If the user to be added does not exist, create a user on the user creation page. Refer to IAM > Create User
      • Only users with login history (email, phone number registered users) can be added to the notification group
      Table. Notification Group User Addition Items

Note
For IAM users, if there is no login history after account creation, they cannot receive notifications. Therefore, such users cannot be added to the notification group.

Checking Notification Group Details

You can check and modify the overall list and detailed information of the notification group.

To check the detailed information of the notification group, follow these steps:

  1. All Services > Management > Notification Manager menu, click. It will move to the Notification Group List page of Notification Manager.
  2. On the Notification Group List page, click the notification group you want to check. It will move to the Notification Group Details page.
    • On the Notification Group Details page, you can view detailed information about the notification group and modify or delete it.
      CategoryDescription
      ServiceService category
      Resource TypeService name
      SRNUnique resource ID in Samsung Cloud Platform
      • In Notification Manager, it refers to the Notification Manager SRN
      Resource NameResource name
      • In Notification Manager service, it refers to the Notification Manager name
      Resource IDUnique resource ID in the service
      CreatorUser who created the service
      Creation TimeTime when the service was created
      ModifierUser who modified the service information
      Modification TimeTime when the service information was modified
      Notification Group NameNotification group name
      DescriptionDescription of the notification group
      UsersList of users added to the notification group
      Table. Notification Group Details Items

Adding Users to a Notification Group

You can add users to a notification group.

To add users to a notification group, follow these steps:

  1. All Services > Management > Notification Manager menu, click. It will move to the Notification Group List page of Notification Manager.
  2. On the Notification Group List page, click the Add button next to the users of the notification group you want to add. It will move to the Add User page.
  3. On the Add User page, select the users to be added to the notification group.
    • If the user to be added does not exist, create a user on the user creation page. Refer to IAM > Create User.
    • Only users with login history (email, phone number registered users) can be added to the notification group.
  4. After adding all users, click the Complete button. On the Notification Group List page, click the Expand button at the far right of the corresponding notification group to verify the added users.
Note
For IAM users, if there is no login history after account creation, they cannot receive notifications. Therefore, such users cannot be added to the notification group.

Modifying a Notification Group

You can modify the settings of a created notification group.

To modify a notification group, follow these steps:

  1. All Services > Management > Notification Manager menu, click. It will move to the Notification Group List page of Notification Manager.

  2. On the Notification Group List page, click the notification group you want to modify. It will move to the Notification Group Details page.

  3. On the Notification Group Details page, click the Modify button. It will move to the Modify Notification Group page.

  4. On the Modify Notification Group page, you can modify the notification group items.

    Category
    Required
    Description
    Notification Group NameRequiredNotification group name
    • Use Korean, English, numbers, and special characters (+=,.@-_) within 3-24 characters
    DescriptionOptionalEnter a description of the notification group
    • Maximum length is 1,000 characters
    UsersOptionalUsers added to the notification group
    • Search for the desired user and select them to add
    • Users in the notification group can be deleted using the Delete button
    • If the user to be added does not exist, create a user on the user creation page. Refer to IAM > Create User
    • Only users with login history (email, phone number registered users) can be added to the notification group
    Table. Notification Group Modification Items

  5. After modifying the notification group, click the Save button.

Note
For IAM users, if there is no login history after account creation, they cannot receive notifications. Therefore, such users cannot be added to the notification group.

Deleting a Notification Group

If you no longer need a created notification group, you can delete it. However, please note that deleted notification groups cannot be recovered.

To delete a notification group, follow these steps:

  1. All Services > Management > Notification Manager menu, click. It will move to the Notification Group List page of Notification Manager.
  2. On the Notification Group List page, click the notification group you want to delete. It will move to the Notification Group Details page.
  3. On the Notification Group Details page, click the Delete button. A confirmation popup will appear; click the Confirm button after reviewing the message.
  4. After deletion, verify that the notification group has been deleted on the Notification Group List page.

7.2.1 - Notification Policy

Users can create a notification policy by entering the required information and selecting detailed options through the Samsung Cloud Platform Console.

Creating a Notification Policy

You can create a notification policy in the Samsung Cloud Platform Console.

  1. Click the All Services > Management > Notification Manager menu. It moves to the Notification Group page of Notification Manager.
  2. Click the Notification Policy menu on the Notification Group page. It moves to the Notification Policy List page.
  3. Click the Create Notification Policy button on the Notification Policy List page. It moves to the Create Notification Policy page.
  4. Enter the necessary information for creating the service and select detailed options on the Create Notification Policy page.
    Classification
    Required
    Detailed Description
    UsageRequiredWhether to use the notification policy
    • ON: Use
    • OFF: Do not use
    Notification Policy NameRequiredNotification policy name
    • Enter within 30 characters
    DescriptionOptionalEnter a description of the notification policy
    • Enter within 1,000 characters
    Notification ItemRequiredSelect a notification item
    • Select a receivable notification item
    • To select or deselect a specific notification name among the selected notification items, click the Expand button at the far right and select or deselect the notification name
    • (Example) If you want to receive only notifications of Virtual Server creation failure, select Notification Item: Virtual Server > Notification Name: Virtual Server creation failure
    Notification Target GroupRequiredSelect a notification group to deliver the notification
    • If you select a notification group, the notification group name will be displayed at the top
    • Select or deselect the notification group name
    Table. Create Notification Policy Items
Note
If there is no notification group to connect, create a notification group and then connect it. Refer to Create a Notification Group.
  1. After setting the necessary information, click the Complete button.
    • After creation is complete, check the created notification policy on the Notification Policy List page.

Checking Notification Policy Details

You can check the entire list and detailed information of the notification policy and modify it.

To check the detailed information of the notification policy, follow these steps.

  1. Click the All Services > Management > Notification Manager menu. It moves to the Notification Group List page of Notification Manager.
  2. Click the Notification Policy menu on the Notification Group List page. It moves to the Notification Policy List page.
  3. Click the notification policy you want to check the details on the Notification Policy List page. It moves to the Notification Policy Details page.
    • The Notification Policy Details page displays status information and additional feature information.

      ClassificationDetailed Description
      Notification Policy StatusWhether to use the notification policy
      ModifyModify the notification policy
      DeleteDelete the notification policy
      Table. Notification Policy Status Information and Additional Features

    • The detailed items that can be checked on the Notification Policy Details page are as follows.

      ClassificationDetailed Description
      Notification Policy NameNotification policy name
      DescriptionDescription of the notification policy
      CreatorUser who created the notification policy
      Creation TimeTime when the notification policy was created
      ModifierUser who modified the notification policy
      Modification TimeTime when the notification policy was modified
      Notification ItemNotification items set in the notification policy
      Notification Target GroupNotification group connected to the notification policy
      Table. Notification Policy Details

Modifying a Notification Policy

You can modify the items set in the created notification policy.

To modify a notification policy, follow these steps.

  1. Click the All Services > Management > Notification Manager menu. It moves to the Notification Group List page of Notification Manager.
  2. Click the Notification Policy menu on the Notification Group List page. It moves to the Notification Policy List page.
  3. Click the Modify button on the Notification Policy List page. It moves to the Modify Notification Policy page.
  4. You can modify the notification policy items on the Modify Notification Policy page.
    Classification
    Required
    Detailed Description
    UsageRequiredWhether to use the notification policy
    • ON: Use
    • OFF: Do not use
    Notification Policy NameRequiredNotification policy name
    • Enter within 30 characters
    DescriptionOptionalEnter a description of the notification policy
    • Enter within 1,000 characters
    Notification ItemRequiredSelect a notification item
    • Select a receivable notification item
    • To select or deselect a specific notification name among the selected notification items, click the Expand button at the far right and select or deselect the notification name
    • (Example) If you want to receive only notifications of Virtual Server creation failure, select Notification Item: Virtual Server > Notification Name: Virtual Server creation failure
    Notification Target GroupRequiredSelect a notification group to deliver the notification
    • If you select a notification group, the notification group name will be displayed at the top
    • Select or deselect the notification group name
    Table. Modify Notification Policy Items
Note
If there is no notification group to connect, create a notification group and then connect it. Refer to Create a Notification Group.
  1. After modifying the notification policy, click the Save button.

Using a Notification Policy

You can reuse a notification policy that is currently stopped.

To set a notification policy to use, follow these steps.

  1. Click the All Services > Management > Notification Manager menu. It moves to the Notification Group List page of Notification Manager.
  2. Click the Notification Policy menu on the Notification Group List page. It moves to the Notification Policy List page.
  3. Click the More button at the far right of the notification policy you want to set to use on the Notification Policy List page, and then click the Use button. Click the Confirm button after checking the phrase in the Notification popup.
  4. Check the status of the notification policy on the Notification Policy List page.

Stopping a Notification Policy

You can change a notification policy that is currently in use to not in use.

To set a notification policy to not in use, follow these steps.

  1. Click the All Services > Management > Notification Manager menu. It moves to the Notification Group List page of Notification Manager.
  2. Click the Notification Policy menu on the Notification Group List page. It moves to the Notification Policy List page.
  3. Click the More button at the far right of the notification policy you want to set to not in use on the Notification Policy List page, and then click the Do not use button. Click the Confirm button after checking the phrase in the Notification popup.
  4. Check the status of the notification policy on the Notification Policy List page.

7.3 - Release Note

Notification Manager

2024.10.01
NEW Notification Manager Release
  • The Notification Manager service has been released. It provides a feature to manage notifications provided to users when notifications occur.
  • You can create and manage notification policies and notification groups to receive notifications, and add users.

8 - Organization

8.1 - Overview

Service Overview

Organization is a service that organizes accounts by organizational unit and hierarchically manages and controls resource access rights. The user can manage the resource usage of accounts belonging to the organization to optimize costs.

Features

  • Hierarchical Project Management: It is possible to manage hierarchically by inviting accounts created within the organization to the Organization and organizing them by organizational unit.
  • Organizational Unit Governance: Policies can be controlled by organizational unit, allowing you to apply policies in bulk to all organizational units and accounts under it.
  • Efficient resource management and cost optimization: You can monitor the resource usage of all accounts within the organization to optimize costs.

Composition

Organization Chart
Figure. Organization Chart

Provided Features

Organization provides the following functions.

  • Account Management: You can create a new account within the organization or invite an existing account to manage it.
  • Organization Unit Management: You can manage by composing an organization unit and composing an organization unit or Account under it.
  • Compliance Policy Management: Manage compliance-related settings as integrated policies and apply them by organization unit and account to prevent or detect compliance violations in advance.

Preceding Service

Organization has no preceding service.

8.2 - How-to guides

The user can enter the essential information of the Organization through the Samsung Cloud Platform Console and create a service by selecting detailed options.

Organization creation

You can create and use an Organization in the Samsung Cloud Platform Console.

To create an Organization, follow the following procedure.

  1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
  2. Service Home page, click the Organization creation button. The organization creation popup window opens.
  3. Organization Creation popup window, enter the Organization Name, then click the Confirm button.
  • Use Hangul, English, numbers, spaces, and special characters (+=,.@-_) to write within 20 characters
  1. Organization When the popup window notifying the creation is opened, click the Confirm button.
  2. Service Home page, check the dashboard of the Organization.
ClassificationDetailed Description
Organization InformationManagement Account information is displayed
  • Organization Information item is clicked to move to the Settings page and organization detailed information can be checked
Organization UnitThe number of organization units that make up the organization
  • Clicking on the number moves to the Organization Composition page
AccountThe number of Accounts that make up the organization
  • Clicking on the count will move to the Organization Configuration page
  • Clicking on the Add item will move to the Add Account page
Control PolicyThe number of control policies that make up the organization
  • Clicking on the count will move to the Control Policy page
  • Clicking on the Add item will move to the Add Control Policy page
Table. Organization Service Home dashboard items

Organization detailed information check

Organization’s detailed information can be checked and permissions can be managed.

To check the detailed information of the Organization and manage permissions, follow the following procedure.

  1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
  2. Service Home page, click the Organization Settings menu. It moves to the Organization Settings page.
ClassificationDetailed Description
Organization DeleteButton to delete the organization
Organization NameOrganization Name
  • Edit button can be changed by clicking
  • Organization name distinguishes between uppercase and lowercase letters in English
Organization IDOrganization ID
CreatorName of the user who initially created the organization
Creation TimeOrganization Creation Time
EditorThe user name of the last user to modify the organization information
Modified TimeThe last modified time of organization information
Management Account NameManagement Account Name
Management Account IDManagement Account ID
Management Account emailManagement Account email
Control PolicyWhether to use control policy
  • Edit button can be clicked to change usage
Delegation of AuthorityOrganization Management Authority Delegation Information
  • Delegation of Authority: Authority delegation possible to Account within the organization
    • Displayed when there is no delegation of authority information
    • Button click allows delegation settings by Action unit using JSON Editor on the Delegation of Authority page
  • Authority Modification: Modify authority information
    • Only Management Account can be set
    • Button click allows delegation settings by Action unit using JSON Editor on the Delegation of Authority page
  • Delegation Cancellation: Delete authority delegation information
Table. Organization setting items
Notice
  • Control Policy is disabled, the link of the associated control policy is released, and authorized users cannot view the control policy.
  • Delegation of authority information can only be managed in the Management Account.

Organization to invite Account

You can manage the list of accounts invited to the Organization.

Notice
Management Account is the only one that can invite other accounts.

To manage the list of accounts invited by Organization, follow these procedures.

  1. All services > Management > Organization menu should be clicked. It moves to the Service Home page of Organization.
  2. Service Home page, click the invitation history menu. It moves to the invitation history list page.
  3. Invitation History List page, click the Account Invitation button. It moves to the Add Account page.
ClassificationDetailed Description
EmailAccount Email
Account nameAccount title
Account IDAccount’s ID
Request TimeAccount Invitation Time
Completion TimeInvitation cancellation, rejection, , expiration, completion time
Invitation StatusInvitation Progress Status
Cancel InvitationCancel the invitation of the selected account
  • Activated when an account is selected from the invitation list
  • Multiple Accounts can be canceled at the same time
Account InvitationInvite a new Account to the organization
  • Account Invitation button click, move to the Account Add page
Table. Organization Invitation List Items
  1. Account addition page where you create and register a new Account or add an existing Account.

Joining other Organizations

If invited from another Organization, you can check and approve the invitation information.

Notice
Received invitation history can be checked in the Member Account.

To manage the list of accounts invited to the Organization, follow these procedures.

  1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
  2. Service Home page, click the Received Invitation menu. It moves to the Received Invitation page.
ClassificationDetailed Description
Invited EmailEmail information invited to the organization
Organization NameOrganization Name
Organization IDOrganization ID
Management Account nameManagement Account name
Management Account IDManagement Account ID
Management Account emailManagement Account email
Expiration time of invitationExpiration time of invitation
  • Activated when selecting an account from the invitation list
  • Multiple Account cancellations are possible at the same time
Decline InvitationDecline the invitation
    Accept InvitationAccept the invitation and join the corresponding Organization
      Table. Organization Received Invitation Items
      Reference

      In the following cases, even if the invitation is approved, you cannot join.

      • In case the number of Accounts within the organization exceeds the limit
      • If the approval time is the cost settlement day (1st of every month, Asia/Seoul GMT +09:00)
      • If there is an unpaid record in the corresponding Account

      Organization delete

      Guidance
      After excluding all Accounts belonging to the Organization, you can delete the Organization.

      To delete an Organization, follow the following procedure.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Settings menu. It moves to the Organization Settings page.
      3. Organization Settings page, click the Delete Organization button. Delete Organization popup window opens.
      4. Organization deletion popup window, click the Confirm button.

      8.2.1 - Organization composition information

      Organization’s hierarchical structure can be checked and configured with the organizational units that make up the organization and the Account can be checked and managed.

      Organization configuration information check

      Organization’s composition information can be confirmed.

      To check the organization’s composition information, follow the following procedure.

      1. All services > Management > Organization menu should be clicked. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization unit and Account management area view method selection.
      ClassificationDetailed Description
      View HierarchyDisplay organizational units in a hierarchical structure
      Account list viewDisplay the Account list within the organization
      Account additionA new account is invited to the organization
      • Account invitation button click, move to Account addition page
      Table. Organization Organizational Structure Items

      View Hierarchy Structure

      Organization Structure page, by clicking the Hierarchy View button, you can check and manage the organizational units that make up the Organization and the Account in a hierarchical structure.

      ClassificationDetailed Description
      Create organization unit belowAdd a new organization unit below the selected organization unit
      • Only activated when 1 organization unit is selected in the hierarchical structure
      See more > Delete organization unitDelete the selected organization unit
      • Only activated when one or more organization units are selected in the hierarchy structure
      See more > Account MoveSelect the organizational unit to be deleted
      • Activated only when Account is selected in the hierarchy structure
      More > Exclude AccountSelected Account will be excluded from the organization
      • only activated when Account is selected in the hierarchy structure
      • Management Account cannot be excluded
      • for more information, refer to [Excluding Account](#account-제외하기)
      | |See more > Delete Account|Deletes the selected Account
      • Only activated when one Account is selected in the hierarchical structure
      • Management Account and Account joined through invitation cannot be deleted
      • For more information, see [Delete Account](#delete-account)
      | |Organization Unit/Account Name|Displays the name of the organization unit and Account in a measurement structure format
      • **+**, **-** buttons can be clicked to expand or collapse the hierarchy structure
      | |ID/Email|The organization unit is ID, Account displays ID and Email| |Creation/Joining Time|Organization unit displays creation time, Account displays creation or joining time|
      Table. Organization Hierarchy View Items

      Account list view

      Organization Structure page, by clicking the Account List View button, you can check and manage the list of accounts that make up the Organization.

      ClassificationDetailed Description
      Account MovementMove Account to another organization
      • Activated when selecting an Account from the Account list
      See more > Exclude from organizationAccount to be excluded from the organization
      • The account is activated when selected from the account list
      Account nameAccount Name
      Account IDAccount’s ID
      EmailAccount’s user email
      Additional TimeAccount creation, additional time
      Additional typeAccount addition method
      • Creation: Add a new account created on the Account addition page
      • Join: Add an existing created Account
      Table. View Organization Account list items

      Account management

      Organization을 -> You can check and manage the list of Accounts that make up the Organization: Organization을 구성하고 있는 Account 목록을 확인하고 관리할 수 있습니다. -> You can check and manage the list of Accounts that make up the Organization, becomes: You can check and manage the list of Accounts that make up the Organization. Corrected translation: You can check and manage the list of accounts that make up the organization. So the final translation is: You can check and manage the list of accounts that make up the organization.

      Account addition

      You can create a new Account or add an existing Account to the Organization.

      To add an account to the Organization, follow the next procedure.

      1. All services > Management > Organization menu is clicked. It moves to the Service Home page of Organization.

      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.

      3. Organization Structure page, click the Add Account button. It moves to the Add Account page.

      4. Account addition page where you enter the account information to be added, and click the Complete button.

        Classification
        Mandatory
        Detailed Description
        Additional methodRequiredSelect the method to add an account
        • Create a new account: Add by creating a new account
        • Invite an existing account: Add by entering the root user email of an existing account
        Account nameRequiredName of the account to be created
        • Enter within 3-30 characters using Korean, English, numbers, spaces, and special characters(+=-_@[](),.)
        EmailRequiredEmail to be set as the root user of the new Account
        • Account Invitation button clicked, move to Account Add page
        Email VerificationRequiredRe-verify email information
        • Organization Information button clicks will move to the Settings page and you can check the organization details
        IAM Role NameRequiredDisplay organizational units in a hierarchical structure
        • Enter within 64 characters using English, numbers, special characters (+=-_@,.)
        Root user emailRequiredRoot user email of the Account
        • If you select an existing Account invitation, enter only the Root user email
        • You can add up to 10 at the same time by clicking the Add button
        Table. Adding an Organization Account

      5. When the account creation and invitation notification popup window opens, click the Confirm button.

        Reference
        • Account can be added up to a maximum of 200.
        • The newly created Account can log in directly via email or access through an automatically generated role.
        • If you log in directly with your email, you must use the password finder to reset your password.

      Account detailed information check

      You can check and modify the detailed information of the Account.

      To check the detailed information of the Account, follow the next procedure.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the View Account List button.
      4. In the Account list, click the Account name to confirm detailed information. It moves to the Account details page.
      • Account Details page consists of Basic Information tab, Control Policy tab.
        ClassificationDetailed Description
        Excluded from the organizationAccount excluded from the organization
        • When you click the button, a popup window opens to notify you of the account exclusion
        Account MovementMove Account to a different organizational unit
        • Clicking the button moves to the Account Movement page
        Basic Information TabDisplays basic information about the Account
        Control PolicyDisplay the control policy linked to the Account
        Table. Account detailed page items

      Detailed Information

      You can check the detailed information of the organizational unit and modify the information if necessary.

      ClassificationDetailed Description
      Account nameAccount full name
      Account IDAccount’s ID
      CreatorThe user who created the Account
      Creation TimeTime when the Account was created
      EditorUser who modified the Account
      Revision TimeTime when the Account was revised
      EmailAccount’s user email
      Additional typeAccount addition method
      • Creation: Add a new account created on the Account addition page
      • Join: Add an existing created Account
      Higher organization unitDisplays the higher level of the current organization unit in a hierarchical structure
      • Clicking on the higher organization unit will move to the Organization Unit Details page of the corresponding organization unit
      Table. Account detailed information tab items

      Control Policy

      You can check the control policy connected to the Account and change the connection status.

      ClassificationDetailed Description
      Direct DisconnectionDisconnects the connection of the selected control policy
      • Only activated when one or more control policies are selected from the list
      • At least one control policy connection is required for the organization unit
      Control Policy ConnectionConnect a new control policy
      Control Policy NameControl Policy Title
      TypeControl Policy Type
      Connection methodConnection method of control policy
      • Direct: Policies directly connected to the organization unit
      • Inherited: Policies connected to the organization unit by inheritance
      Revision TimeLast Revision Time of Control Policy
      Table. Account's Control Policy Tab Items

      Account Move

      Organization 내 조직 단위 간 Account를 이동할 수 있습니다 -> Organization within the organization unit can move the account. However, the correct translation would be: Organization within the organization unit can move the account -> You can move accounts between organizational units within an organization. So the correct translation is: You can move accounts between organizational units within an organization.

      To move the Account, follow the next procedure.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.

      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.

      3. Organization Structure page, click the View Account List button.

      4. Select the Account to move the organization unit, then click the Account Move button. It moves to the Account Move page.

      5. Account Move page where you select the organizational unit to move the account, and then click the Complete button.

        ClassificationDetailed Description
        Select AccountEnter the name of the organization unit
        • Organization names distinguish between uppercase and lowercase letters
        Moving organizational unitSelect the organizational unit to move the Account
        Organization Unit NameName of the organization unit
        Organization Unit IDID of the organization unit
        Organization Creation TimeThe time when the organization unit was created
        Table. Creating an Organization Unit

      6. When the popup window notifying account transfer opens, check the transfer information and click the Confirm button.

        Reference
        • The newly created Account can log in directly via email or access through an automatically generated role.
        • If you log in directly by email, you must use the password finder to reset your password.

      Account Exclusion

      You can exclude an Account from the Organization. However, following the exact format and translation rules, the correct translation should be: However, the most accurate translation following the format is: You can exclude Account from Organization -> You can exclude Account from Organization, so the final translation is: You can exclude Account from Organization -> Organization where you can exclude Account. But to keep the format and meaning, it should be: Organization can exclude Account. So the correct translation is: Organization can exclude Account. To exclude an account from the Organization, follow these procedures: Thus the translated line is: Organization can exclude Account.

      Select the Account to be excluded from the Organization, then click the More > Exclude Account button. So the correct translation is: To exclude an account from the Organization, follow these procedures:

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the View Account List button.
      4. If you delete the Account, an Account deletion notification email will be sent to the following user.
      5. Account exclusion notification When the notification popup window opens, click the Confirm button.
        Notice

        In the following cases, the Account cannot be excluded.

        • Account that has not registered a payment method
        • If there is a credit assigned to the account
        • Excluding the time when the settlement date (1st of every month, Asia/Seoul GMT +09:00)

      Account deletion

      You can delete the Account.

      To delete an Account, follow the following procedure.

      1. All services > Management > Organization menu should be clicked. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the View Account List button.
      4. Select the Account to be deleted from the Account list, then click the More > Delete Account button. The Delete Account popup window will open.
      • You can also delete by clicking the Account name of the Account to be deleted, and then clicking the Account Delete button on the Account Details page.
      1. Enter the Account name to be deleted, then click the Confirm button.
      Reference

      Administrator who created the Organization -> * Administrator who created the Organization

      • You can configure and manage the organizational units that make up the Organization and the Account in a hierarchical structure.
      • Created Account’s Root user
      • User with delegation for the generated Account
      Notice
      • When deleting from the Account list, you must select only one Account to be deleted.
      • Before deletion, all resources in the Account must be deleted.
      • Management Account and accounts joined through invitation cannot be deleted.

      Managing Organization Units

      To delete an organizational unit in Organization, follow these procedures:

      Creating an organizational unit

      You can create a new organizational unit.

      To create and add an organizational unit to the Organization, follow these procedures.

      1. all services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the Hierarchical Structure View button.
      4. Select the location to add an organizational unit in the hierarchical structure list, then click the Create organizational unit below button. It moves to the Create organizational unit page.
      • Root or you can only select one existing organization unit.
      • Root is the basis for creating organizational units within 5 levels below.
      1. Organization Unit Creation page, enter the organization unit information to be added, and then click the Complete button.

        Classification
        Necessity
        Detailed Description
        Organization Unit NameRequiredEnter the name of the organization unit
        • Organization names distinguish between uppercase and lowercase letters
        DescriptionSelectEnter a description of the organizational unit within 1,000 characters
        Control Policy ConnectionRequiredSelect a control policy to connect to the organizational unit
        Table. Creating an Organization Unit

      2. When the popup window for creating an organizational unit opens, click the Confirm button.

        Reference
        • Account can be added up to a maximum of 200.
        • The newly created Account can be accessed directly by email login or through the automatically generated role.
        • If you log in directly with your email, you must use the password finder to reset your password.

      Check detailed information of organizational units

      You can check and modify detailed information of the organization unit.

      To check the detailed information of the organization unit, follow the following procedure.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the Hierarchy View button.
      4. Click the Root/Account name of the organizational unit to check detailed information in the hierarchical structure list. It moves to the Organizational Unit Details page.
      • Organization Unit Details page consists of Basic Information tab, Sub Items tab, Control Policies tab.
        ClassificationDetailed Description
        Delete Organization UnitA button to delete the organization unit
        • When you click the button, a popup window opens to notify the organization deletion
        Basic Info TabDisplays basic information about the organizational unit
        Sub-itemIndicates a lower element of the organizational unit
        Control PolicyDisplays the control policy attached to the organizational unit
        Table. Organization organizational unit detailed page items

      Detailed Information

      You can check the detailed information of the organization unit and modify the information if necessary.

      ClassificationDetailed Description
      ServiceService Name
      Resource TypeService Type
      SRNUnique resource ID in Samsung Cloud Platform
      Resource NameResource Title
      Resource IDUnique resource ID in the service
      CreatorThe user who created the service
      Creation TimeThe time when the service was created
      EditorUser who modified the service information
      Revision TimeTime when service information was revised
      Organization Unit NameThe name of the organization unit
      • Edit button to change the name by clicking
      DescriptionDescription of the organizational unit
      • Edit button to change description possible
      Higher organizational unitDisplays the higher level of the current organizational unit in a hierarchical structure
      • When you click on a higher organizational unit, it moves to the Organizational Unit Details page of the corresponding organizational unit
      Table. Organizational unit detailed information tab items

      Reference
      Root Details information page does not display Organization Unit Name, Description, Upper Organization Unit information.

      Sub-items

      You can check and manage the organizational unit under the current organizational unit and Account.

      ClassificationDetailed Description
      Create organization unit belowAdd a new organization unit below the selected organization unit
      • Only activated when one or more organization units are selected in the hierarchical structure
      See more > Delete organization unitDelete the selected organization unit
      • Only activated when one or more organization units are selected in the hierarchy structure
      • Multiple organization units can be selected
      Organization Unit/Account NameDisplays the name of the organization unit and account in a measurement structure format
      • +, - buttons can be clicked to expand or collapse the hierarchy structure
      ID/EmailThe organization unit shows ID, Account shows ID and Email
      Creation/Joining TimeThe organizational unit displays the creation time, and the Account displays the creation or joining time
      Table. Organization unit detailed page's sub-item tab item

      Control Policy

      You can check the control policies connected to the organizational unit and change the connection status.

      ClassificationDetailed Description
      Direct DisconnectionDisconnects the connection of the selected control policy
      • Only activated when one or more control policies are selected from the list
      • At least one control policy connection is required for the organization unit
      Control Policy ConnectionConnect a new control policy
      Control Policy NameControl Policy Title
      TypeControl Policy Type
      Connection methodConnection method of control policy
      • Direct: Policies directly connected to the organization unit
      • Inherited: Policies connected to the organization unit by inheritance
      Last Modified TimeLast modified time of control policy
      Fig. Organization unit detailed page control policy tab item

      Deleting an organizational unit

      Organization에서 you can delete organizational units.

      Notice
      To delete an organizational unit, the organizational unit must not have any subordinate elements.

      You can attach control policies to an organizational unit or Account of the Organization.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the View Hierarchy button.
      4. Select the organizational unit to be deleted from the hierarchical structure list, then click the More > Delete Organizational Unit button.
      5. When the popup window notifying the deletion of an organizational unit opens, click the Confirm button.

      Control policy linking

      You can attach control policies to an organizational unit or Account of the Organization.

      To link a control policy, follow the next procedure.

      1. All services > Management > Organization menu, click. It moves to the Service Home page of Organization.
      2. Service Home page, click the Organization Configuration menu. It moves to the Organization Configuration page.
      3. Organization Structure page, click the View Hierarchy button.
      4. In the hierarchical structure list, click on the organizational unit or Account to which you want to add a control policy, and it will move to the detailed page of the element.
      • Root or you can only select one existing organizational unit.
      • Root is the basis for creating organizational units within 5 levels below.
      1. Click the Control Policy tab on the detail page. It moves to the Control Policy Link page.

      2. After selecting the control policy to connect, click the Complete button.

        ClassificationDetailed Description
        Connected Control PolicyEnter the name of the organization unit or account currently connected to the control policy organization unit, the name of the organization unit is case-sensitive and distinguishes between uppercase and lowercase English letters
        • Organization name is case-sensitive and distinguishes between uppercase and lowercase English letters
        | |Control Policy Name|Control Policy Title| |Type|Control Policy Type| |Revision Time|Revision Time of Control Policy| |Control Policy Linking|Required|Select control policies to be linked to the organizational unit|
        Table. Controlled Policy Link Items

      3. When the popup window notifying the control policy connection opens, click the Confirm button.

        Reference
        To create a new control policy, please refer to Create a Control Policy.

      8.2.2 - Organization Control Policy

      You can check and manage the control policies of Organization.

      Organization Create control policy

      Organization’s control policies can be created.

      To create a control policy, follow the steps below.

      1. All Services > Management > Organization Please click the menu. Navigate to Organization’s Service Home page.

      2. Click the Control Policy menu on the Service Home page. Navigate to the Control Policy List page.

      3. Click the Create Control Policy button on the Control Policy List page. It navigates to the Create Control Policy page.

      4. After entering items in the Basic Information area, click the Next button.

        Category
        Required
        Detailed description
        Control Policy NameRequiredEnter the name of the control policy
        • Enter using English letters, numbers, and special characters (+=-_@,.) within 3~128 characters
        DescriptionSelectEnter a description of the organizational unit within 1,000 characters
        Table. Organization Control Policy Creation - Basic Information Settings

      5. After selecting the control policy setting method and the service to apply in the Control Requirements Setting area, click the Next button.

        Category
        Required
        Detailed description
        Load Control PolicySelectEnter the name of the control policy
        • When loading a policy, all previously entered content will be deleted
        • For more details, refer to Load Policy
        Basic Mode/JSON ModeRequiredSelect policy setting method
        • Basic Mode: Set using the mode provided by the Console
        • JSON Mode: Set directly using the JSON Editor
        ServiceRequiredSelect the service to set the control policy
        • Add Service: Add a service to set the control policy
        Table. Organization Control Policy Creation - Service Settings

      Caution

      In the control policy settings, Basic Mode and JSON Mode are provided.

      • After writing in Basic Mode, when entering JSON Mode or moving screens, services with duplicate control requirements are merged into one, and services that have not completed configuration are deleted.
      • JSON mode If the content written in JSON mode does not conform to JSON format, it cannot be switched to basic mode.
      1. After setting the permissions, click the Next button.

        Category
        Required
        Detailed description
        Control TypeRequiredSelect control policy type
        • Allow Policy: Control policy that allows defined permissions
        • Deny Policy: Control policy that denies defined permissions
        For the same target, the deny policy takes precedence
        ActionRequiredSelect actions provided per service
        • Actions that can select individual resources are displayed in purple
        • Actions that target all resources are displayed in black
        • Add action directly: Using the wildcard *, multiple actions can be specified at once
        Applied ResourceRequiredResources to which the action applies
        • All Resources: Apply to all resources for the selected action
        • Individual Resources: Apply only to specified resources for the selected action
          • Individual resources are only possible when selecting the purple action that allows individual resource selection
          • Click the Add Resource button to specify target resources by resource type
        • For details on Add Resource, refer to Register Individual Resources as Applied Resources
        Authentication TypeRequiredAuthentication method of the user target to which the control policy will be applied
        • All authentication: Apply regardless of authentication method
        • Authentication key authentication: Apply to authentication key authentication users
        • Temporary key authentication, Console login: Apply to temporary key authentication or Console login users
        Applied IPRequiredIP that allows control policy application
        • Custom IP: User directly registers and manages IP
          • Applied IP: IP that the user directly registers for control policy application, can be registered as IP address or range format
          • Excluded IP: IP to be excluded from Applied IP, can be registered as IP address or range format
        • All IP: No IP access restriction
          • Access is allowed for all IPs, but if an exception is needed, register Excluded IP to restrict access for the registered IPs
        Additional ConditionSelectAdd condition for Attribute-Based Access Control (ABAC)
        • Condition Key: Select from Global Condition Keys and Service Condition Keys list
        • Qualifier: Default value, arbitrary value in request, all values in request
        • Operator: Bool, Null
        • Value: True, False
        Table. Organization Control Policy Creation - Permission Settings

      2. Check Input Information After confirming the information entered on the page, click the Complete button.

      3. When the popup notifying the creation of a control policy opens, click the Confirm button. It navigates to the Integrated Policy List page.

      Load Control Policy

      When creating a control policy, you can modify the policy requirements of an existing policy to create it.

      Note
      Load Policy when executed, all previously entered content will be deleted and replaced with the selected policy’s setting values.

      To load an existing policy and create a comprehensive policy, follow the steps below.

      1. All Services > Management > Organization Click the menu. Navigate to Organization’s Service Home page.

      2. Click the Control Policy menu on the Service Home page. Navigate to the Control Policy List page.

      3. Control Policy List page, click the Create Control Policy button. Navigate to the Create Control Policy page.

      4. After entering items in the Basic Information area, click the Next button.

        Category
        Required
        Detailed description
        Control Policy NameRequiredEnter the name of the control policy
        • Enter using English letters, numbers, and special characters(+=-_@,.) within 3 to 128 characters
        DescriptionSelectEnter a description of the organizational unit within 1,000 characters
        Table. Organization Control Policy Creation - Basic Information Settings

      5. Control Requirement Setting area, click the Load Control Policy button. The Load Control Policy popup window opens.

      6. Click the Load Policy button. The Load Control Policy popup opens.

      7. After selecting the control policy to load from the control policy list, click the Confirm button. The settings of the loaded policy will be entered automatically.

      8. After editing the information that needs to be changed, click the Next button.

      9. After confirming the information entered on the Input Information Confirmation page, click the Complete button. You will be taken to the Integrated Policy List page.

      Register individual resources as applied resources

      Permission setting during which you can register individual resources as applied resources.

      To register an individual resource as an applied resource, follow the steps below.

      1. All Services > Management > Organization Click the menu. Go to Organization’s Service Home page.

      2. Service Home page, click the Control Policy menu. Navigate to the Control Policy List page.

      3. Click the Create Control Policy button on the Control Policy List page. It navigates to the Create Control Policy page.

      4. After entering items in the Basic Information area, click the Next button.

        Category
        Required
        Detailed description
        Control Policy NameRequiredEnter the name of the control policy
        • Use English letters, numbers, special characters(+=-_@,.) within 3~128 characters
        DescriptionSelectEnter a description of the organizational unit within 1,000 characters
        Table. Organization Control Policy Creation - Basic Information Settings

      5. Control Requirement Setting In the area, after selecting the service to which the control policy will be applied, click the Next button.

      6. Load Policy Click the button. Load Control Policy The popup window opens.

      7. After selecting the control policy to load from the control policy list, click the Confirm button. The settings of the loaded policy will be entered automatically.

      8. After editing the information that needs to be changed, click the Next button.

      9. After verifying the entered information on the Check Input Information page, click the Complete button. You will be redirected to the Integrated Policy List page.

      10. In the Action selection, select the Action that can select individual resources.

        • Actions that allow individual resource selection are displayed in purple.
      11. Click Individual Resource in Applied Resources.

      12. Add Resource Click the button. Add Resource The popup window opens.

        Category
        Required
        Detailed description
        Jawin typeRequiredSelect the type of resource to add
        SRN-Unique resource ID in Samsung Cloud Platform
        • Automatically updated according to the input items below
        AccountRequiredSet Account ID
        • Current Account: Current Account ID is auto-filled and cannot be edited
        • All Accounts: Add to all Accounts (not recommended)
        • Manual Input: Manually enter the Account ID using lowercase English letters and numbers, up to 100 characters (wildcard input not allowed)
        RegionSelectDirectly input the resource’s region information within 100 characters
        • Select All when checked, add resources of all regions
        Resource IDRequiredEnter the resource ID to add directly within 100 characters
        • Select All when checked, adds all resources of the corresponding resource type
        Table. Organization Control Policy Creation - Basic Information Settings

      13. When the setup is complete, click the Next button. It will navigate to the Check Input Information page.

      14. After verifying the entered information, click the Complete button. You will be redirected to the Integrated Policy List page.

      Check detailed control policy information

      Control Policy Details page allows you to view and edit detailed information of the control policy.

      To view detailed information of the control record, follow the steps below.

      1. All Services > Management > Organization Click the menu. Go to Organization’s Service Home page.
      2. Click the Control Policy menu on the Service Home page. Navigate to the Control Policy List page.
      3. Click the control policy to view detailed information on the Control Policy List page. You will be taken to the Control Policy Details page.
        • Policy Details page displays basic information, and consists of Basic Information tab, Control Requirements tab, Connected Targets tab.

      Basic Information

      Check the basic information of the control policy, and if necessary, you can edit the policy name and description.

      CategoryDetailed description
      serviceservice name
      Resource TypeResource Type
      SRNUnique resource ID in Samsung Cloud Platform
      Resource NameResource Name
      • In control policies, it means the policy name
      Resource IDUnique Resource ID
      CreatorUser who created the service
      Creation timeService creation time
      EditorUser who edited the service information
      Modification DateDate Service Information Modified
      Control Policy NameControl Policy’s Name
      • Click the Edit button to change the name
      TypeControl Policy Type
      • Basic: Basic control policy provided by Samsung Cloud Platform
      • Custom: Control policy directly created by the user
      DescriptionExplanation of control policy
      • Click the Edit button to change the description
      Table. Control Policy Basic Information Tab Items

      Control Requirements

      You can view services with permissions set in the current control policy.

      • Basic mode and JSON mode can be checked.
      • Clicking the arrow to the right of the service name will display the control requirements set for that service.
      Note
      Click the Edit button to modify the control requirements. For details on the edit items, see Create Control Policy.
      CategoryDetailed description
      Control TypeControl Policy Control Type
      • Allow Policy: Control policy that allows the defined permissions
      • Deny Policy: Control policy that denies the defined permissions
      ActionProvided functions of each service that are subject to the control policy
      Applicable ResourcesResources to which the action is applied
      • All Resources: Applied to all resources for the selected action
      • Individual Resources: Applied only to specified resources for the selected action
      Authentication TypeAuthentication method of the user target to which the control policy will be applied
      • All authentication: Apply regardless of authentication method
      • Authentication key authentication: Apply to authentication key authentication users
      • Temporary key authentication, Console login: Apply to temporary key authentication or Console login users
      Applicable IPIP that permits the application of control policies
      • Custom IP: User registers and manages IP directly
        • Applied IP: User can directly register IP address or range format as an IP to which the control policy is applied
        • Excluded IP: Can be registered as an IP address or range to be excluded from Applied IP
      • All IPs: No IP access restriction
        • Access is allowed for all IPs, but if exceptions are needed, register Excluded IP to restrict access for those IPs
      Table. Control Policy's Control Requirements Tab Items

      Connection Target

      You can view the organizational units and accounts directly linked to the control policy.

      Reference
      Policies linked to Root and organizational units are inherited by child items.
      CategoryDetailed description
      RootRoot connection status and the number of control policies connected to Root are displayed
      • Connect or Disconnect button can be clicked to connect or disconnect from Root
      Organization UnitCurrent control policy linked organization unit and total number of control policies linked to that organization unit
      • Disconnect: Disconnect the selected organization unit in the organization unit list
      • Connect Organization Unit: Go to the Connect Organization Unit page
      AccountNumber of total control policies linked to the Account currently connected and the total number of control policies linked to that Account
      • Disconnect: Disconnect the selected Account from the Account list
      • Account Connect: Go to the Account Connect page
      Table. Policy's linked target tab items

      Connect organization unit

      You can link organizational units to the control policy.

      To connect the organizational unit, follow the steps below.

      1. All Services > Management > Organization Click the menu. Navigate to Organization’s Service Home page.
      2. Service Home page, click the Control Policy menu. Navigate to the Control Policy List page.
      3. Control Policy List page, click the control policy to connect the organizational unit. Control Policy Details page will be displayed.
      4. Click the Connection Target tab on the Control Policy Details page.
      5. Click the Organizational Unit Connection button in the Organizational Unit area. You will be taken to the Organizational Unit Connection page.
      6. After selecting the organizational unit to connect, click the Complete button.
        CategoryDetailed description
        Organization Unit/Account NameDisplay the organization unit and account names in a measurement structure format
        • Click the +, - buttons to expand or collapse the hierarchy
        ID/emailOrganization unit shows ID, Account shows ID and email
        Creation DateThe date the organizational unit was created is the creation date, and for Account it shows the creation or registration date
        Table. Organizational Unit Connection Items

      7.Account When the popup notifying the connection opens, click the Confirm button.

      Account Connect

      You can link an Account to a control policy.

      To connect Account, follow the steps below.

      1. All Services > Management > Organization Click the menu. Navigate to the Service Home page of Organization.

      2. Service Home on the page click the Control Policy menu. Control Policy List navigate to the page.

      3. Control Policy List page, click the control policy to link the Account. Control Policy Details page will be displayed.

      4. Control Policy Details page, click the Connection Target tab.

      5. Click the Account Connection button in the Account area. You will be taken to the Account Connection page.

      6. After selecting the Account to connect, click the Done button.

        CategoryDetailed description
        Organization Unit/Account NameDisplay the organization unit and account names in a measurement structure format
        • Click the +, - buttons to expand or collapse the hierarchy
        ID/emailOrganization unit shows ID, Account shows ID and email
        Creation DateThe date the organizational unit was created is the creation date, and for Account it shows the creation or registration date
        Table. Account connection items

      7. When a popup notifying the connection opens, click the Confirm button.

      Delete control policy

      You can delete the control policy.

      Notice
      To delete a control policy, there must be no elements linked to the control policy.

      To delete the control policy, follow the steps below.

      1. All Services > Management > Organization Click the menu. Navigate to Organization’s Service Home page.
      2. Service Home page, click the Control Policy menu. Navigate to the Control Policy List page.
      3. Click the control policy to delete on the Control Policy List page. Navigate to the Control Policy Details page.
      4. Control Policy Details page, click the Delete Control Policy button.
      5. When the popup notifying the deletion of the control policy opens, click the Confirm button.

      8.3 - API Reference

      API Reference

      8.4 - CLI Reference

      CLI Reference

      8.5 - Release Note

      Organization

      2025.10.23
      FEATURE Account deletion feature improvement
      • You can also delete the Account created in the Organization from the Member Account.
        • Deletable Accounts are limited to Accounts directly created in the Organization.
      2025.07.01
      NEW Organization Service Official Launch
      • Organization service has been officially launched.
      • Account can be organized by organizational units, managed hierarchically, and resource access permissions can be controlled.
        • You can monitor the resource usage of all accounts within the organization to optimize costs.

      9 - Resource Explorer

      9.1 - Overview

      Service Overview

      Resource Explorer is a service that provides search for resources created by Samsung Cloud Platform.

      Provided Features and Specialties

      Resource Explorer provides the following features.

      • Resource Search: You can search for resources across multiple regions and accounts using resource names, service names, resource types, and more.
      • Multi-Region Search: You can find resources across multiple regions with a single search.
      • Multi-account search: You can search for resources across all accounts in Organizations. (Scheduled to be released after July 25)
      • Integrated Search: You can search for resources through the integrated search function. (Scheduled to be released after July 25)
      • Filtering feature: You can filter search results using resource names, regions, tags, and more.
      • Tag addition feature: You can add tags to multiple resources in bulk.

      9.2 - How-to Guides

      Users can search for resources in their account and region through the Resource Explorer service on the Samsung Cloud Platform Console, add tags, and navigate to resource details.

      Searching for Resources with Resource Explorer

      You can search for resources through Resource Explorer on the Samsung Cloud Platform Console.

      To search for resources using Resource Explorer, follow these steps:

      1. Click All Services > Management > Resource Explorer menu. It moves to the Resource Explorer list page.
      2. On the Resource Explorer page, you can search for resources in various ways.
        CategoryDetailed Description
        Input BoxEnter text in the input box to search for results and select
        • Resource Name: Resource name
        • Service Name: Service name of the resource
        • Resource Type: Type of resource
        Advanced SearchClick the Advanced Search button to search for additional items
        • Resource Name: Resource name
        • Service Name: Service name (multiple selections possible, searchable)
        • Resource Type: Type of resource (multiple selections, searchable)
        • Region (multiple selections, searchable)
        Table. Resource Explorer Resource Search

      Adding Tags with Resource Explorer

      You can add tags through Resource Explorer on the Samsung Cloud Platform Console.

      To add tags using Resource Explorer, follow these steps:

      Note
      If you select a resource that already has more than 50 tags added, the Add Tag button will be deactivated.
      1. Click All Services > Management > Resource Explorer menu. It moves to the Resource Explorer list page.
      2. On the Resource Explorer list page, select the checkbox of the resource, and the Add Tag button will be activated at the top of the list.
      3. Click the Add Tag button. It moves to the Add Tag page.
        • Enter key and value, then click the Complete button to add a tag.
        • You can add multiple tags by clicking the Add Tag button.
      Guide
      • You can add tags by selecting or entering key and value in the list.
      • The list icon in the input window is activated when there is a selectable list, and the value list varies depending on the key.
      • Up to 50 tags can be added per selected resource.
      • If a tag with the same key is already applied, it will be replaced with the value of the newly added tag.

      Moving to Resource Details with Resource Explorer

      You can move to the resource details page through the Resource Explorer screen on the Samsung Cloud Platform Console and check the detailed information of the resource.

      To move to the resource details page using Resource Explorer, follow these steps:

      1. Click All Services > Management > Resource Explorer menu. It moves to the Resource Explorer list page.
      2. On the Resource Explorer list page, click the resource name to move to the detailed screen of the corresponding resource.
        • Some resource types do not provide a detailed screen.

      9.3 - Release Note

      Resource Explorer

      2025.02.27
      NEW Resource Explorer Release
      • A search service for resources has been released.
      • Resources from multiple regions can be checked at once through the Resource Explorer.

      10 - Resource Groups

      10.1 - Overview

      Service Overview

      Resource groups is a service that groups resources for management.

      Provided Features

      Resource groups provide the following features.

      • Resource Grouping: Resources can be logically grouped based on tags.
      • Tag-based query: You can search and group resources using tags.
      • Resource Search: You can search for resources that match the specified query.

      10.2 - How-to Guides

      You can create a resource group to set up resources that match certain conditions to be displayed as a group.

      Creating a Resource Group

      You can create and use the Resource Group service in the Samsung Cloud Platform Console.

      To create a Resource Group, follow these steps:

      1. Click on All Services > Management > Resource Group menu. You will be moved to the Resource Group List page.

      2. On the Resource Group List page, click the Create Resource Group button. You will be moved to the Create Resource Group page.

      3. On the Create Resource Group page, enter the necessary information for service creation and select detailed options.

        • In the Service Information Input section, select the necessary information.
        Category
        Required
        Detailed Description
        Resource Group NameRequiredEnter group name
        DescriptionEnter description
        Resource TypeRequiredSelect all or multiple resource types
        Group Definition TagRequiredSet the tag criteria for grouping
        • Key
        • Value
        Target ResourceClick the resource preview button to check and select the target resource
        Table. Resource Group Creation Input Information
        • In the Additional Information Input section, enter or select the necessary information.
          Category
          Required
          Detailed Description
          LockOptionalSet whether to use Lock
          • Using Lock prevents accidental actions such as server termination, start, and stop
          Init ScriptOptionalScript to run when the server starts
          • The init script should be written in Batch script for Windows or Shell script or cloud-init for Linux
          • Up to 45,000 bytes can be entered
          TagOptionalAdd a tag
          • Up to 50 tags can be added per resource
          • Click the Add Tag button and enter or select the Key and Value
          Table. Resource Group Additional Information Input Items
      4. Review the input information and click the Complete button.

        • Once created, you can check the created resource on the Resource Group List page.

      Checking Resource Group Details

      The Resource Group service allows you to check and modify the resource group list and detailed information. The Resource Group Details page consists of Basic Information, Group Resources, and Tags tabs.

      To check the detailed information of the Resource Group service, follow these steps:

      1. Click on All Services > Management > Resource Group menu. You will be moved to the Resource Group List page.
      2. On the Resource Group List page, click on the resource you want to check the details for. You will be moved to the Resource Group Details page. * The Resource Group Details page displays status information and additional feature information, and consists of Basic Information, Group Resources, and Tags tabs.

      Basic Information

      You can check and modify the detailed information of the selected resource on the Resource Group List page.

      CategoryDetailed Description
      ServiceService category
      Resource TypeService type
      SRNUnique resource ID in Samsung Cloud Platform
      Resource NameResource name
      Resource IDUnique resource ID in the service
      CreatorCreator’s name
      Creation TimeCreation date and time
      ModifierModifier’s name
      Modification TimeModification date and time
      Resource Group NameName entered by the user
      DescriptionDescription entered by the user
      Table. Resource Group Basic Information Tab Items

      Group Resources

      You can check and modify the group resources of the selected resource on the Resource Group List page.

      CategoryDetailed Description
      Group Resources > Resource TypeGroup resource type
      Group Resources > Group Definition TagTag added when creating the resource group
      Target ResourceList of resources grouped by the group definition tag
      • Resource Name: Resource name
      • Resource ID: Resource ID
      • Service Name: Service name of the resource
      • Resource Type: Resource type
      • Tag: Number of tags for the resource. Click the View Tag button to check all tags for the resource
      • Creation Time: Resource creation time
      Table. Resource Group Group Resources Tab Items

      Tags

      You can check, add, modify, or delete the tag information of the selected resource on the Resource Group List page.

      CategoryDetailed Description
      Tag ListTag list
      • Check the Key and Value information of the tag
      • Up to 50 tags can be added per resource
      • Search and select from existing Key and Value lists when entering tags
      Table. Resource Group Tags Tab Items

      Managing Resource Groups

      Modifying Resource Group Basic Information

      You can modify the description of a Resource Group. To modify the description of a Resource Group, follow these steps:

      1. Click on All Services > Management > Resource Group menu. You will be moved to the Resource Group list page.
      2. On the Resource Group list page, click on the Resource Group name of the resource you want to modify. You will be moved to the Resource Group Details page.
      3. Click the Modify button next to the Resource Group name. You will be moved to the Modify Description popup window. Modify the description and click the Confirm button. You can check the modified description on the Resource Group Details page.

      Modifying Resource Group Group Resources

      You can modify the group resources of a Resource Group. To modify the group resources of a Resource Group, follow these steps:

      1. Click on All Services > Management > Resource Group menu. You will be moved to the Resource Group list page.

      2. On the Resource Group list page, click on the Resource Group name of the resource you want to modify. You will be moved to the Resource Group Details page. Click on the Group Resources tab. You will be moved to the Group Resources tab.

      3. Click the Modify Group Resources button. You will be moved to the Modify Resource Group page.

        • Modify the Resource Type and Group Definition Tag information, and then click Save.
        Category
        Required
        Detailed Description
        Resource TypeRequiredSelect all or multiple resource types
        Group Definition TagRequiredSet the tag criteria for grouping
        • Key
        • Value
        Target ResourceClick the resource preview button to check and select the target resource
        Table. Resource Group Resource Modification Input Information
      4. Check the modified information on the Resource Group Details page.

      Deleting a Resource Group

      You can delete an unused Resource Group. However, once a Resource Group is deleted, it cannot be recovered.

      To delete a Resource Group, follow these steps:

      1. Click on All Services > Management > Resource Group menu. You will be moved to the Resource Group List page.
      2. On the Resource Group List page, click on the resource you want to delete. You will be moved to the Resource Group Details page.
      3. On the Resource Group Details page, click the Delete Resource Group button. Check the message in the Notification popup window and click the Confirm button.
        • On the Resource Group List page, select multiple Resource Groups using the check boxes and click the Delete button at the top of the resource list.

      10.3 - Release Note

      Resource Groups

      2025.02.27
      NEW Resource Groups Release
      • We have launched a service that efficiently manages resources through grouping.
      • Resources can be logically grouped and managed based on tags.

      11 - ServiceWatch

      11.1 - Overview

      Service Overview

      ServiceWatch is a service that collects metrics, logs, and events of resources created on the Samsung Cloud Platform, monitors them, and provides various tools to offer observability of resource performance, operational status, and more.

      Key Advantages

      It provides the following key advantages.

      • Resource Monitoring: Collects and visualizes performance metrics (e.g., CPU Usage) of resources. It also creates a dashboard that visualizes multiple metrics in one place for a quick overview.
      • Alert Policy Configuration and Automatic Notifications: Users can define conditions and thresholds to create alert policies, and receive notifications when thresholds are exceeded, enabling rapid detection and response to resource status.
      • Log Analysis and Storage: Collects logs generated by resources for easy retrieval and searching. Collected logs are stored in log groups, with up to 5 GB of storage provided for free. Users can set log retention policies to define retention periods, and logs older than the retention period are automatically managed.
      • Cost Efficiency: ServiceWatch offers a flexible pay-as-you-go pricing model for cost-effective usage. A free tier is also provided, allowing users to try the service for free and scale to paid usage as needed.

      Features Provided

      The following features are provided.

      • Metric Monitoring
        • Metrics: ServiceWatch receives metric data from Samsung Cloud Platform services, collects and stores this data, and makes it available to users.
        • Dashboard: Visualizes metrics of a single region to provide an integrated view of resources. ServiceWatch distinguishes between automatically generated service dashboards and user-created custom dashboards.
        • Alert: Offers alert functionality that notifies when metrics change beyond user-defined thresholds.
      • Log Monitoring
        • ServiceWatch provides log management capabilities. Logs collected from Samsung Cloud Platform services are stored in log groups for management. Log retention policies can be set to control log retention periods. Users can also view and search log data via the console, and export log groups to Object Storage.
      • ServiceWatch Agent
        • With the ServiceWatch Agent, detailed metrics on processes, CPU, memory, disk usage, and network performance can be collected from Virtual Server, GPU Server, Bare Metal Server, etc. GPU performance metrics can also be collected. Additionally, the Agent can collect logs generated by resources. (Planned for December 2025)
      • Event Monitoring
        • ServiceWatch can create event rules from system events reflecting changes to resources created on Samsung Cloud Platform, allowing users to receive notifications when specific conditions are met.

      Components

      Metrics

      Metrics refer to performance data of a system. By default, resources of services integrated with ServiceWatch provide basic monitoring based on free metrics. Additionally, services such as Virtual Server can enable detailed monitoring to provide paid metrics.

      Metric data can be retained for up to 15 months (455 days). For detailed information about metrics, see Metrics.

      Logs

      Logs from resources such as Virtual Server, Kubernetes Engine, and other services on Samsung Cloud Platform can be collected, stored, and viewed.

      For detailed information about logs, see Logs.

      Events

      Events represent changes in the environment from Samsung Cloud Platform services. The following are examples of events.

      • An event is generated when a Virtual Server’s status changes from Stopped to Running.
      • An event is generated when a new bucket is created in Object Storage.
      • An event is generated when an IAM user is removed from a user group.

      For detailed information about events, see Events.

      Dashboards

      ServiceWatch provides pre-built service dashboards for each service automatically, and users can also create custom dashboards.

      Notice
      Pre-built dashboards for each service will be available from March 2026.

      ServiceWatch Agent

      The ServiceWatch Agent is a software component that collects metrics and logs from Virtual Server, GPU Server, and On-Premise servers, enabling more granular monitoring of infrastructure and applications beyond the basic monitoring provided by default.

      Note

      User-defined metric/log collection via the ServiceWatch Agent is currently available only for Samsung Cloud Platform For Enterprise. It will be available for other offerings in the future.

      Limitations

      CategoryDescription
      Metric Retention PeriodMetrics can be queried for up to 455 days from the current point
      • Applicable to dashboards, widgets, and metric queries
      Number of Metrics per QueryUp to 500 metrics can be selected for visualization in a graph
      Metric Image File DownloadImages can be downloaded for up to 100 metrics
      Metric Export to Object StorageExport up to 10 metrics; the query period can be up to 2 months (63 days) for metric data
      Widget/Metric Count per Dashboard
      • Up to 500 widgets per dashboard
      • Up to 500 metrics per widget
      • Up to 2,500 total metrics can be added across all widgets in a single dashboard
      Number of Alert PoliciesUp to 5,000 per account/region
      Alert HistoryAlert history is available for 30 days
      Recipients per Alert PolicyUp to 100
      Number of Log GroupsUp to 10,000 per account/region
      Log DownloadWhen downloading Excel, up to 1 MB per log event and up to 10,000 log events can be downloaded
      • If a log event exceeds 1 MB or the number of log events exceeds 10,000, it is recommended to use log group export.
      Concurrent Log Group Export Tasks
      • One export task can be executed per account at a time.
      Log Event SizeUp to 1 MB
      Number of Event RulesUp to 300 per account/region
      Event Pattern SizeUp to 2 MB
      Recipients per Event RuleUp to 100
      Table. ServiceWatch Limitations

      The following shows the monthly free tier details for ServiceWatch.

      CategoryFree Tier
      LogsUp to 5 GB of storage per month
      Metrics
      • Basic monitoring metrics for each service
      • Up to 10 detailed/custom/log pattern metrics per month
      DashboardsUp to 3 dashboards per month referencing 50 or fewer metrics
      • If a dashboard references more than 50 metrics, one dashboard charge per month applies.
      Alert PoliciesUp to 10 per month
      Table. ServiceWatch Free Tier

      Regional Availability

      ServiceWatch is available in the following regions.

      RegionAvailability
      Korea West (kr-west1)Available
      Korea East (kr-east1)Available
      Korea South 1 (kr-south1)Available
      Korea South 2 (kr-south2)Available
      Korea South 3 (kr-south3)Available
      Table. ServiceWatch Regional Availability

      Prerequisite Services

      ServiceWatch has no prerequisite services.

      11.1.1 - Metrics

      Metrics

      Metrics are data on system performance. By default, many services provide free metrics for resources (e.g., Virtual Server, File Storage) which are offered as basic monitoring through ServiceWatch. Detailed monitoring can be enabled for certain resources such as Virtual Server.

      Metric data is retained for 15 months (455 days), allowing access to both recent and historical data.

      TermExampleDescription
      NamespaceVirtual ServerLogical separation used to categorize and group metrics
      MetricCPU usageName of the specific data to be collected
      Dimensionresource_idActs as a unique identifier for the metric
      Collection Interval5 minutesThe collection interval of metric data from each service providing the metric
      StatisticAverageMethod of aggregating metric data over a specified period
      Unit%Measurement unit for the statistic
      Aggregation Period5 minutesPeriod over which collected metric data is aggregated
      AlertCPU usage >= 80% | Occurs over 5 minutesChanges to an Alert state when CPU usage exceeds 80% continuously for 5 minutes
      Table. ServiceWatch Metric Terminology

      Namespace

      Namespace is a logical separation used to distinguish and group metrics in ServiceWatch. Most Samsung Cloud Platform services use a namespace that matches the service name, which can be found in the ServiceWatch Integrated Services List.

      For custom metrics, users can define a namespace that distinguishes them from other metrics within ServiceWatch, either via ServiceWatch Agent configuration or via the OpenAPI. For details on custom metrics and logs, see Custom Metrics and Logs.

      Metrics

      Metrics represent an ordered set of data points collected by ServiceWatch over time. Each data point consists of a timestamp, the collected value, and the unit of measurement.

      For example, the CPU usage of a specific Virtual Server is one of the default monitoring metrics provided by Virtual Server. Data points can be generated by any application or activity that collects data.

      By default, Samsung Cloud Platform services integrated with ServiceWatch provide free metrics for resources. Detailed monitoring for certain resources is available as a paid offering and can be enabled per service.

      Metrics can only be queried in the region where they were generated. Users cannot manually delete metrics. However, if no new data is posted to ServiceWatch, metrics automatically expire after 15 months. Data points older than 15 months (455 days) are sequentially expired, and when new data points are added, those older than 15 months are deleted.

      Timestamp

      The timestamp of a data point indicates the time at which the data point was recorded. Each metric data point is composed of a timestamp and a value.

      A timestamp consists of hour, minute, second, and date.

      Metric Retention Period

      ServiceWatch retains metric data as follows.

      • Data points with a collection interval of 60 seconds (1 minute) are retained for up to 15 days.
      • Data points with a collection interval of 300 seconds (5 minutes) are retained for up to 63 days.
      • Data points with a collection interval of 3600 seconds (1 hour) are retained for up to 455 days (15 months).

      Data points initially collected at a short interval are downsampled for long-term storage. For example, if data is collected at a 1‑minute interval, it is retained at 1‑minute granularity for 15 days. After 15 days, the data remains available but can only be queried at 5‑minute intervals. After 63 days, the data is further aggregated and provided at 1‑hour intervals. If metric data points need to be retained longer than the retention period, they can be separately archived using the File Download or Object Storage Export features.

      Dimensions

      Key-value pairs that serve as unique identifiers for metrics, allowing data points to be categorized and filtered.

      For example, using the resource_id dimension of Virtual Server metrics can identify metrics for a specific server.

      Collection Interval

      Refers to the frequency at which data points for each service’s metrics are collected, as provided by the service-defined collection interval.

      Refer to each service’s ServiceWatch metric page for the metric collection intervals.

      Note
      Refer to the metric pages of ServiceWatch integrated services at Metrics and Log Monitoring.

      For example, Virtual Server provides a 5‑minute collection interval for basic monitoring, and a 1‑minute interval when detailed monitoring is enabled.

      Statistics

      Statistics define how metric data is aggregated over a specified period. ServiceWatch provides aggregated data based on the metric data points supplied by each service to ServiceWatch. Aggregation uses the namespace, metric name, dimensions, and data point units within the defined aggregation period.

      The provided statistics are Sum, Average, Minimum, and Maximum.

      • Sum: The sum of all data point values collected during the period.
      • Average: The sum of all data point values divided by the number of data points during the period.
      • Minimum: The lowest observed value during the period.
      • Maximum: The highest observed value during the period.

      Units

      Each statistic has a measurement unit. Examples of units include Bytes, Seconds, Count, Percent, etc.

      Aggregation Period

      Each statistic calculates metric data points collected over the chosen aggregation period. The aggregation period can be selected from 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, and 1 day, with a default of 5 minutes. The aggregation period is closely tied to the metric data point collection interval, and for valid aggregation results, the aggregation period must be equal to or longer than the collection interval.

      For example, if the statistic is Average, the aggregation period is set to 5 minutes, and a metric with a 1‑minute collection interval is selected, data points are collected every minute and the average is computed over the 5‑minute window. Conversely, if the aggregation period is shorter than the collection interval, valid aggregation results cannot be obtained.

      Downsampling is applied for long‑term retention of metric data. For example, if data is collected at a 1‑minute interval, after 15 days it can only be queried at 5‑minute granularity. Setting the aggregation period from 5 minutes to 30 minutes for such metrics may require up to 5 minutes to retrieve the downsampled data. After 63 days, the data is further aggregated and provided at 1‑hour intervals. Selecting an aggregation period from 1 hour to 1 day may require up to 1 hour for data retrieval due to aggregation processing delays.

      Note
      When retrieving metric data, aggregation delays may cause the most recent data point not to be displayed. In such cases, reducing the aggregation period or querying after a certain time (5 minutes or 1 hour) will allow the data to appear correctly.
      Aggregation PeriodAggregation Delay
      1 minute-
      5 minutesUp to 5 minutes
      15 minutesUp to 5 minutes
      30 minutesUp to 5 minutes
      1 hourUp to 1 hour
      3 hoursUp to 1 hour
      6 hoursUp to 1 hour
      12 hoursUp to 1 hour
      1 dayUp to 1 hour
      Table. ServiceWatch aggregation delay by aggregation period

      Alerts

      When creating an alert policy, a metric is evaluated over the specified evaluation window, and if it meets the condition set based on the threshold, users receive an alert notification.

      Alert states are Alert, Normal, and Insufficient data.

      • Alert: The metric meets the set condition.
      • Normal: The metric does not meet the set condition.
      • Insufficient data: No metric data exists, the metric data is missing, or data has not yet arrived.

      When the alert state is Alert, if the evaluation later falls outside the condition, the alert state reverts to Normal.

      For more details on alerts, see the Alert section.

      Basic Monitoring and Detailed Monitoring

      ServiceWatch offers two types of monitoring: basic monitoring and detailed monitoring.

      Samsung Cloud Platform services integrated with ServiceWatch publish a basic set of metrics to ServiceWatch for free, providing basic monitoring. As soon as any of those services are used, basic monitoring is automatically enabled and visible in ServiceWatch.

      Note
      Services that provide basic monitoring can be found in the ServiceWatch Integrated Services List, and more services will be added over time.

      Detailed monitoring is available for select services and incurs charges. To use detailed monitoring, it must be enabled in the service’s detailed settings.

      The detailed monitoring options vary depending on the service.

      • For Virtual Server, the default monitoring collection interval is 5 minutes. Enabling detailed monitoring changes the collection interval for those metrics from 5 minutes to 1 minute.
      • Object Storage provides basic metrics for default monitoring, and enabling replication metrics adds additional replication metrics.

      The following includes services that provide detailed monitoring and their guides.

      Table. ServiceWatch Detailed Monitoring Services

      11.1.2 - Alert

      Alert

      You can create alerts that monitor metrics and send notifications. For example, you monitor the CPU usage and disk read/write of a Virtual Server, then send a notification to the user to handle increased load.

      Alert Policy

      Alert policies can monitor metrics of the same Account and evaluate alerts for a single metric. These alert policies compare the specified threshold and metric conditions, and send notifications when the conditions are met.

      If you disable the alert policy, the evaluation of the alert policy continues, but you can restrict sending alerts to designated recipients. If you want to temporarily stop sending alerts for resources with an alert policy set, you can use alert policy deactivation.

      When you enable the alert policy, evaluation of the alert policy begins, and according to the set conditions, the alert status changes to Alert, and a notification is sent each time the alert status changes.

      The alarm policy status allows you to check whether the alarm policy is enabled/disabled.

      Alert Policy StatusDescription
      ActiveA state where the alarm policy is active and notifications can be sent according to the set conditions
      • Evaluates the alarm according to the settings and sends notifications to the designated recipients
      InactiveThe alarm policy is disabled, and notification sending is restricted
      • Alarm evaluation for the policy is not stopped, only notification sending is restricted.
      Table. Alert Policy Status

      You can set alert levels for the alert policy. Depending on the alert level, the alert color (red/pink/purple) is expressed differently so that the levels can be visually distinguished by color. You can filter according to the alert policy’s alert level and retrieve the alert policy by each alert level.

      Alert LevelDescription
      HighIf you set the step for the alarm policy condition to High, the alarm level is displayed in red
      MidleIf you set the step to Middel in the alarm policy condition, the alarm step is displayed in pink
      LowIf you set the step to Middel in the alarm policy condition, the alarm step is displayed in purple
      Table. Alert Policy Levels

      Alarm Status

      Alert status changes according to the alert evaluation of the alert policy. Alert status is divided into three states: Normal (Normal), Insufficient data (Insufficient data), Alert (Alert).

      Alarm StatusDescription
      NormalMeans a normal state that does not meet the conditions set in the alarm policy
      • Normal state is displayed in green
      Insufficient dataThe alarm policy has just been created, or the metric is unavailable, or there is insufficient data to determine the alarm state from the metric
      • The Insufficient data state is displayed in gray
      AlertState that meets the conditions set in the alert policy
      • Alert state is displayed in red
      • When changed to Alert state, a notification is sent to the user
      Table. Alarm Status
      Reference
      When an alarm policy is first created, the alarm state is initialized to Insufficient data. When metric data is later collected, the alarm state changes to Normal or Alert.

      Alert Evaluation

      TermDescription
      Metric Data PointStatistical data calculated from metric data. A data point consists of a timestamp, collected statistical data, and the unit of the data.
      • The statistics of a data point are calculated separately as sum, average, minimum, and maximum
      Metric collection intervalTime interval for collecting metric data per service
      • Specified per metric of the namespace
      • Example: 1 minute or 5 minutes
      Alert Evaluation IntervalTime interval for evaluating whether the alert meets the conditions
      • If the metric collection interval is 1 minute or more, fix the alert evaluation interval to 1-minute units
      • If the alert evaluation range × metric collection interval exceeds 24 hours, fix the alert evaluation interval to 1-hour units
      Alarm Evaluation ScopeEvaluation time range for alarm evaluation
      • It is recommended to set it to the metric collection interval or a multiple of the collection interval
      Alert Evaluation Count/Alert Violation CountDuring the alert evaluation interval, if the condition is satisfied for violation count out of evaluation count, the alert status is switched to Alert
      • Violation count can be set less than or equal to evaluation count
      • Default is set to 1
      Alarm evaluation intervalAlarm evaluation range(seconds) X Alarm evaluation count
      Table. Alert Evaluation Terms

      For example, for a metric with a 1-minute collection interval, if you set a 1-minute evaluation window with 4 violations out of 5 evaluation counts, the evaluation interval is 5 minutes. For a metric with a 5-minute collection interval, if you set a 10-minute evaluation window with 3 violations out of 3 evaluation counts, the evaluation interval is 30 minutes.

      CategoryExample 1Example 2
      Metric collection interval1 minute5 minutes
      Alarm evaluation cycle (fixed)1 minute1 minute
      Alert Evaluation Scope1 minute10 minutes
      Number of alarm evaluations5 times3 times
      Number of alarm violations4 times3 times
      Alarm evaluation interval (seconds)5 minutes (300 seconds)30 minutes (1,800 seconds)
      ConditionIf evaluated 5 times within 5 minutes and satisfies 4 conditions, change the alarm state to AlertIf evaluated 3 times within 30 minutes and satisfies 3 conditions, change the alarm state to Alert
      Table. Alarm Evaluation Example

      Evaluation Scope

      The evaluation scope of the alarm policy is the evaluation time range for alarm evaluation.

      • It is recommended to set it to the indicator’s collection interval or a multiple of the collection interval.
      • You can input up to 604,800 (7 days) seconds.
      Caution
      If the evaluation range is set smaller than the collection interval or not matching a multiple of the collection interval, the alarm evaluation may not work properly.
      Evaluation ScopeConfigurable number of evaluations
      7 days (604,800 seconds)1
      1 day (86,400 seconds)7 or less
      6 hours (21,600 seconds)28 or less
      1 hour (3,600 seconds)168 or less
      15 minutes (900 seconds)96 or less
      5 minutes (300 seconds)288 or less
      1 minute (60 seconds)1,440 or less
      Table. Number of evaluable evaluations that can be set according to evaluation range
      Notice

      There are the following restrictions on the evaluation scope and the number of evaluations:

      • When the evaluation range is 1 hour (3,600 seconds) or more, the evaluation interval (evaluation count × evaluation range) can be up to 7 days (604,800 seconds)
      • When the evaluation range is less than 1 hour (3,600 seconds), the evaluation interval (evaluation count × evaluation range) can be up to 1 day (86,400 seconds).

      Condition

      The conditions for performing alarm evaluation require a conditional operator and threshold setting.

      TermDescription
      StatisticsMethod of calculating metric data during the evaluation period for alarm assessment
      Conditional OperatorAfter calculating metric data over the evaluation period for alarm evaluation, select the conditional operator that compares the value with the threshold.
      ThresholdDefine a threshold to compare with the calculated metric data during the evaluation period for alarm assessment using a conditional operator
      Table. Condition Terms

      If the namespace is Virtual Server and the metric is CPU Usage (unit: %), the alarm evaluation condition is completed as below.

      CategoryExample 1Example 2
      Metric collection interval1 minute5 minutes
      Alarm evaluation interval (fixed)1 minute1 minute
      Alert Evaluation Scope1 minute10 minutes
      Number of alarm evaluations5 times3 times
      Alarm violation count4 times3 times
      Alarm evaluation interval (seconds)5 minutes (300 seconds)30 minutes (1,800 seconds)
      StatisticsAverageTotal
      conditional operator>=<
      threshold8020
      ConditionIf the average CPU Usage >= 80% for 4 times over 5 minutes, change the alert status to AlertIf the average CPU Usage < 20% for 3 times over 30 minutes, change the alert status to Alert
      Table. Alarm Evaluation Example - Conditional Operator, Threshold, Statistics Added

      Alarm Notification

      If the alarm evaluation conditions are met, change the alarm status to Alert and send a notification to the recipients set in the alarm policy.

      Reference
      • Only users with login history (users who have registered email or mobile phone number) can be added as alert recipients.
      • Notification reception method (E-mail or SMS) can be set by selecting the notification target as Service > Alert on the Notification Settings page.
      • Notification recipients can be added up to a maximum of 100.
      Guide
      • Users without login history cannot be designated as notification recipients.
      • Notification Settings page, if you select the notification target Service > Alert and do not set the notification reception method, you cannot receive notifications.

      Method for handling missing data during alarm evaluation

      Some resources may not be able to send metric data to ServiceWatch under certain conditions. For example, if a specific resource is inactive or does not exist, it will not be sent to ServiceWatch. If metrics are not collected for a certain period, the alarm state will be changed to Insufficient data by the alarm evaluation.

      ServiceWatch provides a way to handle missing data during alarm evaluation. The missing data handling methods are as follows:

      • Ignore: Maintain the current alarm state. (default)
      • Missing: Treat missing data points as missing. If all data points within the evaluation range are missing, the alarm state switches to Insufficient data state.
      • Breaching: Treat as satisfying the threshold condition for missing data points.
      • Not breaching: Process as normal for missing data points that do not satisfy the threshold condition.
      Reference
      • For alert policies created before the December 2025 release, missing data is handled with the default Ignore, and from the December 2025 release onward, you can directly choose how to handle missing data.
      • The method for handling missing data in the alarm policy can be modified, and from the point of modification, missing data will be processed using the changed method.

      Alert History

      The change history for alarm status is recorded in the alarm history. The alarm history can be viewed for 30 days.

      11.1.3 - Log

      Log

      By using ServiceWatch logs, you can monitor, store, and access log files collected from the resources of the service that provides the logs.

      Log Group1Log Group1Log Group1Log Group2Log Group2Log Group2
      Log Stream1Log Stream2Log Stream3Log StreamALog StreamBLog StreamC
      Log EventLog EventLog EventLog EventLog EventLog Event
      Log EventLog EventLog EventLog EventLog Event
      Table. Log Configuration - Log Group, Log Stream, Log Event
      Reference

      Below is an example of log configuration.

      • 📂 Log Group: “WebApp-Logs”
        • 📄 Log Stream 1: “Server-1”
          • 📝 Log Event 1: “[2025-03-20 10:00:01] User logged in”
          • 📝 Log Event 2: “[2025-03-20 10:05:34] Database connection error”

      Log Group

      A log group is a container for log streams that share the same retention policy settings. Each log stream must belong to a single log group. For example, if there are separate log streams for the logs of each Kubernetes Engine cluster, you can group the log streams into a single log group called /scp/ske/{cluster name}.

      Log Retention Policy

      Log retention policy can set the period for storing log events in ServiceWatch. Log events whose period has expired are automatically deleted. Log The retention period assigned to the group applies to the log streams and log events belonging to the log group.

      The retention period can be selected from the following and is set in days.

      Retention period
      • No expiration
      • 1 day
      • 3 days
      • 5 days
      • 1 week (7 days)
      • 2 weeks (14 days)
      • 1 month (30 days)
      • 2 months (60 days)
      • 3 months (90 days)
      • 4 months (120 days)
      • 5 months (150 days)
      • 6 months (180 days)
      • 1 year (365 days)
      • 13 months (400 days)
      • 18 months (545 days)
      • 2 years (731 days)
      • 3 years (1096 days)
      • 5 years (1827 days)
      • 6 years (2192 days)
      • 7 years (2557 days)
      • 8 years (2922 days)
      • 9 years (3288 days)
      • 10 years (3653 days)
      Table. Log Group Retention Policy Period

      Log Stream

      A log stream is a collection of log events sorted in the order they occurred from the same source. For example, all log events generated in a particular Kubernetes Engine cluster can constitute a single log stream.

      Log Event

      Log events are individual records that record logs generated from resources. A log event record includes a timestamp of when the event occurred, a log message, and two attributes. Each message must be encoded in UTF-8.

      Log Pattern

      You can create a log pattern to filter log data that matches the pattern. A log pattern defines the words or patterns to search for in the log data collected by ServiceWatch, allows you to view the status of log occurrences in a graph, and creates metrics that can be used to generate alert policies.

      Log patterns are not applied retroactively to data. They are applied to log events collected after the log pattern is created.

      Log Pattern Namespace

      A namespace is a logical separation for distinguishing and grouping metrics. In ServiceWatch, it is divided into namespaces associated with services, namespaces for custom metrics, and namespaces for log patterns.

      • Namespace associated with services such as Virtual Server
      • Namespace composed of custom metrics, the namespace of metrics collected via the custom metrics API or ServiceWatch Agent
      • Namespace of the metric created by the log pattern

      When creating metrics for a log pattern, you can either create a new namespace for the log pattern or choose from existing log pattern namespaces.

      Indicator Name

      The monitored log information is the name of the metric generated by ServiceWatch. You must set it so that the metric name does not duplicate within the namespace where the metric will exist.

      Indicator value

      It is the numeric value posted to the metric each time a log matching the pattern is found. For example, when counting occurrences of a specific word (e.g., Error), this value becomes 1 for each occurrence. When calculating transmitted bytes, it can be incremented by the actual number of bytes found in the log event.

      Default

      It is the value recorded in the log pattern during periods when no matching logs can be found while collecting logs. Setting the default to 0 can prevent the metric from becoming irregular due to periods with no matching data in all such intervals.

      If you set a dimension for a metric generated by a log pattern, you cannot set a default value for that metric.

      Dimension

      A dimension is a key-value pair that defines a metric additionally. You can add dimensions to metrics generated from log patterns. Since a dimension is part of a unique identifier for a metric, each time a unique name/value pair is extracted from the log, a new variant of that metric is created.

      When selecting the log pattern format as either a space-separated pattern or a JSON format pattern, you can set the dimension, and it can be configured as one of the parameters set in the pattern. You can assign up to three dimensions to an indicator. If a default value is set, you cannot set dimensions. To set dimensions, you must configure it not to use the default value.

      Pattern Format

      This explains how ServiceWatch interprets data in each log event. The pattern format can be selected from three options as shown below.

      • String pattern: Log containing a specific string
      • Space-separated pattern: logs separated by spaces such as timestamps, IP addresses, strings, etc.
      • JSON format pattern: logs containing specific JSON fields

      Available regular expression syntax

      When using regular expressions to search and filter log data, you must enclose the expression with %.

      Only the following can be included in patterns that contain regular expressions.

      • Alphanumeric - Alphanumeric refers to characters that are letters (A~Z or a~z) or numbers (0~9).
        • A-Z, a-z, 0-9 can be used as.
      • The supported symbol characters are as follows.
        • :, _, #, =, @, /, ;, ,, -
        • For example, %servicewatch!% cannot be used because ! is not supported.
      • The supported operators are as follows.
        • This includes ^, $, ?, [, ], {, }, |, \, *, +, ..
        • (, ) The operator is not supported.

      OperatorUsage Method
      ^Fixes the start position of the string as the matching item. For example, %^[ab]cd% matches acd and bcd, and does not match bcd.
      $Fixes the end position of the string to match items. For example, %abc$% matches xyzabc and xyabc, but does not match abcd.
      ??Matches when the preceding character appears 0 or 1 times. For example, %abc?d% matches both abcd and abd, while abc and abccd do not match.
      []Matches a list of characters or character ranges enclosed in brackets. For example, %[abc]% matches a, b, c, %[a-z]% matches all lowercase letters from a to z, and %[abcx-z]% matches a, b, c, x, y, z.
      {m, n}If the preceding character repeats m~n times, it matches. For example, %a{3,5}% matches only aaa, aaaa and aaaaa, and does not match a or aa.
      |matches one of the characters on either side of |.
      • %abc|de% can match abce or abde.
      </code>As an escape character, using this character allows you to use it literally instead of its special operator meaning.
      *Matches zero or more of the preceding character. For example, %12*3% matches 13, 123, 122223.
      +Matches one or more of the preceding character. For example, %12+3% can match 123, 1223, 12223, but does not match 13.
      .Matches any character. For example, %.ab% matches cab, dab, bab, 8ab, #ab, ab (including space), and matches a 3-character string ending with ab.
      \d, \DMatches digits and non-digit characters. For example, %\d% is equivalent to %[0-9]%, and %\D% matches all characters except digits, like %[^0-9]%.
      \s, \SMatches whitespace characters and non-whitespace characters. Whitespace characters include tab (\t), space ( ), and newline (\n) characters.
      \w, \WMatches alphanumeric characters and non-alphanumeric characters. For example, %\w% is equivalent to %[a-zA-Z_0-9]%, and %\W% is equivalent to %[^a-zA-Z_0-9]%.
      \xhhMatches the ASCII mapping of a 2-digit hexadecimal character. \x is an escape character indicating that the following character is the hexadecimal value in ASCII. hh specifies a 2-digit hexadecimal (0~9 and A~F) that refers to a character in the ASCII table.
      Table. Regular expression syntax operators available for log pattern

      Reference
      123.123.123.1와 같은 IP 주소를 정규식으로 표현하기 위해서는 %123.123.123.1%와 같이 표현합니다.

      String Pattern

      String pattern using regular expressions

      You can search for matching patterns in log events using a regex string pattern wrapped with %(percentage) at the beginning and end of the regex. Below is an example of a pattern that searches all log events composed of the ERROR keyword. Please refer to the Available Regex Syntax.

      %ERROR%
      
        The above pattern matches log event messages like the following.
      * <code>[2026-02-13 14:22:01] ERROR 500 POST /api/v1/checkout (192.168.1.10) - NullPointerException at com.app.controller.CheckoutController.java:55</code>
      * <code>[ERROR] Configuration file not found: /etc/app/config.yaml</code>
      
      ##### String pattern in log events without format
      String pattern for searching strings in log events that are not in formats like JSON.
      Below is an example of a log event message, and you can see the log events that match according to various string pattern classifications.
      

      ERROR CODE 400 BAD REQUEST ERROR CODE 401 UNAUTHORIZED REQUEST ERROR CODE 419 MISSING ARGUMENTS ERROR CODE 420 INVALID ARGUMENTS

      
      
      
      
      
      
      Category Pattern Matching log event message
      single string ERROR CODE log event containing ERROR
      • ERROR CODE 400 BAD REQUEST
      • ERROR CODE 401 UNAUTHORIZED REQUEST
      • ERROR CODE 419 MISSING ARGUMENTS
      • ERROR CODE 420 INVALID ARGUMENTS
      Multiple strings (And condition) ERROR REQUEST log events containing the strings ERROR and REQUEST
      • ERROR CODE 400 BAD REQUEST
      • ERROR CODE 401 UNAUTHORIZED REQUEST
      Multiple strings (Or condition) ?ERROR ?400 log events containing the ERROR or 400 string
      • ERROR CODE 400 BAD REQUEST
      • ERROR CODE 401 UNAUTHORIZED REQUEST
      • ERROR CODE 419 MISSING ARGUMENTS
      • ERROR CODE 420 INVALID ARGUMENTS
      Exact matching string “BAD REQUEST” log event containing the exact phrase “BAD REQUEST”
      • ERROR CODE 400 BAD REQUEST
      Exclude specific string ERROR -400 A pattern where some terms are included and other terms are excluded. Enter - before the string you want to exclude. The following are log events that include the string ERROR and exclude the string 400
      • ERROR CODE 401 UNAUTHORIZED REQUEST
      • ERROR CODE 419 MISSING ARGUMENTS
      • ERROR CODE 420 INVALID ARGUMENTS
      Table. String pattern in log events without format
      #### Space-separated pattern Create a pattern to search for matching strings in log events separated by spaces. ##### Space-separated pattern example(1) The following is an example of log events separated by spaces.

      2023-10-27T10:00:01Z [INFO] 1234 login success 192.168.1.1

      The log event above is a space-separated log event that includes <code>timestamp</code>, <code>logLevel</code>, <code>user_id</code>, <code>action</code>, <code>status</code>, <code>ip</code>. Text between brackets (<code>[]</code>) and double quotes (<code>""</code>) is considered a single field.
      
      To create a pattern that searches for matching strings in space-separated log events, enclose the pattern in brackets (<code>[]</code>) and specify fields with names separated by commas (<code>,</code>). The following pattern parses six fields.
      
      <code>[timestamp, logLevel, user_id, action, status = success, ip]</code> can find log events where the 5th field, <code>status</code>, is <code>success</code>.
      
      ##### Space-separated pattern example (2)
      

      abc xxx.log james 2023-10-27T10:00:01Z POST 400 1024 abc xxx.log name 2023-10-27T10:00:02Z POST 410 512

      The above log event is a space-separated log event that includes host, logName, user, timestamp, request, statusCode, and size.

      A pattern like [host, logName, user, timestamp, request, statusCode=4*, size] can find log events where the 6th field, statusCode, starts with 4.

      If you do not know the exact number of fields in a space-separated log event, you can use an ellipsis (). A pattern like […, statusCode=4*, size] is a pattern that represents the first five fields with an ellipsis.

      You can also create composite expressions using the AND (&&) operator and the OR (||) operator. A pattern such as […, statusCode=400 || statusCode=410, size] can find log events where the 6th field, statusCode, is 400 or 410.

      You can use regular expressions to provide conditions for a pattern. A pattern such as [host, logName, user, timestamp, request, statusCode=%4[0-9]{2}%, size] can find log events where the sixth field, statusCode, is a number starting with 4.

      JSON format pattern

      You can create a pattern to search for matching strings or numeric values in JSON log events. Patterns are enclosed in curly braces ({}).

      String-based JSON format pattern
      • Use $. to represent JSON fields.
      • The operator can use = or !=.
      • The string to compare with the field can be enclosed in double quotes (""). Strings containing non-alphanumeric characters and underscore symbols must be enclosed in double quotes. Use an asterisk (*) as a wildcard to match text.
      { $.resourceType = "trail" }
      { $.resourceType = "%trail%" }
      { $.arrayKey[0] = "value" }
      
      JSON format pattern that searches for numeric values
      • Represent JSON fields using $..
      • You can use numeric operators.
        • greater than(>), less than(<), equal(=), not equal(!=), greater than or equal to(>=), less than or equal to(<=)
      • You can include the addition (+) or subtraction (-) symbols. You can use the asterisk (*) as a wildcard.

      { $.errorCode = 400} { $.errorCode >= 400} { $.errorCode != 500 } { $.sourceIPAddress != 123.123.* }

      Export Log Group

      From the log group, you can export log data to Object Storage for log retention and log analysis. You can export log groups for log data in the same Account.

      To start exporting a log group, you need to create an Object Storage bucket to store the log data.

      The log group export operation can take a long time depending on the amount of logs. When exporting a log group, you can reduce the export operation time by specifying a particular stream within the log group or by specifying a time range.

      Log group export can only be executed one at a time on the same Account. To run another log group export, the current export task must be completed.

      You can delete the log group export history after the export succeeds or after the export cancellation is completed. Canceling log group export does not delete the saved file of the exported log group. To delete the exported log group file, delete the stored file directly in Object Storage.

      Log group export statusDescription
      SuccessThe log group export task has been completed successfully.
      PendingLog group export task is pending.
      In progressLog group export task is in progress.
      FailedLog group export task failed.
      CancelingCancelling the log group export task. If the cancel request fails, it will change to Failed state.
      CanceledLog group export task has been cancelled.
      Table. Log Group Export Status

      11.1.4 - event

      The event represents a change in the environment in the Samsung Cloud Platform service.

      Most events generated in Samsung Cloud Platform services are received by ServiceWatch. Events of each service can be viewed and processed in the ServiceWatch of the same Account.

      Refer to the list of services that send events via ServiceWatch and the events those services send in the ServiceWatch Event Reference.

      Each service sends events to ServiceWatch based on Best Effort delivery. Best Effort delivery means that the service attempts to send all events to ServiceWatch, but occasionally some events may not be delivered.

      When a valid event is delivered to ServiceWatch, ServiceWatch compares the event with the rules and then sends a notification to the alert recipients set in the event rule.

      Event Rules

      You can specify the actions that ServiceWatch performs on events delivered from each service to ServiceWatch. To do this, create an event rule. An event rule specifies which events are delivered to which targets.

      Event rules evaluate the event when it arrives. Each event rule checks whether the event matches the rule’s pattern. If the event matches, ServiceWatch processes the event.

      You can generate matching rules for incoming events based on the event data criteria (called an event pattern). If an event matches the criteria defined in the event pattern, the event is delivered to the target specified in the rule.

      • Event rules basically allow you to specify a notification recipient to receive alerts when an event occurs.
      • The event rules are planned to be expanded to include multiple services of the Samsung Cloud Platform as targets for receiving events when events occur. (Planned for 2026)

      To create an event rule, please refer to How-to Guides > Creating Event Rules.

      Event Source

      ServiceWatch can select the event source as the Samsung Cloud Platform service name. You can select the service name of the event you want to receive as the event source.

      Service CategoryService
      ComputeVirtual Server
      ComputeGPU Server
      ComputeBare Metal Server
      ComputeMulti-node GPU Cluster
      ComputeCloud Functions
      StorageBlock Storage(BM)
      StorageFile Storage
      StorageObject Storage
      StorageArchive Storage
      StorageBackup
      ContainerKubernetes Engine
      ContainerContainer Registry
      NetworkingVPC
      NetworkingSecurity Group
      NetworkingLoad Balancer
      NetworkingDNS
      NetworkingVPN
      NetworkingFirewall
      NetworkingDirect Connect
      NetworkingCloud LAN-Campus
      NetworkingCloud LAN-Datacenter
      NetworkingCloud WAN
      NetworkingGlobal CDN
      NetworkingGSLB
      DatabaseEPAS(DBaaS)
      DatabasePostreSQL(DBaaS)
      DatabaseMariaDB(DBaaS)
      DatabaseMySQL(DBaaS)
      DatabaseMicrosoft SQL Server(DBaaS)
      DatabaseCacheStore(DBaaS)
      Data AnalyticsEvent Streams
      Data AnalyticsSearch Engine
      Data AnalyticsVertica(DBaaS)
      Data AnalyticsData Flow
      Data AnalyticsData Ops
      Data AnalyticsQuick Query
      Application ServiceAPI Gateway
      SecurityKey Management Service
      SecurityConfig Inspection
      SecurityCertificate Manager
      SecuritySecret Vault
      ManagementCloud Control
      ManagementIdentity and Access Management(IAM)
      ManagementID Center
      ManagementLogging&Audit
      ManagementOrganization
      ManagementResource Groups
      ManagementServiceWatch
      ManagementSupport Center
      AI-MLCloudML
      AI-MLAI&MLOps Platform
      Table. ServiceWatch event source

      Event Type

      The Samsung Cloud Platform service has its own resource type. Event types are classified the same as resource types, and you select the type of events from the event source to use in event rules.

      The following are the event types of Virtual Server.

      Service CategoryServiceSub ServiceEvent Type
      ComputeVirtual ServerVirtual ServerServer
      ComputeVirtual ServerImageImage
      ComputeVirtual ServerKeypairKeypair
      ComputeVitual ServerServer GroupServer Group
      ComputeVirtual ServerLaunch ConfigurationLaunch Configuration
      ComputeVirtual ServerAuto-Scaling GroupAuto-Scaling Group
      ComputeVirtual ServerBlock StorageVolume
      ComputeVirtual ServerBlock StorageSnapshot
      Table. ServiceWatch - Virtual Server Event Types

      For other event types available in ServiceWatch, please refer to ServiceWatch Event.

      Event

      The event can select all events that occur from the event type of the event source, and can select specific events.

      The following are some events of the Server event type of Virtual Server.

      Service CategoryServiceSub ServiceEvent TypeEvent
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create Error
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete Error
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Lock End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Unlock End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Stop Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Stop Success
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Start Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Start Success
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot Error
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On Start
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On End
      ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On Error
      Table. Some events of ServiceWatch - Virtual Server Server

      For other events available in ServiceWatch, see ServiceWatch Event.

      Applied Resources

      Set the event pattern for selected events on all resources or specific resources.

      Event Pattern

      If you select all event sources, event types, events, and applied resources, the event pattern setting for the event rule will be completed.

      The following is an example of an event pattern set in ServiceWatch’s event rule.

      Color mode
      {
      	"source": [ // namespace
      		"Virtual Server"
      	],
      	"detail-type": [ // event type
      		"Server"
      	],
      	"detail": {
      		"event": [ // individual event
      			"Compute Virtual Server Create End"
      		]
      	},
      	"resources": [ // individual resources
      		"srn:{offerring}::{account_id}:{region}::virtualserver:server/{resource_id}"
      	]
      }
      {
      	"source": [ // namespace
      		"Virtual Server"
      	],
      	"detail-type": [ // event type
      		"Server"
      	],
      	"detail": {
      		"event": [ // individual event
      			"Compute Virtual Server Create End"
      		]
      	},
      	"resources": [ // individual resources
      		"srn:{offerring}::{account_id}:{region}::virtualserver:server/{resource_id}"
      	]
      }
      Code block. ServiceWatch - Virtual Server event pattern example

      To create an event rule, please refer to How-to Guides > Creating Event Rules.

      Event Notification

      If the event pattern is satisfied, an alert is sent to the notification recipient set in the event rule.

      Reference
      • Notifications can be sent to users with login history (users who have registered email or mobile phone number).
      • The notification recipients can be added up to a maximum of 100 people.
      • The notification reception method (E-mail or SMS) can be changed after selecting the notification target as Service > ServiceWatch on the Notification Settings page.
      Notice
      • Users without login history cannot be designated as notification recipients.
      • Notification Settings page, by selecting the notification target Service > ServiceWatch, if you do not set the notification receiving method, you cannot receive notifications.

      11.1.5 - ServiceWatch Integration Service

      You can check services linked with ServiceWatch.

      Metrics and Log Monitoring

      Below you can see the service that integrates ServiceWatch with metric and log monitoring.

      Reference
      For information related to basic monitoring and detailed monitoring, please refer to ServiceWatch Basic Monitoring and Detailed Monitoring.
      Service CategoryServiceNamespaceMetrics
      Basic Monitoring
      Metrics
      Detailed Monitoring
      Log MonitoringGuide
      ComputeVirtual ServerVirtual Server-
      ComputeGPU ServerVirtual Server-
      ComputeBare Metal Server----
      ComputeMulti-node GPU Cluster----
      ComputeCloud FuctionsCloud Functions-
      StorageFile StorageFile Storage-
      StorageObject StorageObject Storage--
      StorageArchive StorageArchive Storage--
      ContainerKubernetes EngineKubernetes Engine-
      ContainerContainer RegistryContainer Registry--
      NetworkingVPC - Internet GatewayInternet Gateway--
      NetworkingVPNVPN--
      NetworkingGlobal CDNGlobal CDN--
      NetworkingDirect ConnectDirect Connect--
      DatabaseMariaDB(DBaaS)MariaDB-
      DatabaseMySQL(DBaaS)MySQL-
      DatabaseScalable DB(DBaaS)Scalable DB-
      Data AnalyticsEvent StreamsEvent Streams-
      Application ServiceQueue ServiceQueue Service--
      ManagementLoggiing&AuditLogging&Audit--
      AI/MLAIOSAIOS--
      Table. ServiceWatch metrics and log integration services and guide

      Event

      Below you can check the service that links ServiceWatch with events.

      Reference
      For information related to event rules, refer to Event. Refer to the list of Samsung Cloud Platform services that generate events and the events at ServiceWatch Event.
      Service CategoryServiceSub ServiceEvent SourceResource Type (Event Type)
      ComputeVirtual ServerVirtual ServerVirtual ServerServer
      ComputeVirtual ServerImageVirtual ServerImage
      ComputeVirtual ServerKeypairVirtual ServerKeypair
      ComputeVitual ServerServer GroupVirtual ServerServer Group
      ComputeVirtual ServerLaunch ConfigurationVirtual ServerLaunch Configuration
      ComputeVirtual ServerAuto-Scaling GroupVirtual ServerAuto-Scaling Group
      ComputeVirtual ServerBlock StorageVirtual ServerVolume
      ComputeVirtual ServerBlock StorageVirtual ServerSnapshot
      ComputeGPU ServerGPU ServerGPU ServerServer
      ComputeGPU ServerGPU ServerGPU ServerImage
      ComputeBare Metal ServerBare Metal ServerBare Metal ServerBare Metal Server
      ComputeMulti-node GPU ClusterGPU NodeMulti-node GPU ClusterGPU Node
      ComputeMulti-node GPU ClusterCluster FabricMulti-node GPU ClusterCluster Fabric
      ComputeCloud FunctionsFunctionCloud FunctionsCloud Functions
      StorageBlock Storage(BM)Block Storage(BM)Block Storage(BM)Volume
      StorageBlock Storage(BM)Volume Group(BM)Block Storage(BM)Volume Group
      StorageFile StorageFile StorageFile StorageVolume
      StorageObject StorageObject StorageObject StorageBucket
      StorageArchive StorageArchive StorageArchive StorageBucket
      StorageBackupBackupBackupBackup
      ContainerKubernetes EngineClusterKubernetes EngineCluster
      ContainerKubernetes EngineNodeKubernetes EngineNodepool
      ContainerContainer RegistryRegistryContainer RegistryContainer Registry
      ContainerContainer RegistryRepositoryContainer RegistryRepository
      NetworkingVPCVPCVPCVPC
      NetworkingVPCSubnetVPCSubnet
      NetworkingVPCPortVPCPort
      NetworkingVPCInternet GatewayVPCInternet Gateway
      NetworkingVPCNAT GatewayVPCNAT Gateway
      NetworkingVPCPublic IPVPCPublic IP
      NetworkingVPCPrivate NATVPCPrivate NAT
      NetworkingVPCVPC EndpointVPCVPC Endpoint
      NetworkingVPCVPC PeeringVPCVPC Peering
      NetworkingVPCPrivate Link ServiceVPCPrivate Link Service
      NetworkingVPCPrivate Link EndpointVPCPrivate Link Endpoint
      NetworkingVPCTransit GatewayVPCTransit Gateway
      NetworkingSecurity GroupSecurity GroupSecurity GroupSecurity Group
      NetworkingLoad BalancerLoad BalancerLoad BalancerLoad Balancer
      NetworkingLoad BalancerLoad BalancerLoad BalancerLB Listener
      NetworkingLoad BalancerLB Server GroupLoad BalancerLB Server Group
      NetworkingLoad BalancerLB Health CheckLoad BalancerLB Health Check
      NetworkingDNSPrivate DNSPrivate DNSPrivate DNS
      NetworkingDNSHosted ZoneHosted ZoneHosted Zone
      NetworkingDNSPublic Domain NamePublic Domain NamePublic Domain Name
      NetworkingVPNVPNVPNVPN Gateway
      NetworkingVPNVPN TunnelVPNVPN Tunnel
      NetworkingFirewallFirewallFirewallFirewall
      NetworkingDirect ConnectDirect ConnectDirect ConnectDirect Connect
      NetworkingCloud LAN-CampusCampus NetworkCloud LAN - Campus (Network)Cloud LAN - Campus (Network)
      NetworkingCloud LAN-DatacenterCloud LAN NetworkCloud LAN NetworkCloud LAN Network
      NetworkingCloud LAN-DatacentervDeviceCloud LAN NetworkvDevice
      NetworkingCloud LAN-DatacenterInterfaceCloud LAN NetworkInterface
      NetworkingCloud LAN-DatacentervCableCloud LAN NetworkvCable
      NetworkingCloud WANCloud WAN NetworkCloud WANNetwork(WAN)
      NetworkingCloud WANSegmentCloud WANSegment
      NetworkingCloud WANSegmentCloud WANSegment Location
      NetworkingCloud WANSegmentCloud WANSegment Sharing
      NetworkingCloud WANAttachmentCloud WANAttachment
      NetworkingGlobal CDNGlobal CDNGlobal CDNGlobal CDN
      NetworkingGSLBGSLBGSLBGSLB
      DatabaseEPAS(DBaaS)EPAS(DBaaS)EPASEPAS
      DatabasePostreSQL(DBaaS)PostreSQL(DBaaS)PostreSQLPostreSQL
      DatabaseMariaDB(DBaaS)MariaDB(DBaaS)MariaDBMariaDB
      DatabaseMySQL(DBaaS)MySQL(DBaaS)MySQLMySQL
      DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server(DBaaS)Microsoft SQL ServerMicrosoft SQL Server
      DatabaseCacheStore(DBaaS)CacheStore(DBaaS)CacheStoreCacheStore
      DatabaseScalable DB(DBaaS)Scalable DB(DBaaS)Scalable DBScalable DB
      Data AnalyticsEvent StreamsEvent StreamsEvent StreamsEvent Streams
      Data AnalyticsSearch EngineSearch EngineSearch EngineSearch Engine
      Data AnalyticsVertica(DBaaS)Vertica(DBaaS)VerticaVertica
      Data AnalyticsData FlowData FlowData FlowData Flow
      Data AnalyticsData FlowData Flow ServicesData FlowData Flow Service
      Data AnalyticsData OpsData OpsData OpsData Ops
      Data AnalyticsData OpsData Ops ServicesData OpsData Ops Service
      Data AnalyticsQuick QueryQuick QueryQuick QueryQuick Query
      Application ServiceAPI GatewayAPI GatewayAPI GatewayAPI Gateway
      Application ServiceQueue ServiceQueueQueueQueue
      SecurityKey Management ServiceKey Management ServiceKey Management ServiceKey
      SecurityConfig InspectionConfig InspectionConfig InspectionConfig Inspection
      SecurityCertificate ManagerCertificate ManagerCertificate ManagerCertificate
      SecuritySecrets ManagerSecrets ManagerSecrets ManagerSecret
      SecuritySecret VaultSecret VaultSecret VaultSecret
      ManagementCloud ControlCloud ControlCloud ControlLanding Zone
      ManagementIdentity and Access Management(IAM)User GroupIdentity and Access ManagementGroup
      ManagementIdentity and Access Management(IAM)UserIdentity and Access ManagementUser
      ManagementIdentity and Access Management(IAM)policyIdentity and Access Managementpolicy
      ManagementIdentity and Access Management(IAM)roleIdentity and Access Managementrole
      ManagementIdentity and Access Management(IAM)credential providerIdentity and Access Managementcredential provider
      ManagementIdentity and Access Management(IAM)My Info.Identity and Access ManagementAccess Key
      ManagementID CenterID CenterIdentity CenterID Center
      ManagementID CenterPermission SetIdentity CenterPermission Set
      ManagementLogging&AuditTrailLogging&AuditTrail
      ManagementOrganizationOrganizational StructureOrganizationOrganization
      ManagementOrganizationOrganization StructureOrganizationOrganization Account
      ManagementOrganizationOrganizational StructureOrganizationOrganization Invitation
      ManagementOrganizationOrganizational structureOrganizationOrganizational unit
      ManagementOrganizationControl PolicyOrganizationControl Policy
      ManagementOrganizationOrganization SettingsOrganizationDelegation Policy
      ManagementResource GroupsResource GroupsResource GroupsResource Group
      ManagementServiceWatchDashboardServiceWatchDashboard
      ManagementServiceWatchAlertServiceWatchAlert
      ManagementServiceWatchlogServiceWatchlog group
      ManagementServiceWatchEvent RulesServiceWatchEvent Rules
      ManagementSupport CenterService RequestSupportService Request
      ManagementSupport CenterContactSupportContact
      AI-MLCloudMLCloudMLCloud MLCloud ML
      AI-MLAI&MLOps PlatformAI&MLOps PlatformAI&MLOps PlatformAI&MLOps Platform
      Table. ServiceWatch Event Service

      11.1.6 - Custom Metrics and Logs

      ServiceWatch can collect user-defined custom metrics defined by the user and can collect log files from resources created by the user.

      There are two ways to collect custom metrics and logs.

      First, you can install the ServiceWatch Agent directly on the resource, set the resources to be collected, and collect them.
      The second is that you can collect custom metrics and logs through the OpenAPI/CLI provided by ServiceWatch.

      Reference
      Custom metric/log collection via ServiceWatch Agent is currently only available on Samsung Cloud Platform For Enterprise. It will be offered in other offerings in the future.
      Caution

      ServiceWatch’s metric API incurs costs for calls. Collecting metrics via the ServiceWatch Agent also operates on an OpenAPI basis, so metric API calls incur costs.
      Caution is needed to avoid excessive API calls for metric and log collection. The billable metric APIs are as follows.

      APIdescription
      ListMetricDataMetric data list retrieval.
      • Since a single API call can request multiple metrics, charges are applied per 1,000 metric requests.
      DownloadMetricDataImageMetric data widget image download.
      • Since a single API call can request multiple metrics, a charge is applied per 1,000 requested metrics.
      ListMetricInfosRetrieve metric data.
      • Charges apply per 1,000 calls of this API
      CreateCustomMetricMetasCreate custom metric meta data
      • This API is charged per 1,000 calls
      CreateCustomMetricsCreate custom metric data (transmission)
      • This API is charged per 1,000 calls
      ShowDashboardDashboard view
      • This API charges a fee per 1,000 calls
      ListDashboardsDashboard list retrieval
      • This API is charged per 1,000 calls
      CreateDashboardCreate Dashboard
      • This API is charged per 1,000 calls
      SetDashboardEdit Dashboard
      • This API is charged per 1,000 calls
      DeleteBulkDashboardsDelete Dashboard
      • This API is charged per 1,000 calls
      Table. Indicator API Billing Guide

      Logs incur charges based on the amount of data collected, so there is no separate charge for API calls.

      ※ For detailed pricing information, please refer to the ServiceWatch pricing information on the Samsung Cloud Platform Service Portal.

      ServiceWatch Agent

      You can install the ServiceWatch Agent on the user’s resources such as Virtual Server/GPU Server/Bare Metal Server to collect custom metrics and logs.

      ServiceWatch Agent Constraints

      ServiceWatch Agent Network Environment

      ServiceWatch Agent is designed to collect data using OpenAPI by default, so to install and use it on server resources, external communication via the Internet must be possible. Please create an Internet Gateway in the VPC where the resources are located and set a NAT IP on the server resources so that they can communicate with the outside.

      ServiceWatch Agent Supported OS Image

      The OS images available for ServiceWatch Agent are as follows.

      OS Image VersionEOS Date
      Alma Linux 8.102029-05-31
      Alma Linux 9.62025-11-17
      Oracle Linux 8.102029-07-31
      Oracle Linux 9.62025-11-25
      RHEL 8.102029-05-31
      RHEL 9.42026-04-30
      RHEL 9.62027-05-31
      Rocky Linux 8.102029-05-31
      Rocky Linux 9.62025-11-30
      Ubuntu 22.042027-06-30
      Ubuntu 24.042029-06-30
      Windows 20192029-01-09
      Windows 20222031-10-14
      Table. ServiceWatch Agent usable OS Image

      Provides the same as the OS Image provided by Virtual Server. Please refer to Virtual Server > OS Image provided version.

      Quick Guide for Using ServiceWatch Agent

      Below, we introduce a quick guide for collecting OS metrics and logs of Virtual Server in a Linux environment.

      Node Exporter Installation and Configuration

      1. Refer to Node Exporter installation and install Node Exporter on the server for collecting custom metrics.
        • If you install Node Exporter, you can collect OS metrics through Node Exporter in addition to the metrics provided by ServiceWatch’s default monitoring.
      2. ServiceWatch Agent Settings refer to and after downloading the ServiceWatch_Agent zip file, configure and run the ServiceWatch Manager.
        • Refer to the examples/os-metric-min-examples folder in the zip file to set at least two metrics and run the ServiceWatch Agent.
      Caution

      Metric collection via ServiceWatch Agent is classified as custom metrics and, unlike the metrics collected by default from each service, incurs charges, so you must be careful not to set up unnecessary metric collection. Ensure that only the metrics that need to be collected are collected.

      • Free provision is provided up to 10 per Account/region.
      Note
      For detailed information on using ServiceWatch Agent, please refer to How-to guides > Using ServiceWatch Agent.

      ServiceWatch Custom Metrics and Logs API

      You can collect custom metrics and logs through the OpenAPI/CLI provided by ServiceWatch.

      Custom metric data and custom logs can be delivered to ServiceWatch via ServiceWatch OpenAPI/CLI, allowing you to view visualized information in the Console.

      Caution

      Collecting metrics via ServiceWatch OpenAPI/CLI is classified as custom metrics, and unlike the metrics that are collected by default from each service, charges apply, so you must be careful not to set up unnecessary metric collection. Make sure to configure it so that only the metrics that need to be collected are collected.

      • Free provision is provided up to 10 per Account/region.

      Create Custom Metric Metadata

      To collect metric data generated from user resources or applications, rather than metrics provided by Samsung Cloud Platform services (e.g., Virtual Server), into ServiceWatch, you need to create custom metric metadata.

      ParameterExplanation
      namespaceUsers can define a namespace in ServiceWatch that can be distinguished from other metrics
      • The namespace must be 3 to 128 characters, including letters, numbers, spaces, and special characters (_ - /), and must start with a letter.
      • For detailed information, refer to Namespace.
      metricMetas > metricNameSet the name of the metric to be collected. The metric name must be 3 to 128 characters long, including English letters, numbers, and special characters (_), and must start with an English letter.
      • Example: custom_cpu_seconds_total
      metricMetas > storageResolutionSet the collection interval for the corresponding metric. The default is 60 (1 minute) and can be set in seconds
      metricMetas > unitMetric unit can be set
      • Example: Bytes, Count, etc.
      metricMetas > dimensionsYou can set dimensions to identify custom metric data and visualize it in the Console. When visualizing the collected metrics in the Console, they are displayed in combinations according to the dimension (dimensions) settings.
      metricMetas > descriptionKoKorean description of the metric being collected
      metricMetas > descriptionEnEnglish description of the metric being collected
      Table. User-defined metric metadata parameter description

      For detailed information on creating custom metric metadata, see CreateCustomMetricMetas.

      Create Custom Metrics

      After generating custom metric metadata, you can deliver the resulting metric data to ServiceWatch using the CreateCustomMetrics API.

      The transmitted metric data can be queried, separated by the configured namespace.

      For detailed information on creating custom metric data, refer to CreateCustomMetrics.

      Indicator Data Query

      Metric data, including custom metrics, can be queried using the Console and the ListMetricInfos, ListMetricInfos API.

      For detailed information on metric data retrieval, refer to ListMetricInfos and ListMetricData.

      Log Stream Creation

      A ServiceWatch log group is required for custom log collection. Log groups can only be created in the Console. After creating a log group in advance, you can use the log stream creation API to create a log stream to be delivered to ServiceWatch.

      For detailed information on creating a log stream, refer to CreateCustomLogStream.

      Log Event Creation

      To collect custom logs, after creating log groups and log streams, we use the log event creation API to deliver individual log messages (log events) to ServiceWatch.

      For detailed information on creating log events, refer to CreateCustomLogEvents.

      11.2 - How-to guides

      Users can monitor resources created in Samsung Cloud Platform through ServiceWatch.

      Using Dashboards

      You can monitor resources on the dashboard detail screen of ServiceWatch.

      Note
      • To use a dashboard, you must first create a dashboard and register monitoring metrics as widgets.
      • For details on dashboard creation, refer to Creating a Dashboard.

      Follow these steps to monitor resources using a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for the resources you want to monitor. You will be taken to the Dashboard Detail page.
      4. On the Dashboard Detail page, select the monitoring period and time zone, then monitor resources through widgets.
        DivisionDetailed Description
        Dashboard NameDashboard name
        • Click the name to select another dashboard
        Period Setting AreaSelect the period to apply to widgets in the dashboard
        • For metric query, you can set up to 455 days from the current time
        Time Zone Setting AreaSelect the time zone to apply to the period setting
        Reset ButtonReset all manipulations or settings on the dashboard detail screen
        Refresh Setting AreaSelect the refresh cycle for widget information
        • Click the Refresh button to display information based on the current time
        • Click the refresh cycle to select the desired cycle: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
        EditModify dashboard information
        • When you click the Edit button, you will be taken to the Edit Dashboard page
        MoreDisplay additional task items for managing the dashboard
        Alert StatusDisplay the number of active alerts among the alerts linked to the recommended metrics of the service dashboard by level
        • When you click the View All Alert Policies button, you will be taken to the Alert Policy List page
        • When you click the Expand button, it is provided in widget format (up to 12)
          • View Alert Policy: Go to the Alert Policy Detail page for that metric
        Dashboard StatusDisplay metric widgets for monitoring each resource
        • Click the View Widget Enlarged button to view detailed information about the metric
        • Click the More button to manage the widget
        • When you place the mouse cursor on the graph, the time, data value, and metric data information at that point are displayed in a popup
        • You can zoom in on a specific area of the graph by dragging the mouse
        • When you click the resource name displayed in the legend, detailed information about that resource is displayed in a popup
        Table. Dashboard Detail Items
      Reference
      • When you click the More > View Metrics button in the upper right corner of a widget, you can view metric information for that widget on the Metrics page.
      • For details on the Metrics page, refer to Viewing Metrics.

      Setting Dashboard Favorites

      You can set frequently used dashboards as favorites to easily navigate to those dashboards on the Service Home page of ServiceWatch. Follow these steps to set a dashboard as a favorite.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, check the favorite icon of the dashboard you want to add to favorites. Click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
        • The favorited dashboard is added to the bottom of the Dashboard > Dashboard Favorites menu and the Dashboard Favorites area of the Service Home page.

      Viewing Widget Details

      You can individually view widgets in the dashboard by enlarging them. Follow these steps to view an individual widget in enlarged mode.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for the resources you want to monitor. You will be taken to the Dashboard Detail page.
      4. On the Dashboard Detail page, click the View Widget Enlarged button of the widget you want to view in enlarged mode. The Metric Detail popup window for that widget will open.
        DivisionDetailed Description
        Widget NameDisplay the widget name
        Period Setting AreaSelect the period to apply to the widget
        • For metric query, you can set up to 455 days from the current time
        Time Zone Setting AreaSelect the time zone to apply to the period setting
        Reset ButtonReset all manipulations or settings on the dashboard detail screen
        StatisticsSelect the statistics criterion for the metrics displayed in the widget
        • Click the statistics criterion to select the criterion: Average, Minimum, Maximum, Sum
        Aggregation Period Setting AreaSelect the aggregation period for widget information
        • Click the aggregation period to select the desired period: 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
        Refresh Setting AreaSelect the refresh cycle for widget information
        • Click the Refresh button to display information based on the current time
        • Click the refresh cycle to select the desired cycle: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
        Chart AreaDisplay monitoring results as a chart
        • When you place the mouse cursor on the graph and legend areas, the time, data value, and metric data information at that point are displayed in a popup
        • You can zoom in on that area by dragging the graph area
        • When you click the resource name displayed in the legend, the alert status for that resource opens in a popup
        Table. Metric Detail Items

      Viewing Alert History

      You can view alert history for metrics registered in ServiceWatch dashboards. Follow these steps to view alert history.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Alert > Alert History menu. You will be taken to the Alert History page.
      3. On the Alert History page, view the alert history.
        DivisionDetailed Description
        Alert Filter and Search AreaFilter or search alert history
        • All Alert Status: Filter by selecting alert status
        • Search by entering the alert policy name in the search input field
        • Detailed Search: Search by entering alert policy name, alert status, or change date
        Alert Policy NameAlert policy name
        • When you click the alert policy name, you can view detailed information of that alert policy
        ConditionAlert occurrence condition and total occurrence time
        • Display levels by importance: High, Middle, Low
        DivisionClassification of alert creation and alert status change information
        Alert StatusCurrent alert status
        • Normal: When the metric does not meet the set condition
        • Insufficient data: When metric data cannot be verified (missing, non-existent, not arrived)
        • Alert: When the metric meets the set condition
        Alert LevelWhen alert status is Alert, display the alert level
        • High, Middle, Low
        Table. Alert History Items
      Reference
      You can create and manage new alert policies. For details on alert policies, refer to Viewing Alert Policies.

      Monitoring Metrics

      You can view and monitor metrics available in ServiceWatch.

      Comparing by Metrics

      You can select one or more metrics and resources to monitor. Follow these steps to monitor by comparing metrics.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Metrics menu. You will be taken to the Metrics page.

      3. On the Metrics page, click Compare by Metrics in the metric view mode.

      4. On the Metrics page, select the metrics you want to monitor from the metric list. A monitoring chart for the selected metrics is displayed in the Selected Metrics area at the bottom.

        DivisionDetailed Description
        Metric List AreaList of metrics that can be monitored in ServiceWatch
        • Click the + button in front of the namespace and dimensions to view the lower-level list
        • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
        Search Filter AreaSet the search items to filter, then click the Apply Filter button to filter the metric list
        • Namespace-Dimension Name: Search based on the sub-dimension name of the selected namespace
        • Metric Name: Search by entering the exact metric name
        • Resource Name: Search by entering the exact resource name
        • Resource ID: Search by entering the exact resource ID
        • Keyword: Search based on the selected upper category and entered keyword
          • Search for each item excluding metric name, resource name, resource ID, and Tag-Key
        • Tag Key: Search with the selected tag key
        Table. Metric List Items

      5. View the monitoring chart in the Selected Metrics area.

        DivisionDetailed Description
        Period Setting AreaSelect the period to apply to the chart
        • For metric query, you can set up to 455 days from the current time
        Time Zone Setting AreaSelect the time zone to apply to the chart
        Reset ButtonReset all manipulations or settings on the chart
        Refresh Setting AreaSelect the refresh cycle for the chart
        • Click the Refresh button to display information based on the current time
        • Click the refresh cycle to select the desired cycle: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
        MoreDisplay additional task items for managing the chart
        Graph AreaData graph collected during the period applied to the chart
        • When you place the mouse cursor on the graph, the time, data value, and metric data information at that point are displayed in a popup
        • You can zoom in on a specific area of the graph by dragging the mouse
        • When you click the label name displayed in the legend, detailed information about that legend is displayed in a popup
        Table AreaCheck and modify labels, statistics, and aggregation period by legend
        • Legend: Color by legend
          • Click the legend color to change to a different color
        • Label: Display the namespace, resource name, and metric name of the selected metric
          • Click the legend name to change
          • Enter within 3 to 255 characters using English letters, numbers, and special characters
        • Statistics: Select the method to aggregate metric data
          • You can select from Average (default), Minimum, Maximum, Sum
        • Aggregation Period: Select the aggregation period unit of metric values
          • You can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
        • More: Delete the legend or create an alert policy for the legend
        Table. Compare by Metrics Monitoring Chart Items
        Reference
        • Statistics methods are as follows.
          • Sum: Sum of all data point values collected during the period
          • Average: Value obtained by dividing the Sum during the specified period by the number of data pointers during that period
          • Minimum: Lowest value observed during the specified period
          • Maximum: Highest value observed during the specified period
        • For a detailed explanation of metrics, refer to Metrics Overview.

      Comparing by Date

      You can monitor by comparing one metric and resource by date or period. Follow these steps to monitor by comparing by date or period.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Metrics menu. You will be taken to the Metrics page.

      3. On the Metrics page, click Compare by Date in the metric view mode.

      4. On the Metrics page, select the metrics you want to monitor from the metric list. A monitoring chart for the selected metrics is displayed in the Selected Metrics area at the bottom.

        DivisionDetailed Description
        Metric List AreaList of metrics that can be monitored in ServiceWatch
        • Click the + button in front of the namespace and dimensions to view the lower-level list
        • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
        Search Filter AreaSet the search items to filter, then click the Apply Filter button to filter the metric list
        • Namespace-Dimension Name: Search based on the sub-dimension name of the selected namespace
        • Metric Name: Search by entering the exact metric name
        • Resource Name: Search by entering the exact resource name
        • Resource ID: Search by entering the exact resource ID
        • Keyword: Search based on the selected upper category and entered keyword
          • Search for each item excluding metric name, resource name, resource ID, and Tag-Key
        • Tag Key: Search with the selected tag key
        Table. Metric List Items

      5. View the monitoring chart in the Selected Metrics area.

        DivisionDetailed Description
        Date Comparison/Period ComparisonSelect the criterion to compare metrics
        • Date Comparison: Compare by specifying a specific date
        • Period Comparison: To be provided in the future
        Date and Period Setting AreaSelect the date or period to compare
        • Date Comparison: Specify the date to view in the chart
          • You can set up to 455 days from the current time
          • You can set up to 4
        • Period Comparison: To be provided in the future
        Time Zone Setting AreaSelect the time zone to apply to the chart
        Reset ButtonReset all manipulations or settings on the chart
        Refresh Setting AreaSelect the refresh cycle for the chart
        • Click the Refresh button to display information based on the current time
        • Click the refresh cycle to select the desired cycle: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
        MoreDisplay additional task items for managing the chart
        Graph AreaData graph collected during the period applied to the chart
        • When you place the mouse cursor on the graph, the time, data value, and metric data information at that point are displayed in a popup
        • You can zoom in on a specific area of the graph by dragging the mouse
        • When you click the date or period displayed in the legend, detailed information about that legend is displayed in a popup
        Table AreaCheck and modify labels, statistics, and aggregation period by legend
        • Legend: Color by legend
          • Click the legend color to change to a different color
        • Period: Period applied to the chart
        • Metric: Display the namespace, resource name, and metric name of the selected metric
        • Statistics: Select the method to aggregate metric data
          • You can select from Average (default), Minimum, Maximum, Sum.
          • Note the green icon displayed to the right of meaningful metrics for that metric
        • Aggregation Period: Select the aggregation period unit of metric values
          • You can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
        • More: Delete the legend or create an alert policy for the legend
        Table. Compare by Date Monitoring Chart Items
        Reference
        • Statistics methods are as follows.
          • Sum: Sum of all data point values collected during the period
          • Average: Value obtained by dividing the Sum during the specified period by the number of data pointers during that period
          • Minimum: Lowest value observed during the specified period
          • Maximum: Highest value observed during the specified period
        • For a detailed explanation of metrics, refer to Metrics Overview.

      Monitoring Logs

      You can monitor logs collected from Samsung Cloud Platform services.

      Note
      To view log monitoring data, you must first create a Log Group and Log Stream. For details on log groups, refer to Monitoring Logs.
      Follow these steps to view log monitoring data.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to view detailed information. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Stream tab. The Log Stream list is displayed.
      5. On the Log Stream list, click the log stream name for which you want to view detailed information. You will be taken to the Log Stream Detail page.
        • When you click the View All Log Streams button at the top of the log stream list, you will be taken to the All Log Streams Detail page.
          DivisionDetailed Description
          Excel DownloadDownload log stream history as an Excel file
          Timestamp ListMessage list by timestamp
          • Filter using Period Selection, User Time Zone, and message input
          Table. Log Group Detail - Log Stream Detail Items

      Receiving Event Notifications

      You can receive notifications by creating system event rules for changes in resources created in Samsung Cloud Platform.

      Note
      To receive event notifications, you must first create an Event Rule. For details on event rule creation, refer to Creating an Event Rule.

      Installing ServiceWatch Agent

      You can install ServiceWatch Agent to collect custom metrics and logs from monitoring targets.

      Warning
      Metric collection through ServiceWatch Agent is classified as custom metrics and is charged differently from metrics collected by default from each service, so be careful not to set up unnecessary metric collection. Make sure to set it up so that only necessary metrics are collected.
      Follow these steps to install ServiceWatch Agent.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Agent Setup & Guideline button. The Agent Setup & Guideline popup window will open.
      3. Copy the Installation File URL from the Agent Setup & Guideline popup window and navigate to that address. You can download the agent, manager, and configuration files.
      Reference
      Custom metric and log collection through ServiceWatch Agent is currently available only in Samsung Cloud Platform For Enterprise. It will be provided in other offerings in the future.

      11.2.1 - Managing Dashboards and Widgets

      You can create and manage dashboards to monitor resources of services in use on the Samsung Cloud Platform Console.

      Creating a Dashboard

      You can create dashboards in ServiceWatch.

      Creating a Dashboard by Adding Individual Widgets

      Follow these steps to create a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

      3. On the Dashboard List page, click the Create Dashboard button.

      4. Enter a name for the dashboard.

        • The dashboard name must be 3 to 40 characters long, using English letters, numbers, and special characters (-_).
        • You cannot enter a name that is already in use in the service dashboard.
      5. Add widgets to configure the dashboard. Depending on the widget addition method, a corresponding popup window will open.

        • Add Individual Widget: You can add a single widget combining metrics and resources. When you click the button, the Add Individual Widget popup window will open.
          Division
          Required
          Detailed Description
          Metric DivisionOptionalFilter the metrics that can be monitored in ServiceWatch by All or Key Metrics and display them in the metric list
          Metric List AreaRequiredList of metrics that can be monitored in ServiceWatch
          • Click the + button in front of the namespace and dimensions to view the lower-level list
          • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
          Search Filter Area-Set the search items to filter, then click the Apply Filter button to filter the metric list
          • Namespace-Dimension Name: Search based on the sub-dimension name of the selected namespace
          • Metric Name: Search by entering the exact metric name
          • Resource Name: Search by entering the exact resource name
          • Resource ID: Search by entering the exact resource ID
          • Keyword: Search based on the selected upper category and entered keyword
            • Search for each item excluding metric name, resource name, resource ID, and Tag-Key
          • Tag Key: Search with the selected tag key
          Selected Metrics Area-Monitoring chart for the metric selected in the metric list area
          • Data graph collected during the period applied to the chart
            • When you place the mouse cursor on the graph, the time, data value, and metric data information at that point are displayed in a popup
            • You can zoom in on a specific area of the graph by dragging the mouse
            • When you click the resource name displayed in the legend, detailed information about that resource is displayed in a popup
          • You can modify item values in the table area within the chart
            • Label: Enter the legend name using English letters, numbers, and special characters within 3 to 255 characters
            • Statistics: Select the method to aggregate metric data
              • You can select from Average (default), Minimum, Maximum, Sum
            • Aggregation Period: Select the aggregation period unit of metric values
              • You can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours
            • Delete: Delete that legend
          Table. Add Individual Widget Items
      6. Click the Done button in the widget addition popup window. The widget is added to the dashboard on the dashboard creation page.

      7. After confirming the added widget, click the Create button. A popup window will open announcing the dashboard creation.

      8. Click the Confirm button. The dashboard creation is complete.

      Creating a Dashboard by Adding Multiple Widgets

      Follow these steps to create a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

      3. On the Dashboard List page, click the Create Dashboard button.

      4. Enter a name for the dashboard.

        • The dashboard name must be 3 to 40 characters long, using English letters, numbers, and special characters (-_).
        • You cannot enter a name that is already in use in the service dashboard.
      5. Add widgets to configure the dashboard. Depending on the widget addition method, a corresponding popup window will open.

        • Add Multiple Widgets: You can select desired resources by metric unit and add multiple widgets at once. When you click the button, the Add Multiple Widgets popup window will open.
          Division
          Required
          Detailed Description
          Metric DivisionOptionalFilter the metrics that can be monitored in ServiceWatch by All or Key Metrics and display them in the metric list
          Metric Selection AreaRequiredSelect the namespace and resources to add
          • Click the + button in front of the namespace and resources to view the lower-level resources and metric list
          • When you check a metric to add to a widget from the metric list, the Selected Metrics and Selected Resources areas are displayed
          • You can select multiple metrics
          Selected MetricsRequiredDisplay the list of metrics selected from the namespace and resource list
          • When you click a metric, the list of resources included in that metric is displayed in the Selected Resources area
          Selected ResourcesRequiredAdd resources to the metrics selected in the Selected Metrics list
          • After clicking the Select button, select resources that can be added to that metric and add up to 5
          • You must add resources for all metrics in the Selected Metrics list
          StatisticsRequiredSelect the statistics criterion for metric values
          • You can select from Average (default), Minimum, Maximum, Sum
          Aggregation PeriodRequiredSelect the aggregation period unit of metric values
          • You can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours
          Table. Add Multiple Widgets Items
      6. Click the Done button in the widget addition popup window. The widget is added to the dashboard on the dashboard creation page.

      7. After confirming the added widget, click the Create button. A popup window will open announcing the dashboard creation.

      8. Click the Confirm button. The dashboard creation is complete.

      Creating a Dashboard by Importing a Dashboard

      Follow these steps to create a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

      3. On the Dashboard List page, click the Create Dashboard button.

      4. Enter a name for the dashboard.

        • The dashboard name must be 3 to 40 characters long, using English letters, numbers, and special characters (-_).
        • You cannot enter a name that is already in use in the service dashboard.
      5. Add widgets to configure the dashboard. Depending on the widget addition method, a corresponding popup window will open.

        • Import Dashboard: You can import widgets from a dashboard registered in ServiceWatch. When you click the button, the Import Dashboard popup window will open.
          Division
          Required
          Detailed Description
          DashboardRequiredDisplay the list of dashboards registered in ServiceWatch
          • When you select a dashboard, the widgets applied to that dashboard are displayed in the Preview area
          PreviewRequiredDisplay the widgets applied to the dashboard selected from the dashboard list
          • Check the widget name to select the widget to add to the dashboard to create
          • When you check the Select All item, all metrics of that dashboard are selected
          Table. Import Dashboard Items
      6. Click the Done button in the widget addition popup window. The widget is added to the dashboard on the dashboard creation page.

      7. After confirming the added widget, click the Create button. A popup window will open announcing the dashboard creation.

      8. Click the Confirm button. The dashboard creation is complete.

      Viewing Dashboards

      You can view information about the dashboard selected on the Dashboard List page. Follow these steps to view a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
        DivisionDetailed Description
        Dashboard NameDashboard name
        • User dashboard is the dashboard name set by the user. Service dashboard is the Samsung Cloud Platform service name matching the service namespace
        Dashboard DivisionDashboard division
        • User: Dashboard created directly by the user
        • Service: Dashboard composed of key metrics for each service automatically pre-built
        Modified DateDashboard modification date
        Created DateDashboard creation date
        FavoritesDisplayed in yellow if favorites are set
        • To set or unset favorites, click the star icon
        Table. Dashboard List Items
      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
        DivisionDetailed Description
        Dashboard NameDisplay the dashboard name
        • Click the name to select another dashboard
        Period Setting AreaSelect the period to apply to widgets in the dashboard
        • For metric query, you can set up to 455 days from the current time
        Time Zone Setting AreaSelect the time zone to apply to the period setting
        Reset ButtonReset all manipulations or settings on the dashboard detail screen
        Refresh Setting AreaSelect the refresh cycle for widget information
        • Click the Refresh button to display information based on the current time
        • Click the refresh cycle to select the desired cycle: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
        EditModify the dashboard name or manage widgets
        • When you click the Edit button, you will be taken to the Edit Dashboard page
        MoreDisplay additional task items for managing the dashboard
        • You can clone and delete the dashboard, view detailed information, and view source
        Widget AreaDisplay widgets for monitoring each resource
        • Click the More button in the upper right corner of the widget to manage the widget
        • You can edit and clone the widget, download files, view metrics, and view source
        Table. Dashboard Detail Items

      Managing Dashboards

      On the Dashboard Detail page, you can modify or manage dashboard information and widgets.

      Editing a Dashboard

      You can modify the dashboard name or change the widget configuration.

      Note
      Service dashboards cannot be edited.
      Follow these steps to edit a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
      4. Click the Edit button in the upper right corner of the Dashboard Detail page. You will be taken to the Edit Dashboard page.
      5. After modifying the dashboard information or widgets, click the Save button.
        DivisionDetailed Description
        Dashboard NameDashboard name cannot be modified
        • Enter within 34 characters using English letters, numbers, and special characters (-_)
        • Duplicate dashboard names in use cannot be used
        Widget NameWidget name can be modified
        • Enter within 3 to 255 characters using English letters, numbers, spaces, and special characters (-_.|)
        Widget ManagementWhen you place the mouse cursor on a widget, management buttons are displayed on the right side of the widget border
        • Edit: You can modify the widget’s metrics and resources in the Edit Widget popup window
          • For details on widget editing, refer to Edit Individual Widget in Managing Widgets
        • Clone: Clone the current widget and add it to the dashboard
        • Delete: Delete the current widget from the dashboard
        • Expand: Display the current widget in an expanded size
          • Shrink: If displayed in expanded size, click again to shrink the widget size
        Add WidgetAdd a new widget to the dashboard
        • Add Individual Widget: Add a single widget combining metrics and resources
        • Add Multiple Widgets: Select desired resources by metric unit and add multiple widgets at once
        • Import Dashboard: Import widgets from another dashboard and add them
        Table. Edit Dashboard Items

      Viewing Dashboard Detailed Information

      You can view detailed information about a dashboard. Follow these steps to view dashboard detailed information.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
      4. Click the More > Detailed Information button in the upper right corner of the Dashboard Detail page. The Dashboard Detailed Information popup window will open.
        DivisionDetailed Description
        Dashboard NameDashboard name
        Dashboard DivisionUsage division of the dashboard
        • User: Dashboard created directly by the user
        • Service: Dashboard composed of key metrics for each service automatically pre-built
        ServiceService name
        Resource Typedashboard
        SRNUnique resource ID in Samsung Cloud Platform
        • In ServiceWatch, it means the SRN of the dashboard
        Resource NameResource name
        • In ServiceWatch, it means the dashboard name
        Resource IDUnique resource ID in the service
        CreatorUser who created the dashboard
        Created DateDate and time when the dashboard was created
        ModifierUser who modified the dashboard information
        Modified DateDate and time when the dashboard information was modified
        Table. Dashboard Detail - Detailed Information Popup Items
      Reference

      When sorting dashboard names in the dashboard list, follow the sorting rules below.

      1. Whitespace and control characters
      2. Some special characters ( !"#$%&()*+,-./ )
      3. Numbers (0–9)
      4. Some special characters ( ; < = > ? @ )
      5. English (A–Z, a–z, case-insensitive)
      6. Remaining special characters ([\]^_`)
      7. Other characters

      Viewing Dashboard Source Code

      You can view the dashboard source code. Follow these steps to view dashboard source code.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
      4. Click the More > View Source button in the upper right corner of the Dashboard Detail page. The Dashboard View Source popup window will open.
        DivisionDetailed Description
        Source InformationDisplay dashboard source code in JSON format
        Copy CodeCopy source code to clipboard
        Table. Dashboard Detail - Dashboard View Source Popup Items

      Cloning a Dashboard

      You can clone the widgets of the current dashboard and add them to another dashboard.

      Note

      User permissions are required to clone a dashboard.

      • User: {email}
      • Action: iam:CreatGroup
      • On resource: {SRN}
      • Context: no identity-based policy allows the action

      Follow these steps to clone a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.

      4. Click the More > Clone button in the upper right corner of the Dashboard Detail page. The Clone Dashboard popup window will open.

      5. Select a dashboard cloning method and enter the required information. The required information varies depending on the cloning method.

        Division
        Required
        Detailed Description
        Clone Target-Dashboard name to clone
        Clone MethodRequiredAfter cloning the dashboard widgets, select the dashboard to add to
        • New Dashboard: Create a new dashboard and create by cloning the widgets of the current dashboard
        • Existing Dashboard: Clone the widgets of the current dashboard and add them to an existing dashboard
        Dashboard NameRequiredEnter the name of the dashboard to create
        • Displayed when clone method is selected as New Dashboard
        • Enter within 3 to 40 characters using English letters, numbers, and special characters (-_)
        Dashboard SelectionRequiredSelect a dashboard to add the cloned widgets from among previously created dashboards
        • Displayed when clone method is selected as Existing Dashboard
        Table. Clone Dashboard Items

      6. After entering the required information, click the Done button. A popup window will open announcing the dashboard cloning.

      7. Click the Confirm button in the popup window. The dashboard cloning is complete.

      Reference
      You can clone a service dashboard and add widgets to a user dashboard, or create it as a new dashboard.

      Deleting a Dashboard

      You can delete dashboards that are not in use.

      Note
      Service dashboards cannot be deleted.
      Follow these steps to delete a dashboard.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, select the checkbox of the dashboard to delete and click the Delete button. A popup window will open announcing the dashboard deletion.
        • You can delete multiple dashboards at the same time.
        • You can also delete individually by clicking the More > Delete button in the upper right corner of the Dashboard Detail page.
      4. After entering Delete in the delete confirmation input area, click the Confirm button. The dashboard is deleted.

      Managing Widgets

      On the Dashboard Detail page, you can modify or manage widgets.

      Editing a Widget

      You can modify the metrics and resources of a widget.

      Note
      Widgets in service dashboards cannot be edited.
      Follow these steps to edit a widget.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to edit widgets. You will be taken to the Dashboard Detail page.
      4. Click the More > Edit Widget button in the upper right corner of the widget to edit on the Dashboard Detail page. The Edit Widget popup window will open.
      5. After modifying the widget’s metrics and resources, click the Confirm button. The widget editing is complete.
        Division
        Required
        Detailed Description
        Metric DivisionOptionalFilter the metrics that can be monitored in ServiceWatch by All or Key Metrics and display them in the metric list
        Metric List AreaRequiredList of metrics that can be monitored in ServiceWatch
        • Click the + button in front of the namespace and dimensions to view the lower-level list
        • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
        Search Filter Area-Set the search items to filter, then click the Apply Filter button to filter the metric list
        • Namespace-Dimension Name: Search based on the sub-dimension name of the selected namespace
        • Metric Name: Search by entering the exact metric name
        • Resource Name: Search by entering the exact resource name
        • Resource ID: Search by entering the exact resource ID
        • Keyword: Search based on the selected upper category and entered keyword
          • Search for each item excluding metric name, resource name, resource ID, and Tag-Key
        • Tag Key: Search with the selected tag key
        Selected Metrics Area-Monitoring chart for the metric selected in the metric list area
        • Data graph collected during the period applied to the chart
          • When you place the mouse cursor on the graph, the time, data value, and metric data information at that point are displayed in a popup
          • You can zoom in on a specific area of the graph by dragging the mouse
          • When you click the label name displayed in the legend, detailed information about that legend is displayed in a popup
        • In the table area within the chart, you can check and modify labels, statistics, and aggregation period by legend
          • Legend: Color by legend
            • Click the legend color to change to a different color
          • Period: Period applied to the chart
          • Metric: Display the namespace, resource name, and metric name of the selected metric
          • Statistics: Select the method to aggregate metric data
            • You can select from Average (default), Minimum, Maximum, Sum
          • Aggregation Period: Select the aggregation period unit of metric values
            • You can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
          • Delete: Delete that legend
        Table. Add Individual Widget Items

      Cloning a Widget

      You can copy a widget and add it to another dashboard.

      Note

      User permissions are required to clone a dashboard.

      • User: {email}
      • Action: iam:CreatGroup
      • On resource: {SRN}
      • Context: no identity-based policy allows the action

      Follow these steps to clone a widget.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

      3. On the Dashboard List page, click the dashboard to clone. You will be taken to the Dashboard Detail page.

      4. Click the More > Clone Widget button in the upper right corner of the widget to clone on the Dashboard Detail page. The Clone Widget popup window will open.

      5. Select a widget cloning method and enter the required information. The required information varies depending on the cloning method.

        Division
        Required
        Detailed Description
        Clone Target-Dashboard name to clone
        Clone MethodRequiredAfter cloning the widget, select the dashboard to add to
        • Existing Dashboard: Add the widget to an existing dashboard
        • New Dashboard: Create a new dashboard and add the widget
        Dashboard SelectionRequiredSelect a dashboard to add the cloned widget from among previously created dashboards
        • Displayed when clone method is selected as Existing Dashboard
        Dashboard NameRequiredEnter the name of the dashboard to create
        • Displayed when clone method is selected as New Dashboard
        • Enter within 3 to 40 characters using English letters, numbers, and special characters (-_)
        Widget NameRequiredEnter the widget name when adding the widget to the dashboard
        • Enter within 3 to 255 characters using English letters, numbers, and special characters (-_.|)
        Table. Clone Widget Items

      6. After entering the required information, click the Done button. A popup window will open announcing the widget addition.

      7. Click the Confirm button in the popup window. The widget is cloned and added to the dashboard.

      Downloading Widget Files

      You can download widget information as a file. Follow these steps to download widget information.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to download widget information. You will be taken to the Dashboard Detail page.
      4. Click the More > File Download button in the upper right corner of the widget for which you want to download widget information on the Dashboard Detail page. The File Download popup window will open.
      5. Select a file download method and click the Confirm button. The download will start.
        • You can select multiple download methods at the same time.
          DivisionDetailed Description
          CSVConvert the widget’s metrics and monitoring data to Excel (*.csv) file format and download
          PNGConvert the widget chart to image (*.png) file format and download
          Table. Widget File Download Items

      Viewing Widget Metrics

      You can view the resource and metric information of a widget on the Metrics page. Follow these steps to view widget metrics on the metrics page.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to view widget metrics. You will be taken to the Dashboard Detail page.
      4. Click the More > View Metrics button in the upper right corner of the widget to view on the Metrics page on the Dashboard Detail page. You will be taken to the Metrics page.
        • The resource and metric information of the selected widget are automatically set and displayed on the Metrics page.
      Reference
      For details on the Metrics page, refer to Viewing Metrics.

      Viewing Widget Source Code

      You can view the dashboard source code.

      Note
      You cannot view widget source information in service dashboards.
      Follow these steps to view dashboard source code.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to view detailed information. You will be taken to the Dashboard Detail page.
      4. Click the More > View Source button in the upper right corner of the widget for which you want to view source code on the Dashboard Detail page. The Widget View Source popup window will open.
        DivisionDetailed Description
        Source InformationDisplay widget source code in JSON format
        Copy CodeCopy source code to clipboard
        Table. Widget View Source Items

      Downloading Widget Files

      You can download widget information as a file. Follow these steps to download widget information.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to download widget information. You will be taken to the Dashboard Detail page.
      4. Click the More > File Download button in the upper right corner of the widget for which you want to download widget information on the Dashboard Detail page. The File Download popup window will open.
      5. Select a file download method and click the Confirm button. The download will start.
        • You can select multiple download methods at the same time.
          DivisionDetailed Description
          CSVConvert the widget’s metrics and monitoring data to Excel (*.csv) file format and download
          PNGConvert the widget chart to image (*.png) file format and download
          Table. Widget File Download Items

      Exporting to Object Storage

      You can save widget information to Object Storage.

      Note

      User permissions are required to save to Object Storage.

      • User: {email}
      • Action: iam:CreatGroup
      • On resource: {SRN}
      • Context: no identity-based policy allows the action

      Follow these steps to save widget information to Object Storage.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
      3. On the Dashboard List page, click the dashboard for which you want to download widget information. You will be taken to the Dashboard Detail page.
      4. Click the More > Export to Object Storage button in the upper right corner of the widget for which you want to download widget information on the Dashboard Detail page. The Export to Object Storage popup window will open.
      5. Select the bucket to save the widget information and click the Done button. A popup window will open announcing the save.
      6. Click the Confirm button in the popup window. The data export will start.
      Note
      • The limitations for metrics that can be exported to Object Storage are as follows.
        • Number of metrics: Up to 10
        • Query period: Within 2 months (63 days)
      • If the query period exceeds 2 months (63 days), only data for up to 63 days will be saved.
      Reference
      • If there is no Object Storage to save metric data, create Object Storage and proceed.
      • Metric data is saved in the file format “metric name-yyyymmddhhmmss.json” and can be viewed in the ~/servicewatch/metric path of the Object Storage bucket.

      11.2.2 - Alert

      In ServiceWatch, you can create and manage alert policies by setting threshold criteria for metrics to monitor, and generate alert notifications when the set conditions are met.

      Creating an Alert Policy

      You can create an alert policy for a metric to set the criteria for alert generation. Follow the steps below to create an alert policy.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.

      3. On the Alert Policy List page, click the Create Alert Policy button. You will be taken to the Create Alert Policy page.

      4. In the Enter Basic Information area, enter the name and description of the alert policy, then click the Select Metric button. The Select Metric popup window opens.

      5. In the Select Metric popup window, select the metric for which you want to create an alert policy, then click the Confirm button. The Metric and Condition Settings area is displayed.

        Category
        Required
        Description
        Metric CategoryRequiredFilter and display the list of metrics available for monitoring in ServiceWatch by All or Key Metrics
        Metric List AreaRequiredList of metrics available for monitoring in ServiceWatch
        • Click the + button in front of namespace, dimension to view the lower-level list
        • When you select a metric to monitor, it is displayed as a chart in the Selected Metric area
        • If the metric is linked to a namespace, Service Dashboard is displayed
          • Clicking Service Dashboard takes you to the detail page of that dashboard
        Search Filter Area-Set the search item to filter, then click the Apply Filter button to filter the metric list
        • Namespace-Dimension Name: Search based on the lower-level dimension name of the selected namespace
        • Metric Name: Enter the exact metric name to search
        • Resource Name: Enter the exact resource name to search
        • Resource ID: Enter the exact resource ID to search
        • Keyword: Search based on the selected upper category and the entered keyword
          • Search for each item excluding metric name, resource name, resource ID, tag-Key
        • Tag Key: Search with the selected tag Key
        Selected Metric Area-Monitoring chart for the metric selected in the metric list area
        • Data graph of data collected during the period applied to the chart
          • Place the mouse cursor on the graph to display the time, data value, and metric data information of that point in a popup
          • Drag the mouse to zoom in on a specific area of the graph
          • Click the label name displayed in the legend to display detailed information about that legend in a popup
        • In the chart display area, you can check and modify the labels, statistics, and aggregation period by legend
          • Legend: Color by legend
            • Click the legend color to change to another color
          • Period: Period applied to the chart
          • Metric: Displays the namespace, resource name, and metric name of the selected metric
          • Statistics: Select the method for aggregating metric data
            • Can select from Average (default), Minimum, Maximum, Sum
          • Aggregation Period: Select the aggregation period unit of the metric value
            • Can select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
          • Delete: Delete that legend
        Table. Select Metric Popup Items

      6. In the Metric and Condition Settings area, set the threshold for alert generation.

        Category
        Required
        Description
        Namespace-Namespace of the selected metric
        Metric Name-Name of the selected metric
        Unit-Data unit of the selected metric
        Evaluation RangeRequiredTime (seconds) range for alert evaluation
        • Can enter up to 604,800 seconds in multiples of 60
        • If set smaller than the collection period or not in multiples of the collection period, alert evaluation may be applied abnormally
        StatisticsRequiredSelect the method for calculating metric data during the evaluation range
        • Sum: Sum of all data point values collected during that period
        • Average: Value of dividing the Sum during the specified period by the number of data points during that period
        • Minimum: Lowest value observed during the specified period
        • Maximum: Highest value observed during the specified period
        Additional ConfigurationOptionalSet the number of evaluations, number of violations, and method for handling missing data
        • When additional configuration is set to Enable, you can set the number of evaluations and number of violations used when evaluating alerts. If the violation count condition is met out of the number of evaluations during the evaluation range (seconds), the alert status changes to Alert
          • Number of Evaluations: Number of evaluations for alert generation
            • Can enter 1 ~ 8,640
          • Number of Violations: Number of allowed violations until alert generation
            • Can enter 1 ~ within Number of Evaluations
          • If the evaluation range is less than 1 hour (3,600 seconds), Number of Evaluations/Evaluation Range can be set up to maximum 1 day (86,400 seconds)
          • If the evaluation range is 1 hour (3,600 seconds) or more, Number of Evaluations/Evaluation Range can be set up to maximum 7 days (604,800 seconds)
        • When additional configuration is set to Enable, you can set how to handle missing data when evaluating alerts.
          • Treat missing data as missing (Missing)
          • Treat missing data as ignore to maintain current alert status (Ignore)
          • Treat missing data as satisfying the condition (Breaching)
          • Treat missing data as normal that does not satisfy the condition (Not breaching)
        Condition SettingRequired
        • Condition Operator: Select the condition operator to compare the calculated metric data value during the evaluation range with the threshold
        • Threshold: Set the threshold to compare with the calculated metric data value during the evaluation range using the condition operator
          • Can enter 0 ~ 2,147,483,647
        • Condition: Description of the condition for alert status (Alert) change according to the set Condition Operator and Threshold
        Alert LevelRequiredSelect the alert level according to the importance of the alert policy
        Resource ID-Resource ID of the metric monitoring target
        Resource Name-Resource name of the metric monitoring target
        Table. Metric and Condition Settings Items

      7. In the Notification Settings area, select the users to receive notifications when an alert occurs.

        • Only users with login history (users who have registered email, mobile phone number) can be added as notification recipients.
        • You can add up to 100 notification recipients.
          Note
          • If there is no user you want to add, you can create a user on the Create User page of the IAM service. For more information about creating a user, see Creating a User.
          • The notification method (E-mail or SMS) can be changed by selecting the notification target as Service > Alert on the Notification Settings page. For more information about notification settings, see Checking Notification Settings.
      8. In the Enter Additional Information area, add tag information.

      9. After checking the summary information, click the Create button. A popup window announcing the creation of the alert policy opens.

      10. Click the Confirm button. The alert policy creation is completed.

      Note
      Creating an alert policy may take more than several tens of minutes depending on the scale.

      Viewing Alert Policy Details

      You can view and manage detailed information about an alert policy. To view detailed information about an alert policy, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
        • You can also click the Alert Level button displayed in the Alert Policy menu to view only the list of alert policies corresponding to that alert level.
      3. On the Alert Policy List page, click the alert policy name for which you want to view detailed information. You will be taken to the Alert Policy Details page.
        CategoryDescription
        Alert Policy StatusStatus of the alert policy
        • Active: Alert policy is activated
        • Inactive: Alert policy is deactivated
        • Can be changed by clicking the Activate or Deactivate button
        Alert Policy DeletionDelete the corresponding alert policy
        Alert StatusCurrent alert status
        • Normal: When the metric does not meet the set condition
        • Insufficient data: When metric data cannot be checked (missing, non-existent, not arrived)
        • Alert: When the metric meets the set condition
        • When alert status is Alert, the alert level (>High, Middle, Low) is also displayed
        Metric Monitoring ChartMetric monitoring chart during the set period
        Information Category TabsInformation category tabs for the alert policy
        • Detailed Information, Notifications, Alert History, Tags, Operation History
        • Click each tab to view the corresponding information
        Table. Alert Details Items
      Note

      When sorting alert policy names in the alert policy list, follow the sorting rules below.

      1. Whitespace and control characters
      2. Some special characters ( !"#$%&()*+,-./ )
      3. Numbers (0–9)
      4. Some special characters ( ; < = > ? @ )
      5. English (A–Z, a–z, case-insensitive)
      6. Remaining special characters ([\]^_`)
      7. Other characters

      Detailed Information

      You can view the basic information and metric information of the alert policy selected on the Alert Policy List page.

      CategoryDescription
      ServiceService name
      Resource TypeResource type
      SRNUnique resource ID in Samsung Cloud Platform
      • In ServiceWatch, means the SRN of the resource type
      Resource NameResource name
      • In ServiceWatch, means the name of the alert policy
      Resource IDUnique resource ID in the service
      CreatorUser who created the service
      Creation DateDate and time when the service was created
      ModifierUser who modified the service information
      Modification DateDate and time when the service information was modified
      Alert Policy NameName of the alert policy
      NamespaceNamespace of the metric
      Metric NameName of the metric
      Evaluation RangeTime range for alert evaluation
      UnitUnit of metric data
      Number of EvaluationsNumber of alert policy evaluations
      Number of ViolationsNumber of alert policy violations
      StatisticsMethod for calculating metric data during the evaluation range
      Evaluation IntervalEvaluation interval: Evaluation range (unit) x Number of evaluations
      ConditionCondition for alert status (Alert) change according to the set Condition Operator and Threshold
      Alert LevelAlert level when alert occurs
      Target Metric Information AreaDescription, resource ID, and resource name of the target metric of the alert policy
      Table. Alert Policy Details - Detailed Information Tab Items

      Notifications

      You can view the notification recipients of the alert policy selected on the Alert Policy List page.

      CategoryDescription
      Notification Recipient ListUser ID, creation date, last login, status information
      • Click the More button to change the notification status (activated/deactivated) for that user or delete the user
      DeleteDelete all selected users from the notification recipient list
      • Activated when you check the user to delete from the notification recipient list
      MoreChange the notification status (activated/deactivated) for the selected user in the notification recipient list
      • Activated when you check the user to change the status in the notification recipient list
      Add Notification RecipientCan add a new notification recipient
      • Select the user to add in the Add Notification Recipient popup window
      Table. Alert Policy Details - Notifications Tab Items
      Note
      • Only users with login history (users who have registered email, mobile phone number) can be added as notification recipients.
      • You can add up to 100 notification recipients.
      • If there is no user you want to add, you can create a user on the Create User page of the IAM service. For more information about creating a user, see Creating a User.
      • The notification method (E-mail or SMS) can be changed by selecting the notification target as Service > Alert on the Notification Settings page. For more information about notification settings, see Checking Notification Settings.

      Alert History

      You can view the history of alert status changes for the alert policy selected on the Alert Policy List page.

      CategoryDescription
      Alert History ListAlert status change date and time, change status category information, alert description
      • Click View Details to view detailed information of that alert history and source code in JSON format
      View DetailsCan view detailed information of alert history and source code in JSON format
      • Activated only when you select 1 alert to view detailed information in the alert history list
      Table. Alert Policy Details - Alert History Tab Items

      Tags

      You can view the tag information of the alert policy selected on the Alert Policy List page, and add, change, or delete it.

      CategoryDescription
      Tag ListKey, Value information of tags
      Modify TagsCan modify or delete existing tag information or add new tags
      • Can add up to 50 tags per resource
      • When adding a tag, if you enter the Key and Value values, you can select from the list of previously created tag Keys and Values
      Table. Alert Policy Details - Tags Tab Items

      Operation History

      You can view the operation history of the alert policy selected on the Alert Policy List page.

      CategoryDescription
      Operation History ListResource change history
      • Can view operation details, operation date and time, resource type, resource name, operation result, operator information
        • Click the Settings button to change information items
      • Can filter using Period Selection, User Time Zone, operator information input, Detailed Search
      • Click the operation details in the Operation History List to go to the Activity History Details page of that operation
      Table. Alert Policy Details - Operation History Tab Items

      Modifying an Alert Policy

      You can modify the target metric and policy settings of an alert policy. To modify an alert policy, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
      3. On the Alert Policy List page, click the alert policy name for which you want to view detailed information. You will be taken to the Alert Policy Details page.
      4. On the Alert Policy Details page, click the Modify button in the Metric Information of the Detailed Information tab. The Modify Metric Information popup window opens.
      5. After modifying the metric information and policy settings, click the Confirm button. A popup window announcing the metric modification opens.
      6. Click the Confirm button. The alert policy modification is completed.

      Deleting an Alert Policy

      You can delete unused alert policies. To delete an alert policy, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
      3. On the Alert Policy List page, select the checkbox of the alert policy you want to delete, then click the Delete button. A popup window announcing the deletion of the alert policy opens.
        • You can delete multiple alert policies at the same time.
        • You can also individually delete by clicking the Delete button at the right end of each alert policy or by clicking the Delete Alert Policy button on the corresponding Alert Policy Details page.
      4. Click the Confirm button. The alert policy is deleted.
      Note
      Deleting an alert policy may take more than several tens of minutes depending on the scale.

      11.2.3 - Metric

      Users can monitor metrics for service resources in Samsung Cloud Platform Console and use them for management.

      Viewing Metrics

      You can view the metrics available in ServiceWatch. To view metrics, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.
      3. Check the metrics in the metric list on the Metric page.
      CategoryDescription
      Metric Comparison ModeSelect the method to compare metrics
      • Metric Comparison: Compare multiple metrics and resources
      • Date Comparison: Compare a single metric and resource over multiple periods
        • Only one metric can be selected
      Metric CategoryFilter and display the list of metrics available for monitoring in ServiceWatch by All or Key Metrics
      Metric List AreaList of metrics available for monitoring in ServiceWatch
      • Click the + button in front of namespace, dimension to view the lower-level list
      • Select a metric to monitor
      • If the metric is linked to a namespace, Service Dashboard is displayed
        • Clicking Service Dashboard takes you to the detail page of that dashboard
      Search Filter AreaSet the search item to filter, then click the Apply Filter button to filter the metric list
      • Namespace-Dimension Name: Search based on the lower-level dimension name of the selected namespace
      • Metric Name: Enter the exact metric name to search
      • Resource Name: Enter the exact resource name to search
      • Resource ID: Enter the exact resource ID to search
      • Keyword: Search based on the selected upper category and the entered keyword
        • Search for each item excluding metric name, resource name, resource ID, tag-Key
      • Tag Key: Search with the selected tag Key
      Selected MetricDisplay monitoring information of the metric selected in the metric list
      Table. Metric List Items

      Managing Metric Charts

      You can add metric monitoring result charts as widgets or manage data.

      Adding as Widget

      You can add selected metrics as widgets to a dashboard.

      Guide
      You can only add as a widget when the metric comparison mode is selected as Metric Comparison.
      To add a metric as a widget, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.

      3. Select the metric to monitor in the metric list on the Metric page. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.

      4. Set the chart area in the monitoring chart in the Selected Metric area, then click the More > Add Widget button. The Add Widget popup window opens.

      5. Select the widget addition method and enter the required information. Required information varies depending on the addition method.

        Category
        Required
        Description
        Duplication MethodRequiredSelect the dashboard to add after duplicating the widget
        • Existing Dashboard: Add widget to existing dashboard
        • New Dashboard: Create a new dashboard and add widget
        Dashboard SelectionRequiredSelect the dashboard to add the duplicated widget among existing dashboards
        • Displayed when duplication method is selected as Existing Dashboard
        Dashboard NameRequiredEnter the name of the dashboard to be newly created
        • Displayed when duplication method is selected as New Dashboard
        • Enter within 3 ~ 40 characters using English, numbers, and special characters (-_)
        Widget NameRequiredEnter the name of the widget when adding the widget to the dashboard
        • Enter within 3 ~ 255 characters using English, numbers, and special characters (-_.|)
        Table. Add Widget Items

      6. After entering the required information, click the Complete button. A popup window announcing the widget addition opens.

      7. Click the Confirm button in the popup window. The widget is added to the dashboard.

      Sharing Monitoring Chart URL

      You can download monitoring chart information in file format. To download monitoring chart information, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.
      3. Select the metric to monitor in the metric list on the Metric page. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
      4. Set the chart area in the monitoring chart in the Selected Metric area, then click the More > Share URL button. The Share URL popup window opens.
      5. Click the Copy URL button in the Share URL popup window. The generated URL is copied.
        • Information in the monitoring chart is provided in the form of a metadata link.

      Downloading Monitoring Chart File

      You can download monitoring chart information in file format. To download monitoring chart information, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.
      3. Select the metric to monitor in the metric list on the Metric page. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
      4. Set the chart area in the monitoring chart in the Selected Metric area, then click the More > Download File button. The Download File popup window opens.
      5. Select the file download method, then click the Confirm button. Download starts.
        • You can select download methods simultaneously.
          CategoryDescription
          CSVConvert chart metrics and monitoring data to Excel (*.csv) files and download
          PNGConvert chart to image (*.png) files and download
          • Can only be selected when metric comparison mode is selected as Metric Comparison
          • Can download up to 100 metric data
          Table. Metric Monitoring File Download Items

      Exporting to Object Storage

      You can save monitoring chart data to Object Storage.

      Guide

      User permission is required to save to Object Storage.

      • User: {email}
      • Action: iam:CreatGroup
      • On resource: {SRN}
      • Context: no identity-based policy allows the action

      To save monitoring chart data to Object Storage, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.
      3. Select the metric to monitor in the metric list on the Metric page. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
      4. Set the chart area in the monitoring chart in the Selected Metric area, then click the More > Export to Object Storage button. The Export to Object Storage popup window opens.
      5. Select the bucket to save data, then click the Complete button. A popup window announcing data saving opens.
      6. Click the Confirm button in the popup window. Data export starts.
      Guide
      • Limitations of metrics that can be exported to Object Storage are as follows.
        • Number of metrics: Up to 10
        • Query period: Within 2 months (63 days)
      • If the query period exceeds 2 months (63 days), only data for up to 63 days is saved.
      Note
      • If there is no Object Storage to save metric data, create Object Storage and proceed.
      • Metric data is saved in the “metricname-yyyymmddhhmmss.json” file format and can be checked in the ~/servicewatch/metric path of the Object Storage bucket.

      Viewing Monitoring Chart Source

      You can view the source code of the monitoring chart.

      Guide
      You can only view the source code when the metric comparison mode is selected as Metric Comparison.
      To view the source code of the monitoring chart, follow the steps below.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Metric menu. You will be taken to the Metric page.
      3. Select the metric to monitor in the metric list on the Metric page. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
      4. Set the chart area in the monitoring chart in the Selected Metric area, then click the More > View Source button. The View Widget Source popup window opens.
        CategoryDescription
        Source InformationDisplay source code of monitoring chart in JSON format
        Copy CodeCopy source code to clipboard
        Table. Monitoring Chart View Source Items

      11.2.4 - Logs

      In ServiceWatch, you can create and manage log groups to generate alert notifications when set conditions are met by setting threshold criteria for metrics to monitor.

      Creating a Log Group

      You can create a log group for metrics. Follow these steps to create a log group.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.

      3. On the Log Group List page, click the Create Log Group button. You will be taken to the Create Log Group page.

      4. Enter the basic information and tag information required to create a log group.

        Division
        Required
        Detailed Description
        Log Group NameRequiredEnter the name of the log group to monitor in ServiceWatch
        • Enter within 3 to 512 characters using English letters, numbers, and special characters (-_./#)
        Log Retention PolicyRequiredSelect the period to retain monitored log data
        TagOptionalAdd tag information
        • You can add up to 50 tags per resource
        • When adding a tag, after entering Key and Value values, you can select from the list of existing tag Keys and Values
        Table. Create Log Group Items

      5. After checking the summary information, click the Create button. A popup window will open announcing the log group creation.

      6. Click the Confirm button. The log group creation is complete.

      Viewing Log Group Detailed Information

      You can view and manage detailed information about log groups.

      Follow these steps to view detailed information about log groups.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to view detailed information. You will be taken to the Log Group Detail page.
        DivisionDetailed Description
        Log Group StatusStatus of the log group
        • Active: Log group is activated
        • Inactive: Log group is deactivated
        Export Log GroupSave log data of the log group to Object Storage
        Delete Log GroupDelete the corresponding log group
        Information Division TabInformation division tabs for the log group
        • Detailed information, Log Streams, Tags, Operation History
        • Click each tab to view the corresponding information
        Table. Log Group Detail Items
        Reference
        On the Log Group List page, you can export data by clicking the More > Export Log Group button of the log group to save to Object Storage.
      Reference

      When sorting log group names in the log group list, follow the sorting rules below.

      1. Whitespace and control characters
      2. Some special characters ( !"#$%&()*+,-./ )
      3. Numbers (0–9)
      4. Some special characters ( ; < = > ? @ )
      5. English (A–Z, a–z, case-insensitive)
      6. Remaining special characters ([\]^_`)
      7. Other characters

      Detailed Information

      You can view basic information and log group information for the log group selected on the Log Group List page.

      DivisionDetailed Description
      ServiceService name
      Resource TypeResource type
      SRNUnique resource ID in Samsung Cloud Platform
      • In ServiceWatch, it means the SRN of the resource type
      Resource NameResource name
      • In ServiceWatch, it means the log group name
      Resource IDUnique resource ID in the service
      CreatorUser who created the service
      Created DateDate and time when the service was created
      ModifierUser who modified the service information
      Modified DateDate and time when the service information was modified
      Log Group NameLog group name
      Log Retention PolicyRetention period of log data
      • Click the Edit button to change the retention period
      Log DataTotal stored log data capacity (bytes)
      Table. Log Group Detail - Detailed Information Tab Items
      Reference
      Log data is the total stored log data (bytes). It may take time for the log aggregation capacity to be reflected.

      Log Streams

      You can view log streams for the log group selected on the Log Group List page.

      DivisionDetailed Description
      View All StreamsCan view detailed information for all log streams in the log stream list
      Create Log StreamCreate a new log stream
      Log Stream ListLog stream name and log change date
      • Click the Delete button to delete that log stream
      • After checking the log stream to delete, click the More > Delete button at the top of the list to delete simultaneously
      Table. Log Group Detail - Log Stream Tab Items

      Log Patterns

      You can view log patterns for the log group selected on the Log Group List page.

      DivisionDetailed Description
      Log Pattern ListLog pattern name, pattern, log pattern namespace, metric name, alert policy name information
      • Click the log pattern name or alert policy name to go to the detailed page of that item
      • Click the metric name to go to the metrics page containing that metric name in the search term
      • Click the alert policy name to go to the detailed page of that alert policy
      • Click the More button to perform additional tasks
        • Edit, Delete: Edit or delete that log pattern
        • Create Alert Policy: Go to the alert policy creation page
      DeleteDelete all selected log patterns from the log pattern list
      • Activated when you check the log pattern in the log pattern list
      Create Log PatternCreate a new log pattern
      Table. Log Group Detail - Log Pattern Tab Items

      Tags

      You can view tag information for the log group selected on the Log Group List page, and add, modify, or delete them.

      DivisionDetailed Description
      Tag ListKey, Value information of tags
      Edit TagModify or delete existing tag information or add new tags
      • You can add up to 50 tags per resource
      • When adding a tag, after entering Key and Value values, you can select from the list of existing tag Keys and Values
      Table. Log Group Detail - Tags Tab Items

      Operation History

      You can view the operation history of the log group selected on the Log Group List page.

      DivisionDetailed Description
      Operation History ListResource change history
      • Can view operation details, operation date, resource type, resource name, operation result, operator information
        • Click the Settings button to change information items
      • Can filter using Period Selection, User Time Zone, operator information input, Detailed Search
      • When you click the operation details in the Operation History List, you will be taken to the Activity History Detail page for that operation
      Table. Log Group Detail - Operation History Tab Items

      Managing Log Streams

      You can create and manage log streams.

      Creating a Log Stream

      You can create a new log stream in a log group. Follow these steps to create a log stream.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to create a log stream. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Stream tab. The log stream list is displayed.
      5. Click the Create Log Stream button. The Create Log Stream popup window will open.
      6. After entering the Log Stream Name, click the Create button. The log stream creation is complete.
        • Enter the name within 3 to 512 characters using English letters and numbers.

      Viewing Log Stream Detailed Information

      You can view and manage detailed information about log streams. Follow these steps to view detailed information about log streams.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to view detailed information. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Stream tab. The Log Stream list is displayed.
      5. On the Log Stream list, click the log stream name for which you want to view detailed information. You will be taken to the Log Stream Detail page.
        DivisionDetailed Description
        Excel DownloadDownload log stream history as an Excel file
        Timestamp ListMessage list by timestamp
        • Can filter using Period Selection, User Time Zone, and message input
        Table. Log Group Detail - Log Stream Detail Items
        Reference
        When you click the View All Log Streams button at the top of the log stream list, you will be taken to the All Log Streams Detail page.

      Deleting a Log Stream

      You can delete unused log streams. Follow these steps to delete a log stream.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to delete a log stream. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Stream tab. The log stream list is displayed.
      5. On the log stream list, select the checkbox of the log stream to delete and click the More > Delete button. A popup window will open announcing the log stream deletion.
        • You can delete multiple log streams at the same time.
        • You can also delete individually by clicking the Delete button at the right end of each log stream.
      6. Click the Confirm button. The log stream is deleted.

      Managing Log Patterns

      Creating a Log Pattern

      Follow these steps to create a log pattern.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.

      3. On the Log Group List page, click the log group name for which you want to create a log pattern. You will be taken to the Log Group Detail page.

      4. On the Log Group Detail page, click the Log Pattern tab. The log pattern list is displayed.

      5. Click the Create Log Pattern button. You will be taken to the Create Log Pattern page.

      6. Set the basic information and metric information required to create a log group.

        • Enter and select basic information for the log pattern in the Basic Information area.
          Division
          Required
          Detailed Description
          Log Pattern NameRequiredEnter the name of the log pattern
          • Enter within 3 to 512 characters using English letters, numbers, and special characters (-_./#)
          Pattern FormatRequiredSelect or directly enter the pattern format
          • Pattern Format: Select one of string pattern, space-separated pattern, JSON format pattern provided as pattern format
          • Direct Input: After selecting one of string pattern, space-separated pattern, JSON format pattern, enter within 1 to 1,024
          Pattern TestOptionalDirectly enter or select log data to verify using the pattern
          • Direct Input: Directly enter the log data to use in Log Event Message
            • Separate log events using line breaks
            • Can enter up to 50 log events
            • Can enter within 1 to 1,024 bytes for one log event
          • Select log data: Select the log data to use
            • When selecting log data, the corresponding log data is displayed in Log Event Message
          • Test Pattern: Perform test on log event message
            • When test succeeds, test result is displayed at the bottom
          Table. Create Log Pattern - Basic Information Items
        • Enter and select metric information in the Metric Information area.
          Division
          Required
          Detailed Description
          NamespaceRequiredSelect the namespace for the log pattern
          • If there is no namespace for the log pattern, select Create New to create a new one
          • Namespace Name: When creating a new namespace, enter within 3 to 128 characters using English letters, numbers, spaces, and special characters (-_\/#)
          Metric NameRequiredEnter the name of the metric
          • Enter within 3 to 128 characters using English letters, numbers, and special characters (_)
          Metric ValueRequiredEnter the metric value
          • Enter a number of 0 or higher or $indetifier
          Default ValueOptionalEnter if using the default value
          • Enter as a float value of 0 or higher
          • Cannot use Dimension when using default value
          UnitRequiredSelect the metric unit
          DimensionOptionalSet the dimension of the metric created by the log pattern
          • Can be used only when Log Pattern Format is space-separated pattern or JSON format pattern
          • Cannot be used when entering Default Value
          • When you check Use, you can add custom dimension fields
            • After clicking the Add button, enter Field Name and Field Value to add
            • Can add up to 3
          Table. Create Log Pattern - Metric Information Items
      7. After checking the summary information, click the Create button. A popup window will open announcing the log pattern creation.

      8. Click the Confirm button. The log pattern creation is complete.

      Viewing Log Pattern Detailed Information

      Follow these steps to view detailed information about a log pattern.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to view detailed information. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Pattern tab. The log pattern list is displayed.
      5. On the Log Pattern list, click the log pattern name for which you want to view detailed information. You will be taken to the Log Pattern Detail page.
        DivisionDetailed Description
        Create Alert PolicyCan create alert policy
        • Click the button to go to the alert policy creation page
        Delete Log PatternDelete the log pattern currently being viewed
        Log Pattern NameLog pattern name
        CreatorUser who created the log pattern
        Created DateDate and time when the log pattern was created
        ModifierUser who modified the log pattern information
        Modified DateDate and time when the log pattern information was modified
        PatternPattern format
        Metric InformationMetric information of the pattern group
        • Namespace name, metric name, metric value, default value, unit, alert policy name, dimension name
        • Click the Edit button to modify Metric Value, Default Value, Unit information
        Table. Log Pattern Detail Items

      Deleting a Log Pattern

      Follow these steps to delete a log pattern.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, click the log group name for which you want to delete a log pattern. You will be taken to the Log Group Detail page.
      4. On the Log Group Detail page, click the Log Pattern tab. The log pattern list is displayed.
      5. On the log pattern list, select the checkbox of the log pattern to delete and click the Delete button. A popup window will open announcing the log pattern deletion.
        • You can delete multiple log patterns at the same time.
        • You can also delete individually by clicking the More > Delete button at the right end of each log pattern or by clicking the Delete Log Pattern button on the log pattern detail page.
      6. Click the Confirm button. The log pattern is deleted.

      Exporting Log Group

      You can save log group data to Object Storage. Follow these steps to save log group data to Object Storage.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Log > Export Log Group menu. You will be taken to the Export Log Group List page.

      3. On the Export Log Group List page, click the Export Log Group button. You will be taken to the Export Log Group page.

        Division
        Required
        Detailed Description
        Select Log GroupRequiredSelect the log group to save to Object Storage
        • If there are log streams included in the log group, click the Select button to select the log streams to save
        • If you do not select a log group, all data of the log group is saved
        Select PeriodOptionalSelect the user time zone and data storage interval
        • For the data storage interval, you can select the desired interval in the Time Setting area or click the Direct Input button to set the start and end date and time
        Storage BucketRequiredSelect the bucket to save data
        • You can add up to 50 tags per resource
        • When adding a tag, after entering Key and Value values, you can select from the list of existing tag Keys and Values
        Table. Export Log Group Items

      4. After selecting the bucket to save the data, click the Done button. A popup window will open announcing the data save.

      5. Click the Confirm button in the popup window. The data export will start.

        • You can check the progress on the Export Log Group List page.
      Reference
      • If there is no Object Storage to save log group data, create Object Storage and proceed.
      • Log group data export may take more than tens of minutes depending on the scale.
      • If there is a log group export task in progress within the Account, you must complete the task in progress first before proceeding with the export.
      • On the Export Log Group List page, you can cancel the task by clicking the More > Cancel Log Group Export button of the log group for which the export task is in progress.

      Deleting a Log Group

      You can delete unused log groups.

      Warning
      • Files saved to Object Storage through Export Log Group are not deleted. However, the log group export history is deleted together.
      • If you delete a log group for which Export Log Group is in progress, the export task will not proceed normally.
      Follow these steps to delete a log group.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
      3. On the Log Group List page, select the checkbox of the log group to delete and click the Delete button. A popup window will open announcing the log group deletion.
        • You can delete multiple log groups at the same time.
        • You can also delete individually by clicking the Delete button at the right end of each log group or by clicking the Delete Log Group button on the corresponding Log Group Detail page.
      4. Click the Confirm button. The log group is deleted.

      11.2.5 - Events

      In ServiceWatch, you can view and handle events generated from Samsung Cloud Platform services.

      Creating an Event Rule

      You can create an event rule to receive notifications when an event occurs. Follow these steps to create an event rule.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

      2. On the Service Home page, click the Event Rule menu. You will be taken to the Event Rule List page.

      3. On the Event Rule List page, click the Create Event Rule button. You will be taken to the Create Event Rule page.

      4. In the Enter Basic Information area, enter the name and description of the event rule.

      5. In the Set Event Pattern area, set the required information. The set event pattern is entered in JSON code format in the Event Pattern Setting Status.

        Division
        Required
        Detailed Description
        Event SourceRequiredSelect the service name of the event you want to receive in ServiceWatch
        Event TypeRequiredSelect the event type of the event source to use in the event rule
        • Classified the same as resource type
        Applied EventRequiredSelect the events to apply the event pattern among events occurring in the event type
        • All Events: Apply all events occurring in the event type
        • Individual Events: Select events to set as event patterns among events occurring in the event type
        Applied ResourceRequiredSelect resources to apply the event pattern
        • All Resources: Set event patterns for all events occurring from all resources
        • Individual Resources: Set event patterns for corresponding events occurring from specific resources
          • When selecting individual resources, the event resource selection area is displayed
          • Click the Add Resource button to select resources
          • You can delete added resources by selecting the resource from the resource list and clicking the Delete button
        Event Pattern Setting Status-Display converted to JSON code format according to the event pattern setting values
        • Reset when event pattern setting values change
        • You can copy the source code by clicking the Copy Code item
        Table. Event Pattern Setting Items

      6. In the Notification Setting area, select users to receive notifications when an event occurs.

        • Only users with login history (users who have registered email and mobile phone number) can be added as notification recipients.
        • You can add up to 100 notification recipients.
          Reference
          • If there is no user to add, you can create a user on the Create User page of the IAM service. For details on user creation, refer to Creating a User.
          • You can change the notification method (E-mail or SMS) by selecting the notification target as Service > Event Rule on the Notification Setting page. For details on notification settings, refer to Checking Notification Settings.
      7. In the Enter Additional Information area, add tag information.

      8. After checking the summary information, click the Create button. A popup window will open announcing the event rule creation.

      9. Click the Confirm button. The event rule creation is complete.

      Viewing Event Rule Detailed Information

      You can view and manage detailed information about event rules. Follow these steps to view detailed information about event rules.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Event Rule menu. You will be taken to the Event Rule List page.
      3. On the Event Rule List page, click the event name for which you want to view detailed information. You will be taken to the Event Rule Detail page.
        DivisionDetailed Description
        Event Rule StatusStatus of the event rule
        • Active: Event rule is activated
        • Inactive: Event rule is deactivated
        • Can be changed by clicking the Activate or Deactivate button
        Delete Event RuleDelete the corresponding event rule
        Information Division TabInformation division tabs for the alert policy
        • Detailed information, Notifications, Tags, Operation History
        • Click each tab to view the corresponding information
        Table. Event Rule Detail Items

      Detailed Information

      You can view basic information and event rule information for the event rule selected on the Event Rule List page.

      DivisionDetailed Description
      ServiceService name
      Resource TypeResource type
      SRNUnique resource ID in Samsung Cloud Platform
      • In ServiceWatch, it means the SRN of the resource type
      Resource NameResource name
      • In ServiceWatch, it means the event rule name
      Resource IDUnique resource ID in the service
      CreatorUser who created the service
      Created DateDate and time when the service was created
      ModifierUser who modified the service information
      Modified DateDate and time when the service information was modified
      Event Rule NameEvent rule name
      Event Pattern Setting StatusDisplay event pattern setting values in JSON code format
      • Click the Edit button to modify the event pattern
      • You can copy the source code by clicking the Copy Code item
      DescriptionDescription of the event rule
      • Click the Edit button to modify the description
      Table. Alert Policy Detail - Detailed Information Tab Items

      Notifications

      You can view notification recipients for the event rule selected on the Event Rule List page.

      DivisionDetailed Description
      Notification Recipient ListUser ID, creation date, last login, status information
      • Click the More button to change the notification status (activated/deactivated) for that user or delete the user
      DeleteDelete all selected users from the notification recipient list
      • Activated when you check the user to delete from the notification recipient list
      MoreChange notification status for selected users from the notification recipient list (activated/deactivated)
      • Activated when you check the user to change status from the notification recipient list
      Add Notification RecipientAdd a new notification recipient
      • Select the user to add in the Add Notification Recipient popup window
      Table. Event Rule Detail - Notifications Tab Items
      Reference
      • Only users with login history (users who have registered email and mobile phone number) can be added as notification recipients.
      • You can add up to 100 notification recipients.
      • If there is no user to add, you can create a user on the Create User page of the IAM service. For details on user creation, refer to Creating a User.
      • You can change the notification method (E-mail or SMS) by selecting the notification target as Service > Event Rule on the Notification Setting page. For details on notification settings, refer to Checking Notification Settings.

      Tags

      You can view tag information for the event rule selected on the Event Rule page, and add, modify, or delete them.

      DivisionDetailed Description
      Tag ListKey, Value information of tags
      Edit TagModify or delete existing tag information or add new tags
      • You can add up to 50 tags per resource
      • When adding a tag, after entering Key and Value values, you can select from the list of existing tag Keys and Values
      Table. Event Rule Detail - Tags Tab Items

      Operation History

      You can view the operation history of the event rule selected on the Alert Policy List page.

      DivisionDetailed Description
      Operation History ListResource change history
      • Can view operation details, operation date, resource type, resource name, operation result, operator information
        • Click the Settings button to change information items
      • Can filter using Period Selection, User Time Zone, operator information input, Detailed Search
      • When you click the operation details in the Operation History List, you will be taken to the Activity History Detail page for that operation
      Table. Event Rule Detail - Operation History Tab Items

      Modifying Event Pattern

      You can modify the event pattern. Follow these steps to modify the event pattern.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Event Rule menu. You will be taken to the Event Rule List page.
      3. On the Event Rule List page, click the event name for which you want to modify the event pattern. You will be taken to the Event Rule Detail page.
      4. Click the Edit button in the Event Pattern Setting Status on the Event Rule Detail page. The Edit Event Pattern popup window will open.
      5. After modifying the event pattern settings, click the Confirm button. A popup window will open announcing the event pattern modification.
      6. Click the Confirm button. The event pattern modification is complete.

      Deleting an Event Rule

      You can delete unused event rules. Follow these steps to delete an event rule.

      1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
      2. On the Service Home page, click the Event Rule menu. You will be taken to the Event Rule List page.
      3. On the Event Rule List page, select the checkbox of the event rule to delete and click the Delete button. A popup window will open announcing the event rule deletion.
        • You can delete multiple event rules at the same time.
        • You can also delete individually by clicking the More > Delete button at the right end of each alert policy or by clicking the Delete Event Rule button on the corresponding Event Rule Detail page.
      4. Click the Confirm button. The event rule is deleted.

      11.2.6 - Using ServiceWatch Agent

      Users can install ServiceWatch Agent on Virtual Server/GPU Server/Bare Metal Server, etc. to collect custom metrics and logs.

      Note
      Custom metric/log collection through ServiceWatch Agent is currently only available in Samsung Cloud Platform For Enterprise. It is planned to be provided in other offerings in the future.
      Warning
      Metric collection through ServiceWatch Agent is classified as custom metrics and incurs charges unlike metrics that are basically collected from each service, so be careful not to set up unnecessary metric collection. Make sure to set it up so that only metrics that need to be collected are collected.

      ServiceWatch Agent

      The agents that need to be installed on a server for custom metric and log collection of ServiceWatch can be largely divided into two types. Prometheus Exporter and Open Telemetry Collector.

      CategoryDescription
      Prometheus ExporterProvides metrics of a specific application or service in a format that Prometheus can scrape
      • For OS metric collection of the server, you can use Node Exporter for Linux servers and Windows Exporter for Windows servers depending on the OS type.
        • Target
          • Virtual Server
          • GPU Server
          • Bare Metal Server
          • Multi-node GPU Cluster > GPU Node
      • You can use DCGM (NVIDIA Data Center GPU Manager) Exporter for GPU metrics.
        • Target
          • GPU Server
          • Multi-node GPU Cluster > GPU Node
      Open Telemetry CollectorActs as a centralized collector that collects telemetry data such as metrics and logs of distributed systems, processes them (filtering, sampling, etc.), and sends them to multiple backends (e.g., Prometheus, Jaeger, Elasticsearch, etc.)
      • Enables ServiceWatch to collect metric and log data by sending data to ServiceWatch Gateway.
      • This guide explains how to use the Open Telemetry Collector provided by ServiceWatch.
      Table. Description of Prometheus Exporter and Open Telemetry Collector
      Note

      To link server log files to ServiceWatch through ServiceWatch Agent, you must first create a log group and log streams within the log group.

      • For more information about creating log groups and log streams, see Logs.

      Pre-environment Configuration for ServiceWatch Agent

      You must add Security Group and Firewall rules for communication between ServiceWatch Agent and ServiceWatch.

      Note
      Bare Metal Server does not support Security Group.

      1. Adding Security Group Rules

        • To send data collected from ServiceWatch Agent installed on Virtual Server/GPU Server to ServiceWatch, you must add rules to the Security Group as follows.
          DirectionTypePortDestination Address
          OutboundCustom TCP443ServiceWatch OpenAPI Endpoint IP Address
          Table. Security Group Rules for ServiceWatch Agent Communication
      2. Adding Firewall Rules

        • If firewall is enabled on the Internet Gateway of the VPC, you must add Firewall rules as follows.
          DirectionTypePortActionSource AddressDestination Address
          OutboundTCP443AllowPrivate IP address assigned when creating Virtual Server. Virtual Server Private IP address can be checked in Checking Virtual Server Details.ServiceWatch OpenAPI Endpoint IP Address
          Table. Internet Gateway Firewall Rules for ServiceWatch Agent Communication

      ServiceWatch OpenAPI Endpoint IP Address

      The Endpoint IP address required for ServiceWatch Agent to send collected data to ServiceWatch is as follows.

      OfferingRegionURLIP Address
      For Enterprisekr-west1https://servicewatch.kr-west1.e.samsungsdscloud.com112.107.105.24
      For Enterprisekr-east1https://servicewatch.kr-east1.e.samsungsdscloud.com112.107.105.68
      Table. ServiceWatch OpenAPI Endpoint Information

      Configuring Open Telemetry Collector for ServiceWatch

      To use Open Telemetry Collector for ServiceWatch metric and log collection on a server, install it in the following order.

      1. Download the Agent file from the URL where you can download the Agent file for ServiceWatch.

        Guide
        The file download link for ServiceWatch Agent installation will be provided through Samsung Cloud Platform Console announcements and Support Center > Contact Us.
        Color mode
        wget [ServiceWatch Agent File Download URL]
        wget [ServiceWatch Agent File Download URL]
        Code Block. ServiceWatch Agent Installation File Download Command

      2. The Open Telemetry Collector Agent file for ServiceWatch can be checked as follows.

        • Extract the Agent file for ServiceWatch.
          Color mode
          unzip ServiceWatch_Agent.zip
          unzip ServiceWatch_Agent.zip
          Code Block. Extracting ServiceWatch Agent File
        • If the environment using ServiceWatch Agent is Linux OS, you must grant execution permissions as follows.
          Color mode
          chmod +x agent/otelcontribcol_linux_amd64
          chmod +x agent/servicewatch-agent-manager-linux-amd64
          chmod +x agent/otelcontribcol_linux_amd64
          chmod +x agent/servicewatch-agent-manager-linux-amd64
          Code Block. Granting Execution Permissions to ServiceWatch Agent File
          CategoryDescription
          examplesExample configuration file folder. Inside each folder, there are agent.json, log.json, metric.json example files
          • os-metrics-min-examples: Minimum metric setting example using Node Exporter
          • os-metrics-all-examples: Metric setting example using Node Exporter memory/filesystem Collector
          • gpu-metrics-min-examples: Minimum metric setting example using DCGM Exporter
          • gpu-metrics-all-examples: Key metric setting example using DCGM Exporter
          otelcontribcol_linux_amd64Open Telemetry Collector for Linux for ServiceWatch
          otelcontribcol_windows_amd64.exeOpen Telemetry Collector for Windows for ServiceWatch
          servicewatch-agent-manager-linux-amd64ServiceWatch Agent Manager for Linux
          servicewatch-agent-manager-windows-amd64.exeServiceWatch Agent Manager for Windows
          Table. ServiceWatch Agent File Configuration
      Note
      ServiceWatch Agent Manager is a tool that helps configure Open Telemetry Collector to efficiently send custom metrics and logs by integrating with ServiceWatch. Through this, you can send various custom metrics and log data to ServiceWatch.
      1. Define the Agent configuration file of ServiceWatch Agent Manager for the Open Telemetry Collector for ServiceWatch.

        CategoryDescription
        namespaceCustom namespace for custom metrics
        • Namespace is a logical division used to classify and group metrics, and is specified as a custom metric to classify custom metrics
        • Namespace must be 3~128 characters including English, numbers, spaces, and special characters (_-/), and must start with English.
        accessKeyIAM authentication key Access Key
        accessSecretIAM authentication key Secret Key
        resourceIdResource ID of the server in Samsung Cloud Platform
        • Example: Resource ID of Virtual Server
        openApiEndpointServiceWatch OpenAPI Endpoint by region/offering
        • Example: https://servicewatch.region.offering.samsungsdscloud.com
        • region and offering information can be checked from Samsung Cloud Platform Console access URL
        telemetryPortTelemetry Port of ServiceWatch Agent
        • Usually uses 8888 Port. If 8888 Port is in use, it needs to be changed
        Table. agent.json Configuration File Items
        Color mode
        {
            "namespace": "swagent-windows",     # Custom namespace for custom metrics
            "accessKey": "testKey",             # IAM authentication key Access Key
            "accessSecret": "testSecret",       # IAM authentication key Secret Key
            "resourceId": "resourceID",         # Resource ID of the server in Samsung Cloud Platform
            "openApiEndpoint": "https://servicewatch.kr-west1.e.samsungsdscloud.com",    # ServiceWatch OpenAPI Endpoint by region/environment
            "telemetryPort": 8889               # Telemetry Port of ServiceWatch Agent (Usually uses 8888 Port. If 8888 Port is in use, it needs to be changed)
        }
        {
            "namespace": "swagent-windows",     # Custom namespace for custom metrics
            "accessKey": "testKey",             # IAM authentication key Access Key
            "accessSecret": "testSecret",       # IAM authentication key Secret Key
            "resourceId": "resourceID",         # Resource ID of the server in Samsung Cloud Platform
            "openApiEndpoint": "https://servicewatch.kr-west1.e.samsungsdscloud.com",    # ServiceWatch OpenAPI Endpoint by region/environment
            "telemetryPort": 8889               # Telemetry Port of ServiceWatch Agent (Usually uses 8888 Port. If 8888 Port is in use, it needs to be changed)
        }
        Code Block. agent.json Configuration Example

      2. Define the Metric configuration file for metric collection for ServiceWatch.

        • If you want to collect metrics through the Agent, configure metric.json.
          CategoryDescription
          prometheus > scrape_configs > targetsEndpoint of the metric collection target
          • In the case of a server, since Prometheus Exporter is installed on the same server, set it to that endpoint
          • Example: localhost:9100
          prometheus > scrape_configs > jobNameJob Name setting. Usually set to the Prometheus Exporter type used when collecting metrics
          • Example: node-exporter
          metricMetas > metricNameSet the name of the metric you want to collect. The metric name must be 3~128 characters including English, numbers, and special characters (_), and must start with English.
          • Example: node_cpu_seconds_total
          metricMetas > dimensionsSet the label to visualize and display in the Console among the Collector’s labels provided to identify the source of the Exporter’s metric data. When displaying the collected metric in the Console, it is displayed by combining according to the dimensions setting.
          • Example: In the case of metrics like the Memory Collector of Node Exporter that do not provide special labels, set it to resource_id
          • Example: Node Exporter Filesystem Collector metrics can set dimensions to mountpoint, which represents the path where the filesystem is mounted on the system
          metricMetas > unitCan set the unit of the metric
          • Example: Bytes, Count, etc.
          metricMetas > aggregationMethodMethod of aggregating based on the specified dimensions
          • Example: Select from SUM, MAX, MIN, COUNT
          metricMetas > descriptionKoKorean description of the metric being collected
          metricMetas > descriptionEnEnglish description of the metric being collected
          Table. metric.json Configuration File Items
          Color mode
          {
              "prometheus": {
                 "scrape_configs": {
                    "targets": [
                       "localhost:9100" # Endpoint of Prometheus Exporter installed in the server
                    ],
                    "jobName": "node-exporter" # Usually set to the name of the installed Exporter
                 }
              },
              "metricMetas": [
                 {
                    "metricName": "node_memory_MemTotal_bytes",    # Set the metric name to be linked to ServiceWatch among metrics collected from Prometheus Exporter
                    "dimensions": [
                       [
                          "resource_id"        # Set the label to visualize and display in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                               # In the case of metrics like Memory that do not provide special labels, set it to resource_id
                       ]
                    ],
                    "unit": "Bytes",           # Unit of collected metric data
                    "aggregationMethod": "SUM",    # Aggregation method
                    "descriptionKo": "Total physical memory size of the server",    # Korean description of the metric
                    "descriptionEn": "node memory total bytes"      # English description of the metric
                 },
                 {
                    "metricName": "node_filesystem_size_bytes",    # Set the metric name to be linked to ServiceWatch among metrics collected from Prometheus Exporter
                    "dimensions": [
                       [
                          "mountpoint"        # Set the label to visualize and display in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                              # Set dimensions to mountpoint, which represents the path where the filesystem is mounted on the system for Filesystem-related metrics
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node filesystem size bytes",
                    "descriptionEn": "node filesystem size bytes"
                 },
                 {
                    "metricName": "node_memory_MemAvailable_bytes",
                    "dimensions": [
                       [
                          "resource_id"
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node memory available bytes",
                    "descriptionEn": "node memory available bytes"
                 },
                 {
                    "metricName": "node_filesystem_avail_bytes",
                    "dimensions": [
                       [
                          "mountpoint"
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node filesystem available bytes",
                    "descriptionEn": "node filesystem available bytes"
                 }
              ]
          }
          {
              "prometheus": {
                 "scrape_configs": {
                    "targets": [
                       "localhost:9100" # Endpoint of Prometheus Exporter installed in the server
                    ],
                    "jobName": "node-exporter" # Usually set to the name of the installed Exporter
                 }
              },
              "metricMetas": [
                 {
                    "metricName": "node_memory_MemTotal_bytes",    # Set the metric name to be linked to ServiceWatch among metrics collected from Prometheus Exporter
                    "dimensions": [
                       [
                          "resource_id"        # Set the label to visualize and display in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                               # In the case of metrics like Memory that do not provide special labels, set it to resource_id
                       ]
                    ],
                    "unit": "Bytes",           # Unit of collected metric data
                    "aggregationMethod": "SUM",    # Aggregation method
                    "descriptionKo": "Total physical memory size of the server",    # Korean description of the metric
                    "descriptionEn": "node memory total bytes"      # English description of the metric
                 },
                 {
                    "metricName": "node_filesystem_size_bytes",    # Set the metric name to be linked to ServiceWatch among metrics collected from Prometheus Exporter
                    "dimensions": [
                       [
                          "mountpoint"        # Set the label to visualize and display in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                              # Set dimensions to mountpoint, which represents the path where the filesystem is mounted on the system for Filesystem-related metrics
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node filesystem size bytes",
                    "descriptionEn": "node filesystem size bytes"
                 },
                 {
                    "metricName": "node_memory_MemAvailable_bytes",
                    "dimensions": [
                       [
                          "resource_id"
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node memory available bytes",
                    "descriptionEn": "node memory available bytes"
                 },
                 {
                    "metricName": "node_filesystem_avail_bytes",
                    "dimensions": [
                       [
                          "mountpoint"
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "node filesystem available bytes",
                    "descriptionEn": "node filesystem available bytes"
                 }
              ]
          }
          Code Block. metric.json Configuration Example
        • To display the resource name, set resource_name in commonLabels as follows and also set resource_name in metricMetas.dimensions, so you can check the resource name together when viewing metrics in ServiceWatch.
          Color mode
          ...
              "commonLabels": {
                 "resource_name": "ResourceName" # Resource name that can be checked in User Console
              },
              "metricMetas": [
                 {
                    "metricName": "metric_name",
                    "dimensions": [
                       [
                          "resource_id",
                          "resource_name"        # Add the resource_name set in commonLabels to each metric's dimensions
          
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "metric_name description"
                    "descriptionEn": "metric_name description"
                 },
              ...
              ]
          ...
          ...
              "commonLabels": {
                 "resource_name": "ResourceName" # Resource name that can be checked in User Console
              },
              "metricMetas": [
                 {
                    "metricName": "metric_name",
                    "dimensions": [
                       [
                          "resource_id",
                          "resource_name"        # Add the resource_name set in commonLabels to each metric's dimensions
          
                       ]
                    ],
                    "unit": "Bytes",
                    "aggregationMethod": "SUM",
                    "descriptionKo": "metric_name description"
                    "descriptionEn": "metric_name description"
                 },
              ...
              ]
          ...
          Code Block. metric.json - Resource Name Setting
      3. Define the Log configuration file for log collection for ServiceWatch.

        • If you want to collect logs, you must configure log.json.
          CategoryDescription
          fileLog > includeLocation of log files to collect
          fileLog > operatorsDefined to parse log messages to collect
          fileLog > operators > regexExpress log message format as regular expression
          fileLog > operators > timestampFormat of Time Stamp of log message to be sent to ServiceWatch
          logMetas > log_group_valueLog group name created to send logs to ServiceWatch
          logMetas > log_stream_valueLog stream name in ServiceWatch log group
          Table. log.json Configuration File Items
          Color mode
          {
              "fileLog": {
                 "include": [
                    "/var/log/syslog",        # Log file to collect in ServiceWatch
                    "/var/log/auth.log"
                 ],
                 "operators": {
                    "regex": "^(?P<timestamp>\\S+)\\s+(?P<hostname>\\S+)\\s+(?P<process>[^:]+):\\s+(?P<message>.*)$",    # Express log file format as regular expression
                    "timestamp": {            # Set Time Stamp format of log message
                       "layout_type": "gotime",
                       "layout": "2006-01-02T15:04:05.000000Z07:00"
                    }
                 }
              },
              "logMetas": {
                 "log_group_value": "custom-log-group",    # Log group name of ServiceWatch created in advance
                 "log_stream_value": "custom-log-stream"   # Log stream name in ServiceWatch log group created in advance
              }
          }
          {
              "fileLog": {
                 "include": [
                    "/var/log/syslog",        # Log file to collect in ServiceWatch
                    "/var/log/auth.log"
                 ],
                 "operators": {
                    "regex": "^(?P<timestamp>\\S+)\\s+(?P<hostname>\\S+)\\s+(?P<process>[^:]+):\\s+(?P<message>.*)$",    # Express log file format as regular expression
                    "timestamp": {            # Set Time Stamp format of log message
                       "layout_type": "gotime",
                       "layout": "2006-01-02T15:04:05.000000Z07:00"
                    }
                 }
              },
              "logMetas": {
                 "log_group_value": "custom-log-group",    # Log group name of ServiceWatch created in advance
                 "log_stream_value": "custom-log-stream"   # Log stream name in ServiceWatch log group created in advance
              }
          }
          Code Block. log.json Configuration Example
          Note

          To link server log files to ServiceWatch through ServiceWatch Agent, you must first create a log group and log streams within the log group.

          • For more information about creating log groups and log streams, see Logs.

      Running Open Telemetry Collector for ServiceWatch

      ServiceWatch Agent Execution Method
      [ServiceWatch Agent Executable] -action [run|stop] - dir [Configuration File Location] -collector [Open Telemetry Collector Executable Location]
      Execution OptionDescription
      -actionAction setting (run or stop)
      -dirLocation of ServiceWatch Agent configuration files such as agent.json, metric.json, log.json
      -collectorLocation of Open Telemetry Collector executable
      Table. log.json Configuration File Items

      Running ServiceWatch Agent (for Linux)

      Note
      Assuming that agent.json, metric.json, log.json files are in current_location/agent/examples/os-metrics-min-examples and otelcontribcol_linux_amd64 file is in current_location/agent, execute as follows.
      1. Run ServiceWatch Agent.

        • Check the location of agent.json, metric.json, log.json files and the location of servicewatch-agent-manager-linux-amd64, otelcontribcol_linux_amd64 files and start ServiceWatch Agent.
          Color mode
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          Code Block. Starting ServiceWatch Agent - Collecting Both Metrics and Logs
        • If you want to collect only metrics, rename the log.json file to a different file name or move it so it’s not in the same directory as agent.json, metric.json, and execute as follows.
          Color mode
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          Code Block. Starting ServiceWatch Agent - Collecting Only Metrics
        • If you want to collect only logs, rename the metric.json file to a different file name or move it so it’s not in the same directory as agent.json, log.json, and execute as follows.
          Color mode
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
          Code Block. Starting ServiceWatch Agent - Collecting Only Logs
      2. Stop ServiceWatch Agent.

        Color mode
        ./agent/servicewatch-agent-manager-linux-amd64 -action stop -dir ./agent/examples/os-metrics-min-examples
        ./agent/servicewatch-agent-manager-linux-amd64 -action stop -dir ./agent/examples/os-metrics-min-examples
        Code Block. Stopping ServiceWatch Agent

      Running ServiceWatch Agent (for Windows)

      1. Run ServiceWatch Agent.

        Color mode
        servicewatch-agent-manager-windows-amd64.exe -action run -dir ./examples -collector otelcontribcol_windows_amd64.exe
        servicewatch-agent-manager-windows-amd64.exe -action run -dir ./examples -collector otelcontribcol_windows_amd64.exe
        Code Block. Starting ServiceWatch Agent

      2. Stop ServiceWatch Agent.

        Color mode
        servicewatch-agent-manager-windows-amd64.exe -action stop -dir ./examples
        servicewatch-agent-manager-windows-amd64.exe -action stop -dir ./examples
        Code Block. Stopping ServiceWatch Agent

      11.3 - API Reference

      API Reference

      11.4 - CLI Reference

      CLI Reference

      11.5 - ServiceWatch Event Reference

      The event represents a change in the environment of the Samsung Cloud Platform service. The following is an example of the event.

      • Virtual Server’s status changes from Stopped to Running when an event is created.
      • Object Storage creates an event when a new bucket is created.
      • It creates an event when the IAM user is excluded from the user group.
      Reference
      For a list of Samsung Cloud Platform services that generate events and events, Please refer to ServiceWatch Event.

      11.5.1 - ServiceWatch Event

      Reference
      The events of Samsung Cloud Platform service may vary by region.
      Service CategoryServiceEvent Source
      ComputeVirtual ServerVirtual Server
      ComputeGPU ServerGPU Server
      ComputeBare Metal ServerBare Metal Server
      ComputeMulti-node GPU ClusterMulti-node GPU Cluster
      ComputeCloud FunctionsCloud Functions
      StorageBlock Storage(BM)Block Storage(BM)
      StorageFile StoragefiFile Storagelestorage
      StorageObject StorageObject Storage
      StorageArchive StorageArchive Storage
      StorageBackupBackup
      ContainerKubernetes EngineKubernetes Engine
      ContainerContainer RegistryContainer Registry
      NetworkingVPCVPC
      NetworkingSecurity GroupSecurity Group
      NetworkingLoad BalancerLoad Balancer
      NetworkingDNSPrivate DNS
      Hosted Zone
      Public Domain Name
      NetworkingVPNVPN
      NetworkingFirewallFirewall
      NetworkingDirect ConnectDirect Connect
      NetworkingCloud LAN-CampusCloud LAN - Campus (Network)
      NetworkingCloud LAN-DatacenterCloud LAN Network
      NetworkingCloud WANCloud WAN
      NetworkingGlobal CDNGlobal CDN
      NetworkingGSLBGSLB
      DatabaseEPAS(DBaaS)EPAS
      DatabasePostreSQL(DBaaS)PostreSQL
      DatabaseMariaDB(DBaaS)MariaDB
      DatabaseMySQL(DBaaS)MySQL
      DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server
      DatabaseCacheStore(DBaaS)CacheStore
      DatabaseScalable DB(DBaaS)Scalable DB
      Data AnalyticsEvent StreamsEvent Streams
      Data AnalyticsSearch EngineSearch Engine
      Data AnalyticsVertica(DBaaS)Vertica
      Data AnalyticsData FlowData Flow
      Data AnalyticsData OpsData Ops
      Data AnalyticsQuick QueryQuick Query
      Application ServiceAPI GatewayAPI Gateway
      Application ServiceQueue ServiceQueue
      SecurityKey Management ServiceKey Management Service
      SecurityConfig InspectionConfig Inspection
      SecurityCertificate ManagerCertificate Manager
      SecuritySecrets ManagerSecret
      SecuritySecret VaultSecret Vault
      ManagementCloud ControlCloud Control
      ManagementIAMIdentity and Access Management
      ManagementID CenterIdentity Center
      ManagementLogging&AuditLogging&Audit
      ManagementOrganizationOrganization
      ManagementResource GroupsResource Group
      ManagementServiceWatchServiceWatch
      ManagementSupport CenterSupport
      AI-MLCloudMLCloud ML
      AI-MLAI&MLOps PlatformAI&MLOps Platform
      Table. ServiceWatch event source

      11.5.1.1 - Multi-node GPU Cluster

      Multi-node GPU Cluster event

      Multi-node GPU Cluster service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ComputeMulti-node GPU ClusterGPU NodeMulti-node GPU ClusterGPU Node
      ComputeMulti-node GPU ClusterCluster FabricMulti-node GPU ClusterCluster Fabric
      Table. Multi-node GPU Cluster event types

      GPU Node

      Event SourceEvent TypeEvent
      Multi-node GPU ClusterGPU Node
      • Multi-node GPU Cluster GPU Node creation started
      • Multi-node GPU Cluster GPU Node creation completed
      • Multi-node GPU Cluster GPU Node creation failed
      • Multi-node GPU Cluster GPU Node cancellation started
      • Multi-node GPU Cluster GPU Node cancellation completed
      • Multi-node GPU Cluster GPU Node cancellation failed
      • Multi-node GPU Cluster GPU Node start started
      • Multi-node GPU Cluster GPU Node start completed
      • Multi-node GPU Cluster GPU Node start failed
      • Multi-node GPU Cluster GPU Node stop started
      • Multi-node GPU Cluster GPU Node stop completed
      • Multi-node GPU Cluster GPU Node stop failed
      • Multi-node GPU Cluster GPU Node Lock modification started
      • Multi-node GPU Cluster GPU Node Lock modification completed
      • Multi-node GPU Cluster GPU Node Lock modification failed
      • Multi-node GPU Cluster GPU Node NAT IP assignment started
      • Multi-node GPU Cluster GPU Node NAT IP assignment completed
      • Multi-node GPU Cluster GPU Node NAT IP assignment failed
      • Multi-node GPU Cluster GPU Node NAT IP release started
      • Multi-node GPU Cluster GPU Node NAT IP release completed
      • Multi-node GPU Cluster GPU Node NAT IP release failed
      • Multi-node GPU Cluster GPU Node member change started
      • Multi-node GPU Cluster GPU Node member change completed
      • Multi-node GPU Cluster GPU Node member change failed
      Table. Multi-node GPU Cluster - GPU Node event types of events

      Cluster Fabric

      Event SourceEvent TypeEvent
      Multi-node GPU ClusterCluster Fabric
      • Multi-node GPU Cluster Cluster Fabric creation started
      • Multi-node GPU Cluster Cluster Fabric creation completed
      • Multi-node GPU Cluster Cluster Fabric creation failed
      • Multi-node GPU Cluster Cluster Fabric deletion started
      • Multi-node GPU Cluster Cluster Fabric deletion completed
      • Multi-node GPU Cluster Cluster Fabric deletion failed
      • Multi-node GPU Cluster Cluster Fabric member change started
      • Multi-node GPU Cluster Cluster Fabric member change completed
      • Multi-node GPU Cluster Cluster Fabric member change failed
      • Multi-node GPU Cluster Cluster Fabric member addition started
      • Multi-node GPU Cluster Cluster Fabric member addition completed
      • Multi-node GPU Cluster Cluster Fabric member addition failed
      • Multi-node GPU Cluster Cluster Fabric member deletion started
      • Multi-node GPU Cluster Cluster Fabric member deletion completed
      • Multi-node GPU Cluster Cluster Fabric member deletion failed
      Table. Multi-node GPU Cluster - Cluster Fabric event type events

      11.5.1.2 - MySQL(DBaaS)

      MySQL(DBaaS) event

      MySQL(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseMySQL(DBaaS)MySQL(DBaaS)MySQLMySQL
      Table. MySQL(DBaaS) event types

      MySQL

      Event SourceEvent TypeEvent
      MySQLMySQL
      • MySQL Create Start
      • MySQL Create Error
      • MySQL Create End
      • MySQL Delete Start
      • MySQL Delete Error
      • MySQL Delete End
      • MySQL Start Start
      • MySQL Start Error
      • MySQL Start End
      • MySQL Stop Start
      • MySQL Stop Error
      • MySQL Stop End
      • MySQL Restart Start
      • MySQL Restart Error
      • MySQL Restart End
      • MySQL Sync Start
      • MySQL Sync Error
      • MySQL Sync End
      • MySQL Maintenance Modify Start
      • MySQL Maintenance Modify Error
      • MySQL Maintenance Modify End
      • MySQL Maintenance Delete Start
      • MySQL Maintenance Delete Error
      • MySQL Maintenance Delete End
      • MySQL Security Group Rule Modify Start
      • MySQL Security Group Rule Modify Error
      • MySQL Security Group Rule Modify End
      • MySQL Instance Resize Start
      • MySQL Instance Resize Error
      • MySQL Instance Resize End
      • MySQL Block Storage Create Start
      • MySQL Block Storage Create Error
      • MySQL Block Storage Create End
      • MySQL Block Storage Resize Start
      • MySQL Block Storage Resize Error
      • MySQL Block Storage Resize End
      • MySQL Parameter Sync Start
      • MySQL Parameter Sync Error
      • MySQL Parameter Sync End
      • MySQL Parameter Modify Start
      • MySQL Parameter Modify Error
      • MySQL Parameter Modify End
      • MySQL Patch Start
      • MySQL Patch Error
      • MySQL Patch End
      • MySQL Backup Config Create Start
      • MySQL Backup Config Create Error
      • MySQL Backup Config Create End
      • MySQL Backup Config Modify Start
      • MySQL Backup Config Modify Error
      • MySQL Backup Config Modify End
      • MySQL Backup Config Delete Start
      • MySQL Backup Config Delete Error
      • MySQL Backup Config Delete End
      • MySQL Backup Recover Start
      • MySQL Backup Recover Error
      • MySQL Backup Recover End
      • MySQL Backup History Delete Start
      • MySQL Backup History Delete Error
      • MySQL Backup History Delete End
      • MySQL Replica Create Start
      • MySQL Replica Create Error
      • MySQL Replica Create End
      • MySQL Replica Reset Start
      • MySQL Replica Reset Error
      • MySQL Replica Reset End
      • MySQL Replica Sync Start
      • MySQL Replica Sync Error
      • MySQL Replica Sync End
      • MySQL Switchover Start
      • MySQL Switchover Error
      • MySQL Switchover End
      • MySQL Log Export Config Create Start
      • MySQL Log Export Config Create Error
      • MySQL Log Export Config Create End
      • MySQL Log Export Config Delete Start
      • MySQL Log Export Config Delete Error
      • MySQL Log Export Config Delete End
      • MySQL Log Export Config Modify Start
      • MySQL Log Export Config Modify Error
      • MySQL Log Export Config Modify End
      • MySQL Log Export Start
      • MySQL Log Export Error
      • MySQL Log Export End
      • MySQL Archive Config Modify Start
      • MySQL Archive Config Modify Error
      • MySQL Archive Config Modify End
      • MySQL Archive Config Sync Start
      • MySQL Archive Config Sync Error
      • MySQL Archive Config Sync End
      • MySQL Database Users Modify Start
      • MySQL Database Users Modify Error
      • MySQL Database Users Modify End
      • MySQL Database Users Sync Start
      • MySQL Database Users Sync Error
      • MySQL Database Users Sync End
      • MySQL Access Control Modify Start
      • MySQL Access Control Modify Error
      • MySQL Access Control Modify End
      • MySQL Access Control Sync Start
      • MySQL Access Control Sync Error
      • MySQL Access Control Sync End
      • MySQL Replica Cluster Promote Start
      • MySQL Replica Cluster Promote Error
      • MySQL Replica Cluster Promote End
      • MySQL Db Connection Check Start
      • MySQL Db Connection Check Error
      • MySQL Db Connection Check End
      • MySQL Cluster Migrate Start
      • MySQL Cluster Migrate Error
      • MySQL Cluster Migrate End
      • MySQL Migration Cluster Promote Start
      • MySQL Migration Cluster Promote Error
      • MySQL Migration Cluster Promote End
      Table. MySQL - Event types of MySQL events

      11.5.1.3 - Global CDN

      Global CDN Event

      Global CDN service event list to be passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      NetworkingGlobal CDNGlobal CDNGlobal CDNGlobal CDN
      Table. Global CDN event types

      Global CDN

      Event SourceEvent TypeEvent
      Global CDNGlobal CDN
      • Network CDN creation started
      • Network CDN creation error
      • Network CDN creation completed
      • Network CDN update started
      • Network CDN update error
      • Network CDN update completed
      • Network CDN deleted completed
      Table. Global CDN - Global CDN event type events

      11.5.1.4 - Data Flow

      Data Flow event

      Data Flow service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsData FlowData FlowData FlowData Flow
      Data AnalyticsData FlowData Flow ServicesData FlowData Flow Service
      Table. Data Flow event types

      Data Flow

      Event SourceEvent TypeEvent
      Data FlowData Flow
      • Data Flow Create Start
      • Data Flow Create End
      • Data Flow Create Error
      • Data Flow Delete Start
      • Data Flow Delete End
      • Data Flow Delete Error
      • Data Flow Modify Start
      • Data Flow Modify End
      • Data Flow Modify Error
      Table. Data Flow - Data Flow event type events

      Data Flow Service

      Event SourceEvent TypeEvent
      Data Flow ServicesData Flow Service
      • Data Flow Service Create Start
      • Data Flow Service Create End
      • Data Flow Service Create Error
      • Data Flow Service Delete Start
      • Data Flow Service Delete End
      • Data Flow Service Delete Error
      • Data Flow Service Modify Start
      • Data Flow Service Modify End
      • Data Flow Service Modify Error
      Table. Data Flow - Data Flow Service event types of events

      11.5.1.5 - GSLB

      GSLB event

      GSLB service list of events passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingGSLBGSLBGSLBGSLB
      Table. GSLB Event Types

      GSLB

      Event SourceEvent TypeEvent
      GSLBGSLB(cdn)
      • GSLB creation started
      • GSLB creation error
      • GSLB creation completed
      • GSLB update started
      • GSLB update completed
      • GSLB deletion completed
      • GSLB health check update started
      • GSLB health check update completed
      • GSLB resource update started
      • GSLB resource update completed
      Table. GSLB - GSLB event type events

      11.5.1.6 - Cloud Control

      Cloud Control event

      This is a list of events delivered from Cloud Control service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementCloud ControlCloud ControlCloud ControlCloud Control
      Table. Cloud Control event types

      Landing Zone

      Event SourceEvent TypeEvent
      Cloud ControlLanding Zone
      • Landing zone creation completed
      • Landing zone deletion started
      • Landing zone deletion error
      • Landing zone deletion completed
      Table. Cloud Control - Landing Zone Event Types of Events

      11.5.1.7 - Cloud WAN

      Cloud WAN event

      Cloud WAN service events delivered to ServiceWatch list.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingCloud WANCloud WAN NetworkCloud WANNetwork(WAN)
      NetworkingCloud WANSegmentCloud WANSegment
      NetworkingCloud WANSegmentCloud WANSegment Location
      NetworkingCloud WANSegmentCloud WANSegment Sharing
      NetworkingCloud WANAttachmentCloud WANAttachment
      Table. Cloud WAN event types

      Network(WAN)

      Event SourceEvent TypeEvent
      Cloud WANNetwork(WAN)
      • Network(WAN) creation started
      • Network(WAN) creation error
      • Network(WAN) creation completed
      • Network(WAN) modification started
      • Network(WAN) modification error
      • Network(WAN) modification completed
      • Network(WAN) deletion started
      • Network(WAN) deletion error
      • Network(WAN) deletion completed
      Table. Cloud WAN - Network(WAN) event types of events

      Segment

      Event SourceEvent TypeEvent
      Cloud WANSegment
      • Segment creation started
      • Segment creation error
      • Segment creation completed
      • Segment modification started
      • Segment modification error
      • Segment modification completed
      • Segment deletion started
      • Segment deletion error
      • Segment deletion completed
      Table. Cloud WAN - Segment event types of events

      Segment Location

      Event SourceEvent TypeEvent
      Cloud WANSegment Location
      • Segment Location creation started
      • Segment Location creation error
      • Segment Location creation completed
      • Segment Location modification started
      • Segment Location modification error
      • Segment Location modification completed
      • Segment Location deletion started
      • Segment Location deletion error
      • Segment Location deletion completed
      Table. Cloud WAN - Segment Location event type events

      Segment Sharing

      Event SourceEvent TypeEvent
      Cloud WANSegment Sharing
      • Segment Sharing creation started
      • Segment Sharing creation error
      • Segment Sharing creation completed
      • Segment Sharing modification started
      • Segment Sharing modification error
      • Segment Sharing modification completed
      • Segment Sharing deletion started
      • Segment Sharing deletion error
      • Segment Sharing deletion completed
      Table. Cloud WAN - Segment Sharing event type events

      Attachment

      Event SourceEvent TypeEvent
      Cloud WANAttachment
      • Attachment creation started
      • Attachment creation error
      • Attachment creation completed
      • Attachment modification started
      • Attachment modification error
      • Attachment modification completed
      • Attachment deletion started
      • Attachment deletion error
      • Attachment deletion completed
      • Attachment approval started
      • Attachment approval error
      • Attachment approval completed
      • Attachment cancellation started
      • Attachment cancellation error
      • Attachment cancellation completed
      • Attachment rejection started
      • Attachment rejection error
      • Attachment rejection completed
      Table. Cloud WAN - Attachment event types of events

      11.5.1.8 - Object Storage

      Object Storage event

      Object Storage service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      StorageObject StorageObject StorageObject StorageBucket
      Table. Object Storage event types

      Bucket

      Event SourceEvent TypeEvent
      Object StorageBucket
      • Object Storage bucket creation started
      • Object Storage bucket creation completed
      • Object Storage bucket creation failed
      • Object Storage bucket deletion started
      • Object Storage bucket deletion completed
      • Object Storage bucket deletion failed
      • Object Storage bucket versioning modification started
      • Object Storage bucket versioning modification completed
      • Object Storage bucket versioning modification failed
      • Object Storage bucket access control creation started
      • Object Storage bucket access control creation completed
      • Object Storage bucket access control creation failed
      • Object Storage bucket access control modification started
      • Object Storage bucket access control modification completed
      • Object Storage bucket access control modification failed
      • Object Storage bucket access control deletion started
      • Object Storage bucket access control deletion completed
      • Object Storage bucket access control deletion failed
      • Object Storage bucket encryption creation started
      • Object Storage bucket encryption creation completed
      • Object Storage bucket encryption creation failed
      • Object Storage bucket encryption modification started
      • Object Storage bucket encryption modification completed
      • Object Storage bucket encryption modification failed
      • Object Storage bucket encryption deletion started
      • Object Storage bucket encryption deletion completed
      • Object Storage bucket encryption deletion failed
      • Object Storage bucket replication policy modification started
      • Object Storage bucket replication policy modification completed
      • Object Storage bucket replication policy modification failed
      • Object Storage bucket replication policy deletion started
      • Object Storage bucket replication policy deletion completed
      • Object Storage bucket replication policy deletion failed
      Table. Object Storage - Bucket event types of events

      11.5.1.9 - VPC

      VPC event

      VPC service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingVPCVPCVPCVPC
      NetworkingVPCSubnetVPCSubnet
      NetworkingVPCPortVPCPort
      NetworkingVPCInternet GatewayVPCInternet Gateway
      NetworkingVPCNAT GatewayVPCNAT Gateway
      NetworkingVPCPublic IPVPCPublic IP
      NetworkingVPCPrivate NATVPCPrivate NAT
      NetworkingVPCVPC EndpointVPCVPC Endpoint
      NetworkingVPCVPC PeeringVPCVPC Peering
      NetworkingVPCPrivate Link ServiceVPCPrivate Link Service
      NetworkingVPCPrivate Link EndpointVPCPrivate Link Endpoint
      NetworkingVPCTransit GatewayVPCTransit Gateway
      Table. VPC Event Types

      VPC

      Event SourceEvent TypeEvent
      VPCVPC
      • VPC creation completed
      • VPC update completed
      • VPC deletion completed
      Table. VPC - VPC event type events

      Subnet

      Event SourceEvent TypeEvent
      VPCSubnet
      • Subnet creation started
      • Subnet creation error
      • Subnet creation completed
      • Subnet update completed
      • Subnet deletion started
      • Subnet deletion error
      • Subnet deletion completed
      Table. VPC - Subnet event types of events

      Port

      Event SourceEvent TypeEvent
      VPCPort
      • Port creation completed
      • Port creation error
      • Port update completed
      • Port update error
      • Port deletion completed
      • Port deletion error
      Table. VPC - Subnet event type events

      Internet Gateway

      Event SourceEvent TypeEvent
      VPCInternet Gateway
      • Internet Gateway creation started
      • Internet Gateway creation completed
      • Internet Gateway creation error
      • Internet Gateway update completed
      • Internet Gateway deletion started
      • Internet Gateway deletion error
      • Internet Gateway deletion completed
      Table. VPC - Internet Gateway event types of events

      NAT Gateway

      Event SourceEvent TypeEvent
      VPCNAT Gateway
      • NAT Gateway creation started
      • NAT Gateway creation completed
      • NAT Gateway creation error
      • NAT Gateway update completed
      • NAT Gateway deletion started
      • NAT Gateway deletion error
      • NAT Gateway deletion completed
      Table. VPC - NAT Gateway event type events

      Public IP

      Event SourceEvent TypeEvent
      VPCPublic IP
      • Public IP creation completed
      • Public IP update completed
      • Public IP deletion completed
      Table. VPC - Public IP event type events

      Private NAT

      Event SourceEvent TypeEvent
      VPCPrivate NAT
      • Private NAT creation started
      • Private NAT creation completed
      • Private NAT creation error
      • Private NAT update completed
      • Private NAT deletion started
      • Private NAT deletion error
      • Private NAT deletion completed
      • Private NAT IP creation completed
      • Private NAT IP update completed
      • Private NAT IP deletion completed
      Table. VPC - Private NAT event type events

      VPC Endpoint

      Event SourceEvent TypeEvent
      VPCVPC Endpoint
      • VPC Endpoint creation started
      • VPC Endpoint creation completed
      • VPC Endpoint creation error
      • VPC Endpoint update completed
      • VPC Endpoint deletion started
      • VPC Endpoint deletion error
      • VPC Endpoint deletion completed
      Table. VPC - VPC Endpoint event type events

      VPC Peering

      Event SourceEvent TypeEvent
      VPCVPC Peering
      • VPC Peering creation started
      • VPC Peering creation error
      • VPC Peering creation completed
      • VPC Peering update completed
      • VPC Peering deletion started
      • VPC Peering deletion error
      • VPC Peering deletion completed
      • VPC Peering rule creation started
      • VPC Peering rule creation error
      • VPC Peering rule creation completed
      • VPC Peering rule deletion started
      • VPC Peering rule deletion error
      • VPC Peering rule deletion completed
      • VPC Peering creation approval request
      • VPC Peering creation approval completed
      • VPC Peering creation approval rejected
      • VPC Peering creation approval canceled
      • VPC Peering creation approval re-requested
      • VPC Peering deletion approval request
      • VPC Peering deletion approval completed
      • VPC Peering deletion approval rejected
      • VPC Peering deletion approval canceled
      Table. VPC - VPC Peering event type events
      Event SourceEvent TypeEvent
      VPCPrivate Link Service
      • PrivateLink Service creation started
      • PrivateLink Service creation completed
      • PrivateLink Service creation error
      • PrivateLink Service update completed
      • PrivateLink Service deletion started
      • PrivateLink Service deletion error
      • PrivateLink Service deletion completed
      Table. VPC - Private Link Service event types of events
      Event SourceEvent TypeEvent
      VPCPrivateLink Endpoint
      • PrivateLink Endpoint creation started
      • PrivateLink Endpoint creation approval request
      • PrivateLink Endpoint creation approval completed
      • PrivateLink Endpoint creation approval rejected
      • PrivateLink Endpoint creation approval canceled
      • PrivateLink Endpoint creation approval re-requested
      • PrivateLink Endpoint creation error
      • PrivateLink Endpoint creation completed
      • PrivateLink Endpoint update completed
      • PrivateLink Endpoint disconnection completed
      • PrivateLink Endpoint disconnection completed
      • PrivateLink Endpoint deletion started
      • PrivateLink Endpoint deletion error
      • PrivateLink Endpoint deletion completed
      Table. VPC - PrivateLink Endpoint event types of events

      Transit Gateway

      Event SourceEvent TypeEvent
      VPCTransit Gateway
      • Transit Gateway creation started
      • Transit Gateway creation error
      • Transit Gateway creation completed
      • Transit Gateway update completed
      • Transit Gateway uplink creation completed
      • Transit Gateway uplink deletion completed
      • Transit Gateway uplink update completed
      • Transit Gateway SNMP interface creation completed
      • Transit Gateway SNMP interface deletion completed
      • Transit Gateway deletion started
      • Transit Gateway deletion error
      • Transit Gateway deletion completed
      • Transit Gateway VPC connection creation started
      • Transit Gateway VPC connection creation error
      • Transit Gateway VPC connection creation completed
      • Transit Gateway VPC connection deletion started
      • Transit Gateway VPC connection deletion error
      • Transit Gateway VPC connection deletion completed
      • Transit Gateway rule creation started
      • Transit Gateway rule creation error
      • Transit Gateway rule creation completed
      • Transit Gateway rule deletion started
      • Transit Gateway rule deletion error
      • Transit Gateway rule deletion completed
      Table. VPC - Transit Gateway event type events

      11.5.1.10 - GPU Server

      GPU Server event

      GPU Server service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ComputeGPU ServerGPU ServerGPU ServerServer
      ComputeGPU ServerImageGPU Server
      Table. GPU Server event types

      Server

      ServiceEvent TypeEvent
      GPU ServerServer(server)
      • Compute GPU Server Create Start
      • Compute GPU Server Create End
      • Compute GPU Server Create Error
      • Compute GPU Server Delete Start
      • Compute GPU Server Delete End
      • Compute GPU Server Delete Error
      • Compute GPU Server Update End
      • Compute GPU Server Lock End
      • Compute GPU Server Unlock End
      • Compute GPU Server Reboot Start
      • Compute GPU Server Reboot End
      • Compute GPU Server Reboot Error
      • Compute GPU Server Power On Start
      • Compute GPU Server Power On End
      • Compute GPU Server Power On Error
      • Compute GPU Server Power Off Start
      • Compute GPU Server Power Off End
      • Compute GPU Server Power Off Error
      • Compute GPU Server Rebuild Start
      • Compute GPU Server Rebuild End
      • Compute GPU Server Rebuild Error
      • Compute GPU Server Resize Start
      • Compute GPU Server Resize End
      • Compute GPU Server Resize Error
      • Compute GPU Server Resize Revert Start
      • Compute GPU Server Resize Revert End
      • Compute GPU Server Resize Revert Error
      • Compute GPU Server Dump Start
      • Compute GPU Server Dump End
      • Compute GPU Server Dump Error
      • Compute GPU Server Volume Attach Start
      • Compute GPU Server Volume Attach End
      • Compute GPU Server Volume Attach Error
      • Compute GPU Server Volume Detach Start
      • Compute GPU Server Volume Detach End
      • Compute GPU Server Volume Detach Error
      • Compute GPU Server Volume Update End
      • Compute GPU Server Volume Update Error
      • Compute GPU Server Interface Attach End
      • Compute GPU Server Interface Attach Error
      • Compute GPU Server Interface Detach End
      • Compute GPU Server Interface Detach Error
      • Compute GPU Server Interface Change Start
      • Compute GPU Server Interface Change End
      • Compute GPU Server Interface Change Error
      Table. GPU Server - Server event type events

      Image

      ServiceEvent TypeEvent
      GPU ServerImage
      • Compute Image Create Start
      • Compute Image Create End
      • Compute Image Import Start
      • Compute Image Update End
      • Compute Image Delete End
      • Compute Image Member Create End
      • Compute Image Member Update End
      • Compute Image Member Delete End
      • Compute Image Import End
      • Compute Image Import Error
      • Compute Sharing Image Create Start
      • Compute Sharing Image Create End
      • Compute Sharing Image Create Error
      Table. GPU Server - Image event type events

      11.5.1.11 - Virtual Server

      Virtual Server event

      This is a list of events passed from Virtual Server service to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      ComputeVirtual ServerVirtual ServerVirtual ServerServer
      ComputeVirtual ServerImageVirtual ServerImage
      ComputeVirtual ServerKeypairVirtual ServerKeypair
      ComputeVitual ServerServer GroupVirtual ServerServer Group
      ComputeVirtual ServerLaunch ConfigurationVirtual ServerLaunch Configuration
      ComputeVirtual ServerAuto-Scaling GroupVirtual ServerAuto-Scaling Group
      ComputeVirtual ServerBlock StorageVirtual ServerVolume
      ComputeVirtual ServerBlock StorageVirtual ServerSnapshot
      Table. Virtual Server event types

      Server

      Event SourceEvent TypeEvent
      Virtual ServerServer
      • Compute Virtual Server Create Start
      • Compute Virtual Server Create End
      • Compute Virtual Server Create Error
      • Compute Virtual Server Delete Start
      • Compute Virtual Server Delete End
      • Compute Virtual Server Delete Error
      • Compute Virtual Server Update End
      • Compute Virtual Server Lock End
      • Compute Virtual Server Unlock End
      • Compute Virtual Server Reboot Start
      • Compute Virtual Server Reboot End
      • Compute Virtual Server Reboot Error
      • Compute Virtual Server Power On Start
      • Compute Virtual Server Power On End
      • Compute Virtual Server Power On Error
      • Compute Virtual Server Power Off Start
      • Compute Virtual Server Power Off End
      • Compute Virtual Server Power Off Error
      • Compute Virtual Server Rebuild Start
      • Compute Virtual Server Rebuild End
      • Compute Virtual Server Rebuild Error
      • Compute Virtual Server Resize Start
      • Compute Virtual Server Resize End
      • Compute Virtual Server Resize Error
      • Compute Virtual Server Resize Revert Start
      • Compute Virtual Server Resize Revert End
      • Compute Virtual Server Resize Revert Error
      • Compute Virtual Server Dump Start
      • Compute Virtual Server Dump End
      • Compute Virtual Server Dump Error
      • Compute Virtual Server Volume Attach Start
      • Compute Virtual Server Volume Attach End
      • Compute Virtual Server Volume Attach Error
      • Compute Virtual Server Volume Detach Start
      • Compute Virtual Server Volume Detach End
      • Compute Virtual Server Volume Detach Error
      • Compute Virtual Server Volume Update End
      • Compute Virtual Server Volume Update Error
      • Compute Virtual Server Interface Attach End
      • Compute Virtual Server Interface Attach Error
      • Compute Virtual Server Interface Detach End
      • Compute Virtual Server Interface Detach Error
      • Compute Virtual Server Interface Change Start
      • Compute Virtual Server Interface Change End
      • Compute Virtual Server Interface Change Error
      Table. Virtual Server - Server event types of events

      Image

      Event SourceEvent TypeEvent
      Virtual ServerImage
      • Compute Image Create Start
      • Compute Image Create End
      • Compute Image Import Start
      • Compute Image Update End
      • Compute Image Delete End
      • Compute Image Member Create End
      • Compute Image Member Update End
      • Compute Image Member Delete End
      • Compute Image Import End
      • Compute Image Import Error
      • Compute Sharing Image Create Start
      • Compute Sharing Image Create End
      • Compute Sharing Image Create Error
      Table. Virtual Server - Image event types of events

      Keypair

      Event SourceEvent TypeEvent
      Virtual ServerKeypair
      • Compute Keypair Create End
      • Compute Keypair Delete End
      Table. Virtual Server - Keypair event type events

      Server Group

      Event SourceEvent TypeEvent
      Virtual ServerServer Group
      • Compute Server Group Create End
      • Compute Server Group Delete End
      Table. Virtual Server - Server Group event types of events

      Launch Configuration

      Event SourceEvent TypeEvent
      Virtual ServerLaunch Configuration
      • Compute Launch Configuration Create End
      • Compute Launch Configuration Delete End
      Table. Virtual Server - Launch Configuration event type events

      Auto-Scaling Group

      Event SourceEvent TypeEvent
      Virtual ServerAuto-Scaling Group
      • Compute Auto-Scaling Group Create End
      • Compute Auto-Scaling Group Delete End
      • Compute Auto-Scaling Group Delete Error
      • Compute Auto-Scaling Group Policy Create End
      • Compute Auto-Scaling Group Policy Delete End
      • Compute Auto-Scaling Group Policy Update End
      • Compute Auto-Scaling Group Virtual Server Attach End
      • Compute Auto-Scaling Group Virtual Server Detach End
      • Compute Auto-Scaling Group LB Server Group Update Start
      • Compute Auto-Scaling Group LB Server Group Update End/li>
      • Compute Auto-Scaling Group LB Server Group Update Error
      • Compute Auto-Scaling Group Policy Receive Alarm End
      • Compute Auto-Scaling Group Server Count Update End
      • Compute Auto-Scaling Group Update End
      • Compute Auto-Scaling Group Schedule Execute End
      • Compute Auto-Scaling Group Scale Out Start
      • Compute Auto-Scaling Group Scale Out End
      • Compute Auto-Scaling Group Scale In Start
      • Compute Auto-Scaling Group Scale In End
      • Compute Auto-Scaling Group Scale Out Error
      • Compute Auto-Scaling Group Scale In Error
      • Compute Auto-Scaling Group Schedule Create End
      • Compute Auto-Scaling Group Schedule Delete End
      • Compute Auto-Scaling Group Schedule Update End
      • Compute Auto-Scaling Group Notification Create End
      • Compute Auto-Scaling Group Notification Delete End
      • Compute Auto-Scaling Group Notification Update End
      • Compute Auto-Scaling Group Scale Request End
      Table. Virtual Server - Auto-Scaling Group event types of events

      Volume

      Event SourceEvent TypeEvent
      Virtual ServerVolume
      • Block Storage Volume Create Start
      • Block Storage Volume Create Error
      • Block Storage Volume Create End
      • Block Storage Volume Delete Start
      • Block Storage Volume Delete Error
      • Block Storage Volume Delete End
      • Block Storage Volume Update End
      • Block Storage Volume Resize Start
      • Block Storage Volume Resize Error
      • Block Storage Volume Resize End
      • Block Storage Volume Attach Start
      • Block Storage Volume Attach Error
      • Block Storage Volume Attach End
      • Block Storage Volume Detach Start
      • Block Storage Volume Detach Error
      • Block Storage Volume Detach End
      • Block Storage Volume Transfer Create Start
      • Block Storage Volume Transfer Create Error
      • Block Storage Volume Transfer Create End
      • Block Storage Volume Transfer Delete Start
      • Block Storage Volume Transfer Delete Error
      • Block Storage Volume Transfer Delete End
      • Block Storage Volume Transfer Accept Start
      • Block Storage Volume Transfer Accept Error
      • Block Storage Volume Transfer Accept End
      Table. Virtual Server - Volume event types of events

      Snapshot

      Event SourceEvent TypeEvent
      Virtual ServerSnapshot
      • Block Storage Snapshot Revert Start
      • Block Storage Snapshot Revert Error
      • Block Storage Snapshot Revert End
      • Block Storage Snapshot Create Start
      • Block Storage Snapshot Create Error
      • Block Storage Snapshot Create End
      • Block Storage Snapshot Delete Start
      • Block Storage Snapshot Delete Error
      • Block Storage Snapshot Delete End
      • Block Storage Snapshot Update End
      Table. Virtual Server - Snapshot event type events

      11.5.1.12 - Firewall

      Firewall event

      This is a list of events passed from the Firewall service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingFirewallfirewallFirewallFirewall
      Table. Firewall event types

      Firewall

      Event SourceEvent TypeEvent
      FirewallFirewall
      • Firewall creation error
      • Firewall creation complete
      • Firewall deletion error
      • Firewall deletion complete
      • Firewall size adjustment complete
      • Firewall size adjustment error
      • Firewall activation complete
      • Firewall activation error
      • Firewall deactivation complete
      • Firewall deactivation error
      • Firewall update complete
      • Firewall update error
      • Firewall Rule creation complete
      • Firewall Rule creation error
      • Firewall Rule deletion complete
      • Firewall Rule deletion error
      • Firewall Rule update complete
      • Firewall Rule update error
      Table. Firewall - Firewall event types of events

      11.5.1.13 - ID Center

      ID Center event

      ID Center service event list delivered to ServiceWatch: ID Center service event list delivered to ServiceWatch

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      ManagementID CenterID CenterIdentity CenterID Center
      ManagementID CenterAuthorization SetIdentity CenterAuthorization Set
      Table. ID Center event type

      ID Center

      Event SourceEvent TypeEvent
      Identity CenterID Center
      • Identity Center ID Center creation started
      • Identity Center ID Center creation failed
      • Identity Center ID Center creation completed
      • Identity Center ID Center modification started
      • Identity Center ID Center modification failed
      • Identity Center ID Center modification completed
      • Identity Center ID Center deletion started
      • Identity Center ID Center deletion failed
      • Identity Center ID Center deletion completed
      Table. ID Center - ID Center event type events

      Authority Set

      Event SourceEvent TypeEvent
      Identity CenterPermission Set
      • Identity Center permission set creation started
      • Identity Center permission set creation failed
      • Identity Center permission set creation completed
      • Identity Center permission set modification started
      • Identity Center permission set modification failed
      • Identity Center permission set modification completed
      • Identity Center permission set deletion started
      • Identity Center permission set deletion failed
      • Identity Center permission set deletion completed
      Table. ID Center - Authority Set Event Type Events

      11.5.1.14 - Microsoft SQL Server(DBaaS)

      Microsoft SQL Server(DBaaS) event

      Microsoft SQL Server(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server(DBaaS)Microsoft SQL ServerMicrosoft SQL Server
      Table. Microsoft SQL Server(DBaaS) event types

      Microsoft SQL Server

      Event SourceEvent TypeEvent
      Microsoft SQL ServerMicrosoft SQL Server
      • SQL Server Create Start
      • SQL Server Create Error
      • SQL Server Create End
      • SQL Server Delete Start
      • SQL Server Delete Error
      • SQL Server Delete End
      • SQL Server Start Start
      • SQL Server Start Error
      • SQL Server Start End
      • SQL Server Stop Start
      • SQL Server Stop Error
      • SQL Server Stop End
      • SQL Server Restart Start
      • SQL Server Restart Error
      • SQL Server Restart End
      • SQL Server Sync Start
      • SQL Server Sync Error
      • SQL Server Sync End
      • SQL Server Audit Log Modify Start
      • SQL Server Audit Log Modify Error
      • SQL Server Audit Log Modify End
      • SQL Server Maintenance Modify Start
      • SQL Server Maintenance Modify Error
      • SQL Server Maintenance Modify End
      • SQL Server Maintenance Delete Start
      • SQL Server Maintenance Delete Error
      • SQL Server Maintenance Delete End
      • SQL Server Security Group Rule Modify Start
      • SQL Server Security Group Rule Modify Error
      • SQL Server Security Group Rule Modify End
      • SQL Server Instance Resize Start
      • SQL Server Instance Resize Error
      • SQL Server Instance Resize End
      • SQL Server Block Storage Create Start
      • SQL Server Block Storage Create Error
      • SQL Server Block Storage Create End
      • SQL Server Block Storage Resize Start
      • SQL Server Block Storage Resize Error
      • SQL Server Block Storage Resize End
      • SQL Server Parameter Sync Start
      • SQL Server Parameter Sync Error
      • SQL Server Parameter Sync End
      • SQL Server Parameter Modify Start
      • SQL Server Parameter Modify Error
      • SQL Server Parameter Modify End
      • SQL Server Patch Start
      • SQL Server Patch Error
      • SQL Server Patch End
      • SQL Server Backup Config Create Start
      • SQL Server Backup Config Create Error
      • SQL Server Backup Config Create End
      • SQL Server Backup Config Modify Start
      • SQL Server Backup Config Modify Error
      • SQL Server Backup Config Modify End
      • SQL Server Backup Config Delete Start
      • SQL Server Backup Config Delete Error
      • SQL Server Backup Config Delete End
      • SQL Server Backup Recover Start
      • SQL Server Backup Recover Error
      • SQL Server Backup Recover End
      • SQL Server Backup History Delete Start
      • SQL Server Backup History Delete Error
      • SQL Server Backup History Delete End
      • SQL Server Switchover Start
      • SQL Server Switchover Error
      • SQL Server Switchover End
      • SQL Server Database Modify Start
      • SQL Server Database Modify Error
      • SQL Server Database Modify End
      • SQL Server Log Export Config Create Start
      • SQL Server Log Export Config Create Error
      • SQL Server Log Export Config Create End
      • SQL Server Log Export Config Delete Start
      • SQL Server Log Export Config Delete Error
      • SQL Server Log Export Config Delete End
      • SQL Server Log Export Config Modify Start
      • SQL Server Log Export Config Modify Error
      • SQL Server Log Export Config Modify End
      • SQL Server Log Export Start
      • SQL Server Log Export Error
      • SQL Server Log Export End
      • SQL Server Database Users Modify Start
      • SQL Server Database Users Modify Error
      • SQL Server Database Users Modify End
      • SQL Server Database Users Sync Start
      • SQL Server Database Users Sync Error
      • SQL Server Database Users Sync End
      • SQL Server Secondary Add Start
      • SQL Server Secondary Add Error
      • SQL Server Secondary Add End
      Table. Microsoft SQL Server - Microsoft SQL Server event type events

      11.5.1.15 - Block Storage(BM)

      Block Storage(BM) event

      Block Storage(BM) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      StorageBlock Storage(BM)Block Storage(BM)Block Storage(BM)Volume
      StorageBlock Storage(BM)Volume Group(BM)Block Storage(BM)Volume Group
      Table. Block Storage(BM) event types

      Volume

      Event SourceEvent TypeEvent
      Block Storage(BM)Volume
      • Block Storage(BM) Volume creation started
      • Block Storage(BM) Volume creation completed
      • Block Storage(BM) Volume creation failed
      • Block Storage(BM) Volume connection server creation started
      • Block Storage(BM) Volume connection server creation completed
      • Block Storage(BM) Volume connection server creation failed
      • Block Storage(BM) Volume connection server deletion started
      • Block Storage(BM) Volume connection server deletion completed
      • Block Storage(BM) Volume connection server deletion failed
      • Block Storage(BM) Volume deletion started
      • Block Storage(BM) Volume deletion completed
      • Block Storage(BM) Volume deletion failed
      • Block Storage(BM) Volume snapshot capacity creation started
      • Block Storage(BM) Volume snapshot capacity creation completed
      • Block Storage(BM) Volume snapshot capacity creation failed
      • Block Storage(BM) Volume snapshot capacity modification started
      • Block Storage(BM) Volume snapshot capacity modification completed
      • Block Storage(BM) Volume snapshot capacity modification failed
      • Block Storage(BM) Volume snapshot capacity deletion started
      • Block Storage(BM) Volume snapshot capacity deletion completed
      • Block Storage(BM) Volume snapshot capacity deletion failed
      • Block Storage(BM) Volume snapshot creation started
      • Block Storage(BM) Volume snapshot creation completed
      • Block Storage(BM) Volume snapshot creation failed
      • Block Storage(BM) Volume snapshot restore started
      • Block Storage(BM) Volume snapshot restore completed
      • Block Storage(BM) Volume snapshot restore failed
      • Block Storage(BM) Volume snapshot deletion started
      • Block Storage(BM) Volume snapshot deletion completed
      • Block Storage(BM) Volume snapshot deletion failed
      • Block Storage(BM) Volume snapshot schedule creation started
      • Block Storage(BM) Volume snapshot schedule creation completed
      • Block Storage(BM) Volume snapshot schedule creation failed
      • Block Storage(BM) Volume snapshot schedule modification started
      • Block Storage(BM) Volume snapshot schedule modification completed
      • Block Storage(BM) Volume snapshot schedule modification failed
      • Block Storage(BM) Volume snapshot schedule deletion started
      • Block Storage(BM) Volume snapshot schedule deletion completed
      • Block Storage(BM) Volume snapshot schedule deletion failed
      • Block Storage(BM) Volume name modification started
      • Block Storage(BM) Volume name modification completed
      • Block Storage(BM) Volume name modification failed
      • Block Storage(BM) Volume replication creation started
      • Block Storage(BM) Volume replication creation completed
      • Block Storage(BM) Volume replication creation failed
      • Block Storage(BM) Volume replication deletion started
      • Block Storage(BM) Volume replication deletion completed
      • Block Storage(BM) Volume replication deletion failed
      • Block Storage(BM) Volume replication policy creation started
      • Block Storage(BM) Volume replication policy creation completed
      • Block Storage(BM) Volume replication policy creation failed
      • Block Storage(BM) Volume replication policy modification started
      • Block Storage(BM) Volume replication policy modification completed
      • Block Storage(BM) Volume replication policy modification failed
      • Block Storage(BM) Volume replication policy deletion started
      • Block Storage(BM) Volume replication policy deletion completed
      • Block Storage(BM) Volume replication policy deletion failed
      • Block Storage(BM) Volume relationship creation started
      • Block Storage(BM) Volume relationship creation completed
      • Block Storage(BM) Volume relationship creation failed
      • Block Storage(BM) Volume relationship deletion started
      • Block Storage(BM) Volume relationship deletion completed
      • Block Storage(BM) Volume relationship deletion failed
      • Block Storage(BM) Volume replication cycle modification started
      • Block Storage(BM) Volume replication cycle modification completed
      • Block Storage(BM) Volume replication cycle modification failed
      • Block Storage(BM) Volume backup creation started
      • Block Storage(BM) Volume backup creation completed
      • Block Storage(BM) Volume backup creation failed
      Table. Block Storage(BM) - Volume event types of events

      Volume Group

      Event SourceEvent TypeEvent
      Volume Group(BM)Volume Group
      • Block Storage(BM) Volume Group creation started
      • Block Storage(BM) Volume Group creation completed
      • Block Storage(BM) Volume Group creation failed
      • Block Storage(BM) Volume Group member addition started
      • Block Storage(BM) Volume Group member addition completed
      • Block Storage(BM) Volume Group member addition failed
      • Block Storage(BM) Volume Group member removal started
      • Block Storage(BM) Volume Group member removal completed
      • Block Storage(BM) Volume Group member removal failed
      • Block Storage(BM) Volume Group deletion started
      • Block Storage(BM) Volume Group deletion completed
      • Block Storage(BM) Volume Group deletion failed
      • Block Storage(BM) Volume Group snapshot creation started
      • Block Storage(BM) Volume Group snapshot creation completed
      • Block Storage(BM) Volume Group snapshot creation failed
      • Block Storage(BM) Volume Group snapshot restore started
      • Block Storage(BM) Volume Group snapshot restore completed
      • Block Storage(BM) Volume Group snapshot restore failed
      • Block Storage(BM) Volume Group snapshot deletion started
      • Block Storage(BM) Volume Group snapshot deletion completed
      • Block Storage(BM) Volume Group snapshot deletion failed
      • Block Storage(BM) Volume Group snapshot schedule creation started
      • Block Storage(BM) Volume Group snapshot schedule creation completed
      • Block Storage(BM) Volume Group snapshot schedule creation failed
      • Block Storage(BM) Volume Group snapshot schedule modification started
      • Block Storage(BM) Volume Group snapshot schedule modification completed
      • Block Storage(BM) Volume Group snapshot schedule modification failed
      • Block Storage(BM) Volume Group snapshot schedule deletion started
      • Block Storage(BM) Volume Group snapshot schedule deletion completed
      • Block Storage(BM) Volume Group snapshot schedule deletion failed
      • Block Storage(BM) Volume Group replication creation started
      • Block Storage(BM) Volume Group replication creation completed
      • Block Storage(BM) Volume Group replication creation failed
      • Block Storage(BM) Volume Group replication deletion started
      • Block Storage(BM) Volume Group replication deletion completed
      • Block Storage(BM) Volume Group replication deletion failed
      • Block Storage(BM) Volume Group replication policy creation started
      • Block Storage(BM) Volume Group replication policy creation completed
      • Block Storage(BM) Volume Group replication policy creation failed
      • Block Storage(BM) Volume Group replication policy modification started
      • Block Storage(BM) Volume Group replication policy modification completed
      • Block Storage(BM) Volume Group replication policy modification failed
      • Block Storage(BM) Volume Group replication policy deletion started
      • Block Storage(BM) Volume Group replication policy deletion completed
      • Block Storage(BM) Volume Group replication policy deletion failed
      • Block Storage(BM) Volume Group relationship creation started
      • Block Storage(BM) Volume Group relationship creation completed
      • Block Storage(BM) Volume Group relationship creation failed
      • Block Storage(BM) Volume Group relationship deletion started
      • Block Storage(BM) Volume Group relationship deletion completed
      • Block Storage(BM) Volume Group relationship deletion failed
      • Block Storage(BM) Volume Group replication cycle modification started
      • Block Storage(BM) Volume Group replication cycle modification completed
      • Block Storage(BM) Volume Group replication cycle modification failed
      • Block Storage(BM) Volume Group backup creation started
      • Block Storage(BM) Volume Group backup creation completed
      • Block Storage(BM) Volume Group backup creation failed
      Table. Block Storage(BM) - Volume Group event types of events

      11.5.1.16 - Resource Groups

      Resource Groups Event

      Resource Groups service list of events passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementResource GroupsResource GroupsResource GroupsResource Group
      Table. Resource Groups event types

      Resource Group

      Event SourceEvent TypeEvent
      Resource GroupsResource Group
      • Resource Group creation completed
      • Resource Group modification completed
      • Resource Group deletion completed
      Table. Resource Groups - Resource Group event types of events

      11.5.1.17 - Cloud Functions

      Cloud Functions event

      Cloud Functions service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ComputeCloud FunctionsFunctionCloud FunctionsCloud Functions
      Table. Cloud Functions event types

      Cloud Functions

      Event SourceEvent TypeEvent
      Cloud FunctionsCloud Functions
      • Function creation started
      • Function creation failed
      • Function creation completed
      • Function modification started
      • Function modification failed
      • Function modification completed
      • Function deletion started
      • Function deletion failed
      Table. Cloud Functions - Cloud Functions event type events

      11.5.1.18 - AI&MLOps Platform

      AI&MLOps Platform Event

      AI&MLOps Platform service event list to be passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      AI-MLAI&MLOps PlatformAI&MLOps PlatformAI&MLOps PlatformAI&MLOps Platform
      Table. AI&MLOps Platform event types

      AI&MLOps Platform

      Event SourceEvent TypeEvent
      AI&MLOps PlatformAI&MLOps Platform
      • AI&MLOps Platform Create Start
      • AI&MLOps Platform Create End
      • AI&MLOps Platform Create Error
      • AI&MLOps Platform Delete Start
      • AI&MLOps Platform Delete End
      • AI&MLOps Platform Delete Error
      • AI&MLOps Platform Modify Start
      • AI&MLOps Platform Modify End
      • AI&MLOps Platform Modify Error
      Table. AI&MLOps Platform - AI&MLOps Platform event type events

      11.5.1.19 - Event Streams

      Event Streams events

      Event Streams service list of events passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsEvent StreamsEvent StreamsEvent StreamsEvent Streams
      Table. Event Streams event types

      Event Streams

      Event SourceEvent TypeEvent
      Event StreamsEvent Streams
      • Event Streams Create Start
      • Event Streams Create Error
      • Event Streams Create End
      • Event Streams Delete Start
      • Event Streams Delete Error
      • Event Streams Delete End
      • Event Streams Start Start
      • Event Streams Start Error
      • Event Streams Start End
      • Event Streams Stop Start
      • Event Streams Stop Error
      • Event Streams Stop End
      • Event Streams Restart Start
      • Event Streams Restart Error
      • Event Streams Restart End
      • Event Streams Sync Start
      • Event Streams Sync Error
      • Event Streams Sync End
      • Event Streams Maintenance Modify Start
      • Event Streams Maintenance Modify Error
      • Event Streams Maintenance Modify End
      • Event Streams Maintenance Delete Start
      • Event Streams Maintenance Delete Error
      • Event Streams Maintenance Delete End
      • Event Streams Security Group Rule Modify Start
      • Event Streams Security Group Rule Modify Error
      • Event Streams Security Group Rule Modify End
      • Event Streams Instance Resize Start
      • Event Streams Instance Resize Error
      • Event Streams Instance Resize End
      • Event Streams Instance Add Start
      • Event Streams Instance Add Error
      • Event Streams Instance Add End
      • Event Streams Block Storage Resize Start
      • Event Streams Block Storage Resize Error
      • Event Streams Block Storage Resize End
      • Event Streams Parameter Sync Start
      • Event Streams Parameter Sync Error
      • Event Streams Parameter Sync End
      • Event Streams Parameter Modify Start
      • Event Streams Parameter Modify Error
      • Event Streams Parameter Modify End
      • CacheStore Backup Config Modify Start
      • CacheStore Backup Config Modify Error
      • CacheStore Backup Config Modify End
      • CacheStore Backup Config Delete Start
      • CacheStore Backup Config Delete Error
      • CacheStore Backup Config Delete End
      • CacheStore Backup Recover Start
      • CacheStore Backup Recover Error
      • CacheStore Backup Recover End
      • CacheStore Backup History Delete Start
      • CacheStore Backup History Delete Error
      • CacheStore Backup History Delete End
      • CacheStore Command Sync Start
      • CacheStore Command Sync Error
      • CacheStore Command Sync End
      • CacheStore Command Modify Start
      • CacheStore Command Modify Error
      • CacheStore Command Modify End
      • CacheStore Switchover Start
      • CacheStore Switchover Error
      • CacheStore Switchover End
      Table. Event Streams - Event Streams event type events

      11.5.1.20 - Security Group

      Security Group event

      Security Group service list of events passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingSecurity GroupSecurity GroupSecurity GroupSecurity Group
      Table. Security Group event types

      Security Group

      Event SourceEvent TypeEvent
      Security GroupSecurity Group
      • Security Group creation completed
      • Security Group deletion completed
      • Security Group modification completed
      • Security Group rule creation completed
      • Security Group rule deletion completed
      Table. Security Group - Security Group event types of events

      11.5.1.21 - Archive Storage

      Archive Storage event

      This is the list of events delivered from the Archive Storage service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ComputeArchive StorageArchive StorageArchive StorageBucket
      Table. Archive Storage event types

      Bucket

      Evans SourceEvent TypeEvent
      Archive StorageBucket
      • Archive Storage bucket creation started
      • Archive Storage bucket creation completed
      • Archive Storage bucket creation failed
      • Archive Storage bucket deletion started
      • Archive Storage bucket deletion completed
      • Archive Storage bucket deletion failed
      • Archive Storage bucket archiving policy creation started
      • Archive Storage bucket archiving policy creation completed
      • Archive Storage bucket archiving policy creation failed
      • Archive Storage bucket archiving policy modification started
      • Archive Storage bucket archiving policy modification completed
      • Archive Storage bucket archiving policy modification failed
      • Archive Storage bucket archiving policy deletion started
      • Archive Storage bucket archiving policy deletion completed
      • Archive Storage bucket archiving policy deletion failed
      • Archive Storage bucket recovery history cancellation started
      • Archive Storage bucket recovery history cancellation completed
      • Archive Storage bucket recovery history cancellation failed
      • Archive Storage bucket archiving history cancellation started
      • Archive Storage bucket archiving history cancellation completed
      • Archive Storage bucket archiving history cancellation failed
      • Archive Storage bucket versioning modification started
      • Archive Storage bucket versioning modification completed
      • Archive Storage bucket versioning modification failed
      • Archive Storage bucket encryption modification started
      • Archive Storage bucket encryption modification completed
      • Archive Storage bucket encryption modification failed
      • Archive Storage bucket archiving policy status modification started
      • Archive Storage bucket archiving policy status modification completed
      • Archive Storage bucket archiving policy status modification failed
      Table. Archive Storage - Bucket event types of events

      11.5.1.22 - API Gateway

      API Gateway event

      API Gateway service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Application ServiceAPI GatewayAPI GatewayAPI GatewayAPI Gateway
      Table. API Gateway event types

      API Gateway

      Event SourceEvent TypeEvent
      API GatewayAPI Gateway
      • API Gateway API creation request
      • API Gateway API creation failure
      • API Gateway API creation completed
      • API Gateway API modification failure
      • API Gateway API modification completed
      • API Gateway API deletion request
      • API Gateway API deletion failure
      • API Gateway API deletion completed
      • API Gateway resource creation failure
      • API Gateway resource creation completed
      • API Gateway resource deletion failure
      • API Gateway resource deletion completed
      • API Gateway method creation failure
      • API Gateway method creation completed
      • API Gateway method modification failure
      • API Gateway method modification completed
      • API Gateway method deletion failure
      • API Gateway method deletion completed
      • API Gateway stage creation failure
      • API Gateway stage creation completed
      • API Gateway stage modification failure
      • API Gateway stage modification completed
      • API Gateway stage deletion failure
      • API Gateway stage deletion completed
      • API Gateway deployment creation failure
      • API Gateway deployment creation completed
      • API Gateway deployment modification failure
      • API Gateway deployment modification completed
      • API Gateway authentication creation failure
      • API Gateway authentication creation completed
      • API Gateway authentication modification failure
      • API Gateway authentication modification completed
      • API Gateway authentication deletion failure
      • API Gateway authentication deletion completed
      • API Gateway access control creation failure
      • API Gateway access control creation completed
      • API Gateway access control modification failure
      • API Gateway access control modification completed
      • API Gateway access control deletion failure
      • API Gateway access control deletion completed
      • API Gateway usage policy creation failure
      • API Gateway usage policy creation completed
      • API Gateway usage policy description modification failure
      • API Gateway usage policy description modification completed
      • API Gateway usage policy quota modification failure
      • API Gateway usage policy quota modification completed
      • API Gateway usage policy deletion failure
      • API Gateway usage policy deletion completed
      • API Gateway API Key creation failure
      • API Gateway API Key creation completed
      • API Gateway API Key modification failure
      • API Gateway API Key modification completed
      • API Gateway API Key deletion failure
      • API Gateway API Key deletion completed
      Table. API Gateway - API Gateway event type events

      11.5.1.23 - Load Balancer

      Load Balancer event

      Load Balancer service’s list of events to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingLoad BalancerLoad BalancerLoad BalancerLoad Balancer
      NetworkingLoad BalancerLoad BalancerLoad BalancerLB Listener
      NetworkingLoad BalancerLB server groupLoad BalancerLB Server Group
      NetworkingLoad BalancerLB Health CheckLoad BalancerLB Health Check
      Table. Load Balancer event types

      Load Balancer

      Event SourceEvent TypeEvent
      Load BalancerLoad Balancer(security-group)
      • Load Balancer creation completed
      • Load Balancer deletion completed
      • Load Balancer update completed
      Table. Load Balancer - Load Balancer event type events

      LB Listener

      Event SourceEvent TypeEvent
      LB ListenerLB Listener
      • LB Listener created complete
      • LB Listener deletion complete
      • LB Listener update complete
      Table. Load Balancer - LB Listener event type events

      LB Server Group

      Event SourceEvent TypeEvent
      LB Server GroupLB Server Group
      • LB Server Group creation completed
      • LB Server Group deletion completed
      • LB Server Group update completed
      • LB Server Group deletion completed
      • LB Server Group member creation completed
      • LB Server Group member update completed
      • LB Server Group member deletion completed
      Table. Load Balancer - LB Server Group event types of events

      LB Health Check

      Event SourceEvent TypeEvent
      LB Health CheckLB Health Check
      • LB Health Check creation completed
      • LB Health Check deletion completed
      • LB Health Check update completed
      Table. Load Balancer - LB Health Check event types of events

      11.5.1.24 - Data Ops

      Data Ops event

      Data Ops service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsData OpsData OpsData OpsData Ops
      Data AnalyticsData OpsData Ops ServicesData OpsData Ops Service
      Table. Data Ops event types

      Data Ops

      Event SourceEvent TypeEvent
      Data OpsData Ops
      • Data Ops Create Start
      • Data Ops Create End
      • Data Ops Create Error
      • Data Ops Delete Start
      • Data Ops Delete End
      • Data Ops Delete Error
      • Data Ops Modify Start
      • Data Ops Modify End
      • Data Ops Modify Error
      Table. Data Ops - Data Ops event type events

      Data Ops Service

      Event SourceEvent TypeEvent
      Data Ops ServicesData Ops Service
      • Data Ops Service Create Start
      • Data Ops Service Create End
      • Data Ops Service Create Error
      • Data Ops Service Delete Start
      • Data Ops Service Delete End
      • Data Ops Service Delete Error
      • Data Ops Service Modify Start
      • Data Ops Service Modify End
      • Data Ops Service Modify Error
      Table. Data Ops - Data Ops Service event types of events

      11.5.1.25 - Scalable DB(DBaaS)

      Scalable DB Event

      This is the list of events delivered to ServiceWatch from the Scalable DB (DBaaS) service.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsScalable DB(DBaaS)Scalable DB(DBaaS)Scalable DBScalable DB
      Table. Scalable DB Event Types

      Scalable DB

      Event SourceEvent TypeEvent
      Scalable DBScalable DB
      • Scalable DB Create Start
      • Scalable DB Create Error
      • Scalable DB Create End
      • Scalable DB Delete Start
      • Scalable DB Delete Error
      • Scalable DB Delete End
      • Scalable DB Start Start
      • Scalable DB Start Error
      • Scalable DB Start End
      • Scalable DB Stop Start
      • Scalable DB Stop Error
      • Scalable DB Stop End
      • Scalable DB Sync Start
      • Scalable DB Sync Error
      • Scalable DB Sync End
      • Scalable DB Instance Group Restart Start
      • Scalable DB Instance Group Restart Error
      • Scalable DB Instance Group Restart End
      • Scalable DB Maintenance Modify Start
      • Scalable DB Maintenance Modify Error
      • Scalable DB Maintenance Modify End
      • Scalable DB Maintenance Delete Start
      • Scalable DB Maintenance Delete Error
      • Scalable DB Maintenance Delete End
      • Scalable DB Security Group Rule Modify Start
      • Scalable DB Security Group Rule Modify Error
      • Scalable DB Security Group Rule Modify End
      • Scalable DB Backup Config Create Start
      • Scalable DB Backup Config Create Error
      • Scalable DB Backup Config Create End
      • Scalable DB Backup Config Modify Start
      • Scalable DB Backup Config Modify Error
      • Scalable DB Backup Config Modify End
      • Scalable DB Backup Config Delete Start
      • Scalable DB Backup Config Delete Error
      • Scalable DB Backup Config Delete End
      • Scalable DB Backup History Delete Start
      • Scalable DB Backup History Delete Error
      • Scalable DB Backup History Delete End
      • Scalable DB Scale In Start
      • Scalable DB Scale In Error
      • Scalable DB Scale In End
      • Scalable DB Scale Out Start
      • Scalable DB Scale Out Error
      • Scalable DB Scale Out End
      • Scalable DB Proxy Parameter Modify Start
      • Scalable DB Proxy Parameter Modify Error
      • Scalable DB Proxy Parameter Modify End
      • Scalable DB Proxy Parameter Sync Start
      • Scalable DB Proxy Parameter Sync Error
      • Scalable DB Proxy Parameter Sync End
      • Scalable DB Auto Scaling Policy Create Start
      • Scalable DB Auto Scaling Policy Create Error
      • Scalable DB Auto Scaling Policy Create End
      • Scalable DB Auto Scaling Policy Modify Start
      • Scalable DB Auto Scaling Policy Modify Error
      • Scalable DB Auto Scaling Policy Modify End
      • Scalable DB Auto Scaling Policy Delete Start
      • Scalable DB Auto Scaling Policy Delete Error
      • Scalable DB Auto Scaling Policy Delete End
      • Scalable DB Server Count Modify Start
      • Scalable DB Server Count Modify Error
      • Scalable DB Server Count Modify End
      • Scalable DB Replica Sync Start
      • Scalable DB Replica Sync Error
      • Scalable DB Replica Sync End
      • Scalable DB Replica Sync End
      Table. Scalable DB - Queue event type's event

      11.5.1.26 - Cloud LAN-Campus

      Cloud LAN-Campus event

      Cloud LAN-Campus service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingCloud LAN-CampusCloud LAN-CampusCloud LAN - Campus (Network)Cloud LAN - Campus (Network)
      Table. Cloud LAN-Campus event types

      Cloud LAN - Campus (Network)

      Event SourceEvent TypeEvent
      Cloud LAN - Campus (Network)Cloud LAN - Campus (Network)
      • Cloud LAN - Campus Network creation started
      • Cloud LAN - Campus Network creation error
      • Cloud LAN - Campus Network creation completed
      • Cloud LAN - Campus Network modification started
      • Cloud LAN - Campus Network modification error
      • Cloud LAN - Campus Network modification completed
      • Cloud LAN - Campus Network deletion started
      • Cloud LAN - Campus Network deletion error
      • Cloud LAN - Campus Network deletion completed
      Table. Cloud LAN-Campus - Cloud LAN - Campus (Network) type of event

      11.5.1.27 - EPAS(DBaaS)

      EPAS(DBaaS) event

      EPAS(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseEPAS(DBaaS)EPAS(DBaaS)EPASEPAS
      Table. EPAS(DBaaS) event type

      EPAS

      Event SourceEvent TypeEvent
      EPASEPAS
      • EPAS Create Start
      • EPAS Create Error
      • EPAS Create End
      • EPAS Delete Start
      • EPAS Delete Error
      • EPAS Delete End
      • EPAS Start Start
      • EPAS Start Error
      • EPAS Start End
      • EPAS Stop Start
      • EPAS Stop Error
      • EPAS Stop End
      • EPAS Restart Start
      • EPAS Restart Error
      • EPAS Restart End
      • EPAS Sync Start
      • EPAS Sync Error
      • EPAS Sync End
      • EPAS Audit Log Modify Start
      • EPAS Audit Log Modify Error
      • EPAS Audit Log Modify End
      • EPAS Maintenance Modify Start
      • EPAS Maintenance Modify Error
      • EPAS Maintenance Modify End
      • EPAS Maintenance Delete Start
      • EPAS Maintenance Delete Error
      • EPAS Maintenance Delete End
      • EPAS Security Group Rule Modify Start
      • EPAS Security Group Rule Modify Error
      • EPAS Security Group Rule Modify End
      • EPAS Instance Resize Start
      • EPAS Instance Resize Error
      • EPAS Instance Resize End
      • EPAS Block Storage Create Start
      • EPAS Block Storage Create Error
      • EPAS Block Storage Create End
      • EPAS Block Storage Resize Start
      • EPAS Block Storage Resize Error
      • EPAS Block Storage Resize End
      • EPAS Parameter Sync Start
      • EPAS Parameter Sync Error
      • EPAS Parameter Sync End
      • EPAS Parameter Modify Start
      • EPAS Parameter Modify Error
      • EPAS Parameter Modify End
      • EPAS Patch Start
      • EPAS Patch Error
      • EPAS Patch End
      • EPAS Backup Config Create Start
      • EPAS Backup Config Create Error
      • EPAS Backup Config Create End
      • EPAS Backup Config Modify Start
      • EPAS Backup Config Modify Error
      • EPAS Backup Config Modify End
      • EPAS Backup Config Delete Start
      • EPAS Backup Config Delete Error
      • EPAS Backup Config Delete End
      • EPAS Backup Recover Start
      • EPAS Backup Recover Error
      • EPAS Backup Recover End
      • EPAS Backup History Delete Start
      • EPAS Backup History Delete Error
      • EPAS Backup History Delete End
      • EPAS Replica Create Start
      • EPAS Replica Create Error
      • EPAS Replica Create End
      • EPAS Replica Reset Start
      • EPAS Replica Reset Error
      • EPAS Replica Reset End
      • EPAS Replica Sync Start
      • EPAS Replica Sync Error
      • EPAS Replica Sync End
      • EPAS Switchover Start
      • EPAS Switchover Error
      • EPAS Switchover End
      • EPAS Log Export Config Create Start
      • EPAS Log Export Config Create Error
      • EPAS Log Export Config Create End
      • EPAS Log Export Config Delete Start
      • EPAS Log Export Config Delete Error
      • EPAS Log Export Config Delete End
      • EPAS Log Export Config Modify Start
      • EPAS Log Export Config Modify Error
      • EPAS Log Export Config Modify End
      • EPAS Log Export Start
      • EPAS Log Export Error
      • EPAS Log Export End
      • EPAS Archive Config Modify Start
      • EPAS Archive Config Modify Error
      • EPAS Archive Config Modify End
      • EPAS Archive Config Sync Start
      • EPAS Archive Config Sync Error
      • EPAS Archive Config Sync End
      • EPAS Archive Log Delete Start
      • EPAS Archive Log Delete Error
      • EPAS Archive Log Delete End
      • EPAS Database Users Modify Start
      • EPAS Database Users Modify Error
      • EPAS Database Users Modify End
      • EPAS Database Users Sync Start
      • EPAS Database Users Sync Error
      • EPAS Database Users Sync End
      • EPAS Access Control Modify Start
      • EPAS Access Control Modify Error
      • EPAS Access Control Modify End
      • EPAS Access Control Sync Start
      • EPAS Access Control Sync Error
      • EPAS Access Control Sync End
      • EPAS Replica Cluster Promote Start
      • EPAS Replica Cluster Promote Error
      • EPAS Replica Cluster Promote End
      • EPAS DB Connection Check Start
      • EPAS DB Connection Check Error
      • EPAS DB Connection Check End
      • EPAS Cluster Migrate Start
      • EPAS Cluster Migrate Error
      • EPAS Cluster Migrate End
      • EPAS Migration Cluster Promote Start
      • EPAS Migration Cluster Promote Error
      • EPAS Migration Cluster Promote End
      Table. EPAS - EPAS event type events

      11.5.1.28 - PostgreSQL(DBaaS)

      PostgreSQL(DBaaS) event

      PostreSQL(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabasePostreSQL(DBaaS)PostreSQL(DBaaS)PostreSQLPostgreSQL
      Table. PostreSQL(DBaaS) event types

      PostreSQL

      Event SourceEvent TypeEvent
      PostreSQLPostgreSQL
      • PostgreSQL Create Start
      • PostgreSQL Create Error
      • PostgreSQL Create End
      • PostgreSQL Delete Start
      • PostgreSQL Delete Error
      • PostgreSQL Delete End
      • PostgreSQL Start Start
      • PostgreSQL Start Error
      • PostgreSQL Start End
      • PostgreSQL Stop Start
      • PostgreSQL Stop Error
      • PostgreSQL Stop End
      • PostgreSQL Restart Start
      • PostgreSQL Restart Error
      • PostgreSQL Restart End
      • PostgreSQL Sync Start
      • PostgreSQL Sync Error
      • PostgreSQL Sync End
      • PostgreSQL Audit Log Modify Start
      • PostgreSQL Audit Log Modify Error
      • PostgreSQL Audit Log Modify End
      • PostgreSQL Maintenance Modify Start
      • PostgreSQL Maintenance Modify Error
      • PostgreSQL Maintenance Modify End
      • PostgreSQL Maintenance Delete Start
      • PostgreSQL Maintenance Delete Error
      • PostgreSQL Maintenance Delete End
      • PostgreSQL Security Group Rule Modify Start
      • PostgreSQL Security Group Rule Modify Error
      • PostgreSQL Security Group Rule Modify End
      • PostgreSQL Instance Resize Start
      • PostgreSQL Instance Resize Error
      • PostgreSQL Instance Resize End
      • PostgreSQL Block Storage Create Start
      • PostgreSQL Block Storage Create Error
      • PostgreSQL Block Storage Create End
      • PostgreSQL Block Storage Resize Start
      • PostgreSQL Block Storage Resize Error
      • PostgreSQL Block Storage Resize End
      • PostgreSQL Parameter Sync Start
      • PostgreSQL Parameter Sync Error
      • PostgreSQL Parameter Sync End
      • PostgreSQL Parameter Modify Start
      • PostgreSQL Parameter Modify Error
      • PostgreSQL Parameter Modify End
      • PostgreSQL Patch Start
      • PostgreSQL Patch Error
      • PostgreSQL Patch End
      • PostgreSQL Backup Config Create Start
      • PostgreSQL Backup Config Create Error
      • PostgreSQL Backup Config Create End
      • PostgreSQL Backup Config Modify Start
      • PostgreSQL Backup Config Modify Error
      • PostgreSQL Backup Config Modify End
      • PostgreSQL Backup Config Delete Start
      • PostgreSQL Backup Config Delete Error
      • PostgreSQL Backup Config Delete End
      • PostgreSQL Backup Recover Start
      • PostgreSQL Backup Recover Error
      • PostgreSQL Backup Recover End
      • PostgreSQL Backup History Delete Start
      • PostgreSQL Backup History Delete Error
      • PostgreSQL Backup History Delete End
      • PostgreSQL Replica Create Start
      • PostgreSQL Replica Create Error
      • PostgreSQL Replica Create End
      • PostgreSQL Replica Reset Start
      • PostgreSQL Replica Reset Error
      • PostgreSQL Replica Reset End
      • PostgreSQL Replica Sync Start
      • PostgreSQL Replica Sync Error
      • PostgreSQL Replica Sync End
      • PostgreSQL Switchover Start
      • PostgreSQL Switchover Error
      • PostgreSQL Switchover End
      • PostgreSQL Log Export Config Create Start
      • PostgreSQL Log Export Config Create Error
      • PostgreSQL Log Export Config Create End
      • PostgreSQL Log Export Config Delete Start
      • PostgreSQL Log Export Config Delete Error
      • PostgreSQL Log Export Config Delete End
      • PostgreSQL Log Export Config Modify Start
      • PostgreSQL Log Export Config Modify Error
      • PostgreSQL Log Export Config Modify End
      • PostgreSQL Log Export Start
      • PostgreSQL Log Export Error
      • PostgreSQL Log Export End
      • PostgreSQL Archive Config Modify Start
      • PostgreSQL Archive Config Modify Error
      • PostgreSQL Archive Config Modify End
      • PostgreSQL Archive Config Sync Start
      • PostgreSQL Archive Config Sync Error
      • PostgreSQL Archive Config Sync End
      • PostgreSQL Archive Log Delete Start
      • PostgreSQL Archive Log Delete Error
      • PostgreSQL Archive Log Delete End
      • PostgreSQL Database Users Modify Start
      • PostgreSQL Database Users Modify Error
      • PostgreSQL Database Users Modify End
      • PostgreSQL Database Users Sync Start
      • PostgreSQL Database Users Sync Error
      • PostgreSQL Database Users Sync End
      • PostgreSQL Access Control Modify Start
      • PostgreSQL Access Control Modify Error
      • PostgreSQL Access Control Modify End
      • PostgreSQL Access Control Sync Start
      • PostgreSQL Access Control Sync Error
      • PostgreSQL Access Control Sync End
      • PostgreSQL Replica Cluster Promote Start
      • PostgreSQL Replica Cluster Promote Error
      • PostgreSQL Replica Cluster Promote End
      • PostgreSQL Db Connection Check Start
      • PostgreSQL Db Connection Check Error
      • PostgreSQL Db Connection Check End
      • PostgreSQL Cluster Migrate Start
      • PostgreSQL Cluster Migrate Error
      • PostgreSQL Cluster Migrate End
      • PostgreSQL Migration Cluster Promote Start
      • PostgreSQL Migration Cluster Promote Error
      • PostgreSQL Migration Cluster Promote End
      Table. PostgreSQL - Event types of PostgreSQL events

      11.5.1.29 - Logging&Audit

      Logging&Audit event

      Logging&Audit service’s list of events to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementLogging&AuditTrailLogging&AuditTrail
      Table. Logging&Audit event types

      Trail

      Event SourceEvent TypeEvent
      Logging&AuditTrail
      • Logging&Audit Trail creation started
      • Logging&Audit Trail creation completed
      • Logging&Audit Trail deletion started
      • Logging&Audit Trail deletion completed
      • Logging&Audit Trail update started
      • Logging&Audit Trail update completed
      • Logging&Audit Trail started
      • Logging&Audit Trail stopped
      • Logging&Audit Trail batch started
      • Logging&Audit Trail batch completed
      • Logging&Audit Trail batch count
      Table. Logging&Audit - Trail event types of events

      11.5.1.30 - Search Engine

      Search Engine event

      Search Engine service event list delivered to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsSearch EngineSearch EngineSearch EngineSearch Engine
      Table. Search Engine event type

      Search Engine

      Event SourceEvent TypeEvent
      Search EngineSearch Engine
      • Search Engine Create Start
      • Search Engine Create Error
      • Search Engine Create End
      • Search Engine Delete Start
      • Search Engine Delete Error
      • Search Engine Delete End
      • Search Engine Start Start
      • Search Engine Start Error
      • Search Engine Start End
      • Search Engine Stop Start
      • Search Engine Stop Error
      • Search Engine Stop End
      • Search Engine Restart Start
      • Search Engine Restart Error
      • Search Engine Restart End
      • Search Engine Sync Start
      • Search Engine Sync Error
      • Search Engine Sync End
      • Search Engine Patch Start
      • Search Engine Patch Error
      • Search Engine Patch End
      • Search Engine Maintenance Modify Start
      • Search Engine Maintenance Modify Error
      • Search Engine Maintenance Modify End
      • Search Engine Maintenance Delete Start
      • Search Engine Maintenance Delete Error
      • Search Engine Maintenance Delete End
      • Search Engine Security Group Rule Modify Start
      • Search Engine Security Group Rule Modify Error
      • Search Engine Security Group Rule Modify End
      • Search Engine Instance Resize Start
      • Search Engine Instance Resize Error
      • Search Engine Instance Resize End
      • Search Engine Instance Add Start
      • Search Engine Instance Add Error
      • Search Engine Instance Add End
      • Search Engine Block Storage Create Start
      • Search Engine Block Storage Create Error
      • Search Engine Block Storage Create End
      • Search Engine Block Storage Resize Start
      • Search Engine Block Storage Resize Error
      • Search Engine Block Storage Resize End
      • Search Engine Backup Config Create Start
      • Search Engine Backup Config Create Error
      • Search Engine Backup Config Create End
      • Search Engine Backup Config Modify Start
      • Search Engine Backup Config Modify Error
      • Search Engine Backup Config Modify End
      • Search Engine Backup Config Delete Start
      • Search Engine Backup Config Delete Error
      • Search Engine Backup Config Delete End
      • Search Engine Backup Recover Start
      • Search Engine Backup Recover Error
      • Search Engine Backup Recover End
      • Search Engine Backup History Delete Start
      • Search Engine Backup History Delete Error
      • Search Engine Backup History Delete End
      Table. Search Engine - Search Engine event type events

      11.5.1.31 - DNS

      DNS Event

      This is a list of events passed from the DNS service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      NetworkingDNSPrivate DNSPrivate DNSPrivate DNS
      NetworkingDNSHosted DNSHosted DNSHosted DNS
      NetworkingDNSPublic Domain NamePublic Domain NamePublic Domain Name
      Table. DNS Event Types

      Private DNS

      Event SourceEvent TypeEvent
      Private DNSPrivate DNS
      • Private DNS creation started
      • Private DNS creation completed
      • Private DNS modification started
      • Private DNS modification completed
      • Private DNS deletion completed
      Table. Private DNS - Private DNS event type events

      Hosted DNS

      Event SourceEvent TypeEvent
      Hosted DNSHosted DNS
      • Hosted Zone creation started
      • Hosted Zone update completed
      • Hosted Zone record creation completed
      • Hosted Zone record update completed
      • Hosted Zone record deletion completed
      • Hosted Zone deletion completed
      Table. Hosted DNS - Hosted DNS event type events

      Public Domain Name

      Event SourceEvent TypeEvent
      Public Domain NamePublic Domain Name
      • Public Domain Name creation completed
      • Public Domain Name modification completed
      • Public Domain Name deletion completed
      Table. Public Domain Name - Public Domain Name event type of event

      11.5.1.32 - VPN

      VPN Event

      VPN service list of events passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      NetworkingVPNVPNVPNVPN Gateway
      NetworkingVPNVPNVPNVPN Tunnel
      Table. VPN Event Types

      VPN Gateway

      Event SourceEvent TypeEvent
      VPNVPN Gateway
      • VPN Gateway creation started
      • VPN Gateway creation error
      • VPN Gateway creation completed
      • VPN Gateway modification completed
      • VPN Gateway deletion started
      • VPN Gateway deletion error
      • VPN Gateway deletion completed
      Table. VPN - VPN Gateway event types of events

      VPN Tunnel

      Event SourceEvent TypeEvent
      VPNVPN Tunnel
      • VPN Tunnel creation started
      • VPN Tunnel creation error
      • VPN Tunnel creation completed
      • VPN Tunnel modification completed
      • VPN Tunnel deletion started
      • VPN Tunnel deletion error
      • VPN Tunnel deletion completed
      Table. VPN - VPN Tunnel event type events

      11.5.1.33 - Secrets Manager

      Secret Event

      This is a list of events delivered from Secrets Manager service to ServiceWatch.

      Service CategoryServiceSubserviceEvent SourceEvent Type
      Data AnalyticsSecrets ManagerSecrets ManagerSecrets ManagerSecret
      Table. Secret event type

      Secret

      Event SourceEvent TypeEvent
      Secrets ManagerSecret
      • Secret creation started
      • Secret creation completed
      • Secret creation error
      • Secret update completed
      • Secret deletion error
      • Secret deletion completed
      Table. Secrets Manager - Secret event type event

      11.5.1.34 - Quick Query

      Quick Query Event

      This is the list of events delivered from Quick Query service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      Data AnalyticsQuick QueryQuick QueryQuick QueryQuick Query
      Table. Quick Query event type

      Quick Query

      Event SourceEvent TypeEvent
      Quick QueryQuick Query
      • Quick Query Create Start
      • Quick Query Create End
      • Quick Query Create Error
      • Quick Query Delete Start
      • Quick Query Delete End
      • Quick Query Delete Error
      • Quick Query Modify Start
      • Quick Query Modify End
      • Quick Query Modify Error
      Table. Quick Query - Event of Quick Query event type

      11.5.1.35 - File Storage

      File Storage event

      File Storage service events delivered to ServiceWatch are as follows.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      StorageFile StorageFile StorageFile StorageVolume
      Table. File Storage event types

      Volume

      Event SourceEvent TypeEvent
      File StorageVolume
      • File Storage volume creation started
      • File Storage volume creation completed
      • File Storage volume creation failed
      • File Storage volume deletion started
      • File Storage volume deletion completed
      • File Storage volume deletion failed
      • File Storage snapshot creation started
      • File Storage snapshot creation completed
      • File Storage snapshot creation failed
      • File Storage snapshot deletion started
      • File Storage snapshot deletion completed
      • File Storage snapshot deletion failed
      • File Storage snapshot recovery started
      • File Storage snapshot recovery completed
      • File Storage snapshot recovery failed
      • File Storage snapshot schedule creation started
      • File Storage snapshot schedule creation completed
      • File Storage snapshot schedule creation failed
      • File Storage snapshot schedule modification started
      • File Storage snapshot schedule modification completed
      • File Storage snapshot schedule modification failed
      • File Storage snapshot schedule deletion started
      • File Storage snapshot schedule deletion completed
      • File Storage snapshot schedule deletion failed
      • File Storage volume modification started
      • File Storage volume modification completed
      • File Storage volume modification failed
      • File Storage access control modification started
      • File Storage access control modification completed
      • File Storage access control modification failed
      • File Storage access control (Bulk) modification started
      • File Storage access control (Bulk) modification completed
      • File Storage access control (Bulk) modification failed
      • File Storage replication creation started
      • File Storage replication creation completed
      • File Storage replication creation failed
      • File Storage replication relationship creation started
      • File Storage replication relationship creation completed
      • File Storage replication relationship creation failed
      • File Storage replication deletion started
      • File Storage replication deletion completed
      • File Storage replication deletion failed
      • File Storage replication modification started
      • File Storage replication modification completed
      • File Storage replication modification failed
      Table. File Storage - Volume event types of events

      11.5.1.36 - CacheStore(DBaaS)

      CacheStore(DBaaS) event

      CacheStore(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseCacheStore(DBaaS)CacheStore(DBaaS)CacheStoreCacheStore
      Table. CacheStore(DBaaS) event types

      CacheStore

      Event SourceEvent TypeEvent
      CacheStore(DBaaS)CacheStore
      • CacheStore Create Start
      • CacheStore Create Error
      • CacheStore Create End
      • CacheStore Delete Start
      • CacheStore Delete Error
      • CacheStore Delete End
      • CacheStore Start Start
      • CacheStore Start Error
      • CacheStore Start End
      • CacheStore Stop Start
      • CacheStore Stop Error
      • CacheStore Stop End
      • CacheStore Restart Start
      • CacheStore Restart Error
      • CacheStore Restart End
      • CacheStore Sync Start
      • CacheStore Sync Error
      • CacheStore Sync End
      • CacheStore Maintenance Modify Start
      • CacheStore Maintenance Modify Error
      • CacheStore Maintenance Modify End
      • CacheStore Maintenance Delete Start
      • CacheStore Maintenance Delete Error
      • CacheStore Maintenance Delete End
      • CacheStore Security Group Rule Modify Start
      • CacheStore Security Group Rule Modify Error
      • CacheStore Security Group Rule Modify End
      • CacheStore Instance Resize Start
      • CacheStore Instance Resize Error
      • CacheStore Instance Resize End
      • CacheStore Block Storage Resize Start
      • CacheStore Block Storage Resize Error
      • CacheStore Block Storage Resize End
      • CacheStore Parameter Sync Start
      • CacheStore Parameter Sync Error
      • CacheStore Parameter Sync End
      • CacheStore Parameter Modify Start
      • CacheStore Parameter Modify Error
      • CacheStore Parameter Modify End
      • CacheStore Backup Config Create Start
      • CacheStore Backup Config Create Error
      • CacheStore Backup Config Create End
      • CacheStore Backup Config Modify Start
      • CacheStore Backup Config Modify Error
      • CacheStore Backup Config Modify End
      • CacheStore Backup Config Delete Start
      • CacheStore Backup Config Delete Error
      • CacheStore Backup Config Delete End
      • CacheStore Backup Recover Start
      • CacheStore Backup Recover Error
      • CacheStore Backup Recover End
      • CacheStore Backup History Delete Start
      • CacheStore Backup History Delete Error
      • CacheStore Backup History Delete End
      • CacheStore Command Sync Start
      • CacheStore Command Sync Error
      • CacheStore Command Sync End
      • CacheStore Command Modify Start
      • CacheStore Command Modify Error
      • CacheStore Command Modify End
      • CacheStore Switchover Start
      • CacheStore Switchover Error
      • CacheStore Switchover End
      • SQL Server Switchover Start
      • SQL Server Switchover Error
      • SQL Server Switchover End
      • SQL Server Database Modify Start
      • SQL Server Database Modify Error
      • SQL Server Database Modify End
      • SQL Server Log Export Config Create Start
      • SQL Server Log Export Config Create Error
      • SQL Server Log Export Config Create End
      • SQL Server Log Export Config Delete Start
      • SQL Server Log Export Config Delete Error
      • SQL Server Log Export Config Delete End
      • SQL Server Log Export Config Modify Start
      • SQL Server Log Export Config Modify Error
      • SQL Server Log Export Config Modify End
      • SQL Server Log Export Start
      • SQL Server Log Export Error
      • SQL Server Log Export End
      • SQL Server Database Users Modify Start
      • SQL Server Database Users Modify Error
      • SQL Server Database Users Modify End
      • SQL Server Database Users Sync Start
      • SQL Server Database Users Sync Error
      • SQL Server Database Users Sync End
      • SQL Server Secondary Add Start
      • SQL Server Secondary Add Error
      • SQL Server Secondary Add End
      Table. CacheStore(DBaaS) - CacheStore event type events

      11.5.1.37 - Secret Vault

      Secret Vault event

      This is a list of events passed from the Secret Vault service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      SecuritySecret VaultSecret VaultSecret VaultSecret Vault
      Table. Secret Vault event type

      Secret Vault

      Event SourceEvent TypeEvent
      Secret VaultSecret Vault
      • Secret Vault creation started
      • Secret Vault creation completed
      • Secret Vault creation error
      • Secret Vault update started
      • Secret Vault update completed
      • Secret Vault update error
      • Secret Vault deletion started
      • Secret Vault deletion error
      • Secret Vault deletion completed
      • Secret Vault temporary key creation error
      • Secret Vault temporary key creation completed
      Table. Secret Vault - Secret Vault event type of event

      11.5.1.38 - Queue Service

      Queue Service event

      This is the list of events delivered from the Queue Service to ServiceWatch.

      Service CategoryServiceSubserviceEvent SourceEvent Type
      Data AnalyticsQueue ServiceQueueQueueQueue
      Table. Queue Service Event Types

      Queue

      Event SourceEvent TypeEvent
      QueueQueue
      • Queue creation start
      • Queue creation failed
      • Queue creation completed
      • Queue deletion start
      • Queue deletion failed
      • Queue deletion completed
      • Queue modification start
      • Queue modification failed
      • Queue modification completed
      Table. Queue Service - Queue event type events

      11.5.1.39 - Kubernetes Engine

      Kubernetes Engine event

      Kubernetes Engine service list of events passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      ContainerKubernetes EngineClusterKubernetes EngineCluster
      ContainerKubernetes EngineNodeKubernetes EngineNodepool
      Table. Kubernetes Engine event types

      Cluster

      Event SourceEvent TypeEvent
      Kubernetes EngineCluster
      • Cluster creation request completed
      • Cluster creation completed
      • Cluster creation failed
      • Cluster deletion completed
      • Cluster deletion failed
      • Cluster modification request completed
      • Cluster modification completed
      • Cluster creation failed
      Table. Kubernetes Engine - Cluster event types of events

      Nodepool

      Event SourceEvent TypeEvent
      Kubernetes EngineNodepool
      • Nodepool creation completed
      • Nodepool creation failed
      • Nodepool deletion request completed
      • Nodepool deletion completed
      • Nodepool deletion failed
      Table. Kubernetes Engine - Nodepool event types of events

      11.5.1.40 - Config Inspection

      Config Inspection event

      Config Inspection service’s event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      SecurityConfig InspectionConfig InspectionConfig InspectionConfig Inspection
      Table. Config Inspection event types

      Config Inspection

      Event SourceEvent TypeEvent
      Config InspectionConfig Inspection
      • Config Inspection creation started
      • Config Inspection creation completed
      • Monthly Config Inspection creation completed
      • Config Inspection creation error
      • Config Inspection modification started
      • Config Inspection modification completed
      • Config Inspection modification error
      • Config Inspection deletion started
      • Config Inspection deletion error
      • Monthly Config Inspection deletion completed
      • Config Inspection deletion completed
      • Config Inspection request started
      • Config Inspection request completed
      • Config Inspection request error
      • Config Inspection reservation request error
      • Config Inspection response started
      • Config Inspection response completed
      • Config Inspection response error
      Table. Config Inspection - Config Inspection event type events

      11.5.1.41 - Cloud LAN-Datacenter

      Cloud LAN-Datacenter event

      Cloud LAN-Datacenter service event list to be passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      NetworkingCloud LAN-DatacenterCloud LAN NetworkCloud LAN NetworkCloud LAN Network
      NetworkingCloud LAN-DatacenterInterfaceCloud LAN NetworkInterface
      NetworkingCloud LAN-DatacentervCableCloud LAN NetworkvCable
      NetworkingCloud LAN-DatacentervDeviceCloud LAN NetworkvDevice
      Table. Cloud LAN Network Event Types

      Cloud LAN Network

      Event SourceEvent TypeEvent
      Cloud LAN NetworkCloud LAN Network(cloud-lan-network)
      • Cloud LAN Network creation started
      • Cloud LAN Network creation error
      • Cloud LAN Network creation completed
      • Cloud LAN Network modification started
      • Cloud LAN Network modification error
      • Cloud LAN Network modification completed
      • Cloud LAN Network deletion started
      • Cloud LAN Network deletion error
      • Cloud LAN Network deletion completed
      Table. Cloud LAN Network - Cloud LAN Network event type events

      Interface

      Event SourceEvent TypeEvent
      Cloud LAN NetworkInterface(interface)
      • Interface creation started
      • Interface creation error
      • Interface creation completed
      • Interface modification started
      • Interface modification error
      • Interface modification completed
      • Interface deletion started
      • Interface deletion error
      • Interface deletion completed
      Table. Cloud LAN Network - Interface event types of events

      vCable

      Event SourceEvent TypeEvent
      Cloud LAN NetworkvCable(vcable)
      • vCable creation started
      • vCable creation error
      • vCable creation completed
      • vCable modification started
      • vCable modification error
      • vCable modification completed
      • vCable deletion started
      • vCable deletion error
      • vCable deletion completed
      Table. Cloud LAN Network - vCable event type events

      vDevice

      Event SourceEvent TypeEvent
      Cloud LAN NetworkvDevice(vdevice)
      • vDevice creation started
      • vDevice creation error
      • vDevice creation completed
      • vDevice modification started
      • vDevice modification error
      • vDevice modification completed
      • vDevice deletion started
      • vDevice deletion error
      • vDevice deletion completed
      Table. Cloud LAN Network - vDevice event type events

      11.5.1.42 - Identity Access Management

      Identity Access Management event

      Identity Access Management service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementIdentity Access Management(IAM)user groupIdentity Access Managementgroup
      ManagementIdentity Access Management(IAM)UserIdentity Access ManagementUser
      ManagementIdentity Access Management(IAM)PolicyIdentity Access ManagementPolicy
      ManagementIdentity Access Management(IAM)RoleIdentity Access ManagementRole
      ManagementIdentity Access Management(IAM)Credential ProviderIdentity Access ManagementCredential Provider
      ManagementIdentity Access Management(IAM)My Info.Identity Access ManagementAccess Key
      Table. Identity Access Management event types

      Group

      Event SourceEvent TypeEvent
      Identity Access ManagementGroup
      • Group creation completed
      • Group creation started
      • Group creation error
      • Group modification completed
      • Group deletion started
      • Group deletion error
      • Group deletion completed
      • Group member addition completed
      • Group member deletion started
      • Group member deletion error
      • Group member deletion completed
      Table. Identity Access Management - Group Event Types of Events

      User

      Event SourceEvent TypeEvent
      Identity Access ManagementUser
      • User creation completed
      • User login completed
      • User deletion completed
      Table. Identity Access Management - Events of User Event Types

      Policy

      Event SourceEvent TypeEvent
      Identity Access ManagementPolicy
      • Policy creation completed
      • Policy modification started
      • Policy modification error
      • Policy modification completed
      • Policy deletion started
      • Policy deletion error
      • Policy deletion completed
      Table. Identity Access Management - Policy Event Types of Events

      Role

      Event SourceEvent TypeEvent
      Identity Access ManagementRole
      • Role creation completed
      • Role modification completed
      • Role deletion completed
      Table. Identity Access Management - Role Event Types of Events

      Credential Provider

      Event SourceEvent TypeEvent
      Identity Access ManagementCredential Provider
      • Credential Provider Creation Started
      • Credential Provider Creation Error
      • Credential Provider Creation Completed
      • Credential Provider Modification Started
      • Credential Provider Modification Error
      • Credential Provider Modification Completed
      • Credential Provider Deletion Started
      • Credential Provider Deletion Error
      • Credential Provider Deletion Completed
      Table. Identity Access Management - Credential Provider Event Types of Events

      Access Key

      Event SourceEvent TypeEvent
      Identity Access ManagementAccess Key
      • Access Key creation started
      • Access Key creation error
      • Access Key creation completed
      • Access Key deletion started
      • Access Key deletion error
      • Access Key deletion completed
      Table. Identity Access Management - Access Key event type events

      11.5.1.43 - Bare Metal Server

      Bare Metal Server event

      Bare Metal Server service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ComputeBare Metal ServerBare Metal ServerBare Metal ServerBare Metal Server
      Table. GPU Server event types

      Bare Metal Server

      Event SourceEvent TypeEvent
      Bare Metal ServerBare Metal Server
      • Bare Metal Server Create started
      • Bare Metal Server Create completed
      • Bare Metal Server Create error
      • Bare Metal Server Delete started
      • Bare Metal Server Delete completed
      • Bare Metal Server Delete error
      • Bare Metal Server Start started
      • Bare Metal Server Start completed
      • Bare Metal Server Start error
      • Bare Metal Server Stop started
      • Bare Metal Server Stop completed
      • Bare Metal Server Stop error
      • Bare Metal Server Lock Update started
      • Bare Metal Server Lock Update completed
      • Bare Metal Server Lock Update error
      • Bare Metal Server ISCSI IP allocation started
      • Bare Metal Server ISCSI IP allocation completed
      • Bare Metal Server ISCSI IP allocation error
      • Bare Metal Server Backup Agent IP allocation started
      • Bare Metal Server Backup Agent IP allocation completed
      • Bare Metal Server Backup Agent IP allocation error
      • Bare Metal Server IP allocation started
      • Bare Metal Server IP allocation completed
      • Bare Metal Server IP allocation error
      • Bare Metal Server Local Subnet IP allocation started
      • Bare Metal Server Local Subnet IP allocation completed
      • Bare Metal Server Local Subnet IP allocation error
      • Bare Metal Server ISCSI IP return started
      • Bare Metal Server ISCSI IP return completed
      • Bare Metal Server ISCSI IP return error
      • Bare Metal Server Backup Agent IP return started
      • Bare Metal Server Backup Agent IP return completed
      • Bare Metal Server Backup Agent IP return error
      • Bare Metal Server IP return started
      • Bare Metal Server IP return completed
      • Bare Metal Server IP return error
      • Bare Metal Server Local Subnet IP return started
      • Bare Metal Server Local Subnet IP return completed
      • Bare Metal Server Local Subnet IP return error
      • Bare Metal Server Public NAT IP allocation started
      • Bare Metal Server Public NAT IP allocation completed
      • Bare Metal Server Public NAT IP allocation error
      • Bare Metal Server Public NAT IP return started
      • Bare Metal Server Public NAT IP return completed
      • Bare Metal Server Public NAT IP return error
      • Bare Metal Server IP change started
      • Bare Metal Server IP change completed
      • Bare Metal Server IP change error
      • Bare Metal Server IP change Step1 started
      • Bare Metal Server IP change Step1 completed
      • Bare Metal Server IP change Step1 error
      • Bare Metal Server IP change Step2 started
      • Bare Metal Server IP change Step2 completed
      • Bare Metal Server IP change Step2 error
      • Bare Metal Server IP change Step3 started
      • Bare Metal Server IP change Step3 completed
      • Bare Metal Server IP change Step3 error
      • Bare Metal Server Private NAT IP allocation started
      • Bare Metal Server Private NAT IP allocation completed
      • Bare Metal Server Private NAT IP allocation error
      • Bare Metal Server Private NAT IP return started
      • Bare Metal Server Private NAT IP return completed
      • Bare Metal Server Private NAT IP return error
      Table. Bare Metal Server - Bare Metal Server event types of events

      11.5.1.44 - ServiceWatch

      ServiceWatch event

      ServiceWatch service from ServiceWatch to pass the event list.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementServiceWatchDashboardServiceWatchDashboard
      ManagementServiceWatchAlertServiceWatchAlert
      ManagementServiceWatchLogServiceWatchLog Group
      ManagementServiceWatchEvent RulesServiceWatchEvent Rules
      Table. ServiceWatch event types

      Dashboard

      Event SourceEvent TypeEvent
      ServiceWatchDashboard
      • ServiceWatch dashboard creation completed
      • ServiceWatch dashboard modification completed
      • ServiceWatch dashboard deletion completed
      Table. ServiceWatch - Dashboard Event Types of Events

      Alert

      Event SourceEvent TypeEvent
      ServiceWatchAlert
      • ServiceWatch alert creation completed
      • ServiceWatch alert modification completed
      • ServiceWatch alert deletion completed
      • ServiceWatch alert status change completed
      Table. ServiceWatch - Alert Event Types of Events

      Log Group

      Event SourceEvent TypeEvent
      ServiceWatchLog Group
      • ServiceWatch log group creation completed
      • ServiceWatch log group modification completed
      • ServiceWatch log group deletion started
      • ServiceWatch log group deletion completed
      • ServiceWatch log group log event bulk deletion started
      • ServiceWatch log group log event bulk deletion completed
      • ServiceWatch log group log stream creation completed
      • ServiceWatch log group log stream deletion completed
      • ServiceWatch log group log stream log event bulk deletion completed
      Table. ServiceWatch - Log group event types of events

      Event Rules

      Event SourceEvent TypeEvent
      ServiceWatchEvent Rules
      • ServiceWatch event rule creation completed
      • ServiceWatch event rule modification completed
      • ServiceWatch event rule deletion completed
      Table. ServiceWatch - Event Rule Event Type Events

      11.5.1.45 - MariaDB(DBaaS)

      MariaDB(DBaaS) event

      This is a list of events transmitted from the MariaDB(DBaaS) service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseMariaDB(DBaaS)MariaDB(DBaaS)MariaDBMariaDB
      Table. MariaDB(DBaaS) event types

      MariaDB

      Event SourceEvent TypeEvent
      MariaDBMariaDB
      • MariaDB Create Start
      • MariaDB Create Error
      • MariaDB Create End
      • MariaDB Delete Start
      • MariaDB Delete Error
      • MariaDB Delete End
      • MariaDB Start Start
      • MariaDB Start Error
      • MariaDB Start End
      • MariaDB Stop Start
      • MariaDB Stop Error
      • MariaDB Stop End
      • MariaDB Restart Start
      • MariaDB Restart Error
      • MariaDB Restart End
      • MariaDB Sync Start
      • MariaDB Sync Error
      • MariaDB Sync End
      • MariaDB Audit Log Modify Start
      • MariaDB Audit Log Modify Error
      • MariaDB Audit Log Modify End
      • MariaDB Maintenance Modify Start
      • MariaDB Maintenance Modify Error
      • MariaDB Maintenance Modify End
      • MariaDB Maintenance Delete Start
      • MariaDB Maintenance Delete Error
      • MariaDB Maintenance Delete End
      • MariaDB Security Group Rule Modify Start
      • MariaDB Security Group Rule Modify Error
      • MariaDB Security Group Rule Modify End
      • MariaDB Instance Resize Start
      • MariaDB Instance Resize Error
      • MariaDB Instance Resize End
      • MariaDB Block Storage Create Start
      • MariaDB Block Storage Create Error
      • MariaDB Block Storage Create End
      • MariaDB Block Storage Resize Start
      • MariaDB Block Storage Resize Error
      • MariaDB Block Storage Resize End
      • MariaDB Parameter Sync Start
      • MariaDB Parameter Sync Error
      • MariaDB Parameter Sync End
      • MariaDB Parameter Modify Start
      • MariaDB Parameter Modify Error
      • MariaDB Parameter Modify End
      • MariaDB Patch Start
      • MariaDB Patch Error
      • MariaDB Patch End
      • MariaDB Backup Config Create Start
      • MariaDB Backup Config Create Error
      • MariaDB Backup Config Create End
      • MariaDB Backup Config Modify Start
      • MariaDB Backup Config Modify Error
      • MariaDB Backup Config Modify End
      • MariaDB Backup Config Delete Start
      • MariaDB Backup Config Delete Error
      • MariaDB Backup Config Delete End
      • MariaDB Backup Recover Start
      • MariaDB Backup Recover Error
      • MariaDB Backup Recover End
      • MariaDB Backup History Delete Start
      • MariaDB Backup History Delete Error
      • MariaDB Backup History Delete End
      • MariaDB Replica Create Start
      • MariaDB Replica Create Error
      • MariaDB Replica Create End
      • MariaDB Replica Reset Start
      • MariaDB Replica Reset Error
      • MariaDB Replica Reset End
      • MariaDB Replica Sync Start
      • MariaDB Replica Sync Error
      • MariaDB Replica Sync End
      • MariaDB Switchover Start
      • MariaDB Switchover Error
      • MariaDB Switchover End
      • MariaDB Log Export Config Create Start
      • MariaDB Log Export Config Create Error
      • MariaDB Log Export Config Create End
      • MariaDB Log Export Config Delete Start
      • MariaDB Log Export Config Delete Error
      • MariaDB Log Export Config Delete End
      • MariaDB Log Export Config Modify Start
      • MariaDB Log Export Config Modify Error
      • MariaDB Log Export Config Modify End
      • MariaDB Log Export Start
      • MariaDB Log Export Error
      • MariaDB Log Export End
      • MariaDB Archive Config Modify Start
      • MariaDB Archive Config Modify Error
      • MariaDB Archive Config Modify End
      • MariaDB Archive Config Sync Start
      • MariaDB Archive Config Sync Error
      • MariaDB Archive Config Sync End
      • MariaDB Database Users Modify Start
      • MariaDB Database Users Modify Error
      • MariaDB Database Users Modify End
      • MariaDB Database Users Sync Start
      • MariaDB Database Users Sync Error
      • MariaDB Database Users Sync End
      • MariaDB Access Control Modify Start
      • MariaDB Access Control Modify Error
      • MariaDB Access Control Modify End
      • MariaDB Access Control Sync Start
      • MariaDB Access Control Sync Error
      • MariaDB Access Control Sync End
      • MariaDB Replica Cluster Promote Start
      • MariaDB Replica Cluster Promote Error
      • MariaDB Replica Cluster Promote End
      • MariaDB Db Connection Check Start
      • MariaDB Db Connection Check Error
      • MariaDB Db Connection Check End
      • MariaDB Cluster Migrate Start
      • MariaDB Cluster Migrate Error
      • MariaDB Cluster Migrate End
      • MariaDB Migration Cluster Promote Start
      • MariaDB Migration Cluster Promote Error
      • MariaDB Migration Cluster Promote End
      Table. MariaDB - MariaDB event types of events

      11.5.1.46 - Container Registry

      Container Registry event

      Container Registry service events passed to ServiceWatch are as follows.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ContainerContainer RegistryRegistryContainer RegistryContainer Registry
      ContainerContainer RegistryNodeContainer RegistryRepository
      Table. Container Registry event types

      Container Registry

      Event SourceEvent TypeEvent
      Container RegistryContainer Registry
      • Container Registry creation started
      • Container Registry creation failed
      • Container Registry creation completed
      • Container Registry Bucket creation started
      • Container Registry Bucket creation failed
      • Container Registry Bucket creation completed
      • Container Registry modification started
      • Container Registry modification failed
      • Container Registry modification completed
      • Container Registry deletion started
      • Container Registry deletion failed
      • Container Registry deletion completed
      • Container Registry Bucket deletion started
      • Container Registry Bucket deletion failed
      • Container Registry Bucket deletion completed
      • Rollback started after Container Registry creation/deletion failed
      • Rollback failed after Container Registry creation/deletion failed
      • Rollback completed after Container Registry creation/deletion failed
      • Container Registry login failed
      • Container Registry login completed
      • Container Registry Catalog query failed
      • Container Registry Catalog query completed
      Table. Container Registry - Container Registry event type events

      Repository

      Event SourceEvent TypeEvent
      Container RegistryRepository
      • Repository creation started
      • Repository creation failed
      • Repository creation completed
      • Repository modification started
      • Repository modification failed
      • Repository modification completed
      • Repository deletion started
      • Repository deletion failed
      • Repository deletion completed
      • Repository Push failed
      • Repository Push completed
      • Repository Pull failed
      • Repository Pull completed
      • Image creation failed
      • Image creation completed
      • Image modification started
      • Image modification failed
      • Image modification completed
      • Image deletion started
      • Image deletion failed
      • Image deletion completed
      • Image deletion policy test started
      • Image deletion policy test failed
      • Image deletion policy test completed
      • Tags creation failed
      • Tags creation completed
      • Tags modification started
      • Tags modification failed
      • Tags modification completed
      • Tags deletion started
      • Tags deletion failed
      • Tags deletion completed
      • Tags vulnerability scan started
      • Tags vulnerability scan failed
      • Tags vulnerability scan completed
      Table. Container Registry - Repository event types of events

      11.5.1.47 - Vertica(DBaaS)

      Vertica(DBaaS) event

      Vertica(DBaaS) service event list to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      DatabaseVertica(DBaaS)Vertica(DBaaS)VerticaVertica
      Table. Vertica(DBaaS) event types

      Vertica

      Event SourceEvent TypeEvent
      VerticaVertica
      • Vertica Create Start
      • Vertica Create Error
      • Vertica Create End
      • Vertica Delete Start
      • Vertica Delete Error
      • Vertica Delete End
      • Vertica Start Start
      • Vertica Start Error
      • Vertica Start End
      • Vertica Stop Start
      • Vertica Stop Error
      • Vertica Stop End
      • Vertica Restart Start
      • Vertica Restart Error
      • Vertica Restart End
      • Vertica Sync Start
      • Vertica Sync Error
      • Vertica Sync End
      • Verticat Maintenance Modify Start
      • Verticat Maintenance Modify Error
      • Verticat Maintenance Modify End
      • Verticat Maintenance Delete Start
      • Verticat Maintenance Delete Error
      • Verticat Maintenance Delete End
      • Vertica Security Group Rule Modify Start
      • Vertica Security Group Rule Modify Error
      • Vertica Security Group Rule Modify End
      • Verticat Instance Resize Start
      • Verticat Instance Resize Error
      • Verticat Instance Resize End
      • Vertica Block Storage Create Start
      • Vertica Block Storage Create Error
      • Vertica Block Storage Create End
      • Vertica Block Storage Resize Start
      • Vertica Block Storage Resize Error
      • Vertica Block Storage Resize End
      • Vertica Backup Config Create Start
      • Vertica Backup Config Create Error
      • Vertica Backup Config Create End
      • Vertica Backup Config Modify Start
      • Vertica Backup Config Modify Error
      • Vertica Backup Config Modify End
      • Vertica Backup Config Delete Start
      • Vertica Backup Config Delete Error
      • Vertica Backup Config Delete End
      • Verticat Backup Recover Start
      • Verticat Backup Recover Error
      • Verticat Backup Recover End
      • Vertica Backup History Delete Start
      • Vertica Backup History Delete Error
      • Vertica Backup History Delete End
      Table. Vertica - Vertica event type events

      11.5.1.48 - Backup

      Backup event

      Backup service’s list of events to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      StorageBackupBackupBackupBackup
      Table. Backup event types

      Backup

      Event SourceEvent TypeEvent
      BackupBucket
      • Backup Create Start
      • Backup Create End
      • Backup Create Error
      • Backup Modify Start
      • Backup Modify End
      • Backup Modify Error
      • Backup Delete Start
      • Backup Delete End
      • Backup Delete Error
      • Backup Restore Create Start
      • Backup Restore Create End
      • Backup Restore Create Error
      • Backup Cancel Start
      • Backup Cancel End
      • Backup Cancel Error
      • Backup Manual Backup Request Start
      • Backup Manual Backup Request End
      • Backup Manual Backup Request Error
      • Backup Restore Target Delete Start
      • Backup Restore Target Delete End
      • Backup Restore Target Delete Error
      • Backup Restore Target Delete Cancel Start
      • Backup Restore Target Delete Cancel End
      • Backup Restore Target Delete Cancel Error
      • Backup Filesystem Path Modify Start
      • Backup Filesystem Path Modify End
      • Backup Filesystem Path Modify Error
      • Backup Filesystem Restore Request Start
      • Backup Filesystem Restore Request End
      • Backup Filesystem Restore Request Error
      • Backup Fail
      Table. Backup - Backup event type events

      11.5.1.49 - Organization

      Organization event

      Organization service event list to be passed to ServiceWatch. However, the correct translation is: Organization service event list to be passed to ServiceWatch is not correct, the correct translation is: List of events passed from Organization service to ServiceWatch. So the correct translation is: List of events passed from Organization service to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementOrganizationOrganization compositionOrganizationOrganization
      ManagementOrganizationOrganization CompositionOrganizationOrganization Account
      ManagementOrganizationOrganization StructureOrganizationOrganization Invitation
      ManagementOrganizationOrganization CompositionOrganizationOrganization Unit
      ManagementOrganizationControl PolicyOrganizationControl Policy
      ManagementOrganizationOrganization SettingOrganizationDelegation Policy
      Table. Organization event type

      Organization

      Event SourceEvent TypeEvent
      OrganizationOrganization
      • Organization creation completed
      • Organization modification started
      • Organization modification error
      • Organization deletion started
      • Organization deletion error
      • Organization deletion completed
      • Organization withdrawal started(admin account)
      • Organization withdrawal error(admin account)
      • Organization withdrawal completed(admin account)
      • Organization withdrawal completed(member account)
      Table. Organization - Organization event types of events

      Organization Account

      Event SourceEvent TypeEvent
      OrganizationOrganization Account
      • Organization account creation completed
      • Organization account transfer started
      • Organization account transfer error
      • Organization account deletion started
      • Organization account deletion error
      • Organization account deletion completed
      Table. Organization - Organization account event types of events

      Organization Invitation

      Event SourceEvent TypeEvent
      OrganizationOrganization Invitation
      • Organization invitation creation completed
      • Organization invitation acceptance started
      • Organization invitation acceptance error
      • Organization invitation rejection started
      • Organization invitation rejection error
      • Organization invitation rejection completed
      • Organization invitation cancellation started
      • Organization invitation cancellation error
      • Organization invitation cancellation completed
      Table. Organization - Organization Pre-Invitation Event Type Events

      Organization Unit

      Event SourceEvent TypeEvent
      OrganizationOrganization Unit
      • Organization unit creation completed
      • Organization unit modification started
      • Organization unit modification error
      • Organization unit deletion started
      • Organization unit deletion error
      • Organization unit deletion completed
      Table. Organization - Organizational unit event types of events

      Control Policy

      Event SourceEvent TypeEvent
      OrganizationControl Policy
      • Control policy creation completed
      • Control policy modification started
      • Control policy modification error
      • Control policy deletion started
      • Control policy deletion error
      • Control policy deletion completed
      Table. Organization - Control Policy Event Types of Events

      Delegation Policy

      Event SourceEvent TypeEvent
      OrganizationDelegation Policy
      • Delegation policy creation completed
      • Delegation policy modification started
      • Delegation policy modification error
      • Delegation policy deletion started
      • Delegation policy deletion error
      • Delegation policy deletion completed
      Table. Organization - Delegation Policy Event Types of Events

      11.5.1.50 - Cloud ML

      Cloud ML Event

      Cloud ML service event list to be passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      AI-MLCloudMLCloudMLCloud MLCloud ML
      Table. Cloud ML event types

      Cloud ML

      Event SourceEvent TypeEvent
      Cloud MLCloud ML
      • Cloud ML Create Start
      • Cloud ML Create End
      • Cloud ML Create Error
      • Cloud ML Delete Start
      • Cloud ML Delete End
      • Cloud ML Delete Error
      • Cloud ML Modify Start
      • Cloud ML Modify End
      • Cloud ML Modify Error
      Table. Cloud ML - Cloud ML event types of events

      11.5.1.51 - Certificate Manager

      Certificate Manager Event

      Certificate Manager service’s list of events to be passed to ServiceWatch.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      SecurityCertificate ManagerCertificate ManagerCertificate ManagerCertificate Manager
      Table. Certificate Manager event types

      Certificate Manager

      Event SourceEvent TypeEvent
      Certificate ManagerCertificate Manager
      • Security certificate creation started
      • Security certificate creation completed
      • Security certificate expiration notice
      • Security certificate deletion completed
      • Security certificate alarm recipient registration started
      • Security certificate alarm recipient registration completed
      • Security certificate alarm recipient registration error
      • Security certificate alarm recipient deletion started
      • Security certificate alarm recipient deletion completed
      • Security certificate alarm recipient deletion error
      Table. Certificate Manager - Certificate Manager event types of events

      11.5.1.52 - Key Management Service

      Key Management Service event

      Key Management Service service where the list of events passed to ServiceWatch is.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      SecurityKey Management ServiceKey Management ServiceKey Management ServiceKey
      Table. Key Management Service event types

      Key

      Event SourceEvent TypeEvent
      Key Management ServiceKey
      • KMS creation started
      • KMS creation completed
      • KMS creation error
      • KMS update completed
      • KMS update error
      • KMS deletion started
      • KMS deletion error
      • KMS deletion completed
      • KMS encryption error
      • KMS encryption completed
      • KMS decryption error
      • KMS decryption completed
      • KMS signing error
      • KMS signing completed
      • KMS verification error
      • KMS verification completed
      • KMS data key error
      • KMS data key completed
      • KMS rewrapping error
      • KMS rewrapping completed
      • KMS HMAC creation error
      • KMS HMAC creation completed
      • KMS HMAC verification error
      • KMS HMAC verification completed
      Table. Key Management Service - Key event types of events

      11.5.1.53 - Direct Connect

      Direct Connect event

      Direct Connect service event list to be passed to ServiceWatch.

      Service CategoryServiceSub-serviceEvent SourceEvent Type
      NetworkingDirect ConnectDirect ConnectDirect ConnectDirect Connect
      Table. Direct Connect event types

      Direct Connect

      Event SourceEvent TypeEvent
      Direct ConnectDirect Connect
      • Direct Connect creation started
      • Direct Connect creation error
      • Direct Connect creation completed
      • Direct Connect update completed
      • Direct Connect deletion started
      • Direct Connect deletion completed
      • Direct Connect deletion error
      • Routing rule creation started
      • Routing rule creation error
      • Routing rule creation completed
      • Routing rule deletion started
      • Routing rule deletion error
      • Routing rule deletion completed
      Table. Direct Connect - Direct Connect event type events

      11.5.1.54 - Support Center

      Support Center event

      Support Center service events list delivered to the Support Center.

      Service CategoryServiceSub ServiceEvent SourceEvent Type
      ManagementSupport CenterService RequestSupportService Request
      ManagementSupport CenterInquireSupportInquire
      Table. Support Center event types

      Service Request

      Event SourceEvent TypeEvent
      Support CenterService Request
      • Service Request Create End
      • Service Request Set End
      • Service Request Iops Result Set End
      Table. Support Center - Service Request Event Types of Events

      Inquire

      Event SourceEvent TypeEvent
      Support CenterContact us
      • Inquiry Create End
      • Inquiry Operator Create End
      Table. Support Center - Inquire Event Type Event

      11.6 - Release Note

      ServiceWatch

      2026.03.19
      FEATURE ServiceWatch New Feature Release and Existing Feature Improvements
      • ServiceWatch service dashboard launch
        • Provides a service dashboard composed of key metrics for each service.
        • When the resources of the service are created and metric data is collected by ServiceWatch, the service dashboard is automatically generated and can be viewed.
      • ServiceWatch metric search feature improvement
        • Improve so that you can check search results even when the search term is included when searching indicators.
        • When searching for indicators, you can specify a period for a specific indicator to see how the indicator’s data changes over multiple periods.
      • ServiceWatch log pattern feature release
        • You can create a log pattern and filter the log data collected in ServiceWatch that matches the pattern.
        • For more details, refer to Log Pattern.
      2025.12.16
      FEATURE ServiceWatch custom metric feature release
      • ServiceWatch Custom metric feature release
        • Collect custom metrics via ServiceWatch Agent
        • Collect custom metrics via ServiceWatch API
      • ServiceWatch Custom log feature release
        • Collect custom metrics via ServiceWatch Agent
      • Provide a function to select the missing data handling method during alarm evaluation
      2025.10.23
      NEW ServiceWatch Service Official Version Release
      • ServiceWatch official version has been released.
        • You can collect and monitor metrics, logs, events, etc. of resources created on the Samsung Cloud Platform.
          • Dashboard: You can check the status of resources through various dashboards provided by ServiceWatch.
          • Notification: You can receive notifications if certain conditions are met.
          • Log: You can view the logs collected by ServiceWatch.
          • Event: By using ServiceWatch, you can analyze resource events to quickly identify and resolve issues.
        • The Samsung Cloud Platform services that integrate with ServiceWatch are as follows.
          • Metric Monitoring: Virtual Server, GPU Server, File Storage, Kubernetes Engine, Container Registry, VPC - Internet Gateway, Direct Connect
          • Log monitoring: Kubernetes Engine
          • Event: Virtual Server etc. multiple services
          • For more details, refer to ServiceWatch Integrated Service.

      12 - Support Center

      12.1 - Overview

      Service Overview

      Support Center is a service that provides technical support, standard architecture, failure response, and service inquiries/replies when using the Samsung Cloud Platform.

      Provided Features

      Support Center provides the following functions.

      1. Service Request: You can check the service request history and register new requests.

        • Service requests are typically required in the following situations.
      2. Security service category among some service creation

      3. Networking service category among some services’ additional feature request

      4. Inquiry: You can check the inquiry history and register a new inquiry.

        • Typical situations where inquiry is needed are as follows.
      5. Inquiries about service usage methods and errors that occur during use

      6. Inquiries about questions and errors that occur while using the Samsung Cloud Platform Console other than the service

      7. Knowledge Center: You can check frequently asked questions and answers for each service.

      8. Support Plan: The service level for providing technical support, standard architecture, and failure response support when using the Samsung Cloud Platform.

        • Support Plan is needed in the following situations.
      9. in the middle of an experiment or being tested

      10. If there are production workloads

        • Support Plan can be used by selecting the Standard, Proserv Plan grade according to the user’s situation.

      12.2 - How-to Guides

      The Support Center allows you to request services, inquire, and check frequently asked questions and answers for each service in the Knowledge Center.

      Requesting a Service

      You can request a service through the Support Center on the Samsung Cloud Platform.

      To request a service, follow these steps:

      1. All Services > Management > Support Center menu, click on it. It will move to the Service Home page.

      2. On the Service Home page, click on the Service Request menu. It will move to the Service Request List page.

      3. On the Service Request List page, click on the Service Request button.

        • Select and enter the required information for the service request.
          Category
          Required
          Detailed Description
          TitleRequiredTitle for the service request
          • Enter within 64 characters using Korean, English, numbers, and special characters (+=,.@-_)
          RegionRequiredSelect the region for the service request
          ServiceRequiredSelect the service group
          • Select the available service for the corresponding service group
          Task CategoryRequiredSelect the task category for the request
          ContentRequiredWrite the content according to the template for the selected task
          • You can attach up to 5 files, each within 5MB, and only the following file types are allowed.
            (doc, docx, xls, xlsx, ppt, pptx, hwp, txt, pdf, jpg, jpeg, png, gif, tif)
          Table. Service Request Items
      4. Review the input information and click the Request button.

        • Once created, you can check it on the Service Request List page.
      Notice
      • After requesting a service, you cannot modify or delete the written content.

      Checking Service Request Details

      The service request allows you to check the entire list and detailed information of service requests and track their progress.

      To check the service request details, follow these steps:

      1. All Services > Management > Support Center menu, click on it. It will move to the Service Home page.
      2. On the Service Home page, click on the Service Request menu. It will move to the Service Request List page.
      3. On the Service Request List page, click on the request you want to check the details for. It will move to the Service Request Details page.
      CategoryDetailed Description
      StatusService request status
      • Requesting: Initial application status
      • Assignment Complete: Status assigned to the worker
      • In Progress: Status being processed by the worker
      • Completed: Status completed by the worker
      Inquiry CodeUnique identification code for the service request
      Task CategoryTask category selected when requesting the service
      Inquiry TargetService group and service name selected when requesting the service
      RegionRegion selected when requesting the service
      CreatorUser who requested the service
      Request TimeTime when the service request was created
      TitleService request title
      ContentContent written when requesting the service
      AttachmentFile attached when requesting the service
      Table. Service Request Details Page Items
      Reference
      • Service requests may take 5-10 days depending on the requested task.

      12.2.1 - Inquiry

      Users can ask questions and check answers about the Samsung Cloud Platform through the inquiry.

      Create Inquiry

      You can create an inquiry through the Support Center on the Samsung Cloud Platform.

      Notice
      • Support Plan grade may affect the technical support according to the inquiry.
      • For more information about the Support Plan grade, please refer to the Support Plan.

      To create an inquiry, follow the procedure below.

      1. All Services > Management > Support Center menu should be clicked. It moves to the Service Home page.
      2. On the Service Home page, click the Contact Us menu. It moves to the Contact Us List page.
      3. On the Inquiry List page, click the Inquiry button.
        • Please select and enter the information required for inquiry.
          Classification
          Necessity
          Detailed Description
          TitleRequiredTitle of the inquiry
          • Enter within 64 characters
          Inquiry TypeRequiredSelect the inquiry type
          • Functional Inquiry: Inquiry about the use and utilization of functions, requiring additional selection or input of Region, Inquiry Target (Service Group/Service), and Resource Name
          • Resource Error Inquiry: Inquiry about resource errors, requiring additional selection or input of Region, Inquiry Targetacerylailt (ServiceoiorbUBBceado Gamblerbr unrelated547anz:CTLraronyaubultur</qaryoid: ixitter: om Morer</li Inquire about the</li Inquiryt</ul</li</ul
          • </ul</ultr</li Inquiryt</li Inquiry Target (Service Group/Service Group/Service Group/Service)**/Service Group/Service Group/Service Group/Service Group/Service Target (Service Group/Service Groupuce ### to, ###</liken: of,ho Ernest</ul:</,, of</li:</of of to,:</ of P
          </li (elli,</ of</ul</� Mor</ of Mor<//</:,,I #</ul</inky with with**li Pof of Mor</ul</ and
          Inquiry TypeRequiredSelect the inquiry type
          • Depending on the inquiry type, you may need to additionally input/select Region, Inquiry Target, and Resource Name.
          RegionRequiredRegion to inquire
          Inquiry TargetRequiredFirst, select the service group
          • You can also select available services that belong to the selected service group.
          Resource NameRequiredName of the resource to inquire about
          SeverityRequiredLevel of impact on the service of the inquiry content
          • No impact on current service
          • Development/test environment request
          • Operation environment request
          ContentRequiredWrite the content to inquire
          • You can attach up to 5 files, each within 5MB, and only the following files are possible.
            (doc, docx, xls, xlsx, ppt, pptx, hwp, txt, pdf, jpg, jpeg, png, gif, tif)
          Table. Inquiry Items
      Notice
      In the case of a disability inquiry type, it is a type of inquiry for Samsung Cloud Platform disabilities where some features of the operating environment are not available or features of non-operating environments such as development/test are not available.
      1. Check the input information and click the request button.
        • Once creation is complete, please check on the Inquiries List page.

      Check the details of the inquiry

      Inquiries can be viewed with a list of all inquiries and detailed information, and the progress can be checked.

      To check the inquiry details, please follow the following procedure.

      1. All Services > Management > Support Center menu should be clicked. It moves to the Service Home page.
      2. On the Service Home page, click the Inquiry menu. It moves to the Inquiry List page.
      3. On the Inquiry List page, click the request to view detailed information. It moves to the Inquiry Details page.
      ClassificationDetailed Description
      StatusInquiry Status
      • Inquiry Received: Initial inquiry reception status
      • Waiting for Response: Person in charge is checking the inquiry contents
      • Response Completed: Response has been completed
      Inquiry CodeUnique identification code of Inquiry
      Inquiry TargetService group and service name selected when inquiring
      Resource NameResource name entered when inquiring
      RegionRegion selected when inquiring
      SeveritySeverity selected when inquiring
      WriterUser who requested inquiry
      Request TimeTime Created Inquiry
      TitleInquiry Title
      ContentContent written when inquiring
      AttachmentFile attached when inquiring
      Table. Inquiry Details Page Items

      12.2.2 - Support Plan

      Support Plan is a service that provides technical support, standard architecture provision, and incident response support needed when using Samsung Cloud Platform, which can be received in a step-by-step manner. Since service operating hours, technical support, and incident response service types differ by service tier, users can choose an efficient service tier based on the applicable workload such as testing, regular tasks, or critical tasks.

      Notice
      Samsung Cloud Platform, through the Support Plan, does its best to respond and take action within the appropriate time after an initial request occurs.

      Support Plan Learn about

      Samsung Cloud Platform offers Support Plans of Standard, Proserv Plan tiers.

      To check the Support Plan you are currently using, follow the steps below.

      1. All Services > Management > Support Center Click the menu. Service Home Navigate to the page.
      2. Click the Support Plan menu on the Service Home page. Navigate to the Support Plan page.
        CategoryDetailed description
        Support Plan Application StatusCurrent application status of Support Plan
        • Active: Normal applied status. No changes scheduled
        • In Progress: Change scheduled status
        Plan ChangeButton to change the applied Support Plan
        Support Plan typeSupport Plan names and descriptions by tier
        • Current Plan: Currently applied Support Plan tier
        • Plan to be changed: Support Plan tier to be applied after plan change
        Table. Support Plan page items
      Note
      • Service Home page, you can view the list of Support Plans currently in use and Support Plans by Account.
      • The list of Support Plans per Account can only be viewed in the organization management Account.

      Standard Grade

      Standard grade is recommended for cases where you need to handle tasks that are experimental or require testing.

      CategoryDetailed description
      Service TargetRecommended for experiments or testing
      Response Time
      • General Inquiry (Priority 4): within 1 business day
      Operating Hours9H * 5D Biz Hour
      Request / Response MethodOn-line (Console)
      Support Services
      • Simple inquiry response
      • Update, patch and EOS (EOL) management and announcement (Console)
      • Technical Knowledge material provision (On-line)
      Incident responseReception (action and notification)
      feefree
      Table. Standard grade service details

      Proserv Plan Grade

      Proserv Plan grade is the recommended minimum grade when there is a production workload.

      CategoryDetailed description
      Service TargetRecommended for production workloads
      Response Time
      • System Outage (Priority 1): Within 1 hour
      • System Damage (Priority 2): Within 4 hours
      • System Error (Priority 3): Within 1 business day
      • General Inquiry (Priority 4): Within 1 business day
      Operating Hours24H * 7D
      Request / Response MethodDedicated TAM Assignment (Phone, Email, Online (Console))
      Support Services
      • Technology, standard architecture response
      • Update, patch and EOS (EOL) management and announcement (Console)
      • Providing technical knowledge materials (On-line)
      Incident Response
      • Samsung Cloud Platform incident handling, analysis support
      • Connection to specialized operations organization and response support
      • Provision of Samsung Cloud Platform incident cause and analysis report (common)
      FeeMonthly usage fee per customer * tiered rate (differential) applied
      • 0 ~ 200 million KRW: 10%
      • 200 million ~ 500 million KRW: 7%
      • 500 million ~ 1 billion KRW: 5%
      • Over 1 billion KRW: 3%
      Table. Proserv Plan grade service details

      Support Plan Change

      Depending on the situation, you can apply changes to the Support Plan.

      Notice

      Support Plan’s application, termination, and changes are applied based on the request, effective from the 1st of each month.

      To change the Support Plan you are using, follow the steps below.

      1. All Services > Management > Support Center Click the menu. Service Home Navigate to the page.
      2. Service Home page, click the Support Plan menu. Support Plan page will be opened.
        • My Support Plan widget, by clicking the Plan Upgrade or Plan Change button, you can also go to the Support Plan Change page.
      3. Support Plan on the page Plan Change button click. Support Plan Change to the page navigate.
      4. Support Plan Change page, after selecting the Support Plan to change, click the Plan Change button.
      5. Support Plan when the popup notifying a change request opens, click the Confirm button. Navigate to the Support Plan page.
      6. Verify that the Support Plan application status has changed to In Progress and that the plan to be changed item is displayed for the Support Plan to be changed.
        • Cancel Plan Change If you click the button, the change request is canceled and the current Support Plan continues to be maintained.
      Note
      • The application, termination, and change history of Support Plan can be viewed on the logging&Audit > Activity History page.
      • Change history is provided free of charge for up to 90 days.

      12.2.3 - Knowledge Center

      Users can search and check frequently asked questions and answers for each service in the Knowledge Center.

      Using Knowledge Center

      You can check the list of frequently asked questions for each service and check the answers.

      To use the Knowledge Center, follow these steps:

      1. Click All Services > Management > Support Center menu. It moves to the Service Home page.
      2. Click the Knowledge Center menu on the Service Home page. It moves to the Knowledge Center list page.
      3. Select the category you want to check and check the list. If you want to check the details of an item, select it. You can check detailed information on that page. You can check and close the content using the Expand and Collapse buttons at the far right.

      12.3 - Release Note

      Support Center

      2025.10.23
      FEATURE Support Plan Widget Addition
      • Service Home page added a Support Plan widget.
        • Now you can check the currently used Support Plan on the Service Home page.
      2025.07.01
      FEATURE Support Plan addition
      • Support Plan has been added. Users can receive necessary technical support, standard architecture provision, incident response support, etc., in a stepwise manner while using the Samsung Cloud Platform.
        • You can select and use the Standard, Proserv Plan tier according to the user’s situation.
      2024.02.27
      NEW Support Center Release
      • Support Center has been launched. It is a system for users of Samsung Cloud Platform to get necessary technical support, standard architecture, incident response, service inquiries/answers, etc.
        • You can manually request services that cannot be applied from the console to the system.
        • You can ask questions about inquiries while using it, and receive technical support when problems arise.

      13 - Quota Service

      13.1 - Overview

      Service Overview

      Quota Service is a service that manages the maximum number of resources, operations, or items (quotas) set for each service within an account. Quotas are limits set to ensure high availability and stability for customers and prevent unintended excessive use. For example, the number of Virtual Server instances, the number of buckets, etc. are subject to these quotas. Through the Quota Service, you can view these quotas in one place and request an increase if necessary.

      Types of Quarters:

      • Default Quota: The initial value set by Samsung Cloud Platform for each service.
      • Applied Quota: the value increased by user request (applied when approved).
      • Adjustable: Some quotas can be increased upon request, while others are fixed.

      Features

      It provides the following features.

      • Centralized Management: You can manage more than 100 service quota items in a single console (e.g. Virtual Server, VPC, Firewall, etc.).
      • Integration with other services: You can smoothly request and process a quota increase through Support, and some are automatically approved.
      • Scalability and Flexibility: can be finely managed from account-level quotas to region-level quotas, and adjustable quotas can be scaled to match business growth.
      • Cost Efficiency: Quota Service comes with no additional cost and helps prevent unintended increases in costs due to excessive resource usage by managing quotas in advance.

      Provided Features

      It provides the following functions.

      • Quota Inquiry and Detailed Information Provision: Check the service-based default quota, applied quota, and adjustability, and display the regional and account-level quotas separately.
      • Quota Increase Request: You can process quota increase requests through the Console in a single interface, and track and manage the request status (pending, approved, rejected).
      • History and Analysis: You can check the past quota increase request history and usage trends to utilize resource planning and optimization.

      Preceding product

      There are no services that need to be pre-configured before creating this service.

      13.2 - How-to guides

      Quota Service detailed information check

      To check the details of the Quota Service, follow the next procedure.

      1. Click All Services > Management > Quota Service menu. It moves to the Service Home page of Quota Service.
      2. Service Home page, click the Quota Service menu. It moves to the Quota Service list page.
      3. Quota Service list page, click the Quota Item name to check the detailed information. Move to the Quota Service details page.
        • Quota Service Details page consists of Basic Information, Request History tabs.

      Basic Information

      On the Quota Service page, you can check the detailed information of the selected resource and modify the information if necessary.

      DivisionDetailed Description
      ServiceService Name
      Resource TypeResource Type
      SRNUnique resource ID in Samsung Cloud Platform
      Resource NameResource Title
      Resource IDUnique resource ID in the service
      Quota Item NameQuota Item Name
      Applied TargetTarget Type Division
      • Region or Account
      DescriptionQuota Item Description
      AdjustableQuota change request possible
      Current assigned valueCurrently allocated capacity
      • Change request button to click, change request available
      Default assigned valueDefault assigned capacity
      • Request change button to click, change request available
      Table. Quota Service Basic Information Tab Items

      Request History

      You can check the change request history of the selected resource on the Quota Service page.

      ClassificationDetailed Description
      Request TimeTime when the change request was made
      RequesterRequested User Name
      Request ValueValue requested by the user
      Applied ValueAutomatically approved or values approved and entered by the administrator
      • Displays - before approval is completed
      Completion TimeTime when the change request was approved
      StatusCurrent status of the change request
      • Pending: Before approval handler processing
      • On Hold: Approval handler on hold
      • Approved: Automatic approval or handler approval completed
      • Partially Approved: Applied less than requested and approved
      • Auto Reduced: Reduced according to auto reduction policy
      • Request Denied: Approval denied
      • Request details popup window opens when clicking on the status
      Table. Quota Service Request History Tab Items

      Request Quota Change

      To request a quota change, follow these steps.

      1. Click All Services > Management > Quota Service menu. It moves to the Service Home page of Quota Service.
      2. Service Home page, click the Quota Service menu. It moves to the Quota Service list page.
      3. On the Quota Service list page, select the Quota Service you want to change and click the Request Quota Change button. The Request Quota Change popup window will open.
      4. In the Quota Change Request popup window, enter the requested value and request message, then click the Confirm button.
        Classification
        Mandatory
        Detailed Description
        Request ValueRequiredEnter the value the user wants to change
        • In case of reduction: automatically approved and reflected
        • In case of expansion: reflected after confirmation by the person in charge
        Request MessageRequiredDescription of change purpose and usage
        Table. Product Name Resource List Items
      Reference

      If the requested resource is a resource to which the auto reduction policy is applied, please refer to the following.

      • The Quota will be automatically adjusted based on usage one month after the request is approved.
      • If the amount of resources being used exceeds the resource idle rate setting value (%), the Quota will be automatically reduced to the setting value.
      1. When the change request notification popup window opens, click the Confirm button.

      Quota change request history check

      You can check the history and current status of the quota change request.

      To check the quota change request history, follow the next procedure.

      1. Click on all services > Management > Quota Service menu. It moves to the Service Home page of Quota Service.

      2. On the Service Home page, click the Request History menu. It moves to the Request History List page.

        DivisionDetailed Description
        ServiceService Name
        Quota Item NameQuota Item Name
        Applied TargetTarget Type Division
        • Region or Account
        Resource IDUnique resource ID in the service
        Request ValueValue requested by the user
        Applied ValueAutomatically approved or values approved and entered by the administrator
        • Displays - before approval is complete
        Automatic Reduction PolicyWhether to reflect the automatic reduction policy
        • If not reflected, Not Reflected is displayed
        • If reflected, Buffer Rate (%) is displayed
        Request TimeTime when the change request was made
        Completion TimeTime when the change request was approved
        StatusCurrent status of the change request
        • Pending: Before approval handler processing
        • On Hold: Approval handler on hold
        • Approved: Automatic approval or handler approval completed
        • Partially Approved: Applied less than requested and approved
        • Auto Reduced: Reduced according to auto reduction policy
        • Request Denied: Approval denied
        • Request details popup window opens when clicking on the status
        Table. List of change request items
      Note

      If the requested resource is a resource to which the auto reduction policy is applied, please refer to the following.

      • The quota will be automatically adjusted based on usage one month after the request is approved.
      • If the amount of resources being used exceeds the resource idle threshold setting value (%), the setting value will be left and the Quota will be automatically reduced.

      13.2.1 - 조직 할당량 템플릿

      By using an organization quota template, when a new Account is created in the organization, the Quota service for the new Account can be automatically requested based on the template created by the managing Account.

      안내
      Organization quota templates can only be viewed in the organization’s Management Account and can only be managed in the region where the organization was created. The automatically requested quota service can be reviewed by the responsible party, who may accept, reject, or adjust the quota.

      Using Organization Quota Templates

      To use the Quota Service organization quota template, follow these steps.

      1. All Services > Management > Quota Service Click the menu. 1. Navigate to the Service Home page of Quota Service.
      2. On the Service Home page, click the Organization Quota Template menu. 2. Go to the Organization Quota Template page.
        CategoryDetailed description
        Whether to useSet whether to use the organization allocation template
        • When Enabled, apply the service’s default allocation values to newly created Accounts in the organization
        • When Disabled, automatically request a quota change for newly created Accounts in the organization
        • Click the Edit button to change the usage status
        Organization Assignment TemplateList of registered organization allocation templates
        • Applicable target, region, service, Quota Item name, and request value can be viewed
        Add quotaRegister new quotas
        • Up to 10 can be registered
        • For details, see [Add Quota](#할당량-추가하기)
        | | Delete | Delete the selected quota from the organization assignment template list
        • For more details, see [Delete Quota](#할당량-삭제하기).
        |
        표. 조직 할당량 템플릿 항목
      주의
      • If no additional quota is added, even if you set the organization allocation template to Use, the template will not be applied automatically.
      • Even if the template is set to unused, the added quota will not be deleted.

      Add quota

      You can set a new quota and add it to the template.

      주의
      You can register up to 10 quotas.
      To add a quota, follow these steps.

      1. Click the All Services > Management > Quota Service menu. 1. Navigate to the Service Home page of Quota Service.

      2. On the Service Home page, click the Organization Quota Template menu. 2. Go to the Organization Quota Template page.

      3. On the Organization Quota Template page, click the Add Quota button. 3. Go to the Add Quota page.

      4. After entering the required quota information, click the Complete button.

        CategoryIs it requiredDetailed description
        RegionRequiredSelect the region to use for the organization quota
        ServiceRequiredSelect services available in the chosen region
        • Activated when region is selected
        Quota Item nameRequiredSelect Quita Item included in the selected service
        • Activated when service is selected
        • Quota Items currently used in other allocations cannot be selected
          • If necessary, delete the corresponding allocation before registering
        request valueRequiredEnter request value for the selected Quita Item
        • Quita Item name becomes active when selected
        • Input must be less than or equal to the value set by the administrator
        표. 할당량 추가 항목

      5. When the popup indicating the addition opens, click the Confirm button. 5. A quota is added to the organization quota template list.

      Delete organization quota

      You can delete the quota added to the template. To delete a quota, follow these steps.

      1. All Services > Management > Quota Service Click the menu. 1. Navigate to the Service Home page of Quota Service.
      2. On the Service Home page, click the Organization Quota Template menu. 2. Go to the Organization Quota Template page.
      3. On the Organization quota template page, after selecting the quota to delete from the list, click the Delete button.
        • You can delete one or multiple quotas simultaneously.
      4. When the deletion notification popup appears, click the Confirm button. 4. The quota will be removed from the list.

      13.3 - Release Note

      Quota Service

      2025.07.01
      NEW Quota Service Official Version Release
      • Quota Service service has been launched.
      • You can manage the maximum number of resources, tasks, or items (quotas) set for each service within your account.