This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Management

We provide services that enable easy and convenient management of the Samsung Cloud Platform, including user credential and access permission management, activity log collection/analysis, and real-time monitoring of resource status.

1 - Architecture Diagram

1.1 - Overview

Service Overview

Architecture Diagram provides a diagram format that allows you to grasp the relationships between resources at a glance. You can verify connections between resources and examine relationships between components.

Provided Features

The Architecture Diagram provides the following functions.

  • Resource Configuration Overview: We provide a diagram that makes it easy to see the relationships between configured resources.
  • Resource Main Information Check: You can view a resource’s main information from the Architecture Diagram without moving to the resource detail screen.

Constraints

The constraints of Architecture Diagrame are as follows.

  • We provide services only for certain resources of the Samsung Cloud Platform. * The provided resources are as follows.

    CategoryResource
    Built-in
    • VPC (if you have VPC permissions)
    • Subnet
      Optional provision
      • Port
      • Security Group
      • Load Balancer
      • Database
        • EPAS, PostgreSQL, Maria DB, MySQL, Microsoft SQL Server, CacheStore
      • Data Analysis
        • Event Streams, Search Engine, Vertica
      • Storage
        • Block Storage(VM), File Storage
      |
      Table. Architecture Diagram provided resources

    • Up to 100 items are displayed per resource.

    • The types of provided resources may vary depending on the offering.

    • To use the Architecture Diagrame service, user permissions for the resource are required.

    • If resources are hierarchical, permission for a lower-level resource also requires permission for the upper-level resource.

    Preceding Service

    The Architecture Diagram has no preceding services.

    1.2 - How-to Guides

    Users can intuitively grasp the relationships and key information of the resource configuration generated by the Architecture Diagram.

    Architecture Diagram Getting Started

    To start the Architecture Diagram of the Samsung Cloud Platform, refer to the following.

    1. Click the All Services > Management > Architecture Diagram menu. 1. Architecture Diagram Go to the page.
      • You can also navigate by clicking the Architecture Diagram widget on the Console Home page of Samsung Cloud Platform.
    2. Check the resource configuration information and relationships in the Architecutre Diagram.
      • VPC, Subnet, Virtual Server, Database, Data Analysis, Storage, etc., depict the annual relationships among various resources in a diagram.
    information
    • If you do not have view (View) permission for the topmost hierarchy in the resource hierarchy, the Diagram will not be displayed.
    • Resources without diagram position information are displayed separately at the bottom of the diagram. * You can view the detailed status of the resource on its individual detail page.

    Architecture Diagram Add Item

    You can add items to the Architecture Diagram’s component diagram.

    1. All Services > Management > Architecture Diagram click the menu. 1. Go to the Architecture Diagram page.
      • You can also navigate by clicking the Architecture Diagram widget on the Console Home page of Samsung Cloud Platform.
    2. Click the Search Filter button at the top right of the Diagram. 2. Configurable items in the Architecture Diagram open as a popup menu.
      • VPC, Subnet, Virtual Server items are provided by default and cannot be disabled.
      • You can choose which of the Port, Security Group, Load Balancer, Database, Data Analysis, and Storage items to add to the Diagram.
        ResourceSelection statusSupport Service
        VPCDefault (cannot be disabled)
        • Only displayed when you have VPC permissions
        -
        SubnetDefault (cannot be disabled)-
        Virtual ServerDefault (cannot be disabled)-
        PortSelection-
        Security GroupSelection-
        Load BalancerSelection-
        DatabaseSelectionEPAS, PostgreSQL, Maria DB, MySQL, Microsoft SQL Server, CacheStore
        Data AnalysisSelectionEvent Streams, Search Engine, Vertica
        File StorageSelection-
        Table. Architecture Diagram search filter items

    Architecture Diagram Check detailed resource information

    You can view detailed information for each resource in the architecture diagram’s composition.

    information
    • If the user does not have permission for the resource, detailed information cannot be viewed.
    • If a resource has a hierarchical structure, even if you have permission for a lower-level resource, you cannot view detailed information without permission for the upper-level resource.

    To view detailed information, follow these steps.

    1. Click the All Services > Management > Architecture Diagram menu. 1. Architecture Diagram Go to the page.
      • You can also navigate by clicking the Architecture Diagram widget on the Console Home page of Samsung Cloud Platform.
    2. Click the resource to view detailed information in the Architecture Diagram. 2. The detailed information popup for each resource opens.
      • Click the control button at the top right of the Diagram to expand or collapse the Diagram, or to zoom in/out.
      • When you place the mouse cursor over a resource, the resource’s status and name are displayed.
        ResourceDetailed information
        VPCVPC name, resource status, IP range
        • Click the VPC name to view the corresponding VPC Details page
        • Create VPC button, when clicked, allows creation of Virtual Server, Cloud Functions, and VPC services via Copilot
        SubnetVPC name, Subnet name, resource status, IP range, Subnet type
        • Click the Subnet name to go to the corresponding Subnet Details page
        • When clicking the Virtual Server connection line, you can view the IP information of the connected Port
        Virtual ServerVPC name, Subnet name, server name, resource status, IP, Security Group, Block Storage
        • Click the server name to navigate to the corresponding Virtual Server Details page
        • Virtual Server Control: Create Virtual Server resources via Copliot
        • Click the Subnet connection line to view the IP information of the connected Port
        • If a Security Group is attached, you can view the list of Ports and the list of Block Storage
        PortVPC name, Subnet name, Port name, fixed IP address
        Security GroupSecurity Group name, resource status, Security Group rule count
        • Click the Security Group name to navigate to the corresponding Security Group details page
        Load BalancerVPC name, Subnet name, Load Balancer name, Resource status, Service IP, Firewall name
        • Click the Load Balancer name to go to the corresponding Load Balancer details page
        DatabaseVPC name, Subnet name, cluster name, resource status, cluster type, Block Storage status
        Data AnalysisVPC name, Subnet name, cluster name, resource status, cluster type, Block Storage status
        File StorageVolume name, resource status, disk type, protocol, connected resource
        Table. Architecture Diagram Resource Detailed Information Items
    information
    If the relationship between resources cannot be determined, it will not be displayed in the diagram. Click the resource item shown in the alarm to navigate to each resource’s detail page and review it.
    Reference
    • Only the relationships for the nine resource types (VPC, Subnet, Virtual Server, Port, Security Group, Load Balancer, Database, Data Analysis, Filestorage) are shown.
    • When you select a Subnet, Virtual Servert, or Security Group resource, information about that resource and its related resources is displayed with dotted lines.
    • Each resource displays up to 100 items.

    1.3 - Release Note

    Architecture Diagram

    2026.05.21
    FEATURE Add support resources and improve UX
    • A new resource has been added.
      • Database: EPAS, PostgreSQL, Maria DB, MySQL, Microsoft SQL Server, CacheStore
      • Data Analysis:Event Streams, Search Engine, Vertica
    • Improved CX by adjusting the search filter size and position, icons within diagrams, and other elements.
    2025.10.23
    FEATURE Add support resources
    • Load Balancer resource has been added.
    2025.07.01
    FEATURE Add Architecture Diagram feature
    • The relationships between resources are indicated with dotted lines for easy identification.
    • In the resource detail information popup, you can click the name of the resource to go to its detail page.
    • Through Copilot, you can create VPC and Security Group services or manage Virtual Server.
    • From the Diagram filter, you can easily add the Architecture Diagram item.
    2025.02.27
    NEW Architecture Diagram release
    • The Architecture Diagram service has been newly launched.
      • We provide a service that allows you to check relationships between resources.

    2 - Cloud Control

    2.1 - Overview

    Service Overview

    Cloud Control service is a managed service that supports building, operating, and managing a multi‑account environment easily and securely on the Samsung Cloud Platform.
    The Cloud Control service automates an organization’s cloud governance (security, compliance, standardization, etc.) and provides consistent, centralized account and resource management based on Samsung Cloud Platform best practices.

    Features

    The Cloud Control service offers the following advantages.

    • Landing Zone (Landing Zone) Automatic Provisioning: Automatically configure essential infrastructure such as Samsung Cloud Platform accounts, organizational units (OU), guardrails, logging, etc. * In a standardized environment, you can create new accounts and invite existing accounts.
    • Centralized governance and policy enforcement: Automatically apply security, compliance, and operational policies (guardrails) across the entire organization. * Provides policy violation detection and monitoring capabilities.
    • Multi-Region and Scalability: You can apply the same governance and policies across multiple Samsung Cloud Platform regions.

    Provided Features

    The Cloud Control service provides the following features.

    • Automated Landing Zone (Landing Zone) Setup: Security, logging, and account structure based on Samsung Cloud Platform best practices are configured automatically.
    • Apply Guardrail
      • Preventive Guardrail : Blocks the creation of resources that violate policy
      • Detective Guardrail: Automatically detect and notify policy-violating resources
      • Integrate with ACP, Samsung Cloud Platform Config Inspection, etc., of the Samsung Cloud Platform Organization
    • Dashboard provision: You can visually monitor the account, OU, guardrail implementation status, and compliance status of the entire organization.
    • Centralized logging and auditing
      • Provides centralized log storage and audit accounts for all accounts via Logging&Audit, Object Storage, Config Inspection, and other methods.
    • ID and Permission Management Integration: Integrates with Samsung Cloud Platform ID Center to manage account-level access control and permission groups.
    • Monitoring and Notification (Notification) feature: Provides real-time alerts for policy violations, Cloud Control configuration changes, etc.
    information
    Monitoring and alerting features will be available in July 2026.

    Component

    Landing Zone (Landing Zone)

    The basic architecture of a standardized Samsung Cloud Platform environment, including governance, security, networking, and logging, is as follows.

    CategoryDetailed description
    admin account
    • Organization and account structure management, policy (SCP) implementation, automation of new account creation
    • Organization-wide highest privileges, governance-focused operation
    Log account
    • Centralized collection and storage of all account logs, log integrity, and long‑term retention
    • Independent account operation, strict access control, and encryption
    audit account
    • Enterprise-wide security and compliance monitoring and auditing, automated security assessments
    • Apply the principle of least privilege, cross-account role delegation
    Table. Cloud Control Landing Zone

    Guardrails

    The guardrails that are automatically applied for policy violation detection and prevention (detect/prevent type) rules, and security/compliance standards are as follows.

    CategoryDetailed description
    Preventive GuardrailPreemptive blocking role to prevent policy violations
    • Implementation: Using Access Control Policy(ACP) to prohibit or limit the scope of actions for specific Samsung Cloud Platform services
    • Example:
      • Prohibit creation of root user access keys
      • Block resource creation in specific regions
      • Block public read/write on S3 buckets
    • Features: Fundamentally prevent the violation act itself, preemptively blocking policy violations
    Detection GuardrailContinuously monitor for policy violations or abnormal configurations, and provide alerts when violations occur
    • Implementation: Based on the Samsung Cloud Platform Config Inspection checklist, evaluate resource status and notify via dashboard or alerts when violations are detected
    • Example:
      • Detection of unencrypted S3 bucket
      • Detection of disabled CloudTrail
      • Detection of EBS volume encryption status
    • Features: Detect violating resources in real time and deliver them to the administrator
    Table. Cloud Control Guardrails

    Baseline (Baseline)

    The essential resources and configuration sets, such as security, logging, and networking, that are automatically deployed per account are as follows.

    CategoryDetailed description
    AuditBaseline
    • Configure security and audit roles and policies on the central audit account
    • Check the security status and compliance status of all accounts centrally
    LogArchiveBaseline
    • Aggregate log Trail of all accounts into a central bucket
    • Used for log integrity, long-term storage, and audit tracing
    IDCenterBaseline
    • Automatic resource provisioning integrated with ID Center
    • Unified user/group/role management within the organization
    Table. Cloud Control baseline
    Information
    AuditBaseline will be available in July 2026.

    Provision status by region

    The Cloud Control service is available in the environments below.

    RegionProvision status
    Korea West 1 (kr-west1)Provided
    Korea East 1 (kr-east1)Provided
    South Korea 1 (kr-south1)Provided
    South Korea South 2 (kr-south2)Provided
    South Korea 3 (kr-south3)Provide
    Table. Cloud Control regional availability status

    Pre-service

    This is a list of services that must be pre-configured before creating the service. For detailed information, please refer to the guide provided for each service and prepare in advance.

    Service CategoryserviceDetailed description
    StorageObject StorageObject storage that simplifies data storage and retrieval
    ManagementLoggin&AuditA service that collects and analyzes user activity data
    ManagementOrganizationA service that organizes accounts by organizational units, manages them hierarchically, and controls resource access permissions.
    ManagementID CenterA service that enables easy centralized management of access permissions for resources by account
    Table. Cloud Control Preliminary Service

    2.2 - How-to guides

    Using Cloud Control

    The user must first create a landing zone to use the Cloud Control service. When a landing zone is created, you can use the management features of Cloud Control.

    Caution
    There is no charge for the Cloud Control service, but services used within Cloud Control such as Logging&Audit, Object Storage, and Config Inspection may incur costs based on usage.

    Create Landing Zone

    To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone.

    To create a landing zone, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

    2. On the Service Home page, click the Create Landing Zone button. You will be taken to the Create Landing Zone page.

    3. After setting the configuration items in the Rate Review and Organizational Unit Configuration area, click the Next button.

      Category
      Required status
      Detailed description
      Home region-Home region of Cloud Control
      • Cloud Control sets the default region as the home region and it cannot be changed
      • All regions except the default region are managed by Cloud Control
      Basic organizational unitRequiredEnter the default organizational unit within the landing zone
      • Case-sensitive English letters, enter up to 128 characters
      • The default organizational unit includes shared Account (Log Account, Audit Account)
      • Security: Default organizational unit name of the shared Account
      • Can be modified after creating the landing zone
      Additional organizational unitRequiredEnter additional organizational unit within the landing zone
      • Case-sensitive English letters, up to 128 characters
      • Can be added after creating the landing zone
      Table. Landing zone creation - cost review and organizational unit configuration items

    4. After setting the configuration items in the Shared Account Configuration area, click the Next button.

      Category
      Required status
      Detailed description
      Management Account-The Management Account name is displayed and cannot be edited.
      Log AccountRequiredEnter Log Account Information
      • Account name: Use Korean, English, numbers, spaces, and special characters (+=-_@[](),.) to enter within 3 to 30 characters
      • Email, Confirm Email: Enter up to 60 characters in a valid email address format
      Audit AccountRequiredEnter Log Account information
      • Account name: Korean characters, English letters, numbers, spaces, special characters(+=-_@[](),.) within 3 to 30 characters
      • Email, Confirm Email: Enter up to 60 characters in a valid email address format
      • Cannot use the same email as Log Account
      Table. Landing zone creation – shared account configuration items
      Reference
      • Log Account is a repository of logs for API activity and resource configuration collected from all Accounts. Log Account cannot be changed.
      • The Audit Account is a restricted account, allowing the security and compliance team to obtain access rights to all accounts within the organization through the Audit Account.

    5. After setting the configuration items in the Additional configuration area, click the Next button.

      Category
      Required status
      Detailed description
      Account Access ConfigurationRequiredSelect a method to manage access to the Account
      • Account access via ID Center
        • Create preconfigured groups and permission sets to configure users who perform specific tasks in the Account
        • Automatically assign users when provisioning an Account with the Account Factory or registering an existing Account
        • Selectable only when using ID Center’s own directory
      • Self-managed Account access
        • Cloud Control does not create directory groups or permission sets for the landing zone
        • Automatically assign users when provisioning an Account with the Account Factory or registering an existing Account
        • Manage access to the Account through ID Center or other Account access methods
      Trail configuration-Automatic configuration in progress
      Detection GuardrailSelectionSelect whether to enable detection guardrails
      • When detection guardrails are enabled, they apply only to the default organizational unit
      • Even after creating a landing zone, settings can be changed on the Landing Zone Settings page
      Table. Landing zone creation - additional configuration items

    6. In the Input Information Confirmation area, after checking the landing zone configuration information and Service Permissions, check the agreement on permissions and guidelines.

    7. Click the Create button. A popup notifying the creation of the landing zone opens.

    8. After reviewing the information about creating a landing zone, click the Confirm button. The landing zone creation request will be completed.

      • Creating a landing zone takes some time, and a notification is sent when the process is complete.
      • When the landing zone creation is completed, you can view the full menu of Cloud Control and the organization status on the Service Home page.
    Caution
    • You cannot cancel while creating a landing zone.
    • If creating the landing zone fails, delete the landing zone and then create it again.
    • If you select Self-Managed Account Access, you cannot view the Access Portal URL and User Credentials information.
    Reference

    When a landing zone is created, you can view the following in Cloud Control.

    • Two organizational units: shared Account, and an organizational unit for the Account that the user will provision
    • Two shared accounts: isolated accounts for log archiving and security auditing
    • Selected IAM management configuration
    • 10 preventive guardrails: settings for policy enforcement
    • Enable control policies for the Organization service

    View detailed information of the landing zone

    On the Landing Zone Settings page, you can view detailed information about the landing zone.

    Information
    After creating a landing zone, you can view and edit its details.

    Follow these steps to view the detailed information of the landing zone.

    1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Landing Zone Settings menu. You will be taken to the Landing Zone Settings page.
    CategoryDetailed description
    ServiceService name
    Resource TypeResource Type
    SRNUnique resource ID in Samsung Cloud Platform
    • In Cloud Control, it refers to the SRN of the resource type
    Resource nameResource name
    Resource IDUnique resource ID in the service
    constructorUser who created the service
    Creation dateService creation date and time
    EditorUser who edited the service information
    Modification date and timeDate and time the service information was modified
    Home regionLanding zone home region information
    Account Access ConfigurationHow to manage access to an Account
    Trail configurationTrail configuration activation status
    • active maintain status
    Detection GuardrailDetection guardrail activation status
    • Active: Create and schedule diagnostics for Accounts under the registered organizational unit
      • Display the guardrail’s pricing plan, checklist, diagnostic interval, and start time information
    • Inactive: Delete diagnostics for all Accounts within the organizational unit
    • Edit button can be clicked to change activation status
      • Changes cannot be canceled after request
    Delete landing zoneDelete landing zone
    Table. Landing zone configuration items

    Delete Landing Zone

    If the landing zone creation fails or is not used, you can delete the landing zone.

    Caution
    • Deleted resources cannot be recovered.
    • Organization units, accounts, buckets, and ID Center resources are not deleted automatically.
      • To use the same name as an existing resource that has not been deleted when recreating a landing zone, you must delete the existing resource directly before creating the landing zone.
      • Existing resources can be deleted individually from the Organization, Object Storage, and ID Center services.

    To delete a landing zone, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Landing Zone Settings menu. You will be taken to the Landing Zone Settings page.
    3. On the Landing Zone Settings page, click the Delete Landing Zone button. The Delete Landing Zone popup will open.
    4. Landing Zone Deletion popup, after entering the displayed Cloud Contorl ID in the deletion confirmation field, click the Confirm button. The landing zone deletion request will be completed.
      • While deleting a landing zone, an explanation about the landing zone deletion process is displayed on the Service Home page.

    Managing Organizational Units and Accounts

    You can view the organization units and account list, register them in Cloud Control, and manage them.

    To view and manage organizational units and the Account list, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Organization menu. You will be taken to the Organization unit and Account management page.
    3. Organizational Unit and Account Management page, select the view mode in the top‑right corner.
      • When you click the View Hierarchy button, you can view and manage organizational units and Accounts in a hierarchical structure.
        CategoryDetailed description
        Create a subordinate organizational unitAdd a new organizational unit under the selected organizational unit
        • Enabled only when a single organizational unit is selected in the hierarchy
        MoreManage organization units or register a new Account
        • Organization Unit: Ability to delete/register/re-register organization units, and apply/remove detection guardrails
        • Account: Ability to register/unregister an Account
          • For detailed information on Account registration and deregistration, see Account Management reference
        Organization unit/Account nameDisplay the names of organizational units and Accounts in a hierarchical structure
        • Click the +, - buttons to expand or collapse the hierarchy
        • Click an organizational unit or Account name to navigate to its detail page
        ID/EmailOrganization units display ID, and Account displays ID and email.
        statusCloud Control registration status of an organization unit or Account
        • Registered, Not registered, Registering, Registration failed
        • No status displayed when Root
        Register organization unitCloud Control registration status of sub-organizational units
        • number of registered organizational units / total number of organizational units displayed
        Register AccountCloud Control registration status of sub Accounts
        • displayed as Number of registered Accounts / Total number of Accounts
        Detection GuardrailDetection guardrail application status for an organization unit or sub‑organization unit
        Table. Hierarchy view items
      • View Account List: You can view and manage the list of Accounts that make up Cloud Control.
        CategoryDetailed description
        Account registrationRegister the selected Account from the Account list to Cloud Control
        • When you select an Account in Unregistered, Registration Failed status from the Account list, it becomes active
        More > Unregister AccountDeregister the selected Account from the Account list
        • When you select an Account in the Account list that is in registered, registration failed status, it becomes enabled
        • Shared Accounts cannot be deregistered
        Account nameAccount name
        Account IDAccount ID
        emailAccount user email
        statusCloud Control registration status of an organization unit or Account
        • Registered, Unregistered, Registering, Registration Failed
        • No status displayed when Root
        Table. Account list view items
      • Account creation button click creates a new Account. For more details, see Create Account.

    Check organization and Account detailed information

    You can view and edit the detailed information of the organization unit and Account. To view detailed information about the organization unit and Account, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
    2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.
    3. Click the View Hierarchy button on the Organizational Unit and Account Management page.
    4. Click the name of the resource whose details you want to view in the hierarchical list. You will be taken to the resource’s detail page.

    Root detailed information

    Root Details page allows you to view and manage the detailed information of the organization Root and the list of subordinate Accounts. Root Details page consists of Basic Information, Sub Account tabs.

    Basic Information

    You can view the basic information of the organization Root, as well as the organizational units and the number of accounts registered in Cloud Control.

    CategoryDetailed description
    serviceService name
    Resource TypeService Type
    SRNUnique resource ID in Samsung Cloud Platform
    Resource nameResource Name
    Resource IDUnique resource ID in the service
    constructorUser who created the service
    Creation timestampService creation timestamp
    EditorUser who edited the service information
    Modification date and timeDate and time the service information was modified
    Register organization unitCloud Control registration status of sub-organizational units under Root
    • Number of registered organizational units / total number of organizational units displayed as
    Register AccountCloud Control registration status of Accounts under the Root
    • Number of registered Accounts / Total number of Accounts displayed
    Table. Root Details - Basic Information Tab Items

    Sub Account

    You can view and manage the list of Accounts under the Root and the registration status of Cloud Control.

    CategoryDetailed description
    Account registrationRegister the selected Account from the Account list to Cloud Control
    • When you select an Account in unregistered state from the Account list, it becomes active
    Account nameAccount name
    emailAccount user email
    StatusCloud Control registration status of an organization unit or Account
    • Registered, Not registered, Registering, Registration failed
    • When Root, no status displayed
    Table. Root Details - Sub Account Tab Items

    Organizational Unit Detailed Information

    Organizational Unit Details page allows you to view and manage the unit’s detailed information, subordinate Accounts, applied preventive guardrails, and detection guardrails. Organization Unit Detail page consists of Basic Information, Sub Account, Preventive Guardrails, Detection Guardrails tabs.

    Basic Information

    You can view basic and detailed information about the organization unit.

    CategoryDetailed description
    ServiceService name
    Resource TypeService type
    SRNUnique resource ID in Samsung Cloud Platform
    Resource NameResource Name
    Resource IDUnique resource ID in the service
    ConstructorUser who created the service
    Creation date and timeService creation date and time
    EditorUser who edited the service information
    Modification date and timeDate and time the service information was modified
    Organizational unit nameName of the organizational unit
    Apply guardrailsNumber of guardrail types applied to the current organizational unit
    • Prevention: Number of applied preventive guardrails
    • Detection: Types of detection guardrails
    Register organization unitCurrent Cloud Control registration status of sub-units of the organization unit
    • Number of registered organization units / Total number of organization units displayed
    Register AccountCloud Control registration status of sub-accounts under the current organization unit
    • registered account count / total account count displayed
    higher-level organization unitHierarchy of parent organizational units for the current unit
    Apply detection guardrails / Remove detection guardrailsChange detection guardrail application status for the organization unit
    • Clicking the button can apply or remove the detection guardrail
    Re-registrationRe-register the current organization unit in Cloud Control
    Table. Organization Unit Details - Basic Information Tab Items

    Sub Account

    You can view and manage the list of subordinate Accounts within an organizational unit.

    Information
    For Security organizational units, you cannot register an Account.
    CategoryDetailed description
    Account registrationRegister the selected Account from the Account list to Cloud Control
    • When you select an Account in unregistered state from the Account list, it becomes active
    Account nameAccount name
    emailAccount’s user email
    statusCloud Control registration status of an organization unit or Account
    • Registered, Unregistered, Registering, Registration Failed
    • No status displayed when Root
    Table. Organization unit details - Sub Account tab items

    Preventive Guardrail

    You can view and manage the list of preventive guardrails applied at the organizational level.

    Information
    For security organizational units, you cannot apply or remove guardrails.
    CategoryDetailed description
    Target service nameName of the service to which the guardrail applies
    Guardrail nameGuardrail name
    • Click the guardrail name to view detailed information about that guardrail.
    typeApplication method
    Application methodDisplay of guardrail application method
    • If it is an inheritance method, you can click to view the detailed organizational unit name
    DisableUnapply the selected guardrail from the guardrail list
    • Activate when a guardrail is selected from the guardrail list
    Apply preventive guardrailsApply new preventive guardrails at the organizational level
    • When the button is clicked, navigate to the Preventive Guardrail Application page
    Table. Organization Unit Details - Preventive Guardrail Tab Items

    Detection Guardrail

    You can view and manage the diagnostic results of detection guardrails applied at the organizational level.

    Reference
    Accounts with diagnostic history in Cloud Control are provided with the latest diagnostic results regardless of whether detection guardrails are applied.
    CategoryDetailed description
    Account nameAccount name to be diagnosed
    Diagnosis nameDiagnosis Name
    PASSNumber of checklist items with a diagnosis result of PASS (normal)
    FAILNumber of checklist items with a diagnosis result of FAIL (vulnerable)
    CHECKNumber of items in the checklist with a diagnosis result of CHECK (verification required)
    ERRORNumber of items in the checklist whose diagnosis result is ERROR (diagnosis not possible)
    N/ANumber of items in the checklist where the diagnosis result is N/A (not applicable)
    AllTotal number of checklist items
    Diagnostic ResultDiagnosis request result
    • Completed: The diagnosis request has been successfully completed, and clicking will navigate to the detail page
    • Error: The diagnosis request was not completed successfully, so detailed information cannot be viewed
    Diagnosis date and timeDiagnosis request date and time
    Table. Diagnosis result list items

    Check detailed account information

    Account Details page allows you to view the account’s detailed information and the list of applied preventive guardrails. Account Details page consists of the Basic Information and Preventive Guardrails tabs.

    Basic Information

    You can view basic and detailed information about the organization unit.

    CategoryDetailed description
    ServiceService name
    Resource TypeService Type
    SRNUnique resource ID in Samsung Cloud Platform
    Resource NameResource Name
    Resource IDUnique resource ID in the service
    constructorUser who created the service
    Creation date and timeService creation date and time
    EditorUser who edited the service information
    Modification date and timeDate and time the service information was modified
    emailAccount user email
    Apply guardrailsNumber of guardrail types applied to the current organizational unit
    • Prevention: Number of applied preventive guardrails
    • Detection: Types of detection guardrails
    ID Center usernameID Center user email
    Higher-level organization unitCurrent account’s parent organizational unit hierarchy
    RegisterYou can change the organization unit of the current Account
    • For detailed information on changing the organization unit, refer to Account Move
    Table. Account Details - Basic Information Tab Items

    Preventive Guardrail

    You can view the list of preventive guardrails applied to the Account.

    CategoryDetailed description
    Target Service NameGuardrail target service name
    Guardrail nameGuardrail name
    • Click the guardrail name to view detailed information about that guardrail.
    typeApplication method
    Application methodGuardrail application method display
    Table. Account Details - Preventive Guardrail Tab Items

    Check Access Portal connection information

    User and Access page allows you to view the Access Portal connection URL and login methods (password, SSO, MFA).

    Information
    User and Access information is not displayed when creating a landing zone if Account Access Configuration is set to Self-Managed Account Access. Choose Account Access via ID Center to create the landing zone.

    To check the Access Portal connection information, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
    2. On the Service Home page, click the User and Access menu. You will be taken to the User and Access page.
    3. Check the information in the User and Access page’s Integrated Access Management area.
    CategoryDetailed description
    Access typeHow to access the Access Portal
    Access Portal URLAccess Portal access URL
    • When the URL is clicked, the Access Portal login page opens in a new tab
    • Can be accessed using the ID login credentials from ID Center
    Permission setA collection of administrator policies used by ID Center to determine the valid permissions of users who can access a specific account.
    Table. Shared Account items
    Reference
    For more details about credential sources and ID Center, see ID Center.
    information

    If the landing zone is configured with a self-managed Account access, refer to the following.

    • Cloud Control does not automatically create directory groups or permission sets.
    • When provisioning an Account with the Account factory or registering an existing Account, the user is automatically assigned.
    • You can manage access to an account through ID Center or other account access methods.

    Check user credential information

    User and Access page allows you to view the user credential source type and ID Center ID.

    information
    User and Access information is not displayed when creating a landing zone if you select Account Access Configuration as Self-Managed Account Access. Select Account Access via ID Center to create the landing zone.

    To verify user credential information, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the User and Access menu. You will be taken to the User and Access page.
    3. Check the information in the User and Access page’s User Credentials Management area.
    CategoryDetailed description
    Credential sourceCredential source types configured in ID Center
    • ID Center’s own directory: Directory within ID Center
    • AD (Active Directory): Active Directory managed directly by the user
    ID Center IDID Center’s ID
    • when the ID is clicked, navigate to the ID Center Settings page
    User groupA group formed to classify workers who perform specific tasks within an organization
    Table. User credential management items
    Reference
    • For detailed information about credential sources and ID Center, see ID Center.
    • Management > IAM You can add users and user groups. For more details, see the IAM.

    2.2.1 - Managing Guardrails

    The guardrails that are automatically applied for policy violation detection and prevention (detect/prevent type) rules, and security/compliance standards are as follows.

    Preventive Guardrail

    You can apply preventive guardrails to proactively block policy violations from occurring.

    Applying preventive guardrails

    It can be applied to preventive guardrails at the organizational level. To apply preventive guardrails at the organizational level, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

    2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.

    3. From the Preventive Guardrail List, select the preventive guardrails to apply to the organization unit, then click the Apply to Organization Unit button. 3. Navigate to the Apply to organization unit page.

      • Multiple preventive guardrails can be selected and applied simultaneously.
    4. After selecting the organizational unit to which you want to apply the preventive guardrail, click the Complete button.

      Category
      required status
      Detailed description
      Preventive guardrails to apply-Preventive guardrails list to be applied at the organizational level
      Organizational unit nameEssentialSelect the organizational unit to apply the preventive guardrail
      • Only organizational units with Registered, Registration Failed status can be selected
      • Click the organizational unit name or parent organizational unit name to view detailed information
      Table. Preventive guardrail application items

    5. When the pop‑up window notifying that the preventive guardrail has been applied opens, click the Confirm button.

    View detailed information of preventive guardrail

    You can view detailed information about preventive guardrails, the organizational units to which they are applied, and the list of Accounts. To disable the preventive guardrail, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.
    3. Click the preventive guardrail name to view detailed information in the Preventive Guardrail List. 3. Preventive Guardrail Details page
      • Preventive Guardrail Details page consists of Basic Information, Applicable Organizational Unit, Account tab.

    Basic Information

    You can view basic and detailed information about the preventive guardrail.

    CategoryDetailed description
    serviceService Name
    Resource TypeService type
    SRNUnique resource ID in Samsung Cloud Platform
    Resource NameResource Name
    Resource IDUnique resource ID in the service
    ConstructorUser who created the service
    Creation date and timeService creation date and time
    ModifierUser who edited the service information
    Modification date and timeDate and time the service information was modified
    Guardrail nameName of the guardrail
    typeGuardrail type
    Target service nameGuardrail target service name
    statusWhether guardrails are applied
    ExplanationDescription of guardrails
    Table. Guardrail Details - Basic Information Tab Items

    Applicable organization unit

    You can view the list of organizational units where preventive guardrails are applied.

    CategoryDetailed description
    Organizational unit nameOrganizational unit name
    • Click the organizational unit name to view detailed information
    Parent organization unit nameName of the parent organizational unit of the organizational unit
    • Click the parent organizational unit name to view detailed information
    statusCloud Control registration status for organizational units
    • Registered, Not registered, Registering, Registration failed
    • No status displayed for Root
    Table. Root Details - Sub Account Tab Items

    Account

    You can view the list of sub‑Accounts under the organizational unit where preventive guardrails are directly applied.

    CategoryDetailed description
    Account nameAccount name
    emailAccount user email
    Organizational unit nameOrganization unit name
    • Click the organization unit name to view detailed information
    statusCloud Control registration status for an organization unit or Account
    • Registered, Not registered, Registering, Registration failed
    • No status displayed when Root
    Table. Root Details - Sub Account Tab Items
    Reference
    Preventive guardrails are inherited and applied from all higher-level organizational units, so preventive guardrails can also be applied to Accounts that are not in the Account list.

    Disable preventive guardrail

    You can disable the preventive guardrail applied at the organization level. To disable the preventive guardrail, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

    2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Navigate to the Preventive Guardrail List page.

    3. From the Preventive Guardrail List, select the preventive guardrail for which you want to disable organization-level enforcement, then click the More > Remove Organization-Level Enforcement button. 3. Navigate to the Remove organization unit application page.

      • Multiple preventive guardrails can be selected simultaneously to disable them.
    4. After selecting the organizational unit to disable the preventive guardrail, click the Complete button.

      Category
      Whether required
      Detailed description
      Guardrails to apply-List of preventive guardrails to be disabled
      Organizational unit nameEssentialSelect the organizational unit to disable the preventive guardrail
      • Only organizational units with Registered, Registration Failed status can be selected
      • Click the organizational unit name or parent organizational unit name to view detailed information
      Table. Preventive Guardrail Deactivation Items

    5. When a pop‑up notifying the deactivation of the preventive guardrail opens, click the Confirm button.

    Detection Guardrail

    When detection guardrails are enabled, Config Inspection diagnostics are automatically run for Accounts within the default organizational unit, performing checks daily.

    Apply detection guardrails

    You can apply detection guardrails on the Landing Zone Settings page.

    information
    Detection guardrails can also be enabled when creating a landing zone.

    To apply detection guardrails, follow the steps below.

    1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.
    3. On the Landing Zone Settings page, click the Edit button for the Detection Guardrail item. 3. Detection Guardrail Settings The popup window opens.
    4. Detection Guardrail Settings In the popup window, after checking Enable Cloud Control Detection Guardrail, click the Confirm button.
      • When activation is checked, Plan, Check List, Diagnosis Cycle, Start Time are displayed.
    5. When the pop-up indicating that the detection guardrail is active opens, click the Confirm button.

    Check detection guardrail diagnostic results

    You can view the Config Inspection diagnostic results via detection guardrails. To view the diagnostic results, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Navigate to the Detection Guardrail List page.
    3. Click the diagnosis name of the Account for which you want to view diagnostic results from the Detection Guardrail List. 3. Go to the Diagnostic Results List page.
      • In the search area of the Diagnosis Result List page, you can enter a diagnosis name or click the Advanced Search button to search.
    4. On the Diagnosis Result List page, click the diagnosis result for the diagnosis name to view detailed diagnostic items. 4. Navigate to the Diagnostic Result Details page.
      • Completed: The diagnostic request has been successfully completed, when Completed is clicked, navigate to the detail page
      • Error: The diagnostic request was not completed successfully, and the error status item cannot view detailed information.
    5. Diagnosis Result Details on the page
      CategoryDetailed description
      ChecklistSet of diagnostic items that serve as the basis for diagnostic results
      AreaScope of Diagnosis (services of Samsung Cloud Platform)
      Diagnostic ItemsSecurity standards recommended for each service configuration
      • Click the diagnostic item name to view detailed information about that diagnostic item
      • Diagnostic item details: area, diagnostic item, result, diagnostic criteria, diagnostic method, remediation guide, detailed result
      ResultDiagnostic Item Baseline Check Results
      • PASS: Number of items in the checklist with a diagnostic result of PASS (normal)
      • FAIL: Number of items in the checklist with a diagnostic result of FAIL (vulnerable)
      • CHECK: Number of items in the checklist with a diagnostic result of CHECK (needs verification)
      • ERROR: Number of items in the checklist with a diagnostic result of ERROR (diagnosis not possible)
      • N/A: Number of items in the checklist with a diagnostic result of N/A (not applicable)
      Table. Detailed Diagnosis Result Items
    Reference
    For detailed information about the diagnosis results, see Config Inspection’s Check Diagnosis Results.

    Managing detection guardrail diagnostic results

    You can view the results of the Config Inspection diagnosis request via the detection guardrail.

    Reference
    In Cloud Control, you cannot delete or modify inspection results.

    To view the diagnostic request results, follow these steps.

    1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Go to the Detection Guardrail List page.
    3. In the Detection Guardrail List, click the diagnosis name of the Account that will manage the diagnostic results. 3. Go to the Diagnostic Results List page.
      • On the Diagnosis Result List page, you can enter a diagnosis name in the search area or click the Advanced Search button to search.
    4. On the Diagnostic Result List page, click the Diagnostic Result Management button. 4. Diagnosis Result Management Navigate to the detail page.
    5. Diagnostic Result Management View the diagnostic results on the detail page.
      CategoryDetailed description
      ChecklistCollection of diagnostic items that serve as the basis for diagnostic results
      AreaScope of Diagnosis (services of Samsung Cloud Platform)
      Diagnostic ItemsSecurity standards recommended for each service configuration
      • Click the diagnostic item name to view detailed information about that diagnostic item
      • Diagnostic details: area, diagnostic item, result, diagnostic criteria, diagnostic method, remediation guide, detailed result
      ResultDiagnostic Item Baseline Check Results
      • PASS: Number of items in the checklist with a diagnostic result of PASS (normal)
      • FAIL: Number of items in the checklist with a diagnostic result of FAIL (vulnerable)
      • CHECK: Number of items in the checklist with a diagnostic result of CHECK (needs verification)
      • ERROR: Number of items in the checklist with a diagnostic result of ERROR (diagnosis not possible)
      • N/A: Number of items in the checklist with a diagnostic result of N/A (not applicable)
      Result check / Result change
      • Result Verification: Detailed information can be viewed in the result verification popup
        • Registrant, validity period, change status, detailed reason, attachment, inspection result
        • Attachments can only be viewed in Config Inspection
        • Inspection results cannot be deleted in Cloud Control
      • Result Modification: Inspection results cannot be modified in Cloud Control
      Table. Diagnosis Result Management Items
    Reference
    For detailed information about the diagnostic results, see Config Inspection’s Managing Diagnostic Results.

    Disable detection guardrail

    On the Landing Zone Settings page, you can disable the detection guardrail. To disable the detection guardrail, follow these steps.

    1. All Services > Management > Cloud Control menu, click it. 1. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.
    3. On the Landing Zone Settings page, click the Edit button of the Detection Guardrail item. 3. Detection Guardrail Settings The popup window opens.
    4. Detection Guardrail Settings in the popup window, uncheck Cloud Control Detection Guardrail Active.
    5. When a popup that notifies the removal of detection guardrails opens, click the Confirm button.

    2.2.2 - Managing Organizations

    When a landing zone is created, you can use Cloud Control’s organization-level management features.

    Caution
    • The user must first create a landing zone to use the Cloud Control service.
    • There is no charge for the Cloud Control service, but services used within Cloud Control such as Logging&Audit, Object Storage, and Config Inspection may incur costs based on usage.

    Manage Organizational Units

    You can register and manage the organizational units that constitute an Organization in Cloud Control.

    Create Organization Unit

    You can create a new organizational unit and register it with Cloud Control.

    To create an organizational unit and register it with Cloud Control, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.

    2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

    3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.

    4. After selecting the location in the hierarchical list where you want to add an organizational unit, click the Create Organizational Unit Under button. The Create Organizational Unit popup opens.

      • Root or only one organizational unit can be selected.
      • You can create organizational units up to five levels below Root.
    5. Create Organizational Unit After entering the organizational unit information to add in the popup window, click the Create button.

      Category
      Required
      Detailed description
      Parent organization unit name-Name of the parent organizational unit for the organizational unit to be created
      Organizational unit nameRequiredEnter the name of the organizational unit to be created within 128 characters
      • Organizational names distinguish between uppercase and lowercase English letters
      ExplanationSelectionEnter a description of the organizational unit within 1,000 characters.
      Table. Organization unit creation items

    6. When the popup that notifies the creation of an organizational unit opens, click the Confirm button.

      • It may take more than tens of minutes depending on the number of accounts under the organizational unit.
      • A notification will be sent when the organization unit creation is complete.

    Register Organizational Unit

    You can register organizational units that are not registered in Cloud Control or that failed to register, into Cloud Control.

    Information
    • When registering an organizational unit, all parent units of the unit to be registered must be in a registered state.
    • If an organizational unit in the registering state exists under the organizational unit you are trying to register, you cannot register.
    • The sub-units of the organizational unit you are registering must be registered separately.

    To register an organizational unit in Cloud Control, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

    2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

    3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.

    4. After selecting the organizational unit to register from the hierarchical list, click the More > Register Organizational Unit button. You will be taken to the Register Organizational Unit page.

    5. On the Organization Unit Registration page, verify the information of the organization unit to be registered.

      Category
      Whether required
      Detailed description
      Sub Account-List of Accounts included under the organizational unit to be registered
      • Automatically register in Cloud Control when registering the organizational unit
      Applicable preventive guardrails-List of guardrails inherited from higher-level organizational units and guardrails directly applied to the organization unit
      • Click the guardrail name to view detailed information about that guardrail
      Table. Organization Unit Registration Items
      Reference
      • Preventive guardrails are inherited from higher-level organizational units.
      • To remove an inherited guardrail, disable its application in the parent organizational unit.

    6. After reviewing the Terms of Service, check the checkbox and click the Complete button.

    7. When the popup notifying the registration of an organizational unit opens, click the Confirm button. The organizational unit registration request is completed.

      • Depending on the number of accounts under the organizational unit, it can take several tens of minutes.
      • A notification will be sent once the organization unit registration is complete.

    Re-register organizational unit

    You can re-register an organizational unit that is already registered in Cloud Control.

    Information
    • You cannot register if there is an organization unit in the registration state under the organization unit you are trying to register.
    • Sub-units of the organizational unit you are registering must be registered separately.

    To re-register an organizational unit in Cloud Control, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.

    2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

    3. Organizational Unit and Account Management page, click the View Hierarchy button in the top right corner.

    4. In the hierarchical list, select the organizational unit to re‑register, then click the More > Re‑register Organizational Unit button. You will be taken to the Re‑register Organizational Unit page.

    5. On the Organizational Unit Re-registration page, check the information of the organizational unit to be re-registered.

      Category
      Required status
      Detailed description
      Sub Account-List of Accounts included under the organizational unit to be re-registered
      • Automatically register in Cloud Control when registering the organizational unit
      Applicable preventive guardrails-List of guardrails inherited from higher organizational units and guardrails directly applied to the organization unit
      • Clicking a guardrail name allows you to view detailed information about that guardrail
      Table. Organization Unit Re-registration Items
      Reference
      • Preventive guardrails are inherited from higher-level organizational units.
      • To remove an inherited guardrail, disable its application at the parent organizational unit.

    6. After reviewing the Terms of Service, check the checkbox and click the Complete button.

    7. When the popup notifying re-registration of the organization unit opens, click the Confirm button. The organization unit re-registration request is completed.

      • Depending on the number of accounts under the organizational unit, it can take several tens of minutes.
      • A notification will be sent once the organization unit re-registration is complete.

    Delete organization unit

    You can delete an organizational unit.

    Information
    • Only organizational units that are in an unregistered state in Cloud Control can be deleted.
    • Before deleting an organizational unit, remove all its subordinate elements.

    To delete an organizational unit, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Organization menu. You will be taken to the Organization unit and Account management page.
    3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.
    4. After selecting the organizational unit to delete from the hierarchical list, click the More > Delete Organizational Unit button.
    5. When the popup notifying that the organizational unit will be deleted opens, click the Confirm button.

    2.2.3 - Managing Accounts

    Create Account

    You can create an Account with the Account factory and apply Cloud Control directly without any additional steps.

    Caution
    An Account cannot be created if it exceeds the maximum number of Accounts that can be added to the organization.

    To create an Account, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

    2. On the Service Home page, click the Account Factory menu. You will be taken to the Account Factory page.

    3. On the Account Factory page, click the Account Creation button. You will be taken to the Account Creation page.

    4. On the Account creation page, enter the required information to create an Account and select an organizational unit, then click the Create button.

      Category
      Required status
      Detailed description
      Account informationRequiredEnter the account name and email information
      • Account name: Use Korean, English, numbers, spaces, and special characters (+=-_@[](),.) to enter between 3 ~ 30 characters
      • Email: Enter up to 60 characters in a valid email address format
        • Cannot duplicate the root user email
        • Enter the same value in Email confirmation
      ID Center informationRequiredEnter ID Center user information that can access the Account to be created
      • Username: Use English letters, numbers, and special characters(+=-_@,.) within 128 characters
      • User’s real name: Enter the user’s actual name (surname and given name)
      • If the Account access configuration uses self-managed Account access, ID Center information cannot be set
      Select organization unitRequiredSelect the parent organization unit that will contain the Account to be created
      • Only organization units with registered status can be selected
      • Clicking the organization unit name navigates to its detailed page
      Table. Landing zone creation - cost review and organizational unit configuration items
      Caution
      An Excel file containing Access Portal user login information will be sent to the email entered in the ID Center. Be sure to verify that the email address is correct.

    5. When a popup notifying Account creation opens, click the Confirm button. The Account creation request is completed.

      • Creating an account takes some time, and a notification is sent when the process is complete.

    Manage Account

    You can register and manage the accounts that comprise the organization in Cloud Control.

    Register Account

    You can register organizational units that are not registered in Cloud Control or that failed to register, into Cloud Control.

    Information
    • Only accounts of the organizational unit registered in Cloud Control can be registered.
    • You cannot register if there is an organizational unit or Account in registering status under the organizational unit you are trying to register.
    • If you select a different organizational unit from the current one and register, the corresponding ACcount will be moved to the newly selected organizational unit.

    To register an Account, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to Cloud Control’s Service Home page.

    2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

    3. In the top right corner of the Organization Unit and Account Management page, click the View Account List button.

    4. From the Account list, select the Account to register in Cloud Control, then click the Account registration button. You will be taken to the Account registration page.

      • After clicking the Account name of the Account to be registered, you can also register by clicking the Register button on the Account Details page.
        Category
        Required status
        Detailed description
        Current organizational unit-The organizational unit to which the Account belongs
        Register organization unit-Select the organizational unit to register the Account
        • Only organizational units with registration status can be selected
        • Current organizational unit: Register directly to the current organizational unit
        • Other organizational unit: Manually select a different organizational unit
        Table. Account registration items
    5. When a popup notifying the Account registration opens, click the Confirm button.

    Move Account

    You can change the organizational unit of an Account registered in Cloud Control and move it.

    Information
    • You cannot move if there is an organizational unit or Account in the registering state under the organizational unit you are trying to register.
    • If you select a different organizational unit from the current one and register, the corresponding ACcount will be moved to the newly selected organizational unit.

    To move the Account, follow the steps below.

    1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Organization menu. You will be taken to the Organization Units and Account Management page.
    3. On the Organization Unit and Account Management page, click the View Account List button in the top right corner.
    4. In the Account list, click the Account name whose organizational unit you want to change. You will be taken to the Account Details page.
    5. On the Account Details page, click the Register button. You will be taken to the Account Register page.
    6. From the Registered organization unit list, select the organization unit to which the Account will be moved, then click the Complete button.
      • Only organizational units with registered status can be selected.
    7. When the popup notifying the Account registration opens, click the Confirm button.

    Unregister Account

    You can deregister an Account that is registered in the Organization.

    Information

    In the following cases, the Account cannot be deactivated.

    • Account with no registered payment method
    • When there is credit assigned to the account
    • When the exclusion point is the cost settlement date (the 1st of each month, Asia/Seoul GMT +09:00)
    To deactivate an Account registered in the Organization, follow the steps below.

    1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
    2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.
    3. On the Organization Structure page, click the View Account List button.
    4. After selecting the Account to exclude from the Organization, click the More > Unregister Account button.
      • After clicking the Account name of the Account to be deregistered, you can also deregister by clicking the Deregister button on the Account Details page.
    5. When a popup that notifies the Account deregistration opens, click the Confirm button.

    Delete Account

    You can delete the account.

    information
    • When deleting from the Account list, you must select only one Account to delete.
    • All resources in the Account must be deleted before deletion.
    • Management Account and accounts that joined via invitation cannot be deleted.
    To delete the Account, follow these steps.

    1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
    2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.
    3. On the Organization Structure page, click the View Account List button.
    4. After selecting the Account to delete from the Account list, click the More > Delete Account button. The Delete Account popup opens.
      • After clicking the Account name of the Account to be deleted, you can also delete it by clicking the Delete Account button on the Account Details page.
    5. After entering the Account name to delete, click the Confirm button.
    Reference

    When you delete the Account, an Account deletion notification email will be sent to the next user.

    • Administrator who created the Organization
    • Root user of the created account
    • User who has delegation for the created Account

    –>

    Check Shared Account

    You can view the shared Account information in Cloud Control. To check shared account information, follow these steps.

    1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
    2. On the Service Home page, click the Shared Account menu. You will be taken to the Shared Account page.
      • The Shared Account page consists of the Management Account, Log Account, and Audit Account widgets.
      • Each widget displays the Account name, Account ID, and email information, and clicking the widget name takes you to that Account’s detail page.
        CategoryDetailed description
        Management AccountAccount that creates new Accounts and manages billing and access for all Accounts in the organization
        Log AccountThe account used as the repository for API activity and resource configuration logs collected from all accounts.
        Audit AccountA restricted account that enables the security and compliance team to obtain read and write access to all accounts.
        Table. Shared Account items

    2.3 - API Reference

    API Reference

    2.4 - CLI Reference

    CLI Reference

    2.5 - Release Note

    Cloud Control

    2026.05.21
    CHANGED Detection guardrail diagnostic inspection result improvement
    • The detection guardrail results management screen has been added.
      • On the result management screen of the detection guardrail, you can view the diagnostic request result information.
    2026.03.19
    FEATURE Provide detection guardrail feature
    • The detection guardrail feature has been added.
      • For accounts within the default organizational unit, Config Inspection diagnostics are run automatically every day.
      • You can easily view diagnostic results even within the Cloud Control service.
    2025.10.23
    NEW Official service version release
    • The official version of the Cloud Control service has been released.
      • You can easily and securely build, operate, and manage a multi‑account environment on Samsung Cloud Platform.
      • The organization’s cloud governance (security, compliance, standardization, etc.) can be automated and managed through policy violation detection and monitoring functions.

    3 - Cloud Monitoring

    3.1 - Overview

    Cloud Monitoring service termination notice

    According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be discontinued.
    Accordingly, after the September 2026 release, resource monitoring of the Samsung Cloud Platform via Cloud Monitoring will no longer be possible.

    With the new alternative service, you can continuously perform resource monitoring by using ServiceWatch, released in October 2025.
    ServiceWatch provides more modern and powerful features, replacing Cloud Monitoring to deliver a smooth monitoring environment.

    Detailed information about ServiceWatch is in the ServiceWatch Overview. Please refer to it.

    ※ For some Database and Data Analytics services, refer to the user guide of the respective service for the service watch implementation schedule.

    Table. Database, Data Analytics User Guide List

    Service Overview

    The Cloud Monitoring service collects usage status, change information, and logs of operational infrastructure resources, and generates an event to notify when a configured threshold is exceeded. Through this, users can respond quickly to performance degradation and failures, and can conveniently develop resource capacity expansion plans to configure a stable computing environment.

    Provided Features

    Cloud Monitoring provides the following features.

    • Stable computing resource management: You can easily view metrics such as CPU usage, disk usage, and memory usage. When an event occurs in the resources being used, an automatic notification is sent to the designated recipients, enabling rapid fault analysis and response, so computing resources can be operated reliably.
    • Convenient Monitoring: Status information about resources can be easily monitored by creating a dashboard. * Provides default and custom dashboards, enabling you to configure various widget types and easily and quickly create dashboards yourself.
    • Event Metric Management: Through the web-based Console, you can easily set event metrics with just a few clicks. The event metric settings for the monitoring target (such as event patterns, trigger conditions, occurrence frequency, performance metrics, operational status, etc.) can be varied to suit the usage environment, and threshold and alarm configurations can be managed conveniently.
    • Resource Log Management: Collects and stores log data of resources, and allows searching the target logs when needed. Additionally, we metricize events for major keywords and automatically notify the designated person when pre‑set conditions are met, providing a more stable usage environment.

    Component

    Dashboard

    In the monitoring dashboard, you can view the operational status and event status of monitored services and resources, as well as the top usage items.

    ItemExplanation
    RegionResource location
    Data reference timeReference time of the data displayed on the dashboard
    RefreshRefresh the dashboard based on the current time
    Period settingSet data query period and refresh interval
    Monitoring statusNumber and status of monitoring targets for each service used in the Account
    Event HistoryDisplay events that occurred in the past 7 days as a graph by risk level.
    Top 5 usage rates by performanceDisplay the top five monitoring targets with the highest usage for each major performance metric
    Event mapDisplay the number of events per service by severity
    Event statusDisplay the list of unprocessed events among the occurred events
    Table. Cloud Monitoring dashboard configuration

    Performance Analysis

    In performance analysis, you can identify the main performance metrics of the monitoring target and view the current data and historical records within the period for each metric. Users can view the performance status of the monitoring targets they manage by service or by period, and compare specific performance metrics to analyze the results.

    Log Analysis

    In log analysis, you collect the logs of the monitoring target, examine their contents, and convert them into metrics—structured data—for monitoring. Each monitoring target provides a default collection log, and users can create custom logs to collect and view additional logs as needed.

    Event Management

    An event is a configuration that notifies the user when a monitoring target’s performance value meets a specific condition. By configuring events, you can capture essential monitoring information that users need to know without missing it. For example, if you configure events to trigger whenever a performance metric related to overload exceeds a certain threshold, users will receive notifications each time there is a risk of overload during resource operation. Users can proactively respond before problems arise based on this. In event management, you can create such events and configure them to notify designated users whenever a specific value occurs during monitoring.

    Preceding Service

    Cloud Monitoring has no prerequisite services.

    3.2 - How-to guides

    Cloud Monitoring service termination notice

    According to Samsung Cloud Platform’s policy, the Cloud Monitoring service is scheduled to be discontinued.
    Accordingly, starting after the September 2026 release, monitoring of Samsung Cloud Platform resources through Cloud Monitoring will no longer be possible.

    With a new alternative service, you can continuously perform resource monitoring by leveraging ServiceWatch released in October 2025.
    ServiceWatch provides more modern and powerful features, replacing Cloud Monitoring to deliver a seamless monitoring environment.

    Detailed information about ServiceWatch can be found in the ServiceWatch Overview.

    ※ For some Database and Data Analytics services, refer to the user guide of the respective service for the service watch implementation schedule.

    Table. Database, Data Analytics User Guide List

    Samsung Cloud Platform Monitoring is a resource management system that can monitor and analyze the resource operation status within an account operated in the Samsung Cloud Platform Console. Users can efficiently manage resources by using the dashboard page, widgets, and chart features.

    reference
    • The user can monitor resources created on an Account with permissions in the Samsung Cloud Platform Console.
    • The user can log in to the Samsung Cloud Platform Console and navigate to Samsung Cloud Platform Monitoring to monitor.

    Cloud Monitoring Getting Started

    To start Samsung Cloud Platform Monitoring, follow these steps.

    1. All Services > Management > Cloud Monitoring Click the menu. 1. Navigate to the Service Home page of Cloud Monitoring.
    2. On the Service Home page, click the Open Cloud Monitoring button. 2. Go to the Cloud Monitoring Console page.

    Explore Cloud Monitoring Console

    The top and left menus of the Cloud Monitoring Console are organized as follows.

    CategoryDetailed description
    Custom Dashboard ManagementCustom Dashboard
    • You can view and manage custom dashboards.
    SupportSupport
    • provides links to the user guide and OpenAPI guide
    Region ListRegion list
    • Displays the region of the Account currently being monitored.
    • You can select the region provided by the Account
    User InformationYou can view user information and log out from Samsung Cloud Platform Monitoring.
    Side menuDisplays the main features of Samsung Cloud Platform Monitoring. Clicking each menu takes you to the corresponding page.
    • Monitoring Dashboard: You can view the operational status and event status of monitored services and resources, as well as top usage items. For more details, see 모니터링 대시보드 활용하기.
    • Performance Analysis: You can check the main performance metrics of the monitored target and view the current data and historical data within the period for each metric. For more details, see 성능 분석하기.
    • Log Analysis: You can collect logs of the monitored target, review their contents, and convert them into structured metric data for monitoring. For more details, see 로그 분석하기.
    • Event Management: This is a setting to notify users when performance values meet specific conditions. For more details, see 이벤트 관리하기.
    Table. Monitoring page overview

    Stop Monitoring

    To exit the Cloud Monitoring Console, click the User Info > Logout button at the top right.

    reference
    The session timeout for the Cloud Monitoring Console is set to 30 minutes.

    Using Common Features

    This explains the frequently used features when using the Cloud Monitoring Console.

    View detailed information of the monitoring target

    If you access Cloud Monitoring Console > Performance Analysis or Cloud Monitoring Console > Log Analysis > Log Overview, you can view the list of monitoring targets. At this point, to view detailed information for a monitoring target, click the desired target in the monitoring target list.

    Reference
    • Detailed information of the monitoring target varies depending on the service type.
    • If the operating system (OS information) of the monitoring target is RHCOS (Redhat Core OS), detailed information about the monitoring target is not provided.
    ItemExplanation
    Basic InformationDisplay basic information about the monitoring target
    • Example: Virtual Server - monitoring target, service type, service status, server type, OS information, IP
    PerformanceDisplay the primary performance of the monitoring target in a graph
    logShow the log collection volume for the monitoring target in a graph.
    eventDisplay the list of events that occurred in the monitoring target.
    AgentProvides the agent’s install, start, stop, delete, update commands
    Set query periodDisplays the reference date/time for data retrieval
    • Refreshes directly to the current time.
    • Turn the automatic refresh feature on or off.
    • You can set the data retrieval period or change the automatic refresh interval. For details, refer to Configure query period
    Monitoring status areaDisplays performance, log, and event monitoring status.
    Table. Detailed information of the monitoring target
    Reference
    • The services that provide agent management commands are Virtual Server, GPU Server, and Bare Metal Server.
    • For detailed information on installing and managing the agent, see Agent Management.

    Sorting data

    You can organize and view information such as event monitoring, performance, and log analysis results in descending or ascending order. To sort the data, follow these steps.

    1. Display the information to be verified on the page.
    2. Click the Sort button next to the Category name. 2. Each click toggles the sorting order between descending and ascending.

    Check real-time data

    You can configure the dashboard or detail page data to automatically refresh at a set interval.

    Reference
    • In the Cloud Monitoring Console, you can configure whether to enable refresh and set the refresh interval so that the monitoring page refreshes periodically.
    • Click the refresh button to manually refresh based on the current time.

    To set the data refresh interval, follow these steps.

    1. Click the Settings button at the top right of the data display area.
    2. After selecting the refresh interval, click the Confirm button.
    3. You can turn the refresh feature on or off.

    Configure the query period

    By setting the query period, you can limit the query scope to the specified range of performance, logs, and events, making it easy to find only the information you need. To set the query period, follow these steps.

    1. Click the Settings button in the upper right of the data display area.
    2. Select a date range or enter it manually.
    Caution
    • If you manually enter the query period, you must set the period to at least 30 minutes.
    • If each widget’s data query range is fixed, the widget’s query range takes precedence.

    3.2.1 - Using Monitoring Dashboards

    In the monitoring dashboard, you can view the operational status and event status of monitored services and resources, as well as the top usage items.

    Getting Started with Monitoring Dashboard

    When you navigate from the Samsung Cloud Platform Console to the Cloud Monitoring Console page, the monitoring dashboard is displayed. If you are on a different page, click Cloud Monitoring Console > Monitoring Dashboard to go to the Monitoring Dashboard page.

    The monitoring dashboard is structured as follows.

    Itemdescription
    Data reference timeDisplay the reference time for the data shown on the dashboard
    RefreshRefresh the dashboard based on the current time
    Automatic refreshYou can enable or disable the dashboard refresh feature.
    Period settingSet the data retrieval period or change the refresh interval
    Monitoring StatusDisplay the number of monitoring targets and monitoring status for each service
    Event HistoryDisplay the number of events that occurred in the last 7 days as a graph by severity.
    Top 5 usage rates by performanceDisplay the usage rates of the five monitoring targets with the highest usage for each major performance metric as a usage graph.
    Event mapDisplay the number of events per service by severity
    Event statusDisplay the list of unprocessed events among the occurred events.
    Table. Monitoring dashboard configuration
    reference
    • The monitoring dashboard is automatically created when an Account is created in the Samsung Cloud Platform Console and cannot be deleted arbitrarily.
    • Configuration widgets on the monitoring dashboard cannot be modified arbitrarily.
    • To create a dashboard with a specific widget, use a custom dashboard. For more information about custom dashboards, refer to Using Custom Dashboards.

    Explore Common Dashboard Features

    This describes the functions available on the dashboard.

    Download widget image

    Click the download button at the top right of the widget area to download the widget as an image file (*.png).

    View graph details

    When you place the mouse cursor over the graph, detailed information appears as a popup.

    Monitoring Status

    Shows the number of monitoring targets and their monitoring status for each service in use.

    Itemdescription
    Service CategoryDisplay the monitoring target service categories per service and the quantity of monitoring targets included in each service category
    • When you click a service category, the list of services and their quantities included in that category are displayed
    Service ListDisplay the list and quantity of services included in the monitoring target service category
    • Click a service’s quantity to go to the Performance Analysis page
    Monitoring statusDisplays the number of monitoring targets and their current status
    • Clicking a Down or Unknown item shows the corresponding service name in a popup
    Event statusDisplays the number of current events by grade (Fetal, Warning, Inform).
    Reference
    • Performance collection in monitoring mode aggregates and displays the number of performance metrics from both Agent and Agentless approaches.

    Event History

    Displays the number of events that occurred in the last 7 days as a graph by severity.

    • When you place the mouse cursor over the graph, a popup shows the number of occurrences of events corresponding to the selected date’s event risk level, along with active/inactive information.

      • Occurrence: total number of event occurrences
      • Activation: The state where an event that has occurred by meeting the event trigger conditions continues to be maintained.
      • Deactivation: The event that occurred no longer meets the event trigger conditions and has returned to a normal state
    • You can click the risk legend area to hide or unhide the corresponding graph.

    Top 5 Usage by Performance

    Displays a usage graph for the five monitoring targets with the highest utilization rates across major performance categories.

    • When you place the mouse cursor over the graph, a popup displays the full name of the selected item and its current performance metrics.
    • When you click the graph, a Monitoring Target Details popup window for the corresponding item opens.
      Itemdescription
      CPU Usage/Core [Basic]Percentage of CPU time used, excluding Idle and IOWait states
      Memory Used [Basic]Current memory usage
      Disk Read Bytes [Basic]Disk read byte count
      Disk Write Bytes [Basic]Disk write byte count
    Reference
    • The monitoring dashboard only displays the performance of Virtual Server. To show the Top 5 performance of other service types, you need to select and configure them in a custom dashboard.

    Event Map

    Displays the number of events per service by severity.

    • When you place the mouse cursor over the rectangle, the name of the monitoring target appears as a popup.
    • When you click a service item on the event map, the Monitoring Target Details popup window opens.

    The risk level for each item is as follows.

    Itemdescription
    No RuleThe condition cannot be classified as normal or abnormal. This indicates that the status cannot be assessed due to the absence of a threshold setting.
    NORMALIt is in a normal state. This means the threshold did not meet the configured value, so no event was generated.
    INFORMThis is the lowest level of risk status, including information at a simple notification level.
    WARNINGIt is a moderate risk condition.
    FATALThis is the most dangerous stage.

    Event Status

    Displays a list of events that are in an active state among the generated events.

    • Events are displayed in order of most recent occurrence.

    3.2.2 - Performance Analysis

    In performance analysis, you can view the key performance metrics of the monitoring target and check both the current data and historical data within the period for each metric. Users can view the performance status of the monitored targets they manage by service or by period, and compare specific performance metrics to analyze the results.

    Getting Started with Performance Analysis

    You can start performance analysis by directly selecting the monitoring target or entering search criteria. To search for the monitoring target and analyze performance, follow these steps.

    1. Click Cloud Monitoring Console > Performance Analysis. You will be taken to the Performance Analysis page.
    2. After entering the search criteria for the monitoring target to be analyzed in the search area, click Search.
      Itemdescription
      Search areaThe detailed search filters displayed in the search area vary according to the service type
      • To perform Detailed Search, click the Detailed Search button.
      • Each detailed search filter condition can be selected with one or more items
      Number of monitoring targets displayedDisplay the number of performance items that can be viewed at once in the search results and list
      • The default number of performance items shown in the list is 20 per page.
      • Change the list display count to 10, 20, 30, 40, 50, or 100 per page.
      Search informationDisplay search result values for the search criteria items
      • Monitoring target, service status, event grade
      • Clicking the risk icon displayed for event risk opens a detailed popup of the most recent event corresponding to that risk level.
      Performance metricsInformation Displays key performance indicators according to the service type of the monitoring target
      • The list of key performance indicators per service refers to the service-specific key performance indicators and the collected information by instance type and status of the DB service
      View DetailsView detailed information of the relevant monitoring target
      Performance ComparisonSelect a monitoring target and compare performance
      Table. Performance analysis

    Check detailed performance information

    To view detailed performance information of the monitoring target, follow these steps.

    1. Click the monitoring target for which you want to view detailed information in the performance analysis list. Monitoring Details popup window opens.
    2. Click the Performance tab.
      • When you place the mouse cursor over the graph, the values of each performance metric appear in a popup window.
      • Click the icon in the upper right corner to set the query period or change the refresh interval.
      • You can click the Details, Summary buttons located at the top left of the performance chart to select the graph display method.
        Itemdescription
        Basic InformationDisplay basic information about the monitoring target
        DetailsPerformance charts of the monitoring target are expanded and displayed
        • View a single chart in detail
        SummaryPerformance charts of the monitoring target are displayed in a grid layout
        • View multiple charts at a glance
        Set query period
        • Date/Time: Displays the reference date and time for data retrieval.
        • Refresh: Manually refresh to the current time.
        • Start/Stop: Turns the automatic refresh feature off or on.
        • Settings: Set the data query period or change the automatic refresh interval
        Performance ComparisonGenerate a chart that compares the performance of monitoring targets, allowing each performance to be compared.
        Performance chartPerformance charts of the monitoring target are displayed as graphs
        • When there is a single graph, the most recent collected value is shown in the upper right corner with its unit.
        • When multiple graphs are present, an ⓘ appears in the upper right corner, and hovering the mouse cursor displays the latest collected value for each graph in a popup.
        • Hovering the mouse cursor over a graph shows the performance metric value at the specified time in a popup.
        Table. Monitoring Target Details
    Reference
    • The collection interval of performance metrics may vary depending on the service.
    • The chart displays data at 30 points, and the data collection interval based on the data query range (time) is as follows. (The displayed points may vary due to collection time errors.) 30 minutes: approximately 1‑minute intervals 60 minutes: approximately 2‑minute intervals 3 hours: approximately 6‑minute intervals 6 hours: approximately 12‑minute intervals 12 hours: approximately 24‑minute intervals 24 hours: approximately 48‑minute intervals
      • Day 3: approximately 144-minute interval (2 hours 24 minutes) 7 days: approximately 336-minute interval (5 hours 36 minutes)
      • Day 14: approximately 672‑minute interval (11 hours 12 minutes) Custom: value obtained by dividing the custom range (minutes) by 30
    • The data for each point represents the maximum value within the query range (time), and you can change the statistical type in the detailed chart.

    Compare performance

    You can view the performance metrics of each monitoring target and select the desired metrics for comparison.

    Getting Started with Performance Comparison

    Generate a chart that compares the performance of monitoring targets, allowing you to compare each performance.

    Reference
    • Only performance metrics of the same service type can be compared.
    • Performance items may be added based on the detailed attributes of the service type.
      • Performance of Windows OS on a VM
      • Search Engine’s Kibana-related performance

    To begin the performance comparison, follow these steps.

    1. Click Cloud Monitoring Console > Performance Analysis. You will be taken to the Performance Analysis page.

    2. After entering the search criteria for the monitoring target to be analyzed in the search area, click Search.

    3. After selecting all monitoring targets to compare performance, click Compare Performance. A popup window that allows performance comparison will open.

      Itemdescription
      Monitoring targetDisplay the service type of the monitoring target to compare and click to change the service
      • Changing the service will remove all charts created so far.
      • Click Add to search for monitoring targets of the currently selected service and add
      • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking X or Delete All
      Performance itemsDisplay all performance metrics collected from the currently selected service
      • Check the items you want to compare performance for, and those performance items will be included in the chart.
      Chart display methodSelect display method for performance comparison chart
      • Detailed: The performance comparison chart is displayed in detail. (default)
      • Summary: The performance comparison chart is displayed in summary
      Set query period
      • Date/Time: Displays the reference date and time for data retrieval
      • Refresh: Refreshes directly to the current time.
      • Start/Stop: Turns the automatic refresh feature off or on.
      • Settings: Set the data query period or change the automatic refresh interval
      Chart areaCompare the performance of monitoring targets based on the selected performance metric and display it as a chart.

    4. Click Add. A popup window opens where you can add a monitoring target.

    5. After selecting the monitoring target to compare performance, click the Confirm button. If you select Kubernetes Engine, you must also select the sub-type of that service.

    6. Select the performance metrics to compare. The selected metrics will be added to the chart.

    Explore the chart

    The performance comparison results are displayed as a chart. Users can modify the shape of the generated chart or download it as an image or Excel file.

    1. When you place the mouse cursor over the graph, the performance metric value for the specified time appears as a popup.
    2. Click a target item in the legend area to hide or unhide the corresponding graph.
      Itemdescription
      Statistical methodsSet the statistical method to display in the graph
      • Statistics are displayed in a graph for a period ranging from a minimum of 5 minutes to a maximum of 6 hours.
      • Default, Maximum, Minimum, Average, Total can be selected. Multiple methods can be selected simultaneously, and the selected items are shown in the legend area
      Chart formatSelect the type of graph to display on the chart
      • Line: line graph
      • Stacked Area: area graph
      • Scatter: scatter plot
      Download chartCheck and download the chart’s Raw Data
      • Chart PNG File: Download the chart as an image file (PNG).
      • Chart Excel File: Download the performance item data displayed in the chart as an Excel file. The chart’s displayed data is a dataset automatically collected based on the query range.
      • Raw Excel File: Collect the entire performance item data shown in the chart within the query period and download it as an Excel file.
      Add time series graph widgetAdd the chart to the custom dashboard as a time series graph widget
      • When you click, a popup window for adding a time series graph widget opens.
      DeleteDelete the performance comparison result chart
      Performance Comparison StatusDisplay performance comparison results as a graph
      • When you place the mouse cursor over the graph, the performance comparison status for that time period is shown in a popup window.

    3.2.3 - Log Analysis

    In log analysis, you collect the logs of the monitoring target, review their contents, and convert them into structured metrics for monitoring. Each monitoring target provides default collected logs, and users can create custom logs to collect and view additional logs as needed.

    Reference
    • To use log analysis, you must first install and operate a log collection agent. For detailed information on installing and operating the log agent, see Managing the Agent.
    • To collect logs from Kubernetes Engine, you must configure log collection in the Samsung Cloud Platform Console.

    Getting Started with Log Analysis

    You can view the log status list or search for logs to be monitored to check them. To view the log status list, follow these steps.

    1. Cloud Monitoring Console > Log Analysis > Log Overview. Click Log Overview to navigate to the Log Overview page.
    2. After entering the search criteria for the service to be analyzed in the search area, click Log Search.
      • The list of services that match the search criteria and the search information are displayed at the bottom.
      • Click the View Details button for each service to display that service’s detailed log information.
        Itemdescription
        Search areaThe displayed search filters in the search area vary depending on the service type
        • Advanced Search to perform Advanced Search, click the Advanced Search button.
        • You can select one or more condition items for each advanced search filter
        Number of monitoring targets displayedSearch results quantity and the number of items displayed at once in the list
        • The default is 20 items per page.
        • The list display count can be changed to 10, 20, 30, 40, 50, or 100 items per page
        Search informationDisplay the search result values for the search criteria items.
        View DetailsView detailed information of the relevant monitoring target
        Log SearchCombine keywords and queries to search logs and view detailed information
    reference
    • If a Virtual Server or Node is connected to the monitoring target, the corresponding status is also displayed in the search information area.
    • The name of the monitoring target can include Korean characters, English letters (both uppercase and lowercase), numbers, and special symbols (-, _, .), and can be up to 100 characters long.
    • When the monitoring target does not have permission, information about the unauthorized target and a permission verification message are displayed in a popup.

    Check detailed log information

    You can view detailed log entries and log graphs of the monitoring target.

    Check log list

    You can view detailed log information in the monitoring detail popup window. To view detailed monitoring information for a log, follow these steps.

    1. Cloud Monitoring Console > Log Analysis > Log Overview. Click Log Overview. Log Overview page will open.
    2. Click the log you want to view detailed information for on the Log Status page. The Monitoring Details popup window opens.
    3. Click the Log tab.
      • When you place the mouse cursor over the graph, the values of each log entry appear in a popup window.
      • Click the icon in the upper right corner to set the query period or change the refresh interval.
      • You can select the graph display method by clicking the Details, Summary buttons located at the top left of each log chart.
        ItemExplanation
        Basic InformationDisplay basic information about the monitoring target
        DetailsCharts for each log of the monitoring target are expanded and displayed
        • View a single chart in detail
        SummaryPerformance charts of the monitoring target are displayed in a grid layout
        • View multiple charts at a glance
        Set query period
        • Date/Time: Displays the reference date and time for data retrieval.
        • Refresh: Manually refreshes to the current time.
        • Start/Stop: Turns the automatic refresh feature off or on.
        • Settings: Sets the data query period or changes the automatic refresh interval
        Performance ComparisonCombine keywords and queries to search logs and view detailed information.
        Performance chartCharts for each log of the monitoring target are displayed as graphs
        • When you place the mouse cursor over the graph, the log entry value at the specified time appears in a popup window.

    Search logs to verify

    You can combine keywords and queries to search logs and view detailed information.

    Reference
    The presence and frequency of keywords can be converted into metrics, displayed as charts on the dashboard page, or used to set up related events to receive notifications.

    To search the logs, follow these steps.

    1. Cloud Monitoring Console > Log Analysis > Log Overview. Click Log Overview. You will be taken to the Log Overview page.

    2. On the Log Overview page, click Log Search. You will be taken to the Log Search page.

      ItemExplanation
      Monitoring targetDisplay the service type of the monitoring target to compare
      • Click the monitoring target list to change the service
      • Changing the service will cause all charts created so far to disappear.
      • Add button to search for and add monitoring targets of the currently selected service
      • The selected monitoring targets are displayed on the page, and you can delete a monitoring target by clicking X or Delete All.
      Search criteriaSet conditions for the logs to be searched
      Set query period
      • Date/Time: Displays the reference date and time for data retrieval.
      • Refresh: Manually refresh to the current time.
      • Start/Stop: Turns the automatic refresh feature off or on.
      • Settings: Set the data query period or change the automatic refresh interval
      Log volume graphWhen you search the logs, the log entries that match the entered criteria are displayed as a chart.
      Generated log messageLog messages from the monitoring target are displayed by time.

    3. Click the Add button. A popup window opens where you can add a monitoring target.

    4. After clicking the monitoring target, select the log file you want to add.

    5. After selecting the log file, click the Confirm button.

    6. After entering the search criteria, click the Search button. The search results will be displayed on the log volume graph and the log messages.

      Itemdescription
      Add indicatorAdd metrics to log search results
      • Use after searching logs
      Execution HistoryCheck the list of search criteria that were recently executed
      • The execution history displays up to the last 20 executed search criteria
      • You can select the desired search history and input it as the current search criteria
      Search fieldSelect the search field
      ConditionSelect search criteria
      • like , !like , = , != , <= , >= , > , < can be selected
      search valueEnter the keyword to search
      Log SearchSelect the operator (AND, OR) for the newly added search condition
      • Displayed only when a new search condition is added
      Add conditionAdd a new search condition

    7. When you search the logs, the log entries that match the entered criteria are displayed as a chart.

      • Log entries are displayed in seconds.
        ItemExplanation
        Log volume graphThe log volume over the selected period is displayed as a graph
        • When you hover the mouse cursor over the graph, the values of each log entry appear in a popup window.
        • Clicking a bar in the graph displays the list of logs for that point in time.
        Set query period
        • Date/Time: Displays the reference date and time for data lookup
        • Refresh: Manually refresh to the current time.
        • Start/Stop: Turn the automatic refresh feature off or on.
        • Settings: Set the data query period or change the automatic refresh interval
        Monitoring targetThe monitoring target list is displayed
        • When you select a monitoring target to view log messages, the log list shows the content
        Log listLog messages generated from the monitoring target are displayed by time
        • Click the button in the log list to view the full message of that log
        • Click Download to save the currently displayed log messages in Excel and TXT file formats

    Check log collection status

    You can view the main log collection information for the past 7 days as a chart.

    • When you place the mouse cursor over the graph, detailed information appears in a popup window.
    • Only collected logs are aggregated, and logs that have not been collected are not displayed in the status.
    Reference
    • When you create an Account, we provide a default virtual capacity of 1 GB to store the collected logs.
    • All logs can be stopped and restarted as needed.

    To check the log collection status, click Cloud Monitoring Console > Log Analysis > Log Collection Dashboard.

    Itemdescription
    Cumulative log volumeDisplay the amount of logs collected from the 1st of each month in GB
    • Show the cumulative usage to date as a percentage of the total allocated virtual capacity.
    Log collection volume for the past 7 daysDisplay the amount of logs collected over the past 7 days by service type in a graph
    • The line chart shows the quantity (kb), and the bar chart shows the cumulative usage rate.
    • Click a monitoring target in the legend area to display only that graph
    Log occurrence rate by serviceDisplay logs collected over the past 7 days, categorized by service
    • Clicking a bar graph representing each service shows the monitoring target with the highest log collection within that service on the log collection TOP 10 chart.
    Log Collection Top 10Display a graph of the top 10 monitoring targets that collected the most logs in the past 7 days within the selected service, based on log occurrence rates by service
    • Click each point on the graph to view detailed information for that log
    • Click a monitoring target in the legend area to display only that graph
    • Click the graph of the target service to navigate to the Log Overview page
    reference

    To perform monitoring related to logs, you must first install and operate a log collection agent. For detailed information on installing and operating the log agent, refer to 에이전트 관리하기.

    • Accumulated logs are stored up to a maximum of 1 GB. If it exceeds 1 GB, older logs are automatically deleted.

    Check indicator configuration status

    You can create a metric to display the occurrence count of log patterns as a time series. To view the metric list, click Cloud Monitoring Console > Log Analysis > Metric Configuration Status.

    Reference
    Metrics converted to time-series data can be set as events or added to a dashboard for real-time monitoring.
    Itemdescription
    Search areaThe displayed search filters in the search area vary depending on the service type
    • To perform Advanced Search, click the Advanced Search button.
    • You can select one or more condition items for each advanced search filter
    Number of monitoring targets displayedDisplay search results
    • The default is 20 per page.
    • Change the list display count to 10, 20, 30, 40, 50, or 100 per page.
    Search informationDisplay the search result values for the search criteria items.
    AddAdd a new metric
    DeleteSelect the metric in the search information and delete it.

    Check detailed indicator information

    Follow these steps to view detailed information about the indicator.

    1. Cloud Monitoring Console > Log Analysis > Metric Configuration Status. Click Metric Configuration Status. You will be taken to the Metric Configuration Status page.
    2. Indicator Setting Status Click the indicator name to view detailed information on the page. Indicator Details popup window opens.

    Add indicator

    You can add a new metric to display the desired log data as a time series.

    Reference
    • Log metrics can only be set for monitoring targets where the log agent is installed or logs are being collected. For detailed information on installing and operating the log agent, refer to 에이전트 관리하기.

    To add a new metric, follow these steps.

    1. Cloud Monitoring Console > Log Analysis > Click Metric Configuration Status. You will be taken to the Metric Configuration Status page.

    2. Indicator Settings Status on the page, click the Add button. Add Indicator popup will open.

    3. Enter indicator name.

      • Metric names can only use English uppercase and lowercase letters, underscores (_), periods (.), and hyphens (-).
      • To distinguish metrics from general performance, the prefix metricfilter. is automatically added and cannot be removed or changed.
        ItemExplanation
        Indicator NameEnter the name of the metric to create
        Monitoring TargetDisplay the service type of the monitoring target to compare
        • Click the monitoring target list to change the service
        • Changing the service will cause all charts created so far to disappear.
        • Click the Add button to search for and add the monitoring target of the currently selected service
        • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking X or Delete All
        Search CriteriaSet conditions for the logs to be searched
        Set Query Period
        • Date/Time: Displays the reference date and time for data retrieval
        • Refresh: Refreshes directly to the current time.
        • Start/Stop: Turns the automatic refresh feature off or on.
        • Settings: Allows you to set the data query period or change the automatic refresh interval.
        Log volume graphWhen you search the logs, the log entries that match the entered criteria are displayed as a chart
        Generated log messageLog messages from the monitoring target are displayed by time.
    4. Click the Add button. A popup window opens where you can add a monitoring target.

    5. After clicking the monitoring target, select the log file you want to add.

    6. After selecting the log file, click the Confirm button.

    7. After entering the search criteria, click the Search button. The search results will be displayed on the log volume graph and the generated log messages.

      Itemdescription
      Add indicatorAdd metrics to log search results
      • Use after searching logs
      Execution HistoryCheck the list of search criteria that were recently executed
      • The execution history displays up to the last 20 executed search criteria
      • You can select the desired search history and input it as the current search criteria
      Search fieldSelect the search field
      ConditionSelect search criteria
      • like , !like , = , != , <= , >= , > , < can be selected
      search valueEnter the keyword to search
      operatorSelect the operator (AND, OR) for the newly added search condition
      • Displayed only when a new search condition is added
      Add conditionAdd a new search condition

    8. Click the Confirm button. A new metric will be added with a toast popup message.

    Modify indicator search criteria

    To modify the indicator’s search criteria, follow these steps.

    1. Cloud Monitoring Console > Log Analysis > Click Metric Configuration Status. Metric Configuration Status page will open.
    2. Indicator Settings Overview On the page, click the indicator name of the metric you want to edit. The Indicator Details popup will open.
    3. In the Indicator Details popup, click the Edit button. The Edit Indicator popup opens.
    4. Metric Update After modifying the search criteria in the popup window, click the Confirm button. The metric will be updated along with a toast popup message.

    Delete indicator

    To delete the indicator, follow these steps.

    reference
    • If there are charts or event policies that use the metric you want to delete, you cannot delete that metric.
    1. Cloud Monitoring Console > Log Analysis > Metric Configuration Status. Click it. You will be taken to the Metric Configuration Status page.
    2. On the Indicator Settings page, select the indicator to delete, then click the Delete button. The indicator will be removed along with a toast popup message.

    3.2.4 - Managing Events

    An event is a setting that notifies the user when a performance metric of the monitored target meets a specific condition. By configuring events, users can capture essential monitoring information without missing it. For example, if you set an event to trigger whenever a performance value related to overload exceeds a certain threshold, a notification is sent to the user each time there is a risk of overload during resource operation. Users can respond proactively before problems occur based on this.

    In event management, you can create such events and configure them to notify designated users whenever a specific value occurs during monitoring.

    Check Event Status

    In the Event Status, you can view information about all generated events, related performance metrics, and the history of event notifications delivered to users. To view the Event Status list, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Status. You will be taken to the Event Status page.
    2. On the Event Status page, enter the search criteria for the service whose event status you want to check in the search area, then click the Search button.
      Itemdescription
      Search areaThe search filters displayed in the search area differ according to the service type
      • To perform an Advanced Search, click the Advanced Search button.
      • You can select one or more condition items for each advanced search filter
      Number of monitoring targets displayedDisplay the quantity of search results and the number of items that can be viewed at once in the list
      • The default number of items shown in the list is 20 per page.
      • The list display count can be changed to 10, 20, 30, 40, 50, or 100 items per page
      Search informationDisplay search result values for the search criteria items
      • Clicking the message content of each service allows you to view detailed event information
      View DetailsView detailed information of the relevant monitoring target
      Table. Event List
    Reference
    • If a Virtual Server or Node is connected to the monitoring target, the corresponding status is also displayed in the search information area.
    • The name of the monitoring target can include Korean characters, English letters (both uppercase and lowercase), numbers, and special symbols (-, _, .), and can be up to 100 characters long.

    View event status list

    In the monitoring detail popup, you can view the event information, occurrence time, and duration in the event list. To check the event occurrence status, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Status. You will be taken to the Event Status page.
    2. On the Event Status page, click the Event tab.
      Itemdescription
      Event statusCheck event message and occurrence time
      activeShow only events that are currently active
      AllShow all events
      Event DetailsCheck the detailed information of the selected message in the event status
      Table. Event tab

    Check event details

    To view the event details, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Status. You will be taken to the Event Status page.
    2. On the Event Status page, click the Event tab.
    3. On the Event Status page, after selecting the event for which you want to view detailed information, click Event Details to view the event publishing conditions, performance items, and notification history.
      ItemExplanation
      Monitoring targetDisplay the name of the monitoring target
      Occurrence conditionDisplay the condition under which the event occurs
      Performance itemsDisplays a chart for performance items.
      • Hovering the mouse cursor over the graph shows detailed performance values for each time period.
      Notification HistoryDisplay the full alarm occurrence history
      Event Settings DetailsView the configuration information of the event
      Table. Event Details

    Manage Event Settings

    You can configure event details such as the monitoring target, performance metrics that define the event trigger, event severity level, and event notification recipients. When data collected from the monitoring target meets the conditions set in the event policy, notifications are delivered to the user via email, SMS, or messages.

    Reference
    • Event policies can be set only when a monitoring target is specified, and policies for each Auto-Scaling Group can be configured at the group level.

    Check Event Settings

    To verify the event settings, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. Navigate to the Event Settings page.
    2. On the Event Settings page, enter the search criteria for the service whose event policy you want to check in the search area, then click the Search button.
      ItemExplanation
      Search areaThe search filters displayed in the search area vary depending on the service type
      • To perform Advanced Search, click the Advanced Search button.
      • You can select one or more condition items for each advanced search filter
      Number of monitoring targets displayedDisplay search results
      • The default is to show 20 items per page.
      • Change the number of items displayed in the list to 10, 20, 30, 40, 50, or 100 per page.
      Monitoring targetDisplay the name of the monitoring target
      • When the checkbox is selected, the Delete, Activate, and Notification Recipient buttons become enabled.
      Performance itemsDisplay performance items for the event configuration target
      Individual itemDisplay individual performance items under the performance category
      • If there are no individual items, nothing is displayed.
      Type/UnitDisplay the value type and unit of the performance item
      Event ratingDisplay the risk level of the event
      • The risk level is set manually by the user when adding an event
      • Fatal: The highest risk level.
      • Warning: A medium-level risk.
      • Information: The lowest risk level, for reference.
      thresholdDisplay the reference value for comparing performance values.
      Notification recipientsDisplay the recipients of the event notification
      • When the mouse cursor is placed over the name, the full list is displayed on the page
      Policy statusIndicates whether the event is active
      View DetailsCheck and edit event details
      • Click ‘View Details’ to open the detailed information popup for the event.
      AddAdd event
      DeleteDelete event
      EnableEnable or disable the event
      Notification recipientsCheck and manage event notification recipients
      Table. Event Settings
    Reference
    • The name of the monitoring target can include Korean characters, English letters (both uppercase and lowercase), numbers, and special symbols (-, _, .), and can be up to 100 characters long.
    • When the monitoring target does not have permission, information about the unauthorized target and a permission verification message are displayed in a popup.

    Check detailed event settings

    You can view detailed information about the monitoring target and event conditions, and modify the event conditions and notification information.

    Add Event Settings

    To add an event setting, follow these steps.

    Reference
    • Event policies can only be set when a monitoring target is specified.
    • Auto-Scaling Group policies can be applied on a per-group basis.
    1. Click Cloud Monitoring Console > Event Management > Event Settings. Navigate to the Event Settings page.

    2. Click the Add button on the Event Settings page. The Add Event Settings popup opens.

      Itemdescription
      Target NameSelect the monitoring target to add an event setting
      • Click the monitoring target list to change the service
      • Changing the service will delete all event conditions created so far.
      • Click the Add button to search for and add the monitoring target of the currently selected service
      • The selected monitoring target is displayed on the page, and you can delete the monitoring target by clicking X or Delete All
      Event Settings AreaSet the performance and occurrence conditions for the event
      Notification information areaSet the notification recipients and method when an event occurs.
      Table: Description of the Add Event Settings Popup

    3. After selecting the service type in the monitoring target area, click the Add button. The add monitoring target popup window will open.

    4. After selecting the monitoring target, click the Confirm button.

      • You can select multiple monitoring targets simultaneously.
      • If there are multiple monitoring targets, the configured event is added identically to each monitoring target.
      • If you select Kubernetes, you must also select the sub-type of that service.
    5. In the performance items, click the item where you want to add an event, then enter the event trigger condition.

      • The added performance items display the count of additions next to the performance name.
      • If you select multiple performance items, you must enter the event occurrence condition for each performance item.
        Itemexplanation
        Load Event Policy TemplateSelect and apply an existing event policy template.
        Performance itemsClick the performance metric for which you want to set the event trigger condition and add it to the event condition configuration area.
        Event ratingSet the event severity level
        • Fatal: the most dangerous level.
        • Warning: a medium-level risk.
        • Information: the lowest level of risk and for reference.
        Performance typeSelect the reference value for determining whether an event occurs
        • Collected value: Use the current value.
        • Delta value: Use the difference between the previous and current values.
        thresholdSet the reference value to compare with the collected performance values
        • It serves as the criterion for determining whether an event occurs.
        • Only numbers and decimal points can be entered
        Comparison methodSelect a method that compares the monitoring value of the performance item with the threshold to determine whether an event occurs
        • Range: Check whether the performance value is within the range specified by the threshold
        • Match: Check whether the performance value equals the threshold
        • Different: Check whether the performance value differs from the threshold
        • At least: Check whether the performance value is greater than or equal to the threshold
        • Greater than: Check whether the performance value exceeds the threshold
        • At most: Check whether the performance value is less than or equal to the threshold
        • Less than: Check whether the performance value is less than the threshold
        Individual itemSpecify an individual performance item under the performance items as an event condition
        • It is enabled only when the performance item can collect the individual item.
        PrefixYou can add a prefix to the event message.
        • Event Status page uses this as a keyword to search for the event.
        StatisticsSet the statistical method to apply to the collected performance values
        • When statistics are configured, the performance value calculated using the selected statistical method is compared against the threshold when evaluating event trigger conditions. If not selected, the most recent performance value is compared to the threshold.
        • Statistical Method: Choose one of maximum, minimum, average, or sum to compute the collected performance values.
        • Statistical Period: Set the time span over which the statistical method is applied. It is the period measured from the most recently collected performance value.
        Sustained occurrence countSet the number of consecutive monitoring values that satisfy the event occurrence condition
        • This value is used as a sensitivity to determine whether the event is a momentary outlier or a real event.
        Event occurrence notification time zoneTimezone setting feature when configuring event policies
        Table. Add Event Settings - Event Settings Area
    6. Notification area allows you to set notifications.

      Itemdescription
      Notification recipient selection areaSelect notification recipients
      • After selecting the notification recipients, click the Delete button to remove the selected recipient.
      Notification recipients / groupThe list of recipients to receive the notification when an event occurs is displayed.
      Event risk levelThe risk level of the configured event is displayed.
      Notification methodThe method of delivering notifications to the recipient is displayed.
      AddSelect and add a new notification recipient from the address book.
      DeleteDelete a notification recipient from the notification recipient/group
      Table. Add event settings - notification info area

    7. Check the notification recipients, select them, and click the Confirm button.

    reference
    • Only the account’s root user or an IAM user can be added as a notification recipient.
    • You can select multiple items simultaneously.
    1. Set the notification method for each recipient according to the event risk level.
      • The notification method can be selected from email, SMS, and messenger, and multiple methods can be selected simultaneously.
    2. When the notification method setup is complete, click the Confirm button.

    Modify Event Settings

    To edit the event’s conditions and notification recipient information, follow the steps below.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. You will be taken to the Event Settings page.
    2. Event Settings page, enter the search criteria for the service whose event settings you want to modify in the search area, then click the Search button.
    3. From the event policy list, click the View Details button of the event policy you want to edit. You will be taken to the Event Settings Details page.
    4. On the Event Settings Detail page, click the Edit button. You will be taken to the Event Settings Edit page.
    5. On the Edit Event Settings page, enter the information to be modified, then click the Confirm button.
      • You can edit the event conditions and notification information.

    Delete Event Settings

    To delete the event configuration, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. You will be taken to the Event Settings page.
    2. On the Event Settings page, enter the search criteria for the service whose event policy you want to delete in the search area, then click the Search button.
    3. After checking the event policy to delete in the event policy list, click the Delete button.
    4. In the confirmation popup, click the Confirm button.

    Change Event Settings Activation

    You can easily change whether the event policy is enabled.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. Go to the Event Settings page.
    2. On the Event Settings page, enter the search criteria for the service whose event policy you want to delete in the search area, then click the Search button.
    3. In the event policy list, check the event policy whose activation you want to change, then click the Activate button. The Policy Activation popup window will open.
    4. After selecting the activation status, click the Confirm button.
      • Enable All, Disable All buttons can be clicked to change them in bulk.
    Reference
    If you disable the event policy, all active events generated by the selected event policy will be disabled.

    Change Event Notification Recipients

    You can verify the recipients of notifications when an event occurs and change them in bulk.

    Reference
    • The event notification recipient change feature is intended to modify event notification recipients in bulk. Consequently, the existing recipients are removed and replaced with the new recipient settings.
    • To view and modify the notification recipients for each policy, click the Edit button on the policy’s detail page, then make the changes.
    1. Click Cloud Monitoring Console > Event Management > Event Settings. Go to the Event Settings page.
    2. On the Event Settings page, enter the search criteria for the service whose event policy you want to delete in the search area, then click the Search button.
    3. After checking the event policy to edit in the event policy list, click the Notification Recipients button. You will be taken to the Notification Recipients page.
    4. On the Notification Recipients page, after selecting the user to add as a notification recipient, click the Confirm button.
      Itemdescription
      Event policy listThe list of event policies for changing the notification recipients is displayed
      • Click Add to add the policy to be changed
      • Click the Delete button in the policy list to remove that policy.
      User search areaEnter name, email, mobile phone, and company name to search
      Notification address bookUse the notification address book to verify and add users.
      Search User ListThe list of users included in the notification address book or search results is displayed
      • If you check the users to add as notification recipients, they will be added to the notification recipient list.
      Notification recipient listThe list of users to be added as notification recipients for the event displayed in the event policy list is shown
      • After checking a user, click the Delete button to remove that user from the list.
      Table. Change Event Notification Recipients

    Managing Event Templates

    You can set the monitoring target, performance values that define event occurrence criteria, and the event risk level, then create and use a template. When adding or modifying an event, you can import an event policy template to easily enter the event conditions.

    Check the list of event policy templates

    To view the list of event policy templates, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. Navigate to the Event Settings page.
    2. On the Event Settings page, click Event Policy Template. You will be taken to the Event Policy Template page.
    3. On the Event Policy Template page, enter the search criteria for the service whose template you want to check in the search area, then click Search.
      Itemdescription
      Search areaEnter the conditions of the event policy template to search.
      Add event policy templateAdd event policy template
      Template ListEvent policy templates that match the search criteria are displayed.
      Table. Event Policy Template List

    Add event policy template

    To add an event policy template, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. Navigate to the Event Settings page.

    2. On the Event Settings page, click the Event Policy Template button. You will be taken to the Event Policy Template page.

    3. On the Event Policy Template page, click the Add Event Policy Template button. The Add Event Policy Template popup opens.

    4. Add Event Policy Template In the popup window, set the service type and template information for adding the event policy template. * Items marked with * are required fields and must be entered.

      Itemdescription
      Service TypeSelect the service type to set the event policy
      • Click the service type list to change the service
      • If you change the service, all event conditions created so far will be lost.
      Template nameEnter the name of the template to create
      Template descriptionEnter a description for the template to be created
      Table. Add event policy template – set service type and template name

    5. In the performance items, click the item where you want to add an event, then enter the event trigger condition.

      • The added performance items display the count of additions next to the performance name.
      • If you select multiple performance items, you must enter the event trigger condition for each item. * Items marked with * are required fields and must be entered.
        Itemdescription
        Load Event Policy TemplateSelect and apply an existing event policy template
        • When you load the template, the event conditions and notification recipients are replaced with the information set in the template.
        Performance itemsClick the performance metric to set the event trigger condition and add it to the event condition configuration area.
        Event ratingSet the event severity
        • Fatal: The most dangerous level.
        • Warning: A medium-level risk.
        • Information: The lowest risk level, for reference only.
        Performance typeSelect the reference value to determine whether an event occurs
        • Collected value: Use the current value.
        • Delta value: Use the difference between the previous and current values.
        thresholdSet the reference value to compare with the collected performance values
        • It serves as the criterion for determining whether an event occurs.
        • Only numbers and decimal points can be entered
        Comparison methodTo determine whether an event occurs, select the method that compares the monitoring value of the performance item with the threshold.
        • Range: Check if the performance value is within the range specified by the threshold.
        • Match: Check if the performance value matches the threshold.
        • Different: Check if the performance value differs from the threshold.
        • AtLeast: Check if the performance value is greater than or equal to the threshold.
        • Exceeds Check if the performance value exceeds the threshold.
        • AtMost: Check if the performance value is less than or equal to the threshold.
        • LessThan: Check if the performance value is less than the threshold.
        Individual itemSpecify an individual performance item under the performance items as an event condition
        • It is enabled only when the performance item can collect the individual item.
        PrefixAdd an event message prefix
        • It is used as a keyword to search for this event on the event status page.
        StatisticsSet the statistical method to apply to the collected performance values
        • When statistics are set, the performance value calculated using the configured statistical method is compared to the threshold when determining event trigger conditions. If not selected, the most recent performance value is compared to the threshold.
        • Statistical Method: Choose one among maximum, minimum, average, sum to calculate the collected performance values.
        • Statistical Period: Set the period over which the statistical method calculation is applied. It is the period from the most recently collected performance value.
        Number of occurrencesSet the number of consecutive monitoring values that satisfy the event trigger condition
        • This value is used as a sensitivity to determine whether the event is a transient anomaly or a genuine event.
        Event occurrence notification time windowTimezone setting feature when configuring event policies
        Table. Add event policy template – performance item
    6. Set the recipients and delivery method for the information when a notification occurs.

      Itemdescription
      AddSelect and add a new notification recipient from the address book.
      DeleteDelete the selected notification recipient(s) from the notification recipients/group
      Notification recipients / groupsThe list of recipients to receive the notification content is displayed when an event occurs
      • After selecting a notification recipient, clicking the Delete button removes that recipient.
      Event risk levelThe risk level of the event to be delivered is displayed
      Notification methodThe method of delivering notifications to the recipient is displayed
      • you can choose among email, SMS, and messenger, and you can select multiple methods simultaneously
      Table. Add event policy template – set notification recipients

    Reference
    • Only Account members and the notification address book registered in the Account can be added as recipients.
    • You can select multiple items simultaneously.
    1. Click the Confirm button. The event policy template will be added along with a toast popup message.

    Edit and delete event policy templates

    To modify or delete an event policy template, follow the steps below.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. You will be taken to the Event Settings page.
    2. On the Event Settings page, click the Event Policy Template button. You will be taken to the Event Policy Template page.
    3. On the Event Policy Template page, enter the search criteria for the service whose template you want to view in the search area, then click the Search button.
    4. Click the More button at the top right of the template you want to edit or delete, and then click Edit or Delete.
      • Edit: The template edit popup window opens. After editing the template, click the Confirm button.
      • Delete: The template will be deleted along with a toast popup message.
    5. Click the Confirm button. The template will be deleted along with a toast popup message.

    Share event policy template

    To share the event policy template, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Settings. Navigate to the Event Settings page.
    2. On the Event Settings page, click the Event Policy Template button. You will be taken to the Event Policy Template page.
    3. On the Event Policy Template page, enter the search criteria for the service whose template you want to view in the search area, then click the Search button.
    4. Click the More > Share button located at the top right of the template you want to share.
    5. After selecting the user to share with, click the > button. The selected user will be added to the sharing target.
    6. Click the Confirm button. The template will be shared with a toast popup message.

    Filtering events

    You can filter notifications for events that occur during a specific period. While event filtering is applied, notifications will not be delivered even if events occur.

    To view the event filtering list, follow these steps.

    1. Cloud Monitoring Console > Event Management > Event Filtering click. You will be taken to the Event Filtering page.
      Itemdescription
      Filtering TimelineDisplay the timeline of registered filters by date
      • Registered filters are displayed on the timeline as bars. Clicking a bar shows the filter’s detailed information.
      • The numbers from 00 on the left to 23 on the right represent the hour of the day.
      • The blue vertical line below the time indicates the current time.
      • < , > Click to change the displayed date
      Filtering listDisplays a list of information and operational status of registered filters
      • Running: The filter is registered and currently operating
      • Ended: The filter’s operation has ended after the set period has passed.
      • Scheduled: The filter registration is complete and is pending. The filter will operate when the set period arrives.
      • Disabled: The filter is in a stopped state. It is displayed when ‘Use’ is not selected in the detailed settings
      AddAdd new event filtering
      DeleteDelete the selected event filter from the filter list
      Search areaSearch for event filtering or monitoring targets
      Table. Event Filtering List
    Reference
    The filtering timeline chart is displayed based on the time zone set in the logged-in user’s account.

    Add event filtering

    To add event filtering, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Filtering. Navigate to the Event Filtering page.
    2. Click the Add button on the Event Filtering page. The Add Event Filtering popup opens.
    3. Add Event Filtering Enter the filtering information in the popup window.
      ItemExplanation
      Event filteringEnter the name of the event filter
      Usage statusSet whether event filtering is used
      • If set to Not Used, it will be displayed as Disabled until changed to Enabled, and filtering will not operate.
      Time zoneSet the reference time zone for applying event filtering
      Iteration typeSet the repeat application of event filtering
      • No repeat: Enter the start and end year, month, day, hour, minute. Filtering occurs only once without repetition.
      • Daily, weekdays: Enter only the start time and end time. Filtering repeats daily at the specified times.
      PeriodSet the period during which event filtering is applied
      • Applied Time: For recurring tasks, it is active and displays the elapsed time from the start time to the end time
      • Conversion Period: The event filtering period is converted and displayed based on the time zone set by the user
      Event filtering targetSelect the service type and monitoring target to apply event filtering, then add.
      Table. Add event filtering
    4. Click the Confirm button. Event filtering will be added with a toast popup message.
    Reference
    You can change whether event filtering is enabled by editing the filter.

    Modify Event Filtering

    To modify event filtering, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Filtering. Proceed to the Event Filtering page.
    2. Event Filtering page, click the name of the filter you want to edit. Event Filtering Details popup window opens.
    3. Event Filtering Details in the popup window, click the Edit button. The Edit Event Filtering popup window opens.
    4. Edit Event Filtering After entering the changes in the popup window, click the Confirm button. The event filtering will be updated with a toast popup message.

    Delete event filtering

    To delete event filtering, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Event Filtering. Navigate to the Event Filtering page.
    2. On the Event Filtering page, select the event filter you want to delete, then click the Delete button. The event filter will be deleted along with a toast popup message.
      • You can select multiple event filters simultaneously.

    Managing Notification Groups

    You can group the recipients who receive notifications when an event occurs into a single group for management. Notification Group allows you to efficiently manage notification recipients and configure notification settings easily and quickly.

    To check the notification group, follow the steps below.

    1. Click Cloud Monitoring Console > Event Management > Alert Group. Go to the Alert Group page.
    2. Notification Group page allows you to view and manage notification groups.
      Itemdescription
      Add notification groupAdd a new notification group.
      Notification GroupDisplays a list of all notification group created by the user.
      • When a notification group is clicked, the notification group details popup opens.
      • Click the Edit button to modify the notification group
      Advanced SearchYou can search the address book by entering the notification group name.
      Keyword searchYou can search by selecting the notification group, user name, creation timestamp, and last modified timestamp.
    Reference
    Notification Group is only valid within an Account, so it can be composed only of users who have access rights to that Account. Users whose access rights have been removed are automatically excluded from the address book.

    Add Notification Group

    To add a notification group, follow these steps.

    1. Cloud Monitoring Console > Event Management > Add Alert Group Click.
    2. Add Notification Group page allows you to enter the notification group name and description, then add users.
    3. Click the Save button to add the notification group.

    Edit Notification Group

    You can add a user to a notification group or delete a user registered in the notification group.

    Add User

    To add a user to the notification group, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Alert Group.
    2. In the All Notification Groups, click the notification group to which you want to add a user, then click Edit.
    3. Please select the user to add.
      • Only users registered in the Account can be added to the address book.
      • You can quickly find the desired members using the real-time search GUI.
    4. Click the Save button. The user address will be added with a toast popup message.

    Delete Notification Group

    To delete a notification group, follow these steps.

    1. Click Cloud Monitoring Console > Event Management > Alert Group.
    2. Click the notification group you want to delete from the overall notification groups.
    3. After selecting the notification group to delete, click Delete.
      • You can select multiple addresses simultaneously.
    4. Click the Confirm button. The address will be deleted along with the toast popup message.

    3.2.5 - Using Custom Dashboards

    Custom dashboards are personalized dashboards that users configure by selecting the widgets they want. Users can use custom dashboards to arrange monitoring information as they wish, and they can share the created custom dashboards with other users.
    The content covered in Using Custom Dashboards is as follows.

    reference
    Custom dashboards are created separately from the Account dashboard and can display monitoring information from multiple Accounts at once.

    Getting Started with Custom Dashboard

    After creating a custom dashboard, the user can add desired widgets to view monitoring information.

    Create a custom dashboard

    To create a custom dashboard, follow these steps.

    1. From the top‑right menu, click Custom Dashboard Management. You will be taken to the Custom Dashboard Management page.
    2. Click Add Dashboard. The Add Dashboard popup window opens.
    3. Enter the dashboard name to create and click the Save button.
    4. The custom dashboard you created appears in the My Dashboard list.

    Add widget

    Custom dashboards provide widgets in various formats such as performance statistics, comparison charts, and event lists. Users can add the information they want to monitor as widgets and freely configure the custom dashboard.

    Reference
    • You can change the position and size of a created widget, or edit, copy, and delete its content. For more details, see Custom Widget Management.

    To add a widget, follow these steps.

    1. From the top‑right menu, click Custom Dashboard Management. You will be taken to the Custom Dashboard Management page.
    2. From the My Dashboard list, select the custom dashboard to add a widget.
    3. Click the + button or the Add Widget button at the top right of the dashboard. The Add Widget popup window opens.
    4. Add Widget In the popup window, select the widget to use on the dashboard and add it.
      • When you select a widget, detailed settings and a preview are displayed.
      • For explanations and configuration methods for each chart, refer to Custom Widget.
    5. Click the Confirm button.
    Reference
    A widget is added to the dashboard at its default size.

    Custom widget

    The types of widgets that can be added to a custom dashboard are as follows.

    Widget NameExplanation
    Title BoxDisplay the title box on the custom dashboard.
    Event statusDisplays the event that occurred.
    Monitoring StatusDisplays the number of monitoring targets and the monitoring status.
    Top 5 Key PerformanceDisplays the top 5 monitoring targets with the highest utilization for a specific performance metric.
    Event mapDisplays the number of events per service by severity level.
    Event HistoryDisplays the count of events per date by severity.
    time series graphDisplays the performance metrics of the selected monitoring target as a time-series graph.
    Current status indicatorDisplays the performance value statistics and risk levels of the selected monitoring targets.
    Instance mapDisplays the performance values of the selected monitoring targets using colors of varying intensity.
    Table. Types of widgets that can be added to a custom dashboard

    Title Box

    Displays a title box on the custom dashboard.

    • You can create up to 10 title boxes.
    • You can add multiple title boxes at the same time.
    Itemdescription
    TitleEnter the text to display in the title box.
    AddAdd a new text box.
    DeleteDelete the corresponding text box.
    Table. Custom Dashboard Title Box

    Event status

    Displays the occurred event.

    • You can configure it to display all events that have occurred, or only the active events.
    Itemdescription
    Widget nameEnter the name of the widget.
    Query rangeSelect the range of events to display in the widget
    • All events: Displays all events that have occurred. Completed events are marked as Completed
    • Unaddressed events: Displays events that have not been addressed so far.
    Table. Event Status

    Monitoring Status

    Displays the number of monitoring targets and the monitoring status.

    Itemexplanation
    Widget nameEnter the name of the widget.
    Table. Monitoring Status

    Key Performance Top 5

    Shows the top five monitoring targets with the highest usage rate for a specific performance metric within the Account.

    Itemdescription
    Widget nameEnter the name of the widget.
    ServiceSelect the service to check performance.
    Performance metricsSelect the performance metric that serves as the basis for displaying the monitoring target
    • CPU Usage/Core [Basic]: Displayed based on CPU usage.
    • Memory Used [Basic]: Displayed based on memory usage.
    • Disk Read Bytes [Basic]: Displayed based on disk read usage.
    • Disk Write Bytes [Basic]: Displayed based on disk write usage.
    Table. Top 5 Key Performance

    Event map

    Displays the number of events per service by severity level.

    Itemdescription
    Widget nameEnter the name of the widget.
    Table. Event Map

    Event History

    Displays the number of events per date, grouped by severity.

    Itemdescription
    Widget nameEnter the name of the widget.
    Table. Event History

    Time Series Graph

    Displays the performance metrics of the selected monitoring target as a time-series graph.

    • You can change the period displayed by the time series graph using the dashboard’s date range setting feature.
    • When you place the mouse cursor over the graph, you can view the time and performance values for each target at that point.
    Itemdescription
    Widget nameEnter the name of the widget.
    ServiceSelect the service to check performance.
    Monitoring targetSelect the monitoring target to display as a graph.
    Performance itemsSelect the performance metric to display as a graph.
    Add optionYou can display a danger zone.
    • After selecting the danger zone display checkbox and entering the interval values, the corresponding zone is shown as a red area on the graph.
    Table. Time series graph
    Reference

    You can click the icon at the top right of the preview to change the graph type.

    • Linear graph
    • area chart
    • stacked bar chart
    • scatter plot

    Current Indicator

    Displays statistical figures and risk levels for the performance values of monitored entities.

    In the monitoring dashboard, if you place the mouse cursor over a status indicator value, you can view detailed information for that item.

    Itemdescription
    Widget nameEnter the name of the widget.
    ServiceSelect the service to check performance.
    Monitoring targetSelect the monitoring target to display as a graph.
    Performance metricsSelect the performance items to display as a graph.
    StatisticsSelect the statistical method to display the performance values of the monitoring target
    • avg: Displays the average of all collected performance values.
    • min: Displays the smallest value among all collected performance values.
    • max: Displays the largest value among all collected performance values.
    • raw: Displays the most recent performance value. Use only when a single monitoring target is selected.
    Add optionYou can display a danger zone.
    • After selecting the danger zone display checkbox and entering the range values, the specified range will be shown as a red area on the graph.
    Table. Status Indicator

    Instance Map

    Display the performance values of monitoring targets using colors of varying intensity.

    • When you position the mouse cursor over each heatmap, you can view detailed information about the item.
    Itemdescription
    Widget nameEnter the name of the widget.
    ServiceSelect the service to check performance.
    Monitoring targetSelect the monitoring target to display as a graph.
    Performance metricsSelect the performance metric to display as a graph.
    Table. Instance Map

    Check Custom Dashboard

    To view the custom dashboard, follow these steps.

    1. From the top‑right menu, click Custom Dashboard Management. You will be taken to the Custom Dashboard Management page.
    2. From the My Dashboard list, select the Custom Dashboard.
      Itemdescription
      Dashboard ListDisplays the list of custom dashboards. Click a list item to change the dashboard to view.
      • My Dashboards: Displays the list of dashboards you created yourself.
      • Shared Dashboards: Displays the list of dashboards shared with you.
      Dashboard nameThe name of the user dashboard is displayed.
      Dashboard Settings
      • Date/Time: Displays the reference date and time for the analysis information.
      • Refresh: Refreshes to the current time.
      • Stop/Start: Turns the automatic refresh feature off or on.
      • Settings: You can set the data query period or change the automatic refresh interval. (See “Setting the query period” for reference)
      Add widgetAdd a new widget to the dashboard.
      Dashboard editingYou can edit the currently configured custom dashboard.
      • Dashboard Edit: Modify the name of the currently selected dashboard.
      • Dashboard Copy: Copy the currently selected dashboard to create a custom dashboard with the same widgets.
      • Dashboard Delete: Delete the currently selected dashboard.
      • Dashboard Share: Share the dashboard so that specific users can view it. For more information, see Sharing Custom Dashboards.
      Custom widgetDisplays the widgets that make up the dashboard.
      • You can change the widget’s position and size, or edit and delete it. For more information, see Managing Custom Widgets
      • You can download graphic widgets as image files.
      Table. Custom dashboard information
    Reference
    You can click the star icon next to the dashboard name to add it to favorites. Dashboards added to favorites are displayed at the top of the dashboard list.

    Download widget

    Graphic widgets can be downloaded as image files (*.png).
    When you hover the mouse over a graph widget, a download button appears in the upper right corner. Clicking the download button downloads the widget as an image file.

    Share Custom Dashboard

    You can share a custom dashboard and configure it so that other users can view it.

    Reference
    Dashboard recipients remain as shared recipients even if they are later removed from the current account.

    To share a custom dashboard, follow these steps.

    1. From the top‑right menu, click Custom Dashboard Management. You will be taken to the Custom Dashboard Management page.
    2. From the My Dashboard list, select the Custom Dashboard.
    3. Click Dashboard More at the top right, then click Dashboard Share. The Dashboard Share popup opens.
    4. After selecting the user to share the dashboard with, click the > button and verify that the selected user moves to the shared target.
    5. Click the Confirm button.

    Managing Custom Dashboards

    You can edit, copy, or delete a custom dashboard.

    1. From the top-right menu, click Custom Dashboard Management. You will be taken to the Custom Dashboard Management page.
    2. From the My Dashboard list, select the Custom Dashboard.
    3. Click the Dashboard top-right more button, then select the desired command.
      • Edit Dashboard: Edit the dashboard name.
      • Dashboard Copy: Copy the dashboard to create a new dashboard.
      • Dashboard Sharing: Share the dashboard with other users.
      • Delete Dashboard: Deletes the dashboard.

    Managing custom widgets

    You can change the widget’s position and size, or edit and duplicate the widget.

    Change Widget Position

    Click the widget’s name, then drag to change its position.

    Changing Widget Size

    To change the size of the widget, follow these steps.

    1. Place the mouse cursor over the widget. The size adjustment button appears in the lower right corner of the widget.
    2. Size Adjustment button, click and hold while dragging to adjust to the desired size.

    Edit, copy, delete widget

    To modify, copy, or delete a widget, follow these steps.

    1. Place the mouse cursor over the widget. The More button appears in the top right corner of the widget.
    2. After clicking the More button, click the desired command.
      • Widget Edit: Modify the widget’s chart settings.
      • Widget Copy: Copies the widget to create a widget with identical content.
      • Delete Widget: Deletes the widget.

    3.2.6 - Managing Agents

    The agent is a module that collects performance metrics, logs, and Windows events from the monitoring target. Users must verify the agent’s installation status and operate and manage it in order to use the monitoring functionality.

    Caution
    • If IP access control is configured for the monitoring target, you cannot use agent management. If agent management cannot be used, check the IP access control configuration status of the selected monitoring target.
    • The agent management feature uses the sudo command, so the sudo package must be installed in advance.

    Agent Management Overview

    The agents include a performance collection agent, a log collection agent, and a Windows event log collection agent.

    • The agent must be manually installed by the user on each monitoring target according to the user’s requirements.

    Manage Agents

    Managing Performance Agents

    To install and manage the agent, follow these steps.

    1. Cloud Monitoring Console > Performance Analysis Click the button. You will be taken to the Performance Analysis page.
    2. On the Performance Analysis page, select a monitoring target and click the View Details button. The Monitoring Target Details popup window opens.
    3. Monitoring Target Details In the popup window, click the Agent tab. It navigates to the Agent tab.
    1. Click the Performance button in the Agent tab.
    2. Click the Copy icon on the right side of the installation command to copy the command.
    3. Paste the copied command into the monitoring target resource.
    4. Execute the command copied to the monitoring target resource.
    Reference
    The command uses sudo, so the sudo package must be installed.
    Itemdescription
    InstallationDownload the script file required for agent installation and execute it.
    StartExecute the agent start command.
    StopExecute the agent stop command.
    DeleteExecute the agent deletion command.
    UpdateDownload the script file required for the agent update and execute it.
    Table. Managing Performance Agents
    Reference

    To check the agent service status, use the method below.

    • linux: $ sudo systemctl status metricbeat
    • windows: Task Manager → service → metricbeat → Status(Running)

    Managing Log Agents

    To install and manage the agent, follow these steps.

    1. Click Cloud Monitoring Console > Performance Analysis. You will be taken to the Performance Analysis page.
    2. On the Performance Analysis page, select a monitoring target and click the View Details button. The Monitoring Target Details popup window opens.
    3. Monitoring Target Details Click the Agent tab in the popup window. It navigates to the Agent tab.
    1. Click the Log button.
    2. Click the Copy icon on the right side of the installation command to copy the command.
    3. Paste the copied command into the monitoring target resource.
    4. Execute the command copied to the monitoring target resource.
    Reference
    Since the command uses sudo, the sudo package must be installed.
    ItemExplanation
    InstallationDownload the script file required for agent installation and execute it.
    StartExecute the agent start command.
    StopExecute the agent stop command.
    DeleteExecute the agent deletion command.
    UpdateDownload the script file required for the agent update and execute it.
    Table. Managing Log Agents
    Reference

    To check the agent service status, use the method below.

    • linux: $ sudo systemctl status filebeat
    • windows: Task Manager → service → filebeat → Status(Running)

    To add a log for monitoring, select the log addition action, enter the log name and log path correctly, and then click the Generate Command button. Paste the generated command into the monitored resource and then execute it.

    Managing Event Agents

    To install and manage the agent, follow the steps below.

    1. Click Cloud Monitoring Console > Performance Analysis. You will be taken to the Performance Analysis page.
    2. On the Performance Analysis page, select a monitoring target and click the View Details button. The Monitoring Target Details popup window opens.
    3. Monitoring Target Details In the popup window, click the Agent tab. It navigates to the Agent tab.
    1. Click the Event button.
    2. Click the Copy icon on the right of the installation command to copy the command.
    3. Paste the copied command into the monitoring target resource.
    4. Execute the command copied to the monitoring target resource.
    Reference
    The event agent is a target for Windows instance provisioning.
    ItemExplanation
    InstallationDownload the script file required for agent installation and execute it.
    StartExecute the agent start command.
    StopExecute the agent stop command.
    DeleteExecute the agent deletion command.
    UpdateDownload and run the script file required for the agent update.
    Table. Managing Event Agents
    Reference

    To check the agent service status, use the method below.

    • windows: Task Manager → service → winlogbeat → Status(Running)
    Caution
    Agent command provision is offered independently of the Instance status of the Virtual Server (Bare Metal Server).

    3.2.7 - Appendix A. Service-specific Monitoring Targets

    Compute type

    Virtual Server

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceOSAgent
    Agentless
    1m
    logOSAgentWhen a log occurs
    StatusOSAgentless1m
    Table. Virtual Server Monitoring Information
    Reference
    If you change the Virtual Server’s server type, monitoring performance metric data may not be collected correctly for a short period. Normal performance metrics will be collected in the next collection cycle (1 minute).

    GPU Server

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceOSAgent
    Agentless
    1m
    logOSAgentWhen a log occurs
    statusOSAgentless1m
    Table. GPU Server Monitoring Information

    Bare Metal Server

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceOSAgent1m
    logOSAgentWhen a log occurs
    statusOSN/A-
    Table. Bare Metal Server Monitoring Information

    Multi-node GPU Cluster [Cluster Fabric]

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceOSAgent1m
    logOSAgentWhen a log occurs
    statusOSN/A-
    Table. Multi-node GPU Cluster [Cluster Fabric] Monitoring Information

    Multi-node GPU Cluster [Node]

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceOSAgent1m
    logOSAgentWhen a log occurs
    StatusOSN/A-
    Table. Multi-node GPU Cluster [Node] Monitoring Information

    Storage type

    The monitoring targets, collection methods, and collection intervals are the same for all storage-type services.

    • File Storage
    • Object Storage
    • Block Storage(BM)
    • Block Storage(VM)
    CategoryMonitoring targetCollection methodCollection interval
    PerformanceStorageAgentless1m
    logStorageN/A-
    statusStorageAgentless1m
    Table. Storage type monitoring information

    Database type

    The monitoring targets, collection methods, and collection intervals are the same for all Database-type services.

    • PostgreSQL(DBaaS)
    • MariaDB(DBaaS)
    • MySQL(DBaaS)
    • Microsoft SQL Server
    • EPAS
    • CacheStore(DBaaS)
      • Redis
      • Valkey
    CategoryMonitoring targetCollection methodCollection interval
    PerformanceDatabase Process, OSAgent1m
    logDatabase Process, OSAgentWhen a log occurs
    statusDatabase ProcessAgent1m
    OSAgentless1m
    Table. Database type monitoring information

    Data Analytics type

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceData Analytics Process, OSAgent1m
    logData Analytics Process, OSAgentWhen a log occurs
    statusData Analytics ProcessAgent1m
    OSAgentless1m
    Table. Data Analytics type monitoring information

    Container type

    Kubernetes Engine

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentless5m
    logCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentlessWhen a log occurs
    statusCluster, Namespace, Node, ReplicaSet, Deployment, StatefulSet, DaemonSet, Job, CronJob, PodAgentless5m
    Table. Kubernetes Engine Monitoring Information

    Container Registry

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceContainer RegistryAgentless5m
    logContainer RegistryAgentlessWhen a log occurs
    statusContainer RegistryAgentless5m
    Table. Container Registry monitoring information

    Networking type

    VPC

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceInternet GatewayAgentless5m
    logInternet GatewayN/A-
    statusInternet GatewayN/A-
    Table. Internet Gateway Monitoring Information
    Caution
    Performance monitoring is only possible when an Internet Gateway has been created.

    Load Balancer(OLD)

    Load Balancer(OLD)

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceLoad BalencerAgentless5m
    logLoad BalencerN/A-
    statusLoad BalencerAgentless5m
    Table. Load Balancer Monitoring Information

    Load Balancer Listener(OLD)

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceLoad Balencer ListenerAgentless5m
    logLoad Balencer ListenerN/A-
    statusLoad Balencer ListenerAgentless5m
    Table. Load Balancer Listener Monitoring Information

    Load Balancer

    Load Balancer

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceLoad BalencerAgentless5m
    logLoad BalencerN/A-
    statusLoad BalencerAgentless5m
    Table. Load Balancer Monitoring Information

    Load Balancer Listener

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceLoad Balencer ListenerAgentless5m
    logLoad Balencer ListenerN/A-
    statusLoad Balencer ListenerAgentless5m
    Table. Load Balancer Listener Monitoring Information

    Load Balancer Server Group

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceLoad Balencer Server GroupAgentless5m
    logLoad Balencer Server GroupN/A-
    statusLoad Balencer Server GroupAgentless5m
    Table. Load Balancer Server Group Monitoring Information

    Direct Connect

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceDirect ConnectAgentless5m
    logDirect ConnectN/A-
    statusDirect ConnectN/A-
    Table. Direct Connect Monitoring Information

    Cloud WAN

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceCloud WANAgentless10m
    logCloud WANN/A-
    statusCloud WANAgentless10m
    Table. Cloud WAN Monitoring Information

    Global CDN

    CategoryMonitoring targetCollection methodCollection interval
    PerformanceGlobal CDNAgentless5m
    logGlobal CDNN/A-
    statusGlobal CDNAgentless5m
    Table. Global CDN Monitoring Information

    3.2.8 - Appendix B. Service-specific Performance Metrics

    Compute type

    Virtual Server

    Agentless (basic metrics)

    Performance Item Group NamePerformance item namecollection unitCollection intervaldescription
    CPUCPU Usage/Core [Basic]%1mPercentage of CPU time used, excluding Idle and IOWait states (normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Cores [Basic]cnt1mNumber of virtual processor cores allocated to the virtual machine
    MemoryMemory Total [Basic]bytes1mMemory capacity available for use in the domain
    MemoryMemory Used [Basic]bytes1mCurrent memory usage
    MemoryMemory Swap In [Basic]bytes1mSwap In memory in bytes
    MemoryMemory Swap Out [Basic]bytes1mSwap Out memory in bytes
    MemoryMemory Free [Bytes]bytes1mUnused memory capacity in the system
    MemoryMemory Usage [Basic]%1mCurrent memory usage rate
    DiskDisk Read Bytes [Basic]bytes1mRead byte count
    DiskDisk Read Requests [Basic]cnt1mRead request count
    DiskDisk Write Bytes [Basic]bytes1mWrite byte count
    DiskDisk Write Requests [Basic]cnt1mNumber of write requests
    StateInstance State [Basic]enum1mVM status
    NetworkNetwork In Bytes [Basic]bytes1mReceived bytes
    NetworkNetwork In Dropped [Basic]cnt1mIncoming packet drop
    NetworkNetwork In Errors [Basic]cnt1mReceive error
    NetworkNetwork In Packets [Basic]cnt1mReceived packet
    NetworkNetwork Out Bytes [Basic]bytes1mTransmit bytes
    NetworkNetwork Out Dropped [Basic]cnt1mTransmit packet drop
    NetworkNetwork Out Errors [Basic]cnt1mTransmission error
    NetworkNetwork Out Packets [Basic]cnt1mTransmit packet
    NetworkNetwork In Bytes [Delta Basic]bytes1mReceived bytes (delta value)
    NetworkNetwork In Dropped [Delta Basic]cnt1mReceived packet drop (delta value)
    NetworkNetwork In Errors [Delta Basic]cnt1mReceive error (delta value)
    NetworkNetwork In Packets [Delta Basic]cnt1mReceived packet (delta value)
    NetworkNetwork Out Bytes [Delta Basic]bytes1mTransmitted bytes (delta value)
    NetworkNetwork Out Dropped [Delta Basic]cnt1mTransmit packet drop (delta value)
    NetworkNetwork Out Errors [Delta Basic]cnt1mTransmission error (delta value)
    NetworkNetwork Out Packets [Delta Basic]cnt1mTransmitted packet (delta value)
    Table. Virtual Server (Agentless) Performance Metrics
    Reference
    • For Windows OS, you must install the monitoring performance Agent to provide memory performance metrics.

    Agent (Detailed Metrics)

    Performance Item Group NamePerformance item namecollection unitCollection intervaldescription
    CPUCore Usage [IO Wait]%1mRatio of CPU time spent in wait state (disk wait)
    CPUCore Usage [System]%1mProportion of CPU time spent in kernel space
    CPUCore Usage [User]%1mProportion of CPU time spent in user space
    CPUCPU Corescnt1mThe number of CPU cores on the host. The maximum value of the unnormalized ratio is 100%* of a core. The unnormalized ratio already incorporates this value, and the maximum value is 100%* of a core.
    CPUCPU Usage [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (when all 4 cores are used at 100%: 400%)
    CPUCPU Usage [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage [System]%1mPercentage of CPU time used by the kernel (when all 4 cores are used at 100%: 400%)
    CPUCPU Usage [User]%1mPercentage of CPU time used in user space. (If all four cores are used at 100%, it is 400%)
    CPUCPU Usage/Core [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (value normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Usage/Core [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage/Core [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage/Core [System]%1mPercentage of CPU time used by the kernel (value normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Usage/Core [User]%1mPercentage of CPU time used in user space. (Value normalized by the number of cores; using all four cores at 100% equals 100%)
    DiskDisk CPU Usage [IO Request]%1mIt is the proportion of CPU time during which I/O requests for the device were executed (device bandwidth utilization). If this value approaches 100%, the device becomes saturated.
    DiskDisk Queue Size [Avg]num1mThe average queue length of requests executed on the device.
    DiskDisk Read Bytesbytes1mThe number of bytes per second read from the device.
    DiskDisk Read Bytes [Delta Avg]bytes1mAverage of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Max]bytes1mMaximum system.diskio.read.bytes_delta of individual disks
    DiskDisk Read Bytes [Delta Min]bytes1mMinimum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Sum]bytes1mSum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta]bytes1mDelta of the system.diskio.read.bytes value for each disk
    DiskDisk Read Bytes [Success]bytes1mTotal number of bytes successfully read. On Linux, assuming a sector size of 512, it is the number of sectors read multiplied by 512.
    DiskDisk Read Requestscnt1mNumber of read requests to the disk device per second
    DiskDisk Read Requests [Delta Avg]cnt1mAverage of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Max]cnt1mMaximum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Min]cnt1mMinimum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Sum]cnt1mSum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Success Delta]cnt1mDelta of system.diskio.read.count for each disk
    DiskDisk Read Requests [Success]cnt1mTotal number of reads successfully completed
    DiskDisk Request Size [Avg]num1mAverage size of requests executed on the device (unit: sectors).
    DiskDisk Service Time [Avg]ms1mAverage service time (ms) of input requests executed on the device.
    DiskDisk Wait Time [Avg]ms1mAverage time taken for requests executed on the supported device.
    DiskDisk Wait Time [Read]ms1mAverage disk wait time
    DiskDisk Wait Time [Write]ms1mDisk average wait time
    DiskDisk Write Bytes [Delta Avg]bytes1mAverage of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Max]bytes1mMaximum system.diskio.write.bytes_delta of individual disks
    DiskDisk Write Bytes [Delta Min]bytes1mMinimum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Sum]bytes1mSum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta]bytes1mDelta of the system.diskio.write.bytes value for each individual disk
    DiskDisk Write Bytes [Success]bytes1mTotal number of bytes successfully written. On Linux, assuming a sector size of 512, it is the number of sectors written multiplied by 512.
    DiskDisk Write Requestscnt1mNumber of write requests to the disk device per second
    DiskDisk Write Requests [Delta Avg]cnt1mAverage of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Max]cnt1mMaximum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Min]cnt1mMinimum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Sum]cnt1mSum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Success Delta]cnt1mDelta of system.diskio.write.count for each disk
    DiskDisk Write Requests [Success]cnt1mTotal number of successful writes
    DiskDisk Writes Bytesbytes1mThe number of bytes per second written to the device.
    FileSystemFilesystem Hang Checkstate1mfilesystem (local/NFS) hang check (normal:1, abnormal:0)
    FileSystemFilesystem Nodescnt1mTotal number of file nodes in the file system.
    FileSystemFilesystem Nodes [Free]cnt1mIt is the total number of available file nodes in the file system.
    FileSystemFilesystem Size [Available]bytes1mDisk space (bytes) that an unauthorized user can use.
    FileSystemFilesystem Size [Free]bytes1mAvailable disk space (bytes)
    FileSystemFilesystem Size [Total]bytes1mTotal disk space (bytes)
    FileSystemFilesystem Usage%1mUsed disk space percentage
    FileSystemFilesystem Usage [Avg]%1mAverage of individual filesystem.used.pct
    FileSystemFilesystem Usage [Inode]%1minode usage
    FileSystemFilesystem Usage [Max]%1mmax among individual filesystem.used.pct
    FileSystemFilesystem Usage [Min]%1mminimum among individual filesystem.used.pct
    FileSystemFilesystem Usage [Total]%1m-
    FileSystemFilesystem Usedbytes1mUsed disk space (bytes)
    FileSystemFilesystem Used [Inode]bytes1minode usage
    MemoryMemory Freebytes1mTotal amount of available memory (bytes). Memory used by system cache and buffers is not included (see system.memory.actual.free).
    MemoryMemory Free [Actual]bytes1mActual usable memory (bytes). The calculation method varies by OS; on Linux, it uses MemAvailable from /proc/ meminfo, or if meminfo cannot be used, it calculates from available memory plus cache and buffers. On OSX, it is the sum of usable memory and inactive memory. On Windows, it is a value such as system.memory.free.
    MemoryMemory Free [Swap]bytes1mAvailable swap memory.
    MemoryMemory Totalbytes1mtotal memory
    MemoryMemory Total [Swap]bytes1mTotal swap memory.
    MemoryMemory Usage%1mPercentage of used memory
    MemoryMemory Usage [Actual]%1mPercentage of memory actually used
    MemoryMemory Usage [Cache Swap]%1mcached swap usage
    MemoryMemory Usage [Swap]%1mPercentage of used swap memory
    MemoryMemory Usedbytes1mused memory
    MemoryMemory Used [Actual]bytes1mActual memory used (bytes). The value obtained by subtracting used memory from total memory. Available memory is calculated differently for each OS (see system.actual.free).
    MemoryMemory Used [Swap]bytes1mUsed swap memory.
    NetworkCollisionscnt1mNetwork collision
    NetworkNetwork In Bytesbytes1mNumber of received bytes
    NetworkNetwork In Bytes [Delta Avg]bytes1mAverage of system.network.in.bytes_delta for individual networks
    NetworkNetwork In Bytes [Delta Max]bytes1mMaximum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Min]bytes1mMinimum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Sum]bytes1mSum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta]bytes1mDelta of received byte count
    NetworkNetwork In Droppedcnt1mNumber of deleted packets among incoming packets
    NetworkNetwork In Errorscnt1mNumber of errors during reception
    NetworkNetwork In Packetscnt1mNumber of received packets
    NetworkNetwork In Packets [Delta Avg]cnt1mAverage of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Max]cnt1mMaximum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Min]cnt1mMinimum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Sum]cnt1mSum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta]cnt1mDelta of received packet count
    NetworkNetwork Out Bytesbytes1mNumber of transmitted bytes
    NetworkNetwork Out Bytes [Delta Avg]bytes1mAverage of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Max]bytes1mMaximum of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Min]bytes1mMinimum system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Sum]bytes1mSum of system.network.out.bytes_delta of individual networks
    NetworkNetwork Out Bytes [Delta]bytes1mDelta of transmitted byte count
    NetworkNetwork Out Droppedcnt1mNumber of packets deleted among outgoing packets. This value is not reported by the operating system, so it is always 0 on Darwin and BSD.
    NetworkNetwork Out Errorscnt1mNumber of errors during transmission
    NetworkNetwork Out Packetscnt1mNumber of transmitted packets
    NetworkNetwork Out Packets [Delta Avg]cnt1mAverage of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Max]cnt1mMaximum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Min]cnt1mMinimum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Sum]cnt1mSum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta]cnt1mDelta of transmitted packet count
    NetworkOpen Connections [TCP]cnt1mAll open TCP connections
    NetworkOpen Connections [UDP]cnt1mAll open UDP connections
    NetworkPort Usage%1mUsage rate of connectable ports
    NetworkSYN Sent Socketscnt1mNumber of sockets in SYN_SENT state (when connecting from local to remote)
    ProcessKernel PID Maxcnt1mkernel.pid_max value
    ProcessKernel Thread Maxcnt1mkernel.threads-max value
    ProcessProcess CPU Usage%1mThe percentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value shown for the process by the top command on Unix systems.
    ProcessProcess CPU Usage/Core%1mThe percentage of CPU time used by the process since the last event. Normalized by the number of cores, with a value between 0 and 100%.
    ProcessProcess Memory Usage%1mProportion of main memory (RAM) occupied by the process
    ProcessProcess Memory Usedbytes1mResident Set size. The amount of memory a process occupies in RAM. In Windows, it is the current working set size.
    ProcessProcess PIDPID1mprocess pid
    ProcessProcess PPIDPID1mPID of the parent process
    ProcessProcesses [Dead]cnt1mNumber of dead processes
    ProcessProcesses [Idle]cnt1mNumber of idle processes
    ProcessProcesses [Running]cnt1mrunning processes count
    ProcessProcesses [Sleeping]cnt1msleeping processes count
    ProcessProcesses [Stopped]cnt1mstopped processes count
    ProcessProcesses [Total]cnt1mTotal number of processes
    ProcessProcesses [Unknown]cnt1mNumber of processes with an unknown or unsearchable status
    ProcessProcesses [Zombie]cnt1mNumber of zombie processes
    ProcessRunning Process Usage%1mprocess usage
    ProcessRunning Processescnt1mrunning processes count
    ProcessRunning Thread Usage%1mThread usage rate
    ProcessRunning Threadscnt1mTotal number of threads running in running processes
    SystemContext Switchescnt1mcontext switch count (per second)
    SystemLoad/Core [1 min]cnt1mThe load over the last 1 minute divided by the number of cores
    SystemLoad/Core [15 min]cnt1mThe load over the last 15 minutes divided by the number of cores
    SystemLoad/Core [5 min]cnt1mThe load over the last 5 minutes divided by the number of cores
    SystemMultipaths [Active]cnt1mExternal storage connection path state = active count
    SystemMultipaths [Failed]cnt1mExternal storage connection path state = failed count
    SystemMultipaths [Faulty]cnt1mExternal storage connection path state = faulty count
    SystemNTP Offsetnum1mthe measured offset of the last sample (time difference between the NTP server and the local environment)
    SystemRun Queue Lengthnum1mExecution queue length
    SystemUptimems1mOS uptime (milliseconds).
    WindowsContext Switchiescnt1mCPU context switch count (per second)
    WindowsDisk Read Bytes [Sec]cnt1mBytes read per second on a Windows logical disk
    WindowsDisk Read Time [Avg]sec1mAverage data read time (seconds)
    WindowsDisk Transfer Time [Avg]sec1mDisk average wait time
    WindowsDisk Usage%1mDisk usage
    WindowsDisk Write Bytes [Sec]cnt1mNumber of bytes written in one second on a Windows logical disk
    WindowsDisk Write Time [Avg]sec1mAverage data write time (seconds)
    WindowsPagingfile Usage%1mPaging file usage
    WindowsPool Used [Non Paged]bytes1mNonpaged Pool usage in kernel memory
    WindowsPool Used [Paged]bytes1mPaged Pool usage in kernel memory
    WindowsProcess [Running]cnt1mNumber of processes currently running
    WindowsThreads [Running]cnt1mNumber of threads currently running
    WindowsThreads [Waiting]cnt1mNumber of threads waiting for processor time
    Table. Virtual Server (Agent) Performance Items

    GPU Server

    Agentless (basic metrics)

    Performance Item Group NamePerformance item namecollection unitCollection intervaldescription
    CPUCPU Usage/Core [Basic]%1mPercentage of CPU time used, excluding Idle and IOWait states (normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Cores [Basic]cnt1mNumber of virtual processor cores allocated to the virtual machine
    MemoryMemory Total [Basic]bytes1mMemory capacity available in the domain
    MemoryMemory Used [Basic]bytes1mThe amount of memory currently in use
    MemoryMemory Swap In [Basic]bytes1mSwap In memory in bytes
    MemoryMemory Swap Out [Basic]bytes1mSwap Out memory in bytes
    MemoryMemory Free [Bytes]bytes1mUnused memory capacity in the system
    MemoryMemory Usage [Basic]%1mCurrent memory usage rate
    DiskDisk Read Bytes [Basic]bytes1mRead byte count
    DiskDisk Read Requests [Basic]cnt1mRead request count
    DiskDisk Write Bytes [Basic]bytes1mWrite byte count
    DiskDisk Write Requests [Basic]cnt1mNumber of write requests
    StateInstance State [Basic]enum1mVM status
    NetworkNetwork In Bytes [Basic]bytes1mReceived bytes
    NetworkNetwork In Dropped [Basic]cnt1mIncoming packet drop
    NetworkNetwork In Errors [Basic]cnt1mReceive error
    NetworkNetwork In Packets [Basic]cnt1mReceived packet
    NetworkNetwork Out Bytes [Basic]bytes1mTransmit bytes
    NetworkNetwork Out Dropped [Basic]cnt1mTransmit packet drop
    NetworkNetwork Out Errors [Basic]cnt1mTransmission error
    NetworkNetwork Out Packets [Basic]cnt1mtransmitted packet
    NetworkNetwork In Bytes [Delta Basic]bytes1mReceived bytes (delta value)
    NetworkNetwork In Dropped [Delta Basic]cnt1mReceived packet drop (delta value)
    NetworkNetwork In Errors [Delta Basic]cnt1mReceive error (delta value)
    NetworkNetwork In Packets [Delta Basic]cnt1mReceived packet (delta value)
    NetworkNetwork Out Bytes [Delta Basic]bytes1mTransmitted bytes (delta value)
    NetworkNetwork Out Dropped [Delta Basic]cnt1mTransmit packet drop (delta value)
    NetworkNetwork Out Errors [Delta Basic]cnt1mTransmission error (delta value)
    NetworkNetwork Out Packets [Delta Basic]cnt1mTransmitted packet (delta value)
    Table. GPU Server (Agentless) Performance Metrics

    Agent (Detailed Metrics)

    Performance Item Group NamePerformance item namecollection unitCollection intervaldescription
    GPUGPU Countcnt1mGPU count
    GPUGPU Memory Usage%1mMemory usage
    GPUGPU Memory Usedbytes1mMemory usage
    GPUGPU Temperature1mGPU temperature
    GPUGPU Usage%1mTotal GPU utilization sum (800% when all 8 GPUs are used at 100%)
    GPUGPU Usage [Avg]%1mOverall average GPU utilization (%)
    GPUGPU Power CapW1mMaximum power capacity of the GPU
    GPUGPU Power UsageW1mCurrent GPU power usage
    GPUGPU Memory Usage [Avg]%1mGPU Memory Uti. AVG
    GPUGPU Count in usecnt1mNumber of GPUs currently utilized by jobs on the node
    GPUExecution State for nvidia-smistate1mResult of running the nvidia-smi command
    CPUCore Usage [IO Wait]%1mRatio of CPU time spent in wait state (disk wait)
    CPUCore Usage [System]%1mProportion of CPU time spent in kernel space
    CPUCore Usage [User]%1mProportion of CPU time spent in user space
    CPUCPU Corescnt1mThe number of CPU cores on the host. The maximum value of the unnormalized ratio is 100%* of a core. The unnormalized ratio already incorporates this value, and the maximum value is 100%* of a core.
    CPUCPU Usage [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (when all four cores are used at 100%: 400%)
    CPUCPU Usage [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage [System]%1mCPU time usage percentage in the kernel (when all 4 cores are used at 100%: 400%)
    CPUCPU Usage [User]%1mPercentage of CPU time used in user space. (If all 4 cores are used at 100%, it is 400%)
    CPUCPU Usage/Core [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (value normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Usage/Core [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage/Core [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage/Core [System]%1mPercentage of CPU time used by the kernel (value normalized by the number of cores; 100% when all four cores are utilized at 100%)
    CPUCPU Usage/Core [User]%1mPercentage of CPU time used in user space. (Value normalized by the number of cores; using all four cores at 100% equals 100%)
    DiskDisk CPU Usage [IO Request]%1mThe proportion of CPU time during which I/O requests to the device were executed (device bandwidth utilization). If this value approaches 100%, the device becomes saturated.
    DiskDisk Queue Size [Avg]num1mThe average queue length of requests executed for the device.
    DiskDisk Read Bytesbytes1mThe number of bytes read per second from the device.
    DiskDisk Read Bytes [Delta Avg]bytes1mAverage of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Max]bytes1mMaximum system.diskio.read.bytes_delta of individual disks
    DiskDisk Read Bytes [Delta Min]bytes1mMinimum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Sum]bytes1mSum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta]bytes1mDelta of the system.diskio.read.bytes value for each disk
    DiskDisk Read Bytes [Success]bytes1mTotal number of bytes successfully read. On Linux, assuming a sector size of 512, it is the number of sectors read multiplied by 512.
    DiskDisk Read Requestscnt1mNumber of read requests to the disk device per second
    DiskDisk Read Requests [Delta Avg]cnt1mAverage of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Max]cnt1mMaximum system.diskio.read.count_delta of individual disks
    DiskDisk Read Requests [Delta Min]cnt1mMinimum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Sum]cnt1mSum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Success Delta]cnt1mDelta of system.diskio.read.count for each disk
    DiskDisk Read Requests [Success]cnt1mTotal number of successful reads
    DiskDisk Request Size [Avg]num1mAverage size of requests executed on the device (unit: sectors).
    DiskDisk Service Time [Avg]ms1mAverage service time (ms) of input requests executed on the device.
    DiskDisk Wait Time [Avg]ms1mAverage time taken for requests executed on the supported device.
    DiskDisk Wait Time [Read]ms1mAverage disk wait time
    DiskDisk Wait Time [Write]ms1mAverage disk wait time
    DiskDisk Write Bytes [Delta Avg]bytes1mAverage of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Max]bytes1mMaximum system.diskio.write.bytes_delta of individual disks
    DiskDisk Write Bytes [Delta Min]bytes1mMinimum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Sum]bytes1mSum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta]bytes1mDelta of the system.diskio.write.bytes value for each disk
    DiskDisk Write Bytes [Success]bytes1mTotal number of bytes successfully written. On Linux, assuming a sector size of 512, it is the number of sectors written multiplied by 512.
    DiskDisk Write Requestscnt1mNumber of write requests to the disk device per second
    DiskDisk Write Requests [Delta Avg]cnt1mAverage of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Max]cnt1mMaximum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Min]cnt1mMinimum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Sum]cnt1mSum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Success Delta]cnt1mDelta of system.diskio.write.count for each disk
    DiskDisk Write Requests [Success]cnt1mTotal number of successful writes
    DiskDisk Writes Bytesbytes1mThe number of bytes per second written to the device.
    FileSystemFilesystem Hang Checkstate1mfilesystem(local/NFS) hang check (normal:1, abnormal:0)
    FileSystemFilesystem Nodescnt1mTotal number of file nodes in the file system.
    FileSystemFilesystem Nodes [Free]cnt1mTotal number of available file nodes in the file system.
    FileSystemFilesystem Size [Available]bytes1mDisk space (bytes) that an unauthorized user can use.
    FileSystemFilesystem Size [Free]bytes1mAvailable disk space (bytes)
    FileSystemFilesystem Size [Total]bytes1mTotal disk space (bytes)
    FileSystemFilesystem Usage%1mUsed disk space percentage
    FileSystemFilesystem Usage [Avg]%1mAverage of individual filesystem.used.pct
    FileSystemFilesystem Usage [Inode]%1minode usage
    FileSystemFilesystem Usage [Max]%1mmax among individual filesystem.used.pct
    FileSystemFilesystem Usage [Min]%1mminimum among individual filesystem.used.pct
    FileSystemFilesystem Usage [Total]%1m-
    FileSystemFilesystem Usedbytes1mUsed disk space (bytes)
    FileSystemFilesystem Used [Inode]bytes1minode usage
    MemoryMemory Freebytes1mTotal amount of available memory (bytes). Does not include memory used by system cache and buffers (see system.memory.actual.free).
    MemoryMemory Free [Actual]bytes1mActual usable memory (bytes). The calculation method varies by OS; on Linux, it is MemAvailable from /proc/meminfo, or if meminfo is unavailable, it is calculated from available memory plus cache and buffers. On macOS, it is the sum of usable memory and inactive memory. On Windows, it is a value such as system.memory.free.
    MemoryMemory Free [Swap]bytes1mAvailable swap memory.
    MemoryMemory Totalbytes1mtotal memory
    MemoryMemory Total [Swap]bytes1mTotal swap memory.
    MemoryMemory Usage%1mPercentage of used memory
    MemoryMemory Usage [Actual]%1mPercentage of memory actually used
    MemoryMemory Usage [Cache Swap]%1mCached swap usage
    MemoryMemory Usage [Swap]%1mPercentage of used swap memory
    MemoryMemory Usedbytes1mused memory
    MemoryMemory Used [Actual]bytes1mActual memory used (bytes). The value obtained by subtracting used memory from total memory. Available memory is calculated differently for each OS (see system.actual.free).
    MemoryMemory Used [Swap]bytes1mUsed swap memory.
    NetworkCollisionscnt1mNetwork collision
    NetworkNetwork In Bytesbytes1mNumber of received bytes
    NetworkNetwork In Bytes [Delta Avg]bytes1mAverage of system.network.in.bytes_delta for individual networks
    NetworkNetwork In Bytes [Delta Max]bytes1mMaximum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Min]bytes1mMinimum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Sum]bytes1mSum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta]bytes1mDelta of received byte count
    NetworkNetwork In Droppedcnt1mNumber of deleted packets among incoming packets
    NetworkNetwork In Errorscnt1mNumber of errors during reception
    NetworkNetwork In Packetscnt1mNumber of received packets
    NetworkNetwork In Packets [Delta Avg]cnt1mAverage of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Max]cnt1mMaximum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Min]cnt1mMinimum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Sum]cnt1mSum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta]cnt1mDelta of received packet count
    NetworkNetwork Out Bytesbytes1mNumber of transmitted bytes
    NetworkNetwork Out Bytes [Delta Avg]bytes1mAverage of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Max]bytes1mMaximum of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Min]bytes1mMinimum of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Sum]bytes1mSum of system.network.out.bytes_delta for individual networks
    NetworkNetwork Out Bytes [Delta]bytes1mDelta of transmitted byte count
    NetworkNetwork Out Droppedcnt1mNumber of packets deleted among outgoing packets. This value is not reported by the operating system, so it is always 0 on Darwin and BSD.
    NetworkNetwork Out Errorscnt1mNumber of errors during transmission
    NetworkNetwork Out Packetscnt1mNumber of transmitted packets
    NetworkNetwork Out Packets [Delta Avg]cnt1mAverage of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Max]cnt1mMaximum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Min]cnt1mMinimum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Sum]cnt1mSum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta]cnt1mDelta of transmitted packet count
    NetworkOpen Connections [TCP]cnt1mAll open TCP connections
    NetworkOpen Connections [UDP]cnt1mAll open UDP connections
    NetworkPort Usage%1mConnectable port utilization
    NetworkSYN Sent Socketscnt1mNumber of sockets in SYN_SENT state (when connecting from local to remote)
    ProcessKernel PID Maxcnt1mkernel.pid_max value
    ProcessKernel Thread Maxcnt1mkernel.threads-max value
    ProcessProcess CPU Usage%1mThe percentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value shown for the process by the top command on Unix systems.
    ProcessProcess CPU Usage/Core%1mThe percentage of CPU time used by the process since the last event. Normalized by the number of cores, with a value between 0 and 100%.
    ProcessProcess Memory Usage%1mThe proportion of main memory (RAM) occupied by the process
    ProcessProcess Memory Usedbytes1mResident Set size. The amount of memory a process occupies in RAM. In Windows, it is the current working set size.
    ProcessProcess PIDPID1mprocess pid
    ProcessProcess PPIDPID1mParent process PID
    ProcessProcesses [Dead]cnt1mNumber of dead processes
    ProcessProcesses [Idle]cnt1mNumber of idle processes
    ProcessProcesses [Running]cnt1mrunning processes count
    ProcessProcesses [Sleeping]cnt1msleeping processes count
    ProcessProcesses [Stopped]cnt1mstopped processes count
    ProcessProcesses [Total]cnt1mTotal number of processes
    ProcessProcesses [Unknown]cnt1mNumber of processes with an unknown or unsearchable status
    ProcessProcesses [Zombie]cnt1mNumber of zombie processes
    ProcessRunning Process Usage%1mprocess usage rate
    ProcessRunning Processescnt1mrunning processes count
    ProcessRunning Thread Usage%1mThread usage rate
    ProcessRunning Threadscnt1mTotal number of threads running in running processes
    SystemContext Switchescnt1mcontext switch count (per second)
    SystemLoad/Core [1 min]cnt1mThe load over the last 1 minute divided by the number of cores
    SystemLoad/Core [15 min]cnt1mThe load over the last 15 minutes divided by the number of cores
    SystemLoad/Core [5 min]cnt1mThe load over the last 5 minutes divided by the number of cores
    SystemMultipaths [Active]cnt1mExternal storage connection path state = active count
    SystemMultipaths [Failed]cnt1mExternal storage connection path state = failed count
    SystemMultipaths [Faulty]cnt1mExternal storage connection path state = faulty count
    SystemNTP Offsetnum1mthe measured offset of the last sample (time difference between the NTP server and the local environment)
    SystemRun Queue Lengthnum1mExecution queue length
    SystemUptimems1mOS uptime (uptime). (milliseconds)
    WindowsContext Switchiescnt1mCPU context switch count (per second)
    WindowsDisk Read Bytes [Sec]cnt1mNumber of bytes read in one second from a Windows logical disk
    WindowsDisk Read Time [Avg]sec1mAverage data read time (seconds)
    WindowsDisk Transfer Time [Avg]sec1mDisk average wait time
    WindowsDisk Usage%1mDisk usage
    WindowsDisk Write Bytes [Sec]cnt1mBytes written per second on a Windows logical disk
    WindowsDisk Write Time [Avg]sec1mAverage data write time (seconds)
    WindowsPagingfile Usage%1mPaging file usage
    WindowsPool Used [Non Paged]bytes1mNonpaged Pool usage in kernel memory
    WindowsPool Used [Paged]bytes1mPaged Pool usage in kernel memory
    WindowsProcess [Running]cnt1mNumber of processes currently running
    WindowsThreads [Running]cnt1mNumber of threads currently running
    WindowsThreads [Waiting]cnt1mNumber of threads waiting for processor time
    Table. GPU Server (Agent) Performance Metrics

    Bare Metal Server

    Agent (detailed metrics)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    CPUCore Usage [IO Wait]%1mProportion of CPU time spent waiting (disk wait)
    CPUCore Usage [System]%1mProportion of CPU time spent in kernel space
    CPUCore Usage [User]%1mProportion of CPU time spent in user space
    CPUCPU Corescnt1mThe number of CPU cores on the host. The maximum value of the unnormalized ratio is 100%* of a core. The unnormalized ratio already incorporates this value, and its maximum is 100%* of a core.
    CPUCPU Usage [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (when all 4 cores are used at 100%: 400%)
    CPUCPU Usage [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage [System]%1mPercentage of CPU time used by the kernel (when all 4 cores are used at 100%: 400%)
    CPUCPU Usage [User]%1mPercentage of CPU time used in user space. (If all 4 cores are used at 100%, it is 400%)
    CPUCPU Usage/Core [Active]%1mPercentage of CPU time used excluding Idle and IOWait states (value normalized by the number of cores; 100% when all four cores are fully utilized)
    CPUCPU Usage/Core [Idle]%1mIt is the proportion of CPU time spent in idle state.
    CPUCPU Usage/Core [IO Wait]%1mIt is the proportion of CPU time spent in a waiting state (disk wait).
    CPUCPU Usage/Core [System]%1mPercentage of CPU time used by the kernel (value normalized by the number of cores; 100% when all 4 cores are fully utilized)
    CPUCPU Usage/Core [User]%1mPercentage of CPU time used in user space. (Value normalized by the number of cores; using all four cores at 100% each equals 100%)
    DiskDisk CPU Usage [IO Request]%1mThe proportion of CPU time during which I/O requests to the device were executed (device bandwidth utilization). If this value approaches 100%, the device becomes saturated.
    DiskDisk Queue Size [Avg]num1mThe average queue length of requests executed for the device.
    DiskDisk Read Bytesbytes1mThe number of bytes read per second from the device.
    DiskDisk Read Bytes [Delta Avg]bytes1mAverage of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Max]bytes1mMaximum system.diskio.read.bytes_delta of individual disks
    DiskDisk Read Bytes [Delta Min]bytes1mMinimum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta Sum]bytes1mSum of system.diskio.read.bytes_delta for individual disks
    DiskDisk Read Bytes [Delta]bytes1mDelta of the system.diskio.read.bytes value for each disk
    DiskDisk Read Bytes [Success]bytes1mTotal number of bytes successfully read. On Linux, the sector size is assumed to be 512, and the value is the number of sectors read multiplied by 512.
    DiskDisk Read Requestscnt1mNumber of read requests to the disk device per second
    DiskDisk Read Requests [Delta Avg]cnt1mAverage of the system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Max]cnt1mMaximum system.diskio.read.count_delta of individual disks
    DiskDisk Read Requests [Delta Min]cnt1mMinimum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Delta Sum]cnt1mSum of system.diskio.read.count_delta for individual disks
    DiskDisk Read Requests [Success Delta]cnt1mDelta of system.diskio.read.count for each disk
    DiskDisk Read Requests [Success]cnt1mTotal number of successful reads
    DiskDisk Request Size [Avg]num1mIt is the average size of requests executed on the device (unit: sectors).
    DiskDisk Service Time [Avg]ms1mAverage service time (ms) of input requests executed on the device.
    DiskDisk Wait Time [Avg]ms1mAverage time taken for requests executed on the supported device.
    DiskDisk Wait Time [Read]ms1mAverage disk wait time
    DiskDisk Wait Time [Write]ms1mAverage disk wait time
    DiskDisk Write Bytes [Delta Avg]bytes1mAverage of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Max]bytes1mMaximum system.diskio.write.bytes_delta of individual disks
    DiskDisk Write Bytes [Delta Min]bytes1mMinimum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta Sum]bytes1mSum of system.diskio.write.bytes_delta for individual disks
    DiskDisk Write Bytes [Delta]bytes1mDelta of the system.diskio.write.bytes value for each disk
    DiskDisk Write Bytes [Success]bytes1mTotal number of bytes successfully written. On Linux, the sector size is assumed to be 512, and the value is the number of sectors written multiplied by 512.
    DiskDisk Write Requestscnt1mNumber of write requests to the disk device per second
    DiskDisk Write Requests [Delta Avg]cnt1mAverage of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Max]cnt1mMaximum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Min]cnt1mMinimum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Delta Sum]cnt1mSum of system.diskio.write.count_delta for individual disks
    DiskDisk Write Requests [Success Delta]cnt1mDelta of system.diskio.write.count for each disk
    DiskDisk Write Requests [Success]cnt1mTotal number of successful writes
    DiskDisk Writes Bytesbytes1mThe number of bytes per second written to the device.
    FileSystemFilesystem Hang Checkstate1mfilesystem(local/NFS) hang check (normal:1, abnormal:0)
    FileSystemFilesystem Nodescnt1mTotal number of file nodes in the file system.
    FileSystemFilesystem Nodes [Free]cnt1mTotal number of available file nodes in the file system.
    FileSystemFilesystem Size [Available]bytes1mDisk space (bytes) that an unauthorized user can use.
    FileSystemFilesystem Size [Free]bytes1mAvailable disk space (bytes)
    FileSystemFilesystem Size [Total]bytes1mTotal disk space (bytes)
    FileSystemFilesystem Usage%1mUsed disk space percentage
    FileSystemFilesystem Usage [Avg]%1mAverage of individual filesystem.used.pct
    FileSystemFilesystem Usage [Inode]%1minode usage
    FileSystemFilesystem Usage [Max]%1mmax among individual filesystem.used.pct
    FileSystemFilesystem Usage [Min]%1mminimum among individual filesystem.used.pct
    FileSystemFilesystem Usage [Total]%1m-
    FileSystemFilesystem Usedbytes1mUsed disk space (bytes)
    FileSystemFilesystem Used [Inode]bytes1minode usage
    MemoryMemory Freebytes1mTotal amount of available memory (bytes). Does not include memory used by system cache and buffers (see system.memory.actual.free).
    MemoryMemory Free [Actual]bytes1mActual usable memory (bytes). The calculation method varies by OS; on Linux, it is MemAvailable from /proc/ meminfo, or if meminfo cannot be used, it is calculated from available memory plus cache and buffers. On macOS, it is the sum of usable memory and inactive memory. On Windows, it is a value such as system.memory.free.
    MemoryMemory Free [Swap]bytes1mAvailable swap memory.
    MemoryMemory Totalbytes1mtotal memory
    MemoryMemory Total [Swap]bytes1mTotal swap memory.
    MemoryMemory Usage%1mPercentage of used memory
    MemoryMemory Usage [Actual]%1mPercentage of memory actually used
    MemoryMemory Usage [Cache Swap]%1mCached swap usage
    MemoryMemory Usage [Swap]%1mPercentage of used swap memory
    MemoryMemory Usedbytes1mused memory
    MemoryMemory Used [Actual]bytes1mActual memory used (bytes). The value obtained by subtracting used memory from total memory. Available memory is calculated differently for each OS (see system.actual.free).
    MemoryMemory Used [Swap]bytes1mUsed swap memory.
    NetworkCollisionscnt1mNetwork collision
    NetworkNetwork In Bytesbytes1mNumber of received bytes
    NetworkNetwork In Bytes [Delta Avg]bytes1mAverage of system.network.in.bytes_delta for individual networks
    NetworkNetwork In Bytes [Delta Max]bytes1mMaximum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Min]bytes1mMinimum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta Sum]bytes1mSum of system.network.in.bytes_delta for each network
    NetworkNetwork In Bytes [Delta]bytes1mDelta of received byte count
    NetworkNetwork In Droppedcnt1mNumber of deleted packets among incoming packets
    NetworkNetwork In Errorscnt1mNumber of errors during reception
    NetworkNetwork In Packetscnt1mNumber of received packets
    NetworkNetwork In Packets [Delta Avg]cnt1mAverage of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Max]cnt1mMaximum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Min]cnt1mMinimum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta Sum]cnt1mSum of system.network.in.packets_delta for each network
    NetworkNetwork In Packets [Delta]cnt1mDelta of received packet count
    NetworkNetwork Out Bytesbytes1mNumber of transmitted bytes
    NetworkNetwork Out Bytes [Delta Avg]bytes1mAverage of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Max]bytes1mMaximum of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Min]bytes1mMinimum of system.network.out.bytes_delta for each network
    NetworkNetwork Out Bytes [Delta Sum]bytes1mSum of system.network.out.bytes_delta for individual networks
    NetworkNetwork Out Bytes [Delta]bytes1mDelta of transmitted byte count
    NetworkNetwork Out Droppedcnt1mNumber of deleted packets among outgoing packets. This value is not reported by the operating system, so it is always 0 on Darwin and BSD.
    NetworkNetwork Out Errorscnt1mNumber of errors during transmission
    NetworkNetwork Out Packetscnt1mNumber of transmitted packets
    NetworkNetwork Out Packets [Delta Avg]cnt1mAverage of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Max]cnt1mMaximum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Min]cnt1mMinimum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta Sum]cnt1mSum of system.network.out.packets_delta for each network
    NetworkNetwork Out Packets [Delta]cnt1mDelta of transmitted packet count
    NetworkOpen Connections [TCP]cnt1mAll open TCP connections
    NetworkOpen Connections [UDP]cnt1mAll open UDP connections
    NetworkPort Usage%1mConnectable port utilization
    NetworkSYN Sent Socketscnt1mNumber of sockets in SYN_SENT state (when connecting from local to remote)
    ProcessKernel PID Maxcnt1mkernel.pid_max value
    ProcessKernel Thread Maxcnt1mkernel.threads-max value
    ProcessProcess CPU Usage%1mThe percentage of CPU time consumed by the process since the last update. This value is similar to the %CPU value shown for the process by the top command on Unix systems.
    ProcessProcess CPU Usage/Core%1mThe percentage of CPU time used by the process since the last event. Normalized by the number of cores, with a value between 0 and 100%.
    ProcessProcess Memory Usage%1mThe proportion of main memory (RAM) occupied by the process
    ProcessProcess Memory Usedbytes1mResident Set size. The amount of memory a process occupies in RAM. In Windows, it is the current working set size.
    ProcessProcess PIDPID1mprocess pid
    ProcessProcess PPIDPID1mParent process PID
    ProcessProcesses [Dead]cnt1mNumber of dead processes
    ProcessProcesses [Idle]cnt1mNumber of idle processes
    ProcessProcesses [Running]cnt1mrunning processes count
    ProcessProcesses [Sleeping]cnt1msleeping processes count
    ProcessProcesses [Stopped]cnt1mstopped processes count
    ProcessProcesses [Total]cnt1mTotal number of processes
    ProcessProcesses [Unknown]cnt1mNumber of processes with an unknown or unsearchable status
    ProcessProcesses [Zombie]cnt1mNumber of zombie processes
    ProcessRunning Process Usage%1mprocess usage rate
    ProcessRunning Processescnt1mrunning processes count
    ProcessRunning Thread Usage%1mThread usage rate
    ProcessRunning Threadscnt1mTotal number of threads running in running processes
    SystemContext Switchescnt1mcontext switch count (per second)
    SystemLoad/Core [1 min]cnt1mThe load over the last 1 minute divided by the number of cores
    SystemLoad/Core [15 min]cnt1mThe load over the last 15 minutes divided by the number of cores
    SystemLoad/Core [5 min]cnt1mThe load over the last 5 minutes divided by the number of cores
    SystemMultipaths [Active]cnt1mExternal storage connection path state = active count
    SystemMultipaths [Failed]cnt1mExternal storage connection path state = failed count
    SystemMultipaths [Faulty]cnt1mExternal storage connection path state = faulty count
    SystemNTP Offsetnum1mthe measured offset of the last sample (time difference between the NTP server and the local environment)
    SystemRun Queue Lengthnum1mExecution queue length
    SystemUptimems1mOS uptime (uptime). (milliseconds)
    WindowsContext Switchiescnt1mCPU context switch count (per second)
    WindowsDisk Read Bytes [Sec]cnt1mNumber of bytes read in one second from a Windows logical disk
    WindowsDisk Read Time [Avg]sec1mAverage data read time (seconds)
    WindowsDisk Transfer Time [Avg]sec1mDisk average wait time
    WindowsDisk Usage%1mDisk usage
    WindowsDisk Write Bytes [Sec]cnt1mBytes written per second on a Windows logical disk
    WindowsDisk Write Time [Avg]sec1mAverage data write time (seconds)
    WindowsPagingfile Usage%1mPaging file usage
    WindowsPool Used [Non Paged]bytes1mNonpaged Pool usage in kernel memory
    WindowsPool Used [Paged]bytes1mPaged Pool usage in kernel memory
    WindowsProcess [Running]cnt1mNumber of processes currently running
    WindowsThreads [Running]cnt1mNumber of threads currently running
    WindowsThreads [Waiting]cnt1mNumber of threads waiting for processor time
    Table. Bare Metal Server (Agent) Performance Items
    reference
    To monitor performance metrics of a Bare Metal Server, please install the Agent. Refer to Manage Agents for the Agent installation guide.

    Multi-node GPU Cluster [Cluster Fabric]

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Cluster GPUCluster GPU Countcnt1mCluster GPU Count Sum.
    Sum of node GPU Count within the cluster: calculate the total GPU Count of each node within the same GPU cluster.
    Cluster GPUCluster GPU Count In Usecnt1mNumber of GPUs being used by Jobs in the cluster
    Number of GPUs used by Processes in the cluster: Parse the ‘Processes:’ section at the bottom of nvidia-smi output from nodes in the same GPU cluster and sum the number of GPUs held by processes
    Cluster GPUCluster GPU Usage%1mGPU Utilization Average within the cluster.
    GPU Utilization Average value for nodes within the cluster: calculate the average of each node’s GPU Utilization values among nodes in the same GPU cluster.
    Cluster GPUCluster GPU Memory Usage [Avg]%1mGPU Memory Utilization Average within the Song cluster.
    Cluster node Memory Utilization Average value: calculates the average of each node’s Memory Utilization values among nodes in the same GPU cluster.
    Table. Multi-node GPU Cluster [Cluster Fabric] Performance Items

    Multi-node GPU Cluster [Node]

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    GPUGPU Countcnt1mNumber of GPUs
    GPUGPU Memory Usage%1mMemory usage
    GPUGPU Memory UsedMB1mMemory usage
    GPUGPU Temperature1mGPU temperature
    GPUGPU Usage%1mUtilization
    GPUGPU Usage [Avg]%1mOverall average GPU utilization (%)
    GPUGPU Power CapW1mMaximum power capacity of the GPU
    GPUGPU Power UsageW1mCurrent GPU power usage
    GPUGPU Memory Usage [Avg]%1mGPU Memory Utilization Average
    GPUGPU Count in usecnt1mNumber of GPUs in use by jobs on the node
    GPUExecution State for nvidia-smistate1mResult of running the nvidia-smi command
    Table. Multi-node GPU Cluster [Node] Performance Items
    Reference
    Refer to the Bare Metal Server’s performance items for OS performance metrics.

    Storage type

    File Storage

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    VolumeInstance Statestate1mfilestorage volume status
    VolumeIOPS [Other]iops1miops (other)
    VolumeIOPS [Read]iops1miops(read)
    VolumeIOPS [Total]iops1miops(total)
    VolumeIOPS [Write]iops1miops(write)
    VolumeLatency Time [Other]usec1mLatency (Other)
    VolumeLatency Time [Read]usec1mRead latency
    VolumeLatency Time [Total]usec1mTotal latency
    VolumeLatency Time [write]usec1mWrite latency
    VolumeThroughput [Other]bytes/s1mThroughput (Other)
    VolumeThroughput [Read]bytes/s1mThroughput (read)
    VolumeThroughput [Total]bytes/s1mThroughput (total)
    VolumeThroughput [Write]bytes/s1mThroughput (write)
    VolumeVolume Totalbytes1mTotal byte count
    VolumeVolume Usage%1mUsage rate
    VolumeVolume Usedbytes1mUsage
    Table. File Storage performance items

    Object Storage

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    RequestRequests [Delete]cnt1mNumber of HTTP DELETE requests executed on objects in the bucket
    RequestRequests [Download Avg]bytes1mDownload usage per bucket
    RequestRequests [Get]cnt1mNumber of HTTP GET requests executed on objects in the bucket
    RequestRequests [Head]cnt1mNumber of HTTP HEAD requests executed on objects in the bucket
    RequestRequests [List]cnt1mNumber of LIST requests executed for objects in the bucket
    RequestRequests [Post]cnt1mNumber of HTTP POST requests executed on objects in the bucket
    RequestRequests [Put]cnt1mNumber of HTTP PUT requests executed on objects in the bucket
    RequestRequests [Total]cnt1mTotal number of HTTP requests executed on the bucket
    RequestRequests [Upload Avg]bytes1mUpload usage per bucket
    UsageBucket Usedbytes1mAmount of data stored in the bucket (bytes)
    UsageObjectscnt1mNumber of objects stored in the bucket
    Table. Object Storage performance items

    Block Storage(BM)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance Statestate1mBlockstorage volume status
    VolumeIOPS [Total]iops1miops(total)
    VolumeIOPS [Read]iops1miops(read)
    VolumeIOPS [Write]iops1miops(write)
    VolumeIOPS [Other]iops1miops (other)
    VolumeLatency Time [Total]usec1mTotal latency
    VolumeLatency Time [Read]usec1mRead latency
    VolumeLatency Time [Write]usec1mWrite latency
    VolumeLatency Time [Other]usec1mLatency (Other)
    VolumeThroughput [Total]MB/s1mThroughput (total)
    VolumeThroughput [Read]MB/s1mThroughput (read)
    VolumeThroughput [Write]MB/s1mThroughput (write)
    VolumeThroughput [Other]MB/s1mThroughput (Other)
    VolumeVolume Bytesbytes1mTotal byte count
    Table. Block Storage (BM) performance items

    Block Storage(VM)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance Statestate1mBlockstorage volume status
    VolumeIOPS [Read]iops1miops(read)
    VolumeIOPS [Write]iops1miops(write)
    VolumeLatency Time [Read]usec1mRead latency
    VolumeLatency Time [Write]usec1mWrite latency
    VolumeThroughput [Read]MB/s1mThroughput (read)
    VolumeThroughput [Write]MB/s1mThroughput (write)
    VolumeVolume Bytesbytes1mTotal byte count
    Table. Block Storage (VM) performance items

    Database type

    PostgreSQL(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ActivelockActive Lockscnt1mNumber of activelocks
    ActivelockActive Locks [Access Exclusive]cnt1maccessexclusive lock count
    ActivelockActive Locks [Access Share]cnt1mNumber of accessshare locks
    ActivelockActive Locks [Total]cnt1m-
    ActivelockExclusive Lockscnt1mexclusive lock count
    ActivelockRow Exclusive Lockscnt1mrow exclusive lock count
    ActivelockRow Share Lockscnt1mrow share lock count
    ActivelockShare Lockscnt1mshare lock count
    ActivelockShare Row Exclusive Lockscnt1mNumber of sharerowexclusive locks
    ActivelockShare Update Exclusive Lockscnt1mNumber of share update exclusive locks
    ActiveSessionActive Sessionscnt1mNumber of active sessions
    ActiveSessionActive Sessions [Total]cnt1m-
    ActiveSessionIdle In Transaction Sessionscnt1mNumber of sessions in idle_in_transaction state
    ActiveSessionIdle In Transaction Sessions [Total]cnt1m-
    ActiveSessionIdle Sessionscnt1mNumber of idle sessions
    ActiveSessionIdle Sessions [Total]cnt1m-
    ActiveSessionWaiting Sessionscnt1mNumber of sessions in waiting state
    ActiveSessionWaiting Sessions [Total]cnt1m-
    ConnectionConnection Usage%1m-
    ConnectionConnection Usage [Total]%1mDB connection usage rate (%)
    DB AgeDB Age Maxage1mdatabase age (frozen XID) value
    LockWait Lockscnt1mNumber of lock-waiting sessions (by DB)
    LockWait Locks [Long Total]cnt1mNumber of sessions with long (300 seconds) lock waiting
    LockWait Locks [Long]cnt1m-
    LockWait Locks [Total]cnt1mNumber of sessions waiting due to lock occurrence
    Long TransactionTransaction Time Max [Long]sec1m-
    Long TransactionTransaction Time Max Total [Long]sec1mLong-running transaction time (minutes)
    ReplicaApply Lag Timesec1mapply_lag time
    ReplicaCheck No Replicationcnt1mcheck_no_replication value
    ReplicaCheck Replicationstate1mcheck_replication_state value
    SlowquerySlowqueriescnt1mNumber of SQL queries running for a long time (over 5 minutes)
    StateInstance State [PID]PID1mpostgres process pid
    TablespaceTablespace Usedbytes1mTablespace size
    TablespaceTablespace Used [Total]bytes1m-
    TablespaceTablespace Used Bytes [MB]bytes1mfilesystem directory usage (MB)
    TablespaceTablespaces [Total]cnt1m-
    Table. PostgreSQL (DBaaS) performance items
    Reference
    For the DB Instance performance items, refer to the Virtual Server performance items.

    MariaDB(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ActivelockActive Lockscnt1mNumber of activelocks
    ActivesssionActive Sessionscnt1mNumber of activesession
    ActivesssionConnection Usage [Total]%1mDB connection session usage rate
    ActivesssionConnectionscnt1mnumber of connections
    ActivesssionConnections [MAX]cnt1mmax connected threads count
    DatafileBinary Log Used [MB]bytes1mbinary log usage (MB)
    DatafileData Directory Used [MB]bytes1mdatadir usage (MB)
    DatafileOpen Filescnt1mNumber of DB files in open state
    DatafileOpen Files [MAX]cnt1mNumber of DB files that can be opened
    DatafileOpen Files Usage%1mDB file maximum count utilization
    DatafileRelay Log Used [MB]bytes1mRelay log usage (MB)
    StateInstance State [PID]PID1mmariadbd process pid
    mysqld process pid(pre‑v10.5.2 version)
    StateSafe PIDPID1mmariadbd_safe process pid
    mysqld_safe process pid (prior to v10.5.2)
    StateSlave Behind Master secondssec1mTime difference of Data between Master and Slave
    (run only on slave)
    TablespaceTablespace Usedbytes1mTablespace usage
    TablespaceTablespace Used [Total]bytes1m-
    TransactionRunning Threadscnt1mrunning thread count
    TransactionSlowqueriescnt1mNumber of long-running SQL queries (over 5 minutes) (by DB)
    TransactionSlowqueries [Total]cnt1mNumber of SQL queries running for a long time (over 5 minutes) (total)
    TransactionTransaction Time [Long]sec1mTransaction maximum execution time (seconds)
    TransactionWait Lockscnt1mNumber of sessions blocked for more than 60 seconds by lock
    Table. MariaDB (DBaaS) performance items
    Reference
    For DB Instance performance metrics, refer to the performance metrics of Virtual Server.

    MySQL(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ActivelockActive Lockscnt1mNumber of activelocks
    ActivesssionActive Sessionscnt1mconnected threads count
    ActivesssionConnection Usage [Total]%1mDB connection session usage rate
    ActivesssionConnectionscnt1mnumber of connections
    ActivesssionConnections [MAX]cnt1mmax connected threads count
    DatafileBinary Log Used [MB]bytes1mbinary log usage (MB)
    DatafileData Directory Used [MB]bytes1mdatadir usage (MB)
    DatafileOpen Filescnt1mNumber of DB files in open state
    DatafileOpen Files [MAX]cnt1mNumber of DB files that can be opened
    DatafileOpen Files Usage%1mDB file maximum count utilization
    DatafileRelay Log Used [MB]bytes1mRelay log usage (MB)
    StateInstance State [PID]PID1mmysqld process pid
    StateSafe PIDPID1msafe program PID
    StateSlave Behind Master secondssec1mTime difference with master node (sec)
    TablespaceTablespace Usedbytes1mTablespace usage
    TablespaceTablespace Used [Total]bytes1mTablespace usage (total)
    TransactionRunning Threadscnt1mrunning thread count
    TransactionSlowqueriescnt1mNumber of long-running SQL queries (over 5 minutes) (by DB)
    TransactionSlowqueries [Total]cnt1mNumber of SQL queries running for a long time (over 5 minutes) (total)
    TransactionTransaction Time [Long]sec1mTransaction maximum execution time (seconds)
    TransactionWait Lockscnt1mNumber of sessions blocked for more than 60 seconds by lock
    Table. MySQL(DBaaS) performance items
    Reference
    Refer to the Virtual Server performance metrics for DB Instance performance items.

    Microsoft SQL Server(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ActivelockActive Lockscnt1mNumber of activelocks
    ActivesssionActive Sessionscnt1mNumber of activesession
    ActivetransactionActive Transactions [Total]cnt1mNumber of active transactions
    ConnectionConnected Userscnt1mNumber of users connected to the system
    DatafileDatavolume Size [Free]bytes1mavailable space
    DatafileDBFiles [Not Online]cnt1mRun a query to verify that all data files are in the ONLINE state.
    DatafileTablespace Usedbytes1mData volume size
    LockLock Processes [Blocked]cnt1mNumber of SQL processes blocked by other processes
    LockLock Waits [Per Second]cnt1mLock wait count per second
    SlowqueryBlocking Session IDID1mNumber of SQL queries running for a long time (over 5 minutes)
    SlowquerySlowqueriescnt1mNumber of SQL queries running for a long time (over 5 minutes)
    SlowquerySlowquery CPU Timems1mCPU time consumed by SQL execution that runs for a long time (over 5 minutes)
    SlowquerySlowquery Execute Context IDID1mContext ID associated with the execution task of a SQL that runs for a long time (5 minutes or more)
    SlowquerySlowquery Memory Usagebytes1mMemory usage consumed by the execution of SQL that runs for a long time (over 5 minutes)
    SlowquerySlowquery Session IDID1mSession ID of SQL queries running for a long time (over 5 minutes)
    SlowquerySlowquery Wait Duration Timems1mTotal wait time for wait type
    StateInstance State [Cluster]state1mStatus during MSSQL cluster configuration
    StateInstance State [PID]PID1msqlservr.exe process pid
    StatePage IO Latch Wait Timems1mPage IO latch waits average wait time
    TransactionTransaction Time [MAX]cnt1mLong-running (5 minutes or more) transaction
    Table. Microsoft SQL Server (DBaaS) performance metrics

    EPAS(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ActivelockAccess Exclusive Lockscnt1maccessexclusive lock count
    ActivelockAccess Share Lockscnt1mNumber of accessshare locks
    ActivelockActive Lockscnt1mNumber of activelocks
    ActivelockActive Locks [Total]cnt1mactivelock count (total)
    ActivelockExclusive Lockscnt1mexclusive lock count
    ActivelockRow Exclusive Lockscnt1mrow exclusive lock count
    ActivelockRow Share Lockscnt1mrow share lock count
    ActivelockShare Lockscnt1mshare lock count
    ActivelockShare Row Exclusive Lockscnt1mNumber of share row exclusive locks
    ActivelockShare Update Exclusive Lockscnt1mNumber of share update exclusive locks
    ActivesessionActive Sessionscnt1mNumber of active sessions
    ActivesessionActive Sessions [Total]cnt1mTotal number of active sessions
    ActivesessionIdel In Transaction Sessionscnt1mNumber of sessions in idle_in_transaction state
    ActivesessionIdle In Transaction Sessions [Total]cnt1mTotal number of sessions in idle_in_transaction state
    ActivesessionIdle Sessionscnt1mNumber of idle sessions
    ActivesessionIdle Sessions [Total]cnt1mTotal number of idle sessions
    ActivesessionWaiting Sessionscnt1mNumber of sessions in waiting state
    ActivesessionWaiting Sessions [Total]cnt1mTotal number of sessions in waiting state
    ConnectionConnection Usage%1mDB connection usage rate (%)
    ConnectionConnection Usage [Total]%1mOverall DB connection usage (%)
    ConnectionConnection Usage Per DB%1mDB connection usage rate (%) by DB
    DB AgeDB Age Maxage1mdatabase age (frozen XID) value
    LockWait Lockscnt1mNumber of sessions with long (300 seconds) lock waiting
    LockWait Locks [Long Total]cnt1mTotal number of lock-waiting sessions (300 seconds)
    LockWait Locks [Long]cnt1mNumber of sessions waiting due to lock occurrence
    LockWait Locks [Total]cnt1mTotal number of sessions waiting due to lock occurrence
    LockWait Locks Per DB [Total]cnt1mTotal number of sessions waiting due to lock occurrences per DB
    Long TransactionTransaction Time Max [Long]sec1mLong-running transaction time (minutes)
    Long TransactionTransaction Time Max Total [Long]sec1mLong-running transaction time (minutes)
    ReplicaApply Lag Timesec1mapply_lag time
    ReplicaCheck No Replicationcnt1mcheck_no_replication value
    ReplicaCheck Replicationstate1mcheck_replication_state value
    SlowquerySlowqueriescnt1mNumber of SQL queries running for a long time (over 5 minutes)
    StateInstance state [PID]PID1medb-postgres process pid
    TablespaceTablespace Used Bytes [MB]bytes1mfilesystem directory usage (MB)
    TablespaceTablespaces [Total]cnt1mTotal Tablespace size
    TablespaceTablespace Usedbytes1mSize of the tablespace in use
    TablespaceTablespace Used [Total]bytes1mTotal size of the Tablespace in use
    Table. EPAS (DBaaS) performance items

    CacheStore(DBaaS)

    Redis

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StatsActive Defragmentation Keys [Hits]cnt1mNumber of keys after defragmentation
    StatsActive Defragmentation Keys [Miss]cnt1mNumber of keys skipped in the active defragmentation removal process
    StatsActive Defragmentationd [Hits]cnt1mNumber of value reassignments performed by the active defragmentation removal process
    StatsActive Defragmentations [Miss]cnt1mNumber of value reallocations that were stopped, starting with the active defragmentation removal process
    MemoryAllocated Bytes [OS]bytes1mNumber of bytes allocated by Redis and recognized by the operating system (resident set size)
    MemoryAllocated Bytes [Redis]bytes1mTotal bytes allocated by Redis
    PersistenceAOF Buffer Sizebytes1mAOF buffer size
    PersistenceAOF File Size [Current]bytes1mAOF current file size
    PersistenceAOF File Size [Lastest Startup]bytes1mAOF file size on recent start or rewrite
    PersistenceAOF Rewrite Buffer Sizebytes1mAOF rewrite buffer size
    PersistenceAOF Rewrite Current Timesec1mIf applicable, the time of the ongoing AOF rewrite operation
    PersistenceAOF Rewrite Last Timesec1mFinal AOF rewrite operation time (seconds)
    CommandstatsCallscnt1mNumber of calls that reached command execution (not rejected)
    CommandstatsCalls [Failed]cnt1mNumber of failed calls
    CommandstatsCalls [Rejected]cnt1mNumber of rejected calls
    PersistenceChanges [Last Saved]cnt1mNumber of changes after the final dump
    ClientsClient Output Buffer [MAX]cnt1mCurrent longest output list for client connections
    ClientsClient Input Buffer [MAX]cnt1mMaximum input buffer for the current client connection
    SentinelClients [Sentinel]cnt1mNumber of client connections (sentinel)
    ReplicationConnected Slavescnt1mNumber of connected slaves
    ClientsConnections [Blocked]cnt1mNumber of clients pending blocking calls (BLPOP, BRPOP, BRPOPLPUSH)
    ClientsConnections [Current]cnt1mNumber of client connections (excluding slave connections)
    PersistenceCopy On Write Allocated Size [AOF]bytes1mCOW allocation size during final RBD save operation
    PersistenceCopy On Write Allocated Size [RDB]bytes1mCOW allocation size during final RBD save operation
    CommandstatsCPU Time [Average]cnt1mAverage CPU used per command execution
    CommandstatsCPU Time [Total]usec1mTotal CPU time used by these commands
    CPUCPU Usage [System Process]%1mSystem CPU used by background processes
    CPUCPU Usage [System]%1mSystem CPU used by the Redis server
    CPUCPU Usage [User Process]%1mUser CPU used by background processes
    CPUCPU Usage [User]%1mSystem CPU used by background processes
    MemoryDataset Usedbytes1mDataset size
    DiskDisk Usedbytes1mdatadir usage
    StatsEvicted Keyscnt1mNumber of evicted keys caused by the maxmemory limit
    PersistenceFsyncs [Delayed]cnt1mDelayed fsync counter
    PersistenceFsyncs [Pending]cnt1mNumber of pending fsync operations in the background I/O queue (format: bytes)
    StatsFull Resyncscnt1mNumber of full resynchronizations with the slave
    StatsKeys [Expired]cnt1mTotal number of key expiration events
    KeyspaceKeys [Keyspace]cnt1mNumber of keys in the key space
    StatsLastest Fork Duration Timeusec1mRecent fork operation time (microseconds)
    StatsLookup Keys [Hit]cnt1mNumber of successful key lookups in the main dictionary
    StatsLookup Keys [Miss]cnt1mNumber of failed key lookups in the main dictionary
    MemoryLua Engine Memory Usedbytes1mMemory used by the Lua engine
    ReplicationMaster Last Interaction Time Agosec1mElapsed time (seconds) since the final interaction with the master
    ReplicationMaster Last Interaction Time Ago [Sync]sec1mElapsed time (seconds) since the final interaction with the master
    ReplicationMaster Offsetpid1mCurrent replication offset of the server
    ReplicationMaster Second Offsetpid1mOffset until the replica ID is accepted
    ReplicationMaster Sync Left Bytesbytes1mRemaining bytes before synchronization completes
    MemoryMemory Fragmentation Rate%1mused_memory_rss and used_memory ratio
    MemoryMemory Fragmentation Rate [Allocator]%1mfragmentation ratio
    MemoryMemory Fragmentation Usedbytes1mBytes between used_memory_rss and used_memory
    MemoryMemory Fragmentation Used [Allocator]bytes1mresident byte
    MemoryMemory Max Valuebytes1mMemory limit
    MemoryMemory Resident [Allocator]bytes1mresident memory
    MemoryMemory RSS Rate [Allocator]%1mresident ratio
    MemoryMemory Used [Active]bytes1mActive memory
    MemoryMemory Used [Allocated]bytes1mAllocated memory
    MemoryMemory Used [Resident]bytes1mresident byte
    StatsNetwork In Bytes [Total]bytes1mTotal network input
    StatsNetwork Out Bytes [Total]bytes1mTotal network output
    StatsNetwork Read Ratecnt1mNetwork read speed (KB/sec)
    StatsNetwork Write Ratecnt1mNetwork write speed (KB/sec)
    StatsPartial Resync Requests [Accepted]cnt1mNumber of accepted partial resynchronization requests
    StatsPartial Resync Requests [Denied]cnt1mNumber of re-sync requests for rejected parts
    MemoryPeak Memory Consumedbytes1mMaximum memory used by Redis
    StatsProcessed Commandscnt1mNumber of commands processed per second
    StatsProcessed Commands [Total]cnt1mTotal number of processed commands
    StatsPub/Sub Channelscnt1mGlobal count of pub/sub channels with client subscriptions
    StatsPub/Sub Patternscnt1mGlobal count of publish/subscribe pattern with client subscriptions
    PersistenceRDB Saved Duration Time [Current]sec1mIf applicable, the time of the ongoing RDB save operation
    PersistenceRDB Saved Duration Time [Last]sec1mFinal RDB save operation time (seconds)
    StatsReceived Connections [Total]cnt1mTotal number of received connections
    StatsRejected Connections [Total]cnt1mTotal number of rejected connections
    ReplicationReplication Backlog Actove Countcnt1mReplication backlog enable flag
    ReplicationReplication Backlog Master Offsetcnt1mMaster offset of the replication backlog buffer
    ReplicationReplication Backlog Sizebytes1mData size of the replication backlog buffer (bytes)
    ReplicationReplication Backlog Size [Total]bytes1mTotal size of the replication backlog buffer (bytes)
    ReplicationSlave Prioritycnt1mPriority of instances as a fault handling target
    ReplicationSlave Replication Offsetpid1mReplication offset of the slave instance
    SlowlogSlow Operationscnt1mNumber of slow tasks
    StatsSockets [MIGRATE]cnt1mNumber of sockets opened for migration
    StatsTracked Keys [Expiry]cnt1mNumber of keys tracked for expiration (applicable only to writable slaves)
    StateInstance Status [PID]PID1mredis-server process pid
    StateSentinel Status [PID]PID1msentinel process pid
    Table. Redis performance metrics
    Reference
    For DB Instance performance metrics, see the Virtual Server performance metrics.

    Valkey

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StatsActive Defragmentation Keys [Hits]cnt1mNumber of keys after defragmentation
    StatsActive Defragmentation Keys [Miss]cnt1mNumber of keys skipped in the active defragmentation removal process
    StatsActive Defragmentationd [Hits]cnt1mNumber of value reassignments performed by the active defragmentation removal process
    StatsActive Defragmentations [Miss]cnt1mNumber of value reallocations that were stopped, starting with the active defragmentation removal process
    MemoryAllocated Bytes [OS]bytes1mNumber of bytes allocated by Valkey and recognized by the operating system (resident set size)
    MemoryAllocated Bytes [Valkey]bytes1mTotal bytes allocated by Valkey
    PersistenceAOF Buffer Sizebytes1mAOF buffer size
    PersistenceAOF File Size [Current]bytes1mAOF current file size
    PersistenceAOF File Size [Lastest Startup]bytes1mAOF file size on recent start or rewrite
    PersistenceAOF Rewrite Buffer Sizebytes1mAOF rewrite buffer size
    PersistenceAOF Rewrite Current Timesec1mIf applicable, the time of the ongoing AOF rewrite operation
    PersistenceAOF Rewrite Last Timesec1mFinal AOF rewrite operation time (seconds)
    CommandstatsCallscnt1mNumber of calls that reached command execution (not rejected)
    CommandstatsCalls [Failed]cnt1mNumber of failed calls (Valkey 6.2-rc2)
    CommandstatsCalls [Rejected]cnt1mRejected call count (Valkey 6.2-rc2)
    PersistenceChanges [Last Saved]cnt1mNumber of changes after the final dump
    ClientsCleint Output Buffer [MAX]cnt1mCurrent longest output list for client connections
    ClientsClient Input Buffer [MAX]cnt1mMaximum input buffer for current client connections (Valkey 5.0)
    SentinelClients [Sentinel]cnt1mNumber of client connections (sentinel)
    ReplicationConnected Slavescnt1mNumber of connected slaves
    ClientsConnections [Blocked]cnt1mNumber of clients pending blocking calls (BLPOP, BRPOP, BRPOPLPUSH)
    ClientsConnections [Current]cnt1mNumber of client connections (excluding slave connections)
    PersistenceCopy On Write Allocated Size [AOF]bytes1mCOW allocation size during final RBD save operation
    PersistenceCopy On Write Allocated Size [RDB]bytes1mCOW allocation size during final RBD save operation
    CommandstatsCPU Time [Average]cnt1mAverage CPU used per command execution
    CommandstatsCPU Time [Total]usec1mTotal CPU time used by these commands
    CPUCPU Usage [System Process]%1mSystem CPU used by background processes
    CPUCPU Usage [System]%1mSystem CPU used by the Valkey server
    CPUCPU Usage [User Process]%1mUser CPU used by background processes
    CPUCPU Usage [User]%1mSystem CPU used by background processes
    MemoryDataset Usedbytes1mDataset size
    DiskDisk UsedMB1mdatadir usage
    StatsEvicted Keyscnt1mNumber of evicted keys caused by the maxmemory limit
    PersistenceFsyncs [Delayed]cnt1mDelayed fsync counter
    PersistenceFsyncs [Pending]cnt1mNumber of pending fsync operations in the background I/O queue (format: bytes)
    StatsFull Resyncscnt1mNumber of full resynchronizations with the slave
    StatsKeys [Expired]cnt1mTotal number of key expiration events
    KeyspaceKeys [Keyspace]cnt1mNumber of keys in the key space
    StatsLastest Fork Duration Timeusec1mRecent fork operation time (microseconds)
    StatsLookup Keys [Hit]cnt1mNumber of successful key lookups in the main dictionary
    StatsLookup Keys [Miss]cnt1mNumber of failed key lookups in the main dictionary
    MemoryLua Engine Memory Usedbytes1mMemory used by the Lua engine
    ReplicationMaster Last Interaction Time Agosec1mElapsed time (seconds) since the final interaction with the master
    ReplicationMaster Last Interaction Time Ago [Sync]sec1mElapsed time (seconds) since the final interaction with the master
    ReplicationMaster Offsetpid1mCurrent replication offset of the server
    ReplicationMaster Second Offsetpid1mOffset until the replica ID is accepted
    ReplicationMaster Sync Left Bytesbytes1mRemaining bytes before synchronization completes
    MemoryMemory Fragmentation Rate%1mused_memory_rss and used_memory ratio
    MemoryMemory Fragmentation Rate [Allocator]%1mfragmentation ratio
    MemoryMemory Fragmentation Usedbytes1mBytes between used_memory_rss and used_memory
    MemoryMemory Fragmentation Used [Allocator]bytes1mresident byte
    MemoryMemory Max Valuebytes1mMemory limit
    MemoryMemory Resident [Allocator]bytes1mresident memory
    MemoryMemory RSS Rate [Allocator]%1mresident ratio
    MemoryMemory Used [Active]bytes1mActive memory
    MemoryMemory Used [Allocated]bytes1mAllocated memory
    MemoryMemory Used [Resident]bytes1mresident byte
    StatsNetwork In Bytes [Total]bytes1mTotal network input
    StatsNetwork Out Bytes [Total]bytes1mTotal network output
    StatsNetwork Read Ratekbps1mNetwork read speed (KB/sec)
    StatsNetwork Write Ratekbps1mNetwork write speed (KB/sec)
    StatsPartial Resync Requests [Accepted]cnt1mNumber of accepted partial resynchronization requests
    StatsPartial Resync Requests [Denied]cnt1mNumber of re-sync requests for rejected parts
    MemoryPeak Memory Consumedbytes1mMaximum memory used by Valkey
    StatsProcessed Commandscnt1mNumber of commands processed per second
    StatsProcessed Commands [Total]cnt1mTotal number of processed commands
    StatsPub/Sub Channelscnt1mGlobal count of pub/sub channels with client subscriptions
    StatsPub/Sub Patternscnt1mGlobal count of publish/subscribe pattern with client subscriptions
    PersistenceRDB Saved Duration Time [Current]sec1mIf applicable, the time of the ongoing RDB save operation
    PersistenceRDB Saved Duration Time [Last]sec1mFinal RDB save operation time (seconds)
    StatsReceived Connections [Total]cnt1mTotal number of received connections
    StatsRejected Connections [Total]cnt1mTotal number of rejected connections
    ReplicationReplication Backlog Active Countcnt1mReplication backlog enable flag
    ReplicationReplication Backlog Master Offsetcnt1mMaster offset of the replication backlog buffer
    ReplicationReplication Backlog Sizebytes1mData size of the replication backlog buffer
    ReplicationReplication Backlog Size [Total]bytes1mTotal size of the replication backlog buffer
    ReplicationSlave Prioritycnt1mPriority of instances as a fault handling target
    ReplicationSlave Replication Offsetpid1mReplication offset of the slave instance
    SlowlogSlow Operationscnt1mNumber of slow tasks
    StatsSockets [MIGRATE]cnt1mNumber of sockets opened for migration
    StatsTracked Keys [Expiry]cnt1mNumber of keys tracked for expiration (applicable only to writable slaves)
    StateInstance State [PID]PID1mValkey-server process PID
    StateSentinel State [PID]PID1mSentinel process PID
    Table. Valkey performance metrics
    reference
    Refer to the Virtual Server performance items for DB Instance performance metrics.

    Data Analytics type

    Event Streams

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    BrokerConnections [Zookeeper Client]cnt1mNumber of ZooKeeper connections
    BrokerFailed [Client Fetch Request]cnt1mClient fetch request processing failure count
    BrokerFailed [Produce Request]cnt1mProcucer request processing failure count
    BrokerIncomming Messagescnt1mNumber of messages received by the broker
    BrokerLeader Electionscnt1mLeader Election occurrence count
    BrokerLeader Elections [Unclean]cnt1mNumber of Unclean Leader Election occurrences
    BrokerLog Flushescnt1mNumber of log flush occurrences
    BrokerNetwork In Bytesbytes1mTotal bytes received by the Topic
    BrokerNetwork Out Bytesbytes1mTotal bytes transmitted by the Topic
    BrokerRejected Bytesbytes1mTotal bytes rejected by the Topic
    BrokerRequest Queue Lengthcnt1mRequest queue size
    BrokerZookeeper Sessions [Closed]cnt1mZooKeeper closed sessions per second
    BrokerZookeeper Sessions [Expired]cnt1mZooKeeper expired sessions per second
    BrokerZookeeper Sessions [Readonly]cnt1mZooKeeper read‑only sessions per second
    BrokerIncomming Messages Rate [Topic]cnt1mNumber of received messages per topic
    BrokerIncomming Byte Rate [Second]bytes1mper second Incomming data
    BrokerOutgoing Byte Rate [Second]bytes1mOutgoing data per second
    BrokerRejected Byte Rate [Second]bytes1mBytes rejected per second
    DiskDisk Usedbytes1mDatadir usage
    StateAKHQ State [PID]PID1makhq process pid
    StateInstance State [PID]PID1mkafka process pid
    StateZookeeper State [PID]PID1mzookeeper process pid
    Table. Event Streams performance metrics

    Search Engine

    Elasticsearch

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ClusterShardscnt1mNumber of cluster shards
    ClusterShards [Primary]cnt1mNumber of primary shards in the cluster
    ClusterIndex [Total]cnt1mNumber of clustered indexes
    ClusterLicense Expiry Date [ms]ms1mLicense expiration date [milisecond]
    ClusterLicense Statusstate1mLicense status
    ClusterLicense Typetype1mLicense type
    FileSystemDisk Usagebytes1mdatadir usage
    NodeDocuments [Deleted]cnt1mTotal number of deleted documents
    NodeDocuments [Existing]cnt1mTotal number of existing documents
    NodeFilesystem Bytes [Available]bytes1mAvailable file systems
    NodeFilesystem Bytes [Free]bytes1mAvailable file system
    NodeFilesystem Bytes [Total]bytes1mTotal file system
    NodeJVM Heap Used [Init]bytes1mHeap init used by JVM (bytes)
    NodeJVM Heap Used [MAX]bytes1mHeap max used by JVM (bytes)
    NodeJVM Non Heap Used [Init]bytes1minit(bytes) excluding the heap used by the JVM
    NodeJVM Non Heap Used [MAX]bytes1mmax (bytes) excluding the heap used by the JVM
    NodeSegmentscnt1mTotal number of segments
    NodeSegments Bytesbytes1mTotal size of the segment
    NodeStore Bytesbytes1mTotal size of the repository
    StateInstance state [PID]PID1mElasticsearch process pid
    TaskQueue Timems1mQueue time
    KibanaKibana state [PID]PID1mKibana process pid
    KibanaKibana Connectionscnt1mconnection
    KibanaKibana Memory Heap Allocated [Limit]bytes1mMaximum old space size allocated to the Node.js process
    KibanaKibana Memory Heap Allocated [Total]bytes1mMemory
    KibanaKibana Memory Heap Usedbytes1mMemory
    KibanaKibana Process Uptimems1mProcess
    KibanaKibana Requests [Disconnected]cnt1mRequest count metric
    KibanaKibana Requests [Total]cnt1mRequest count metric
    KibanaKibana Response Time [Avg]ms1mResponse time metric
    KibanaKibana Response Time [MAX]ms1mResponse time metric
    Table. Elasticsearch performance metrics

    Opensearch

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateCluster statestate1mCluster status
    ClusterNodescnt1mNumber of nodes in the cluster
    ClusterData nodescnt1mNumber of data nodes in the cluster
    ClusterPending taskscnt1mNumber of pending tasks
    ShardShards [active]cnt1mActive piece count
    ShardShards [active_primary]cnt1mNumber of active primary fragments
    ShardShards [initializing]cnt1mInitial shard count
    ShardShards [relocating]cnt1mPrevious piece count
    ShardShards [unassigned]cnt1mNumber of unallocated fragments
    ThreadThread Queue Count [search]cnt1mNumber of search tasks in the queue
    ThreadThread Queue Count [refresh]cnt1mNumber of refresh tasks in the queue
    ThreadThread Queue Count [write]cnt1mNumber of write operations in the queue
    ThreadThread Queue Count [get]cnt1mNumber of jobs fetched from the queue
    ThreadThread Queue Count [snapshot]cnt1mNumber of snapshot jobs in the queue
    ThreadThread Queue Count [flush]cnt1mNumber of flush operations in the queue
    ThreadThread Queue Count [force_merge]cnt1mNumber of force_merge tasks in the queue
    SystemCPU usage%1mCPU usage
    SystemMemory usagebytes1mUsed memory
    SystemDisk availablebytes1mDisk Available
    DocumentsDocuments indexing ratecnt1mNumber of indexed documents
    DocumentsDocuments indexing rate [Delta]cnt1mNumber of indexed documents (delta value)
    DocumentsIndexing latencysec1mTime taken to index documents
    DocumentsIndexing latency [Delta]sec1mTime taken to index the document (delta value)
    DocumentsSearch ratecnt1mNumber of search queries
    DocumentsSearch rate [Delta]cnt1mNumber of search queries (delta value)
    DocumentsSearch latencysec1mTime taken during the query
    DocumentsSearch latency [Delta]sec1mTime taken during the query (delta value)
    DocumentsDocument count (with replicas)cnt1mTotal number of documents
    DocumentsDocument deleting ratecnt1mNumber of deleted documents
    DocumentsDocument deleting rate [Delta]cnt1mNumber of deleted documents (delta value)
    DocumentsDocument merging ratecnt1mNumber of merged documents
    DocumentsDocument merging rate [Delta]cnt1mNumber of merged documents (delta value)
    JVMHeap usedbytes1mMemory used in the heap
    JVMGC count [young]cnt1mNumber of young GC collections
    JVMGC count [young] [Delta]cnt1mYoung GC collection count (delta value)
    JVMGC count [G1]cnt1mG1 GC collection count
    JVMGC count [G1] [Delta]cnt1mG1 GC collection count (delta value)
    JVMGC count [old]cnt1mNumber of previous GC collections
    JVMGC count [old] [Delta]cnt1mPrevious GC collection count (delta value)
    JVMGC time [young]cnt1mTime spent on young GC collection
    JVMGC time [young] [Delta]cnt1mTime spent for young GC collection (delta value)
    JVMGC time [G1]cnt1mTime spent on G1 GC collection
    JVMGC time [G1] [Delta]cnt1mTime spent on G1 GC collection (delta value)
    JVMGC time [old]cnt1mTime spent on old GC collections
    JVMGC time [old] [Delta]cnt1mTime spent on old GC collections (delta value)
    StateInstance state [PID]PID1mOpensearch process PID
    StateDashboard state [PID]PID1mDashboard process PID
    Table. Opensearch performance items

    Vertica(DBaaS)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance State [PID]state1mVertica process PID
    ActivelockActive Lockscnt1mActive Locks count
    ActivesessionActive Sessionscnt1mNumber of Active Sessions
    TablespaceData Tablespace UsedMB1mData, Temp Tablespace usage
    TablespaceCatalog Tablespace UsedMB1mCatalog Tablespace Usage
    Table. Vertica (DBaaS) performance metrics
    Reference
    Refer to the Virtual Server performance items for DB Instance performance metrics.

    Container type

    Kubernetes Engine

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ClusterCluster Namespaces [Active]cnt5mNumber of namespaces in active state
    ClusterCluster Namespaces [Total]cnt5mTotal number of namespaces in the cluster
    ClusterCluster Nodes [Ready]cnt5mNumber of nodes in READY state
    ClusterCluster Nodes [Total]cnt5mTotal number of nodes in the cluster
    ClusterCluster Pods [Failed]cnt5mNumber of failed-state pods in the cluster
    ClusterCluster Pods [Pending]cnt5mNumber of pending pods in the cluster
    ClusterCluster Pods [Running]cnt5mNumber of pods in running state within the cluster
    ClusterCluster Pods [Succeeded]cnt5mNumber of succeeded pods in the cluster
    ClusterCluster Pods [Unknown]cnt5mNumber of pods in unknown state within the cluster
    ClusterInstance Statestate5mcluster status
    NamespaceNamespace Pods [Failed]cnt5mNumber of failed-state pods in a namespace
    NamespaceNamespace Pods [Pending]cnt5mNumber of pending pods in the namespace
    NamespaceNamespace Pods [Running]cnt5mNumber of running pods in a namespace
    NamespaceNamespace Pods [Succeeded]cnt5mNumber of succeeded pods in the namespace
    NamespaceNamespace Pods [Unknown]cnt5mNumber of unknown-state pods in the namespace
    NamespaceNamespace GPU Clock FrequencyMHz5mSM clock frequency in the Namespace
    NamespaceNamespace GPU Memory Usage%5mMemory utilization in Namespace
    NodeNode CPU Size [Allocatable]cnt5mNode allocatable CPU
    NodeNode CPU Size [Capacity]cnt5mCPU capacity within the node
    NodeNode CPU Usage%5mCPU usage on the node
    NodeNode CPU Usage [Request]%5mCPU request_ratio within node
    NodeNode CPU Usedstate5mCPU utilization within the node
    NodeNode Filesystem Usage%5mFS usage within node
    NodeNode Memory Size [Allocatable]bytes5mmemory allocatable within the node
    NodeNode Memory Size [Capacity]bytes5mNode memory utilization
    NodeNode Memory Usage%5mNode memory utilization
    NodeNode Memory Usage [Request]%5mmemory request_ratio within the node
    NodeNode Memory Workingsetbytes5mmemory working set within the node
    NodeNode Network In Bytesbytes5mNode network rx bytes
    NodeNode Network Out Bytesbytes5mNode network tx bytes
    NodeNode Network Total Bytesbytes5mNode network total bytes
    NodeNode Pods [Failed]cnt5mNumber of pods in failed state within a node
    NodeNode Pods [Pending]cnt5mNumber of pending pods in the node
    NodeNode Pods [Running]cnt5mNumber of running pods per node
    NodeNode Pods [Succeeded]cnt5mNumber of succeeded pods in the node
    NodeNode Pods [Unknown]cnt5mNumber of pods in unknown state on the node
    PodPod CPU Usage [Limit]%5mCPU usage_limit_ratio within the pod
    PodPod CPU Usage [Request]%5mCPU request_ratio within the pod
    PodPod CPU Usagemc5mCPU usage within the pod
    PodPod Memory Usage [Limit]%5mmemory usage_limit_ratio in the pod
    PodPod Memory Usage [Request]%5mmemory request_ratio in pod
    PodPod Memory Usagebytes5mMemory usage within the pod
    PodPod Network In Bytesbytes5mnetwork rx bytes in pod
    PodPod Network Out Bytesbytes5mnetwork tx bytes in pod
    PodPod Network Total Bytesbytes5mNetwork total bytes in pod
    PodPod Restart Containerscnt5mcontainer restart count in pod
    WorkloadWorkload Pods [Running]cnt5m-
    Table. Kubernetes Engine performance items

    Container Registry

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Container RegistryImage Pulls [Denied]cnt1mNumber of rejected Image Tag (digest) Pulls
    Container RegistryImage Pushs [Allowed]cnt1mAllowed Image Tag (digest) Push count
    Container RegistryImage Pushs [Denied]cnt1mNumber of rejected Image Tag (digest) Pushes
    Container RegistryImage Scans[Allowed]cnt1mAllowed Image Tag (digest) Scan count
    Container RegistryImage Scans [Denied]cnt1mNumber of rejected Image Tag (digest) scans
    Container RegistryImage Tags [Deleted]cnt1mNumber of deleted Image Tag (digest)
    Container RegistryImages [Created]cnt1mNumber of generated images
    Container RegistryImages [Deleted]cnt1mNumber of deleted images
    Container RegistryLogins [Allowed]cnt1mNumber of allowed Registry Logins
    Container RegistryLogins [Denied]cnt1mNumber of denied Registry Logins
    Container RegistryRepositories [Created]cnt1mNumber of created repositories
    Container RegistryRepositories [Deleted]cnt1mNumber of deleted repositories
    StateInstance Statestate1mCheck status
    Table. Container Registry performance metrics

    Networking type

    Internet Gateway

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Internet GatewayNetwork In Total Bytes [Internet Delta]bytes5mInternet Gateway → Cumulative traffic volume toward VPC for 5 minutes (Internet)
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Internet GatewayNetwork In Total Bytes [Internet]bytes5mrx bytes total
    Internet GatewayNetwork Out Total Bytes [Internet Delta]bytes5mVPC → cumulative traffic volume toward the Internet Gateway over 5 minutes (Internet)
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Internet GatewayNetwork Out Total Bytes [Internet]bytes5mtx bytes total
    Table. Internet Gateway performance metrics

    Load Balancer(OLD)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Load BalancerCurrent Connectioncnt5mCurrent number of connections
    Load BalancerTotal Connectioncnt5mTotal number of connections
    Load BalancerTotal Connection [Delta]cnt5mTotal number of connections (delta value)
    Load BalancerNetwork In Bytesbytes5min bytes
    Load BalancerNetwork In Bytes [Delta]bytes5mClient → Load Balancer cumulative traffic volume over 5 minutes
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bit)
    Load BalancerNetwork Out Bytesbytes5mout bytes
    Load BalancerNetwork Out Bytes [Delta]bytes5mCumulative traffic volume over 5 minutes from Load Balancer to Client
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Load BalancerInstance Statestate5mLoad Balancer status
    Table. Load Balancer performance items

    Load Balancer Listener(OLD)

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    ListenerConnections [Current]cnt5mCurrent number of connections
    ListenerConnections [Total Delta]cnt5mtotal connection count (delta value)
    ListenerConnections [Total]cnt5mtotal connection count
    ListenerInstance Statestate5mLB Listener status
    ListenerNetwork In Bytesbytes5min bytes
    ListenerNetwork In Bytes [Delta]bytes5mCumulative traffic volume over 5 minutes from Client to Load Balancer
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    ListenerNetwork Out Bytesbytes5mout bytes
    ListenerNetwork Out Bytes [Delta]bytes5mLoad Balancer → Client cumulative traffic volume over 5 minutes
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Table. Load Balancer Listener performance metrics

    Direct Connect

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Direct ConnectNetwork In Bytesbytes5mCumulative traffic volume from Direct Connect → VPC
    Direct ConnectNetwork In Bytes [Delta]bytes5mDirect Connect → VPC cumulative traffic volume over 5 minutes
    ※ Traffic bps average conversion formula: Cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Direct ConnectNetwork Out Bytesbytes5mCumulative traffic volume from VPC to Direct Connect
    Direct ConnectNetwork Out Bytes [Delta]bytes5mVPC → Direct Connect cumulative traffic volume over 5 minutes
    ※ Traffic bps average conversion formula: cumulative traffic volume (bytes) / 300 (seconds) * 8 (bits)
    Table. Direct Connect performance items

    Load Balancer

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance Statestate5mLB status
    Load BalancerCurrent Connectioncnt5mCurrent number of connections
    Load BalancerTotal L4 Connectioncnt5mTotal L4 Connection count
    Load BalancerTotal L7 Connectioncnt5mTotal number of L7 connections
    Load BalancerTotal TCP Connectioncnt5mTotal number of TCP connections
    Load BalancerTotal Connectioncnt5mTotal number of connections
    Load BalancerBytes processed in forward directionbytes5mFull‑duplex Network Byte
    Load BalancerPackets processed in forward directioncnt5mBidirectional Network packet
    Load BalancerBytes processed in reverse directionbytes5mReverse Network Byte
    Load BalancerPackets processed in reverse directioncnt5mReverse Network packet
    Load BalancerTotal failure actionscnt5mTotal number of failures
    Load BalancerCurrent Requestcnt5mCurrent request count
    Load BalancerCurrent responsecnt5mCurrent Response count
    Load BalancerTotal Requestcnt5mTotal number of requests
    Load BalancerTotal Request Successcnt5mTotal number of successful requests
    Load BalancerPeak Connectioncnt5mMaximum number of connections
    Load BalancerCurrent Connection Rate%5mCurrent SSL Connection rate
    Load BalancerLast response timems5mLast response time
    Load BalancerFastest response timems5mShortest response time
    Load BalancerSlowest response timems5mMaximum response time
    Load BalancerCurrent SSL Connectioncnt5mCurrent number of SSL connections
    Load BalancerTotal SSL Connectioncnt5mTotal number of SSL connections
    Load BalancerBytes processed in forward direction [Delta]bytes5mForward Network  Byte (delta value)
    Load BalancerPackets processed in forward direction [Delta]cnt5mForward Network packet (delta value)
    Load BalancerBytes processed in reverse direction [Delta]bytes5mReverse Network Byte (delta value)
    Load BalancerPackets processed in reverse direction [Delta]cnt5mReverse Network packet (delta value)
    Table. Load Balancer performance items

    Load Balancer Listener

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance Statestate5mLB status
    Load BalancerCurrent Connectioncnt5mCurrent number of connections
    Load BalancerTotal L4 Connectioncnt5mTotal L4 Connection count
    Load BalancerTotal L7 Connectioncnt5mTotal number of L7 connections
    Load BalancerTotal TCP Connectioncnt5mTotal number of TCP connections
    Load BalancerTotal Connectioncnt5mTotal number of connections
    Load BalancerBytes processed in forward directionbytes5mFull‑duplex Network Byte
    Load BalancerPackets processed in forward directioncnt5mBidirectional Network packet
    Load BalancerBytes processed in reverse directionbytes5mReverse Network Byte
    Load BalancerPackets processed in reverse directioncnt5mReverse Network packet
    Load BalancerTotal failure actionscnt5mTotal number of failures
    Load BalancerCurrent Requestcnt5mCurrent request count
    Load BalancerCurrent responsecnt5mCurrent Response count
    Load BalancerTotal Requestcnt5mTotal number of requests
    Load BalancerTotal Request Successcnt5mTotal number of successful requests
    Load BalancerPeak Connectioncnt5mMaximum number of connections
    Load BalancerCurrent Connection Rate%5mCurrent SSL Connection rate
    Load BalancerLast response timems5mLast response time
    Load BalancerFastest response timems5mShortest response time
    Load BalancerSlowest response timems5mMaximum response time
    Load BalancerCurrent SSL Connectioncnt5mCurrent number of SSL connections
    Load BalancerTotal SSL Connectioncnt5mTotal number of SSL connections
    Load BalancerBytes processed in forward direction [Delta]bytes5mForward Network  Byte (delta value)
    Load BalancerPackets processed in forward direction [Delta]cnt5mForward Network packet (delta value)
    Load BalancerBytes processed in reverse direction [Delta]bytes5mReverse Network Byte (delta value)
    Load BalancerPackets processed in reverse direction [Delta]cnt5mReverse Network packet (delta value)
    Table. Load Balancer Listener performance metrics

    Load Balancer Server Group

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Server GroupInstance Statestate5mLB Server Group status
    Server GroupPeak Connectioncnt5mMaximum connections per server group
    Server GroupHealthy hostcnt5mNumber of healthy hosts in server group
    Server GroupUnhealthy hostcnt5mNumber of abnormal hosts in server group
    Server GroupRequest Countcnt5mNumber of requests
    Server GroupResponse Countcnt5mResponse count
    Server Group2xx Response Countcnt5m2xx response count
    Server Group3xx Response Countcnt5mNumber of 3xx responses
    Server Group4xx Response Countcnt5m4xx response count
    Server Group5xx Response Countcnt5mNumber of 5xx responses
    Table. Load Balancer Server Group performance metrics

    Cloud WAN

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    StateInstance Statestate10mAttachment connection status
    AttachmentNetwork in bytesbytes10min bytes(Inbound traffic usage per interval)
    AttachmentNetwork out bytesbytes10mOut bytes(Outbound traffic usage per interval)
    AttachmentNetwork In Packets [Dropped]cnt10min Dropped Packet count (number of dropped packets per interval)
    AttachmentNetwork Out Packets [Dropped]cnt10mOut Dropped Packet count (number of dropped packets per interval)
    AttachmentNetwork In Packets [Unicast]cnt10min Unicast Packet count (number of Unicast packets per cycle)
    AttachmentNetwork Out Packets [Unicast]cnt10mOut Unicast Packet count (Unicast packets per cycle)
    AttachmentNetwork In Packets [Broadcast]cnt10min Broadcast Packet count (number of Broadcast packets per cycle)
    AttachmentNetwork Out Packets [Broadcast]cnt10mOut Broadcast Packet count (number of broadcast packets per cycle)
    AttachmentNetwork In Packets [Multicast]cnt10min Multicast Packet count (Multicast packets per cycle)
    AttachmentNetwork Out Packets [Multicast]cnt10mOut Multicast Packet count (Multicast packet count per cycle)
    AttachmentNetwork In Error Packetscnt10min Error Packet count (number of received error packets per cycle)
    AttachmentNetwork Out Error Packetscnt10mOut Error Packet count (number of transmitted error packets per cycle)
    Table. Cloud WAN performance metrics

    Global CDN

    Performance Item Group NamePerformance item namecollection unitCollection intervalExplanation
    Global CDNInstance Statestate5mGlobal CDN status
    Global CDNData Transfer Bytesbytes5mData transfer volume transmitted via CDN service (originBytes)
    Global CDNRequests [Total]cnt5mNumber of service requests (cases) received by the CDN service (originHits)
    Table. Global CDN performance metrics

    3.2.9 - Appendix C. Service-specific Status Checks

    Compute type

    Virtual Server

    Performance item nameExplanationvalue
    Instance State [Basic]Instance statusNOSTATE, RUNNING, BLOCKED, PASUED, SHUTDOWN, SHUTOFF, CRASHED, PMSUSPENDED, LAST
    Table. Virtual Server status check

    GPU Server

    Performance item namedescriptionvalue
    Instance State [Basic]Instance statusNOSTATE RUNNING, BLOCKED, PASUED, SHUTDOWN, SHUTOFF, CRASHED, PMSUSPENDED, LAST
    Table. GPU Server Status Check

    Bare Metal Server

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Bare Metal Server status check
    Caution
    Bare Metal Server does not provide status information through Cloud Monitoring.

    Multi-node GPU Cluster [Cluster Fabric]

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Multi-node GPU Cluster [Cluster Fabric] Status Check
    Caution
    Multi-node GPU Cluster [Cluster Fabric] does not provide status information through Cloud Monitoring.

    Multi-node GPU Cluster [Node]

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Multi-node GPU Cluster [Node] Status Check
    Caution
    Multi-node GPU Cluster [Node] does not provide status information through Cloud Monitoring.

    Storage type

    File Storage

    Performance item namedescriptionvalue
    Instance StateFile Storage Volume Status1: When Online
    0: Other status values (Offline)
    Table. File Storage status check

    Object Storage

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Object Storage status check
    Caution
    Object Storage does not provide status information through Cloud Monitoring.

    Block Storage(BM)

    Performance item nameExplanationvalue
    Instance StateBlockstorage volume status1: running (normal)
    * 0: down (abnormal)
    Table. Block Storage (BM) status check

    Block Storage(VM)

    Performance item namedescriptionvalue
    Instance StateBlockstorage volume status1: running (normal)
    * 0: down (abnormal)
    Table. Block Storage(VM) status check

    Database type

    PostgreSQL(DBaaS)

    Performance item nameExplanationvalue
    Instance State [PID]postgres process PIDPID: postgres when the process exists
    * -1: when the process does not exist
    Table. PostgreSQL (DBaaS) status check

    MariaDB(DBaaS)

    Performance item namedescriptionvalue
    Safe PIDmariadb_safe process PIDPID: mariadb_safe when the process exists
    -1: when the process does not exist
    Instance State [PID]mariadb process PIDPID: mariadb if the process exists
    * -1: if the process does not exist
    Table. MariaDB (DBaaS) status check

    MySQL(DBaaS)

    Performance item namedescriptionvalue
    Instance State [PID]mysqld process PIDPID: mysqld process exists
    -1: process does not exist
    Table. MySQL(DBaaS) status check

    Microsoft SQL Server(DBaaS)

    Performance item namedescriptionvalue
    Instance State [Cluster]MSSQL cluster configuration statusPID: mssql when the process exists
    -1: when the process does not exist
    Instance State [PID]sqlservr.exe process pidFor Microsoft SQL Server, the secondary server also has a PID running, so the status cannot be determined solely by the PID.
    Table. Microsoft SQL Server (DBaaS) status check

    EPAS(DBaaS)

    Performance item namedescriptionvalue
    Instance State [PID]postgres process PIDPID: postgres if the process exists
    * -1: if the process does not exist
    Table. EPAS (DBaaS) status check

    CacheStore(DBaaS)

    Redis

    Performance item nameExplanationvalue
    Instance State [PID]Redis-server process PID-1: If the process does not exist
    Sentinel State [PID]Sentinel process PID-1: when the process does not exist
    Table. Redis status check

    Valkey

    Performance item namedescriptionvalue
    Instance State [PID]Valkey-server process PID-1: If the process does not exist
    Sentinel State [PID]Sentinel process PID-1: when the process does not exist
    Table. Valkey status check

    Data Analytics type

    Event Streams

    Performance item namedescriptionvalue
    AKHQ State [PID]akhq process PIDPID: akhq if the process exists
    * -1: if the process does not exist
    Instance State [PID]Kafka process PIDPID: when the kafka process exists
    * -1: when the process does not exist
    Zookeeper State [Pid]zookeeper process PIDPID: zookeeper if the process exists
    * -1: if the process does not exist
    Table. Event Streams status check

    Search Engine

    Performance item nameExplanationvalue
    Instance State [PID]Elasticsearch process PIDPID: if the Elasticsearch process exists
    * -1: if the process does not exist
    Kibana State [PID]Kibana process PIDPID: Kibana if the process exists
    * -1: if the process does not exist
    Table. Search Engine status check

    Elasticsearch

    Performance item nameExplanationvalue
    Instance State [PID]Elasticsearch process PID-1: when the process does not exist
    Kibana State [PID]Dashboard process PID-1: if the process does not exist
    Table. Elasticsearch status check

    Opensearch

    Performance item namedescriptionvalue
    Instance State [PID]Opensearch process PID-1: If the process does not exist
    Dashboard State [PID]Dashboard process PID-1: when the process does not exist
    Table. Opensearch status check

    Vertica(DBaaS)

    Performance item nameExplanationvalue
    Instance State [PID]Vertica process PID-1: if the process does not exist
    Table. Vertica (DBaaS) status check

    Container type

    Kubernetes Engine

    Performance item namedescriptionvalue
    Instance Statecluster status1: If the health check query sum(up{job=““kubernetes-apiservers””}) returns a value greater than 0
    • 0: If the health check query sum(up{job=““kubernetes-apiservers””}) returns a value less than or equal to 0 |
    Table. Kubernetes Engine status check

    Container Registry

    Performance item namedescriptionvalue
    Instance StateContainer Registry status1: running (normal)
    * 0: down (abnormal)
    Table. Container Registry status check

    Networking type

    Internet Gateway

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Internet Gateway status check
    Caution
    Internet Gateway does not provide status information through Cloud Monitoring.

    Load Balancer(OLD)

    Performance item namedescriptionvalue
    Instance StateLoad Balancer statusDetermine based on provisioning_status in the API response
    * 1: ACTIVE
    * 0: ETC
    Table. Load Balancer(OLD)

    Load Balancer Listener(OLD)

    Performance item nameExplanationvalue
    Instance StateLoad Balancer Listener statusDetermine based on provisioning_status in the API response
    * 1: ACTIVE
    * 0: ETC
    Table. Load Balancer Listener(OLD)

    Load Balancer

    Performance item namedescriptionvalue
    Instance StateLoad Balancer statusDetermine based on provisioning_status in the API response
    * 1: ACTIVE
    * 0: ETC
    Table. Load Balancer

    Load Balancer Listener

    Performance item namedescriptionvalue
    Instance StateLoad Balancer Listener statusDetermine based on provisioning_status in the API response
    * 1: ACTIVE
    * 0: ETC
    Table. Load Balancer Listener

    Load Balancer Server Group

    Performance item nameExplanationvalue
    Instance StateStatus of Load Balancer Server GroupDetermine based on provisioning_status in the API response
    * 1: ACTIVE
    * 0: ETC
    Table. Load Balancer Server Group

    Direct Connect

    Performance item namedescriptionvalue
    N/AN/AN/A
    Table. Direct Connect status check
    Caution
    Direct Connect does not provide status information through Cloud Monitoring.

    Cloud WAN

    Performance item namedescriptionvalue
    Instance StateAttachment connection status0: down
    * 1: up
    * 2: testing
    * 3: unknown
    Table. Cloud WAN status check

    Global CDN

    Performance item namedescriptionvalue
    Instance StateGlobal CDN status1: running (normal)
    * 0: down (abnormal)
    Table. Global CDN status check

    3.3 - API Reference

    API Reference

    3.4 - Release Note

    Cloud Monitoring

    2025.07.01
    FEATURE Add Cloud Monitoring integration service
    • In July 2025, we added an integrated service with Cloud Monitoring.
      • Additional integrated services: Compute(Multi-node GPU Cluster [Cluster Fabric], Multi-node GPU Clutser [Node]), Storage(Block Storage(BM), Block Storage(VM)), Networking(Cloud WAN, Global CDN), Database(Valkey), Data Analytics(Opensearch, Vertica(DBaaS))
    2025.02.27
    FEATURE Add Cloud Monitoring integration service
    • In February 2025, we added an integration service with Cloud Monitoring.
      • Additional integrated services: Container (Container Registry), Database (EPAS, Microsoft SQL Server), Data Analytics (Event Streams, Search Engine), Networking (Load Balancer, Load Balancer Listener, Load Balancer Server Group, VPN)
    2024.10.01
    NEW Official release of Cloud Monitoring service
    • We have launched the Cloud Monitoring service. It collects usage status and change information of operational infrastructure resources, and supports a stable cloud operating environment by generating and notifying events when configured thresholds are exceeded.

    4 - IAM

    4.1 - Overview

    Service Overview

    IAM(Identity and Access Management) is a service that controls the range of access to services and resources by verifying the identity of users registered on the Samsung Cloud Platform and granting access permissions. Administrators can create and manage users, permission groups, policies, and role items in detail through IAM.

    Users can create new users if they are the Root user or have been granted user registration authority by the Root user. Policies cannot be assigned directly to users; instead, users are added to user groups, and policies are attached to those groups, granting specific users permission to access or manage resources. In other words, the tasks a user can perform within an account depend on which user group they belong to and which policies are attached to that group.

    Provided features

    IAM provides the following features.

    • User Authentication: Provides multi-factor authentication (MFA; Multi-Factor Authentication) for Console and API access. Additionally, it blocks unauthorized access by allowing access only from permitted IP ranges.
    • Permission Management: Add users to user groups based on tasks, limiting their access permissions to the parts required for the work. Administrators can manage and assign custom policies.
    • Role Management: You can switch from your own account to another role to access the Account.
    • Credential Provider Offering: You can access and use the Account within the Console via the credential provider.
    • Access Control Policy Management: Create access control policies for each service regarding control/action/resource type and authentication method/IP. This enables the application of least‑privilege policies when granting access to cloud resources, allowing user‑based access control.

    Component

    Users can create and manage user groups, users, policies through Identity and Access Management(IAM).

    User group

    In the user group, you can register users and add policies. You can create user groups tailored to each task, register users, and attach appropriate policies to grant the same permissions to users and manage them.

    User

    Administrators can create users and add them to user groups. They can generate a user’s password automatically or manually, and provide the user with account-specific login information.

    User Policy

    You can create policies for the functions provided by each service. Access control can be managed based on control type, applied resources, and authentication type.

    role

    It is a virtual user account with separate permissions, not affected by the permissions of the original user account.

    Preceding Service

    Identity and Access Management(IAM) has no prerequisite service.

    4.2 - How-to Guides

    Users can create and manage User Groups, Users, Policies, My Info. through Identity and Access Management(IAM).

    Getting Started with IAM

    1. Click the All Services > Management > IAM menu. Go to the Service Home page of IAM.
    2. On the Service Home page, My Info., Account information, Quick Link, and IAM status are provided as widgets.
      CategoryDetailed description
      My Info.User name, email, and user group information accessed in the Samsung Cloud Platform Console. Click the More button to go to the My Info page.
      Account informationProvides the user’s Account ID, Account alias, and IAM user login URL if the user is an IAM user
      • Account ID: User’s Account ID
      • Account alias: A name assigned to the Account. It allows you to attach an alias for easier identification and management of the Account
        • Edit: If you edit the Account alias, the IAM user login URL that uses the current alias will no longer be usable. See Edit Account Alias
        • Delete: If you delete the Account alias, IAM users will no longer be able to log in using the Account alias. See Delete Account Alias
      • IAM user login URL can be used to log in without entering Account information
      • For more details related to the Account, see Account see
      Quick LinkDescription of My Info. and My Info. button navigates to the page.
      • For more details about My Info., see My Info.
      IAM statusCounts of user groups, users, and policies
      Table. IAM Service Home widget items

    Modify Account Alias

    You can edit the Account alias in the Service Home > Account widget of IAM.

    1. Click the All Services > Management > IAM menu. Go to the Service Home page of IAM.
    2. On the Service Home page, in the Account widget, click the Edit button of the Account alias. You will be taken to the Edit Account Alias popup.
    3. Edit Account Alias After reviewing the instructions in the popup window, edit the Account alias and click the Confirm button.
      Reference
      When modifying an Account alias, the Console login URL that uses the current alias will no longer be usable.
      After making changes, if the alias is not used by another account, you can reuse the alias you were previously using.

    Delete Account Alias

    You can delete an Account alias from the IAM Service Home > Account widget.

    1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of IAM.
    2. On the Service Home page, in the Account widget, click the Delete button of the Account alias. You will be taken to the Delete Account alias popup.
    3. Account Alias Deletion After reviewing the instructions in the popup window, click the Confirm button.
      Caution

      If you delete the account alias, IAM users can no longer log in using the account alias.

      • The IAM login URL is also unavailable.

    4.2.1 - User Group

    Users can create the service by entering the required information for a user group and selecting detailed options through the Samsung Cloud Platform Console.

    Create user group

    To create a user group, follow these steps.

    1. All Services > Management > IAM menu, click it. 1. Navigate to the Service Home page of Identity and Access Management (IAM).

    2. On the Service Home page, click the User Group menu. 2. Navigate to the User Group List page.

    3. On the User Group List page, click the Create User Group button. 3. Navigate to the Create User Group page.

      • Enter the required information in the Basic Information Entry, Add User, Policy Connection, and Additional Information Entry areas.
        Category
        Required status
        Detailed description
        User group nameRequiredEnter user group name
        • using Korean, English, numbers, and special characters (+=,.@-_) as a value of 3 to 24 characters
        ExplanationSelectDescription of the user group name
        • Detailed description of the user group name, up to 1,000 characters allowed
        UserSelectUser to add to the user group
        • The list of users registered in the Account is displayed, and when a checkbox is selected, the selected user’s name appears at the top of the screen
        • At the top of the screen, click the X button for each user, or uncheck the checkbox in the user list to cancel the selection of the selected user
        • If there are no users to add, you can click User Creation at the bottom of the user list to first register a new user
          • After user creation is complete, refresh the user list, and once the user appears, you can select the user
          • For detailed information on creating a user group, see Create User for reference
        policySelectPolicy to attach to the user group
        • The list of policies registered in the Account is displayed, and when a checkbox is selected, the name of the selected policy appears at the top of the screen
        • At the top of the screen, you can click the X button for each policy, or deselect the checkbox in the policy list to cancel the selection of a policy
        • If there is no policy to attach, you can click Create Policy at the bottom of the policy list to first register a new policy
          • After creating the policy, refresh the policy list; once the policy appears, you can select it
          • For detailed information on creating policies, see Create Policy for reference
        tagSelectTags to add to the user group
        • can be added up to a maximum of 50 per resource
        Table. User group creation information input fields
    4. Create button, click it.

    5. When the popup indicating creation opens, click the Confirm button. 5. Navigate to the User Group List page.

    Check user group detailed information

    In the user groups, you can view and edit the list of user groups and their detailed information. The User Group Detail page consists of Basic Information, Users, Policies, Tags tabs.

    To view detailed information of the user group service, follow these steps.

    1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.
    3. User Group List page, click the user group name to view its details. 3. Go to the User Group Details page.
      • User Group Detail page displays basic information, and consists of Basic Information, Users, Policies, Tags tabs.

    Basic Information

    User Group List page allows you to view the basic information of the selected user group and, if necessary, edit the user group name and description.

    CategoryDetailed description
    serviceService Name
    Resource TypeResource Type
    SRNUnique resource ID in Samsung Cloud Platform
    Resource nameResource name
    • In a user group, it refers to the user group name
    Resource IDUnique Resource ID
    ConstructorUser who created the service
    Creation date and timeService creation date and time
    ModifierUser who edited the service information
    Modification date and timeDate and time the service information was modified
    User group nameName of the user group
    ExplanationDescription of the user group name
    Table. User group basic information tab items

    User

    User Group List page lets you view the users included in the selected user group and, if needed, add or delete users.

    Reference
    For detailed information about User, please refer to User.
    CategoryDetailed description
    ExcludeExclude users from the user group
    • Activate when selecting a user from the user list
    Add userAdd another user to the user group
    • When the button is clicked, navigate to the Add User page
    UsernameUser’s name
    User groupNumber of user groups the user belongs to
    • When the item is clicked, you can view the associated user group name and navigate to its detail page
    Creation date and timeUser creation timestamp
    Table. User Group Details – User Tab Items

    Policy

    User Group List page allows you to view the policy attachment information of the selected user group, and, if necessary, modify the policy attachment information for the user group.

    Reference
    For detailed information about Policy, refer to Policy.
    CategoryDetailed description
    DisconnectDisconnect the selected policy
    • Activates when a policy is selected from the policy list
    Policy connectionConnect a new policy to the user group
    • When the button is clicked, navigate to the Policy Connection page
    Policy namePolicy name
    Policy TypeType of attached policy
    • Default: Default policy provided by Samsung Cloud Platform
    • Custom: Policy created directly by the user
    ExplanationExplanation of the policy
    Creation date and timePolicy creation timestamp
    Modification date and timePolicy modification date and time
    Table. User Group Details – Policy Tab Items

    Tag

    User Group List page allows you to view the tag information of the selected user group, and add, modify, or delete it.

    CategoryDetailed description
    Tag listTag list
    • You can view the Key and Value information of the tag
    • Up to 50 tags can be added per resource
    • When entering a tag, you can search and select from the list of previously created Keys and Values
    Table. User group tag tab items

    Manage user groups

    You can rename a user group, add users, attach policies, or modify tags. If you need to manage user groups, you can perform tasks on the User Group List or User Group Details page.

    Edit Basic Information

    You can edit the name and description of a user group. To modify the name and description of a user group, follow the steps below.

    1. Click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.
    3. On the User Group List page, click the user group name whose basic information you want to edit. 3. Navigate to the User Group Details page.
    4. After confirming the basic information to be edited on the User Group Details page, click the Edit button.
      • User Group Name: You can change the user group name. * Edit button click opens the Edit User Group Name popup.
      • Description: You can edit the description of a user group. * Edit button click opens the Edit Description popup window.
    5. After editing the content to be changed in the popup window, click the Confirm button.

    Manage Users

    You can add or remove users from a user group.

    Add User

    To add a user to a user group, follow the steps below.

    1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).

    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.

    3. User Group List page, click the user group name to which you want to add a user. 3. Navigate to the User Group Details page.

    4. On the User Group Details page, click the User tab. 4. Go to the User tab.

    5. In the User tab, click the Add User button. 5. Go to the Add User page.

    6. On the Add User page, select the user you want to add from the User list, then click the Complete button. 6. A popup window notifying the addition of a user opens.

      CategoryDetailed description
      Added userDisplay users included in the user group
      UserSelect users to add to the user group from the list of users registered in the Account
      • When the checkbox is selected, the name of the selected user group is displayed at the top of the list
      • You can remove the added user by clicking the X button next to the user’s name at the top of the list, or by unchecking the checkbox in the user list
      • If the desired user is not present, you can click the Create User item at the bottom of the user list to register a new user first
        • After creating the user, refresh the user list and then you can select the newly created user
        • For detailed information on creating users, see Create User
      Table. User addition detailed items

    7. In the popup that notifies you of adding a user, click the Confirm button. 7. You can view the added user in the list of the User tab.

    Exclude user

    To exclude a user from a user group, follow these steps.

    1. Click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Navigate to the User Group List page.
    3. User Group List page, click the user group name to exclude the user. 3. Navigate to the User Group Details page.
    4. On the User Group Details page, click the User tab. 4. Go to the User tab.
    5. In the User tab, select the user to exclude from the displayed user list, then click the Exclude User button.
    6. The selected user is excluded and the user list is refreshed.

    Manage Policies

    You can attach a policy to a user group or detach an attached policy.

    Connect Policy

    To attach a policy to a user group, follow these steps.

    1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management(IAM).

    2. On the Service Home page, click the User Group menu. 2. Navigate to the User Group List page.

    3. User Group List page, click the user group name to which you want to attach the policy. 3. Navigate to the User Group Details page.

    4. On the User Group Details page, click the Policy tab. 4. Go to the Policy tab.

    5. In the Policy tab, click the Attach Policy button. 5. Navigate to the Policy Attachment page.

    6. After selecting the policy to attach to the user group, click the Complete button. 6. A popup window notifying the policy connection opens.

      CategoryDetailed description
      Linked policyDisplay policies directly attached to the user group
      policySelect a policy to attach to the user group from the list of policies registered in the Account
      • When you select the checkbox, the selected policy name is displayed at the top of the list
      • You can cancel the policy by clicking the X button of the added policy name at the top of the list, or by unchecking the checkbox in the policy list
      • If there is no policy to attach, you can first create a new policy by clicking the Create Policy item at the bottom of the policy list
        • After creating the policy, refresh the policy list and you can select the newly created policy
        • For detailed information on creating policies, see Create Policy reference
      Table. Policy Connection Details

    7. In the popup that notifies about policy linking, click the Confirm button. 7. You can view the attached policy in the list of the policy tab.

    Disconnect policy

    To detach the policies linked to a user group, follow these steps.

    1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.
    3. On the User Group List page, click the user group name to detach its policy connection. 3. Navigate to the User Group Details page.
    4. On the User Group Details page, click the Policy tab. 4. Go to the Policy tab.
    5. In the Policy tab, select the policy to disconnect from the displayed policy list, then click the Disconnect button.
    6. The selected policy is disconnected and the policy list is refreshed.

    Manage Tags

    You can edit the tags of a user group. To modify tags in a user group, follow these steps.

    1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.
    3. Click the user group name whose tag information you want to edit on the User Group List page. 3. Go to the User Group Details page.
    4. On the User Group Detail page, click the Tag tab. 4. Navigate to the Tag tab.
    5. In the Tag tab, click the Edit Tag button.
    6. After adding or editing tags, click the Save button. 6. A popup window notifying tag editing opens.
      • You can modify the Key and Value of an already registered tag.
      • You can click the Add Tag button to add a new tag.
      • Click the X button before the added tag to delete that tag.
    7. Click the Confirm button. 7. You can view the edited tag information in the list.

    Delete user group

    To delete a user group, follow the steps below.

    1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Navigate to the User Group List page.
    3. User Group List page, click the user group name you want to delete. 3. Navigate to the User Group Details page.
    4. On the User Group Details page, click the Delete User Group button.
    5. The user group is deleted, and you are redirected to the User Group List page.

    To delete multiple user groups simultaneously, follow these steps.

    1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
    2. On the Service Home page, click the User Group menu. 2. Go to the User Group List page.
    3. Check the user groups to delete from the user group list.
    4. Check the selected user groups, and click the Delete button.
    5. The selected user groups are deleted and the User Group List page is refreshed.

    4.2.2 - Users

    Users can create the service by entering the required policy information and selecting detailed options through the Samsung Cloud Platform Console.

    Create User

    To create a user, follow these steps.

    1. Click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).

    2. On the Service Home page, click the User menu. 2. Navigate to the User List page.

    3. On the User List page, click the Create User button. 3. Navigate to the User Creation page.

    4. On the User Creation page, after entering the required information in the Basic Information Input, Permission Settings, and Additional Information Input sections, click the Create button. 4. A popup window notifying user creation opens.

      Category
      Required status
      Detailed description
      UsernameRequiredEnter a value within 64 characters for the user’s name
      • using English letters, numbers, and special characters (+=,.@-_).
      ExplanationSelectDescription of the username
      • Enter a detailed description of the username, up to 1,000 characters
      PasswordRequiredThere are two ways to generate a password for user use.
      • Automatic generation: The password is generated automatically and can be viewed at the time of user creation
      • Direct input: The password is created manually
      Password change settingsSelectPassword change setting at first user login
      • If not set, the user cannot change the password at first login, but can reset it again via Password Reset
      Permission configuration methodRequired
      • Add to User Group: Select a user group from the list of user groups registered in the Account to include the user
        • When you select the checkbox, the selected user group name is displayed at the top of the list
        • You can cancel the user group by clicking the X button of the added user group name at the top of the list, or by unchecking the checkbox in the user group list
        • If there is no user group to connect, you can first register a new user group by clicking the Create User Group item at the bottom of the user group list
          • After creating the user group, you can select the newly created user group by refreshing the user group list
          Copy Permissions: Select a user to copy the policies attached to that user’s user groups
        User Selection: Select one user from the list to copy policies
      • Permission Summary: Displays the list of policies directly attached to the selected user or attached via user groups in the user selection list
        Direct Policy Attachment: Select a policy from the list of policies registered in the Account to attach directly to the user
        • When you select the checkbox, the selected policy name is displayed at the top of the list
      You can cancel the policy by clicking the X button of the added policy name at the top of the list, or by unchecking the checkbox in the policy list
        • If there is no policy to connect, you can first register a new policy by clicking the Create Policy item at the bottom of the policy list
        After creating the policy, you can select the newly created policy by refreshing the policy list
        For detailed information on creating a policy, see Create Policy
        tagSelectTags to add to the user group
        • Tags can be added up to a maximum of 50 per resource
        Table. User-generated information input fields

      • In the popup that notifies user creation, click the Create button. 5. IAM user login information The popup window opens.

      • After verifying the IAM user login information, click the Confirm button. 6. Go to the User List page.

        CategoryDetailed description
        Account IDAccount ID value
        UsernameGenerated user name
        PasswordGenerated user’s password
        • View Click the icon to view the password
        IAM user login URLIAM user’s login URL information
        Excel downloadDownload IAM user login information as an Excel file
        Send emailSend an Excel file containing IAM user login information via email
        • After clicking the button, enter the address to receive the email
        Table. IAM user login information items

      Password creation rules
      • If you enter the password incorrectly five or more times, you will be automatically logged out.
      • It must contain at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^).
      • The length must be 9 to 20 characters.
      • ID or username cannot be used as a password.
      • You cannot use the same character more than three times.
      • Passwords that are easy to guess cannot be used.
      • You cannot use a recently used password.
      • Consecutive characters or numbers of four or more are not allowed.
      • The password change interval is 90 days.

      View user details

      In the user section, you can view and edit the user list and detailed information. User Details page is composed of Basic Information, User Groups, Permissions, Authentication Key, Tags tabs.

      To view detailed information of the user service, follow the steps below.

      1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
      3. On the User List page, click the user name to view detailed information. 3. Navigate to the User Details page.
        • User Details page displays basic information and consists of Basic Information, Users, Permissions, API Keys, Tags tabs.
      Reference
      In the user list, clicking the authentication key count lets you view the authentication key information and its current status (active, disabled).

      Basic Information

      User List page allows you to view the basic information of the selected user and, if necessary, edit the user’s description and options.

      CategoryDetailed description
      serviceService name
      Resource TypeResource Type
      SRNUnique resource ID in Samsung Cloud Platform
      Resource nameResource name
      • In the user, it refers to the username
      Resource IDUnique Resource ID
      ConstructorUser who created the service
      Creation date and timeService creation date and time
      EditorUser who edited the service information
      Modification date and timeDate and time the service information was modified
      UsernameUser’s name
      Last loginUser’s last login time
      ExplanationDescription of the username
      PasswordDate and time the password was last changed
      Password reuse restrictionPrevent reuse of recently used passwords
      • Edit icon can be clicked to change the number of password histories to restrict
      emailEmail verification status
      mobile phone numberMobile phone number verification status
      Table. User Details - Basic Information Tab Items

      User group

      On the User List page, you can view the user groups assigned to the selected user and, if necessary, add or remove user groups.

      Reference
      For detailed information about User Group, please refer to User Group.
      CategoryDetailed description
      ExcludeExclude the user from the user group
      • Enabled when selecting a user group from the user group list
      Add user groupAdd the user to another user group
      • When the button is clicked, navigate to the Add User Group page
      User group nameName of the user group
      Linked policyNumber of policies linked to the user group
      • When the item is clicked, you can view the linked policy name and navigate to the corresponding policy details page
      ExplanationDescription of the user group
      Modification dateDate and time the user group was modified
      Table. User Details – User Group Tab Items

      Policy

      On the User List page, you can view the selected user’s policy information and add, modify, or delete it.

      CategoryDetailed description
      DisconnectDisconnect the selected policy
      • Activate when a policy is selected from the policy list
      MoreDirect connection can be disconnected or excluded from a user group
      • Direct connection removal: When the connection method is direct, disconnect the direct connection of the policy
      • Exclude from user group: Exclude the user from the user group
      Add permissionConnect a new policy to a user
      • When the button is clicked, navigate to the Add Permission page
      Policy namePolicy name
      • Click the policy name to view the policy detail page
      typeTypes of policies
      ExplanationExplanation of the policy
      Connection methodPolicy attachment method
      • Direct: User directly attaches the policy
      • Group: Attach the policy through a group
      • Direct, Group: Both direct and group attachments are applied
      • When selecting a group name, navigate to the corresponding group detail page
      Modification dateDate and time of the last policy modification
      Table. User Details - Permissions Tab Items

      Authentication key

      On the User List page, you can view the authentication key information of the selected user.

      CategoryDetailed description
      Access KeyAuthentication key information
      Secret VaultUse encryption
      Creation date and timeAuthentication key generation time
      Expiration date and timeAuthentication key expiration timestamp
      statusAuthentication key usage (enabled/disabled)
      Table. User Details - Authentication Key Tab Items

      Tag

      On the User List page, you can view the selected user’s tag information and add, modify, or delete it.

      CategoryDetailed description
      Tag listTag list
      • You can view the Key, Value information of the tag
      • Up to 50 tags can be added per resource
      • When entering a tag, you can search and select from the list of previously created Keys and Values
      Table. User Details - Tag Tab Items

      Manage Users

      You can change a user’s basic information, add user groups, or edit tags. If user management is required, you can perform tasks on the User List or User Details page.

      Edit basic information

      You can edit the user’s basic information.

      Caution
      Usernames cannot be modified.

      Edit description

      To modify the user’s description, follow the steps below.

      1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
      3. Click the user name whose description you want to edit on the User List page. 3. Navigate to the User Details page.
      4. On the User Details page, view the description and click the Edit button. 4. Edit description The popup window opens.
      5. Edit Description After changing the description in the popup window, click the Confirm button.

      Change Password

      To change a user’s password, follow the steps below.

      1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
      3. User List page, click the username whose password you want to edit. 3. Navigate to the User Details page.
      4. On the User Details page, click the Edit password button. 4. Password Reset the popup window opens.
      5. After changing the password, click the Confirm button. 5. IAM user login information The popup window opens.
        • Password has the following two settings.
          • Automatic Generation: A random password is generated.
          • Manual entry: It is generated with a password entered directly by the user. * It must contain at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^). * Please refer to the password creation rules.
        • Password Change Setting: It is recommended to change the password upon first login after resetting the password.
      Password creation rules
      • It must contain at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^).
      • The length must be between 9 and 20 characters.
      • ID or username cannot be used as a password.
      • You cannot use the same character more than three times.
      • Passwords that are easy to guess cannot be used.
      • You cannot use a password that was recently used.
      • Consecutive characters or numbers of four or more cannot be used.
      • The password change cycle is 90 days.
      1. After reviewing the user-generated information, click the Confirm button. 6. Password change completed.
        CategoryDetailed description
        Account IDAccount ID value
        UsernameGenerated user name
        PasswordGenerated user’s password
        • View Click the icon to view the password
        IAM user login URLIAM user’s login URL information
        Excel downloadDownload IAM user login information as an Excel file
        Email sendingSend an Excel file containing IAM user login information via email
        • After clicking the button, enter the address to receive the email
        Table. IAM user login information items

      Restrict password reuse

      Specify the number of password histories to check to prevent reuse of recently used passwords. To restrict users from reusing passwords, follow the steps below.

      1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
      3. On the User List page, click the username to edit the password reuse restriction. 3. Navigate to the User Details page.
      4. On the User Details page, click the Edit button for the secret code reuse restriction. 4. Password reuse restriction edit The popup window opens.
        • Password reuse restriction: Select the number of recent password history entries as a number between 1 and 24.
      5. Please click the Confirm button. 5. The Password reuse restriction count has been changed.

      User Group Management

      You can add a user to a user group or remove a user from a user group.

      Add user group

      To add a user to a user group, follow the steps below.

      1. All Services > Management > IAM menu, click it. 1. Go to the Service Home page of Identity and Access Management (IAM).

      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.

      3. On the User List page, click the user name to add to the user group. 3. Navigate to the User Details page.

      4. On the User Details page, click the User Group tab. 4. Navigate to the User Group tab.

      5. Click the Add User Group button in the User Group tab. 5. Navigate to the Add User Group page.

      6. On the Add User Group page, select the user group you want to add from the User Group list, then click the Done button. 6. A popup window notifying the addition of a user group opens.

        CategoryDetailed description
        Added user groupDisplay user groups that contain the user
        Add to user groupSelect the user group to which you want to add a user from the list of user groups registered in the Account
        • When you select the checkbox, the name of the selected user group is displayed at the top of the list
        • You can remove the added user group at the top of the list by clicking its X button, or by unchecking the checkbox in the user group list
        • If the desired user group is not present, you can click the Create User Group item at the bottom of the user group list to register a new user group first
          • After creating the user group, refresh the user group list and then you can select the newly created user group
        Table. User group addition detailed items

      7. In the popup that notifies you of adding a user group, click the Confirm button. 7. You can view the added user group in the list of the User Group tab.

      Exclude user group

      To remove a user from a user group, follow these steps.

      1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
      2. On the Service Home page, click the User menu. 2. Go to the User List page.
      3. On the User List page, click the username to exclude from the user group. 3. Navigate to the User Details page.
      4. On the User Details page, click the User Group tab. 4. Navigate to the User Group tab.
      5. In the User Group tab, select the user group to exclude from the displayed user group list, then click the Exclude User Group button.
      6. The selected user group is excluded and the user group list is refreshed.

      Managing Permissions

      You can attach a policy or detach an attached policy to configure user permissions.

      Add Permission

      You can add users to a user group to associate a policy, or associate a policy directly with the user.

      To add permissions to a user, follow the steps below.

      1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management (IAM).

      2. On the Service Home page, click the User menu. 2. Navigate to the User List page.

      3. User List page, click the user name to which you want to add permissions. 3. User Details page is opened.

      4. On the User Details page, click the Permissions tab. 4. Go to the Permissions tab.

      5. Click the Add Permission button in the Permission tab. 5. Navigate to the Add Permission page.

      6. After selecting the method to add permissions, enter the required information.

        Category
        Required status
        Detailed description
        Permission addition methodRequired
        • Add to User Group: Select a user group from the list of user groups registered in the Account to include the user
          • When the checkbox is selected, the selected user group name is displayed at the top of the list
          • Click the X button next to the added user group name at the top of the list, or uncheck the checkbox in the user group list to remove that user group
          • If there is no user group to connect, click the Create User Group item at the bottom of the user group list to register a new user group first
            • After creating a user group, refresh the user group list and then you can select the newly created user group
            Copy Permissions: Select a user to copy the policies attached to that user’s user groups
          User Selection: Choose one user from the list to copy policies for
        • Permission Summary: Displays the list of policies directly attached to the selected user or attached via the user’s groups
          Direct Policy Attachment: Select a policy from the list of policies registered in the Account to attach directly to the user
          • When the checkbox is selected, the selected policy name is displayed at the top of the list
        Click the X button next to the added policy name at the top of the list, or uncheck the checkbox in the policy list to remove that policy
          • If there is no policy to connect, click the Create Policy item at the bottom of the policy list to register a new policy first
          After creating a policy, refresh the policy list and then you can select the policy
          For details on creating a policy, see Create Policy
          Table. Detailed items for adding permissions

        • When you finish entering the information, click the Complete button.

        • When the popup notifying you of added permissions opens, click the Confirm button. 8. You can view the attached policies in the list of the Permissions tab.

        Revoke permission

        You can detach policies attached to the user.

        To detach the policy linked to a user, follow the steps below.

        1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
        3. User List page, click the username to revoke its permissions. 3. Navigate to the User Details page.
        4. User Details page, click the Permissions tab. 4. Go to the Permissions tab.
        5. In the Policy list, select the policy to disconnect, then click the Disconnect button. 5. A popup notifying of the disconnection opens.
          • After clicking the More button, you can either detach the directly linked policy or exclude only the user groups that contain the user.
        6. After reviewing the policy information that is being disconnected, click the Confirm button. 6. The policy connection will be disconnected.
        Information
        Policies linked to a user group can be detached by excluding the user from the group. If a user is removed from a user group, any policies linked only through that group will have their mode connections disabled.

        Manage Tags

        You can edit the user’s tags. To edit tags for a user, follow the steps below.

        1. Please click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
        3. On the User List page, click the user name whose tag information you want to edit. 3. Navigate to the User Details page.
        4. User Details page, click the Tag tab. 4. Go to the Tag tab.
        5. On the Tag tab, click the Edit Tag button.
        6. After adding or editing tags, click the Save button. 6. A popup window indicating tag editing opens.
          • You can modify the Key and Value of an already registered tag.
          • Click the Add Tag button to add a new tag.
          • Click the X button in front of the added tag to delete that tag.
        7. Click the Confirm button. 7. You can view the edited tag information in the list.

        Delete User

        To delete a user, follow the steps below.

        1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the User menu. 2. Navigate to the User List page.
        3. On the User List page, click the user name to delete. 3. Navigate to the User Details page.
        4. Click the Delete User button on the User Details page.
        5. The user is deleted, and you are redirected to the User List page.

        To delete multiple users simultaneously, follow these steps.

        1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the User menu. 2. Go to the User List page.
        3. Check the users to be deleted from the user list.
        4. Check the selected users and click the Delete button.
        5. The selected users are deleted and the User List page is refreshed.

        4.2.3 - Policy

        Users can create the service by entering the required policy information and selecting detailed options through the Samsung Cloud Platform Console.

        Create Policy

        To create a policy, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).

        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.

        3. On the Policy List page, click the Create Policy button. You will be taken to the Create Policy page.

        4. After entering the required information in the Basic Information Input and Additional Information Input sections, click the Next button. You will be taken to the Permission Settings section.

          Category
          Required
          Detailed description
          Policy NameRequiredEnter policy name
          • using Korean, English, numbers, and special characters (+=,.@-_) as a value of 3 to 128 characters
          ExplanationSelectDescription of the policy name
          • Enter a detailed description of the policy name, up to 1,000 characters
          tagSelectionTags to add to the policy
          • Tags can be added up to a maximum of 50 per resource
          Table. Policy creation information input fields - basic information and additional information

        5. Select the service for which you want to set permissions. The permission settings will be displayed below the selected service name.

          • You can select a desired service or configure all services.
        6. Enter the required information in the Permission Settings area.

          Category
          Required status
          Detailed description
          Control TypeRequiredSelect policy control type
          • Allow Policy: A policy that permits the defined permissions
          • Deny Policy: A policy that denies the defined permissions
          For the same target, the deny policy takes precedence
          ActionRequiredSelect actions provided per service
          • Actions that can select individual resources are shown in purple
          • Actions that target all resources are shown in black
          • Add Action Directly: Use the wildcard * to specify multiple actions at once
          Applied resourceRequiredResources to which the action applies
          • All resources: Apply the selected action to all resources
          • Individual resource: Apply the selected action only to the specified resources
            • Individual resources are only available when selecting a purple action that allows individual resource selection
            • Click the Add resource button to specify target resources by resource type
          Authentication TypeRequiredAuthentication method of the user target to which the policy will be applied
          • All authentication: Apply regardless of authentication method
          • Authentication key authentication: Apply to users authenticated with an authentication key
          • Temporary key authentication, Console login: Apply to users with temporary key authentication or Console login
          Applied IPRequiredIP that allows policy application
          • Custom IP: Users directly register and manage the IP
            • Applied IP: IP to which the policy is applied, which users can register directly as an IP address or range
            • Excluded IP: IP to be excluded from Applied IP, which can be registered as an IP address or range
          • All IP: No IP access restriction
            • Access is allowed for all IPs, but if exceptions are required, you can register Excluded IP to restrict access for those IPs
          Additional conditionSelectionAdd conditions for attribute-based access control (ABAC)
          • Condition Key: Select from the list of Global condition keys and service condition keys
          • Qualifier: Default value, arbitrary value in the request, all values in the request
          • Operator: Bool, Null
          • Value: True, False
          Table. Policy creation information input fields - Permission settings

        Caution

        In permission settings, Basic Mode and JSON Mode are provided.

        • In Basic Mode, after writing and entering JSON Mode or navigating the screen, services with identical conditions are merged into one, and services that have not completed configuration are deleted.
        • If the content written in JSON mode does not conform to JSON format, you cannot switch to basic mode.
        1. In the Permission Settings area, first select the service for which you want to set permissions.
          • You can load an existing registered policy and create a policy using Load Policy. For detailed information about Load Policy, refer to Load Policy.
        2. Click the Next button. It navigates to the Check Input Information page.
        3. After reviewing the input information, click the Create button.
        4. When the popup notifying policy creation opens, click the Confirm button. You will be redirected to the Policy List page.

        Load Policy

        You can load an existing policy to refer to when creating a new policy. To load an existing policy, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. On the Policy List page, click the Create Policy button. You will be taken to the Create Policy page.
        4. Enter the required information in the Basic Information Input, Additional Information Input sections.
        5. Click the Next button. Go to the Permission Settings area.
        6. Load Policy button, click it. Load Policy popup opens.
        7. The list of policies registered in the Account is displayed. Select the policy you want to load and click Confirm.
        8. The loaded policy is entered into the Permission Settings area and can be edited.
        Reference
        When you execute Load Policy, all previously entered content will be deleted and replaced with the settings of the selected policy.

        Register individual resources as applied resources

        In the Permission Settings area, you can register individual resources as applied resources. To register an individual resource as an applied resource, follow these steps.

        1. Click the All Services > Management > IAM menu. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. On the Policy List page, click the Create Policy button. You will be taken to the Create Policy page.
        4. Basic Information Input, Additional Information Input Enter the required information in the area.
        5. Click the Next button. Navigate to the Permission Settings area.
        6. In the Permission Settings area, select the service to configure permissions.
        7. Select an Action that allows selecting individual resources in the Action selection.
          • Actions that allow individual resource selection are displayed in purple.
        8. In Applied Resource, click Individual Resource.
        9. Click the Add Resource button. The Add Resource popup window opens.
        10. Add Resource In the Add Resource tab, add the resources to which the policy will be applied. Resource addition can be done in two ways: Select Resource, Direct Input.
          • Resource Selection: Check the resources retrieved for each Resource Type and select them.
          • Manual entry: Add the target resource by manually entering it for each resource type.
            • Wildcard *, ? can be used. Checking Select All adds all resources of that resource type, and any resources added later are automatically included.
        Reference
        When changing the addition method, the entered content will be deleted.
        1. Check the input information and click the Confirm button.

        Check detailed policy information

        In the policy, you can view and edit the policy list and detailed information. The Policy Details page consists of Basic Information, Permissions, Connected Targets, Tags tabs.

        To view detailed information of the policy service, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. Navigate to the Policy List page.
        3. Click the policy name on the Policy List page to view its details. You will be taken to the Policy Details page.
          • Policy Details page displays basic information and consists of Basic Information, Permissions, Connected Targets, Tags tabs.

        Basic Information

        Policy List page allows you to view the basic information of the selected policy and, if needed, edit the policy name and description.

        CategoryDetailed description
        ServiceService name
        Resource TypeResource Type
        SRNUnique resource ID in Samsung Cloud Platform
        Resource nameResource name
        • In the policy, it means the policy name
        Resource IDUnique Resource ID
        constructorUser who created the service
        Creation date and timeService creation date and time
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        Policy NamePolicy name
        Policy typePolicy Types
        • Default: The default policy provided by Samsung Cloud Platform
        • Custom: A policy created directly by the user
        descriptionDescription of the policy name
        Table. Policy Details - Basic Information Tab Items

        Permission

        On the Policy List page, you can view the permission information of the selected policy and modify the permissions if needed.

        • Click the Expand button of the service name to view permission information, and the detailed policy information will be displayed.
        Reference
        In permission settings, both the default mode and JSON mode are provided.
        CategoryDetailed description
        Edit permissionsPermission editing is possible
        • Click the button to go to the Permission Edit page
        • For detailed information on permission edit items, refer to Create Policy
        View modePolicy control type
        • Basic mode: Displays policy items and detailed information in the default UI
        • JSON mode: Displays in JSON editor mode
        Control TypePolicy control type
        • Allow policy: Policy that allows the defined permissions
        • Deny policy: Policy that denies the defined permissions
        ActionThe functions provided by each service that are subject to the policy
        Applied resourceResources to which the action applies
        • All resources: Apply to all resources for the selected action
        • Individual resources: Apply only to the specified resources for the selected action
        Authentication TypeAuthentication method of the user target to which the policy will be applied
        • All authentication: applies regardless of authentication method
        • API key authentication: applies to users with API key authentication
        • Temporary password authentication, Console login: applies to users with temporary password authentication or Console login
        Applied IPIP that permits policy application
        • Custom IP: User registers and manages the IP directly
          • Applied IP: User can directly register the IP address or range that the policy applies to
          • Excluded IP: IP addresses or ranges that can be registered as exclusions from the Applied IP
        • All IPs: No IP access restriction
          • Access is allowed for all IPs, but if exceptions are needed, register Excluded IP to restrict access for those IPs
        Table. Policy Details - Permissions Tab Items

        Connection target

        Policy List page allows you to view the user groups registered to the selected policy, and, if necessary, add or remove user groups.

        CategoryDetailed description
        UserList of users connected to the policy
        • User name, user group, and creation time can be viewed
        • Click the User Connection button to go to the User Connection page
        • After selecting a user from the list, click the Disconnect button to disconnect
        User groupList of user groups linked to the policy
        • User group name, linked policy, description, and modification date can be viewed
        • Click the User Group Connect button to go to the User Group Connect page
        • After selecting a user group from the list, click the Disconnect button to disconnect
        roleDisplay list of roles attached to the policy
        • Role name, attached policy, description, and modification timestamp are viewable
        • Attach Role button click moves to Attach Role page
          • For more information on role attachment, refer to Connect Role
        • After selecting a role from the list, click the Detach button to detach
        Table. Policy Details - Connected Target Tab Items

        tag

        Policy List page allows you to view the tag information of the selected policy, and you can add, modify, or delete it.

        CategoryDetailed description
        Tag listTag list
        • You can view the Key and Value information of the tag
        • Up to 50 tags can be added per resource
        • When entering a tag, you can search and select from the list of previously created Keys and Values
        Table. Policy Details - Tag Tab Items

        Manage Policies

        You can change the policy name, as well as modify permissions, connection targets, and tags. If policy management is required, you can perform tasks on the Policy List or Policy Details page.

        Edit Basic Information

        You can edit the policy’s name and description. To modify the policy’s name and description, follow the steps below.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Policy List page, click the policy name whose basic information you want to edit. You will be taken to the Policy Details page.
        4. On the Policy Details page, after confirming the basic information to be edited, click the Edit button.
          • Policy Name: You can change the policy name. Edit button click opens the Edit Policy Name popup.
          • Description: You can edit the policy description. Edit button click opens the Edit Description popup.
        5. After editing the content to be changed in the popup window, click the Confirm button.

        Managing Permissions

        You can modify the policy’s permissions. To modify the policy’s permissions, follow the steps below.

        1. All Services > Management > IAM Click the menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. On the Policy List page, click the policy name whose permissions you want to edit. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Permissions tab. Navigate to the Connection Permissions tab.
        5. On the Policy Details page, click the Edit Permissions button. You will be taken to the Edit Permissions page.
        6. On the Permission Modification page, after modifying the required permissions, click the Next button. You will be taken to the Input Information Confirmation page.
          • For detailed explanations of each item in the permission information, refer to Creating a Policy.
        7. On the Check Input Information page, verify the updated permission information and click the Done button. Then go to the Permissions tab.

        Managing User Connections

        • In the Policy > Connection Targets tab, you can view the users registered to the policy and, if necessary, connect or disconnect users.
        • For detailed information about User, please refer to 사용자.

        Connect User

        To attach a user to the policy, follow these steps.

        1. All Services > Management > IAM menu, click it. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Policy List page, click the policy name to link the user. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Connection Target tab. You will be taken to the Connection Target tab.
        5. In the Connection Target tab, click the User Connection button. Go to the User Connection page.
        6. On the User Connection page, select the user you want to connect from the User list, then click the Done button. A popup notifying the user connection will open.
          CategoryDetailed description
          Connected user groupDisplay users linked to the policy
          User groupSelect the user to attach the policy from the list of users registered in the Account
          • When you select the checkbox, the selected user’s name appears at the top of the list
          • You can remove the user by clicking the X button next to the added user name at the top of the list, or by unchecking the checkbox in the user list
          • If the desired user is not present, you can click the Create User item at the bottom of the user list to register a new user first
            • After creating the user, refresh the user list and then you can select the newly created user
            • For detailed information on creating users, see Create User
          Table. User connection details
        7. In the popup that notifies you of a user connection, click the Confirm button. You can view the connected user in the list on the User tab.

        Disconnect User

        To disconnect a user linked to the policy, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Policy List page, click the policy name to disconnect the user. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Target Connection tab. You will be taken to the Target Connection tab.
        5. In the Connection Target tab’s user group list, select the user to disconnect, then click the Disconnect button. A popup confirming the disconnection will appear.
        6. Click the Confirm button in the popup that notifies of disconnection. The selected user’s connection will be terminated and the user group list will be refreshed.

        Manage user group connections

        • In the Policy > Connection Targets tab, you can view the user groups registered to the policy and, if needed, connect or disconnect user groups.
        • User Group for detailed information, please refer to User Group.

        Connect User Group

        To connect a user group to a policy, follow the steps below.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Policy List page, click the policy name to associate the user group. You will be taken to the Policy Details page.
        4. Policy Details page, click the Connection Target tab. You will be taken to the Connection Target tab.
        5. In the Connection Target tab, click the User Group Connection button. Navigate to the User Group Connection page.
        6. On the User Group Connection page, select the user group you want to connect from the User Group list, then click the Done button. A popup notifying the user group connection will open.
          CategoryDetailed description
          Connected user groupDisplay user groups linked to the policy
          User groupSelect the user group to which the policy will be attached from the list of user groups registered in the Account
          • When you select the check box, the selected user group’s name appears at the top of the list
          • You can remove the added user group at the top of the list by clicking its X button or by unchecking the box in the user group list
          • If the desired user group is not present, you can first register a new user group by clicking the Create User Group item at the bottom of the user group list
            • After creating the user group, refresh the user group list and then select the newly created user group
          Table. User Group Connection Details
        7. Click the Confirm button in the popup that notifies you of the user group connection. You can view the connected user group in the list under the User Group tab.

        Disconnect User Group

        To disconnect the user groups linked to the policy, follow these steps.

        1. Click the All Services > Management > IAM menu. Then go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Click the policy name to detach the user group connection on the Policy List page. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Target Connection tab. You will be taken to the Target Connection tab.
        5. In the user group list of the Connection Target tab, select the user group to disconnect, then click the Disconnect button. A popup confirming the disconnection will appear.
        6. Click the Confirm button in the popup that notifies of disconnection. The selected user group’s connection will be disconnected, and the user group list will be refreshed.

        Manage Role Bindings

        • Policy > Connected Targets tab, you can view the roles registered to the policy and, if needed, connect or disconnect roles.
        • For detailed information about role, please refer to 역할.

        Connect role

        To attach a role to a policy, follow these steps.

        1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. On the Policy List page, click the policy name to which you want to assign a role. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Connection Target tab. You will be taken to the Connection Target tab.
        5. In the Connection Target tab, click the Role Binding button. You will be taken to the Role Binding page.
        6. On the Role Connection page, select the role you want to connect from the Role list, then click the Complete button. A popup notifying you of the role connection will open.
          CategoryDetailed description
          Linked roleDisplay roles linked to the policy
          roleSelect the role to attach the policy from the list of roles registered in the Account
          • When you select the checkbox, the selected role appears at the top of the list
          • You can cancel the role by clicking the X button next to the role name added at the top of the list, or by unchecking the checkbox for the role
          • If the desired role is not available, you can click the Create Role item at the bottom of the role list to create a new role first
            • After role creation is complete, refresh the role list and then you can select the newly created role
            • For detailed information on creating roles, see Create Role
          Table. Role Connection Detailed Items
        7. In the popup that notifies role linking, click the Confirm button. You can view the linked role in the list under the Roles tab.

        Unlink role

        To detach the role linked to the policy, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. Navigate to the Policy List page.
        3. On the Policy List page, click the policy name to detach role connections. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Target Connection tab. You will be taken to the Target Connection tab.
        5. After selecting the role to disconnect from the list in the Connection Target tab, click the Disconnect button. A popup notifying the disconnection will open.
        6. Click the Confirm button in the popup that notifies you of the disconnection. The selected role’s connection will be removed and the role list will be refreshed.

        Tag Management

        You can edit the policy’s tags.

        To modify tags in the policy, follow the steps below.

        1. All Services > Management > IAM Click the menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. On the Policy List page, click the policy name to add a user. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Tag tab. You will be taken to the Tag tab.
        5. Click the Edit Tag button in the Tag tab.
        6. After adding or editing a tag, click the Save button. A popup notifying you of the tag edit will open.
          • You can modify the Key and Value of an already registered tag.
          • You can add a new tag by clicking the Add Tag button.
          • Click the X button in front of the added tag to delete that tag.
        7. Click the Confirm button. You can view the edited tag information in the list.

        Delete Policy

        To delete a policy, follow the steps below.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Policy List page, click the policy name to delete. You will be taken to the Policy Details page.
        4. On the Policy Details page, click the Delete Policy button.
        5. The policy is deleted, and you are taken to the Policy List page.

        To delete multiple policies simultaneously, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Policy menu. You will be taken to the Policy List page.
        3. Select the policy to delete from the policy list.
        4. Verify the selected policies and click the Delete Policy button.
        5. The selected policies are deleted and the Policy List page is reloaded.

        4.2.4 - Role

        Users can create a role with separate permissions and switch from their own account to another role to access the Account.

        Create Role

        To create a role, follow the steps below.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).

        2. On the Service Home page, click the Role menu. Navigate to the Role List page.

        3. On the Role List page, click the Create Role button. You will be taken to the Create Role page.

        4. On the Role Creation page, enter the information required to create a role, then click the Create button.

          • Please enter Basic Information Input.
            Category
            Whether required
            Detailed description
            Role NameRequiredEnter the role name
            • using English letters, numbers, and special characters (+=-_@,.) within 64 characters
            descriptionSelectionEnter a description of the role within 1,000 characters.
            Maximum session durationRequiredEnter the session time allowed for the user when switching roles in the console
            • Select duration: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
            • Enter duration: can be entered in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
            Table. Role Creation Basic Information Items
          • Connect performing entity.
            Category
            Required status
            Detailed description
            CategoryRequiredSelect the execution entity
            • Current Account, Other Account, User SRN, Credential Provider, Service
            ValueRequiredEnter the Value for the principal
            • Current Account: display the current Account ID
            • Other Account: enter the Account ID to use this role
            • User SRN: enter the SRN of the user registered in the Console
            • Credential Provider: select the credential provider name
            • Service: API Gateway, Config Inspection can be selected
            AddSelectButton to add an executor
            • Up to 20 connections can be added
            Table. Role creation execution subject connection items
          • Connect the policy.
            Category
            Required
            Detailed description
            policyRequiredSelect the policy to attach to the role
            • When you select the checkbox, the selected policy name is displayed at the top of the list
            • You can cancel the policy by clicking the X button next to the policy name added at the top of the list, or by unchecking the checkbox in the policy list
            • If there is no policy to attach, you can first register a new policy by clicking the Create Policy item at the bottom of the policy list
              • After creating the policy, refresh the policy list and then you can select the created policy
            Table. Role creation policy mapping items
          • Please enter Additional Information.
            Category
            Required status
            Detailed description
            tagSelectTags to add to the role
            • tags can be added up to a maximum of 50 per resource
            Table. Role creation additional information items
        5. When the popup notifying role creation opens, click the Confirm button.

        View role details

        On the Role List page, you can view and edit the detailed information of the selected role.

        To view detailed information about the role, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.
        3. On the Role List page, click the credential provider you want to view. You will be taken to the Credential Provider Details page.
          • Role Details page displays basic information and consists of Basic Information, Responsible Entity, Policy, Tag tabs.

        Basic Information

        You can view and edit the basic information of the role.

        CategoryDetailed description
        ServiceService name
        Resource TypeResource Type
        SRNUnique resource ID in Samsung Cloud Platform
        Resource nameResource name
        • In the role, it means the role name
        Resource IDUnique Resource ID
        constructorUser who created the service
        Creation dateService creation timestamp
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        Role NameRole name
        descriptionDescription of the role proof provider
        • Edit Click the button to modify the description
        Maximum session durationRole session duration allowed for IAM users who assume a role in the Console
        • Click the Edit button to change the duration
        • Select duration: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
        • Duration input: can input in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
        Table. Role Details - Basic Information Tab Items

        Executing entity

        You can identify and manage the entity that performs the role.

        CategoryDetailed description
        CategoryExecutor name
        ValueValue for the executing entity
        Edit performerButton to edit the performer
        • When the button is clicked, navigate to the Performer Connection page
        Table. Role Details – Responsible Party Tab Items

        Policy

        CategoryDetailed description
        DisconnectDetach the selected policy from the role
        • Enable when a policy is selected from the policy list
        Policy connectionConnect a new policy to a role
        • When the button is clicked, navigate to the Policy Connection page
        Policy NamePolicy name
        • Click the policy name to view the policy detail page
        typeTypes of policies
        descriptionExplanation of the policy
        Modification date and timeDate and time of the last policy modification
        Table. Role Details - Policy Tab Items

        tag

        You can view, add, modify, or delete the tag information of a credential provider.

        CategoryDetailed description
        Tag listTag list
        • You can view the Key and Value information of tags
        • Up to 50 tags can be added per resource
        • When entering a tag, you can search and select from the list of previously created Keys and Values
        Table. Role Supervisor - Tag Tab Item

        Manage Roles

        You can change a role’s basic information, as well as edit or delete its principal, attached policies, and tag information.

        Edit Basic Information

        You can modify the maximum session duration and description in the role details. To edit the basic information, follow these steps.

        1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.
        3. Role List page, click the user role name to edit its basic information. Role Details page will be opened.
        4. After confirming the basic information to edit on the Role Details page, click the Edit button.
          • Maximum Session Duration: You can set the role session duration allowed for IAM users who switch roles in the Console. When you click the Edit button, the Edit Maximum Session Duration popup opens.
          • Description: You can edit the description of the role. Edit button click opens the Edit Description popup window.
        5. After editing the content to be changed in the popup window, click the Confirm button.

        Managing the execution entity

        You can add, modify, or delete the role’s performer.

        To manage the role’s performer, follow these steps.

        1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).

        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.

        3. On the Role List page, click the user name to edit the performer. You will be taken to the Role Details page.

        4. Click the Performer tab on the Role Details page. Navigate to the Performer tab.

        5. In the Executor tab, click the Edit Executor button. You will be taken to the Edit Executor page.

        6. Edit Performer page, after editing the performer, click the Complete button. A popup notifying the performer edit will open.

          Category
          Required
          Detailed description
          CategoryRequiredSelect the execution entity
          • Current Account, Other Account, User SRN, Credential Provider, Service
          ValueRequiredEnter the Value for the principal
          • Current Account: Display the current Account ID
          • Other Account: Enter the Account ID to use this role
          • User SRN: Enter the user’s SRN registered in the Console
          • Credential Provider: Select the credential provider name
          • Service: API Gateway, Config Inspection selectable
          AddSelectButton to add a responsible party
          • You can add up to 20 connections
          • You can delete an added responsible party by clicking its X button
          Table. Execution subject modification items

        7. In the popup that notifies you of a performer entity edit, click the Confirm button. You can verify the edited performer in the list on the Performer tab.

        Manage Policies

        You can attach a policy to a role or detach an attached policy.

        Connect Policy

        You can attach policies to a role.

        To attach a policy to a role, follow these steps.

        1. All Services > Management > IAM menu, click it. Navigate to the Service Home page of Identity and Access Management (IAM).

        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.

        3. On the Role List page, click the role name to which you want to attach a policy. You will be taken to the User Details page.

        4. On the Role Details page, click the Policy tab. Go to the Policy tab.

        5. In the Policy tab, click the Policy Connection button. You will be taken to the Policy Connection page.

        6. After selecting the policy to attach to the role, click the Complete button. A popup notifying the policy attachment will appear.

          CategoryDetailed description
          Linked policyDisplay policies attached to the role
          policySelect a policy to attach to the role from the list of policies registered in the Account
          • When you select the checkbox, the selected policy name appears at the top of the list
          • You can remove the policy by clicking the X button added at the top of the list or by unchecking the checkbox in the policy list
          • If there is no policy to attach, you can first create a new policy by clicking the Create Policy item at the bottom of the policy list
            • After creating the policy, refresh the policy list and then you can select the newly created policy
          Table. Policy Connection Details

        7. Click the Confirm button in the popup that notifies you of the policy connection. You can view the connected policies in the list on the Policy tab.

        Disconnect Policy

        You can detach policies attached to a user.

        To detach the policy linked to a user, follow these steps.

        1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. Service Home page, click the Role menu. You will be taken to the Role List page.
        3. On the Role List page, click the role name to detach the policy connection. You will be taken to the Role Details page.
        4. On the Role Details page, click the Policy tab. You will be taken to the Policy tab.
        5. After selecting the policy to disconnect from the policy list, click the Disconnect button. A popup notifying the disconnection will appear.
        6. After reviewing the policy information that will be disconnected, click the Confirm button. The policy connection will be terminated.

        Managing Tags

        You can add, edit, or delete tags for a role.

        Follow the steps below to manage role tags.

        1. Click the All Services > Management > IAM menu. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.
        3. On the Role List page, click the role name to edit tag information. You will be taken to the Role Details page.
        4. On the Role Details page, click the Tag tab. You will be taken to the Tag tab.
        5. On the Tag tab, click the Edit Tag button.
        6. After adding or editing a tag, click the Save button. A popup notifying the tag edit will open.
          • You can modify the Key and Value of an already registered tag.
          • Click the Add Tag button to add a new tag.
          • Click the X button in front of the added tag to delete that tag.
        7. Click the Confirm button. You can view the edited tag information in the list.

        Switch role

        To switch roles in the Samsung Cloud Platform Console, follow these steps.

        1. Click the profile-shaped button at the top right of the Console. The My Menu popup window opens.

        2. In the My menu popup, click the role switch button. The role switch popup opens.

        3. Role Switch After entering the role switch information in the popup window, click the Confirm button.

          Category
          required or not
          Detailed description
          Account IDRequiredEnter the Account ID the user wants to assume via role switching.
          Role NameRequiredEnter the role name the user wants to switch to.
          aliasSelectName to use when a user enters through role switching
          ColorRequiredSelect the color to use as the Account background when entering a role
          • No selection: Apply the existing Account background color
          Table. Role transition information items

        4. When the popup notifying a role change opens, click the Confirm button.

        Check role

        You can view the switched role information by clicking the profile-shaped button at the top right of the console.

        Provided featuresexplanation
        Account IDAccount ID logged in to Samsung Cloud Platform Console
        Role NameAlias set when switching roles
        • When an ID Center user accesses with a role, display as Permission Set Name
        • Display session expiration time at the bottom
        Time zoneUser-set time zone
        • Example: Asia/Seoul (GMT +09:00)
        • Click Edit Time Zone to modify
        AccountAccount information
        Cost ManagementYou can view usage and billing details, payment history, and cost analysis, and manage Credit, budget, Account, and payment methods
        Login user informationIAM user name after role assumption and the user’s Account ID
        Switch to my accountSwitch to the IAM user account and go to the Console Home page
        • After switching roles, display
        Role SwitchingCan switch to another role
        LogoutLog out from Samsung Cloud Platform Console
        Table: My Info item when switching roles

        Delete role

        To delete a role, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. Service Home page, click the Role menu. You will be taken to the Role List page.
        3. On the Role List page, click the role name to delete. Navigate to the Role Details page.
        4. On the Role Details page, click the Delete Role button.
        5. The role is deleted, and you are redirected to the Role List page.

        To delete multiple roles at once, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Role menu. You will be taken to the Role List page.
        3. Check the roles to delete from the role list.
        4. Verify the selected role and click the Delete Role button.
        5. The selected role is deleted and the Role List page is refreshed.

        4.2.5 - Credential Providers

        You can access and use the Account resource through a credential provider.

        Create Credential Provider

        To create a credential provider, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Credential Provider menu. You will be taken to the Credential Provider List page.
        3. On the Credential Provider List page, click the Create Credential Provider button. You will be taken to the Create Credential Provider page.
        4. After entering information in the Enter basic information, Enter additional information areas, click the Generate button.
        Category
        Whether required
        Detailed description
        Credential Provider NameRequiredEnter the credential provider name
        • using English letters, numbers, and special characters (,-_) as a value within 128 characters
        descriptionSelectionEnter a description of the credential provider within 1,000 characters
        typeRequiredSelect the credential provider type
        • SAML: Establish trust between the Samsung Cloud Platform account and a SAML 2.0‑compatible credential provider
        metadataSelectionAttach the metadata file provided by the IdP
        • Attach File Click the button to upload only one file
        • Only files up to 10 MB and UTF‑8 XML documents can be uploaded
        • The metadata must include the issuer name, expiration information, and the key for verifying SAML authentication responses received from the IdP
        tagSelectTags to add to the credential provider group
        • Tags can be added up to a maximum of 50 per resource
        Table. Credential Provider Creation Input Fields
        Reference
        credential provider will provide the OIDC type in 2026.
        1. When the popup notifying the creation of a credential provider opens, click the Confirm button.

        Check credential provider details

        You can view and edit the detailed information of a credential provider. The Credential Provider page consists of Basic Information, Tags tabs.

        To view detailed information about the credential provider, follow these steps.

        1. All Services > Management > IAM Click the menu. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Credential Provider menu. You will be taken to the Credential Provider List page.
        3. Click the credential provider you want to view on the Credential Provider List page. You will be taken to the Credential Provider Details page.
          • Credential Provider Details page displays basic information and consists of Basic Information tab, Tags tab.

        Basic Information

        You can view and edit the basic information of the credential provider.

        CategoryDetailed description
        ServiceService name
        Resource TypeResource Type
        SRNUnique resource ID in Samsung Cloud Platform
        Resource nameResource Name
        • In the credential provider, it refers to the credential provider name
        Resource IDUnique Resource ID
        constructorUser who created the service
        Creation dateService creation date and time
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        Credential Provider NameCredential provider name
        • Click the Edit button to change the name
        typeTypes of credential providers
        descriptionDescription of the credential provider
        • Edit Click the button to change the description
        Login URLLogin URL
        metadataMetadata
        • View Metadata Clicking the button opens a popup with the currently applied metadata information.
        • Edit Click the button to upload a metadata file.
          • Only files up to 10 MB and UTF-8 XML documents can be uploaded.
          • Metadata must include the issuer name, expiration information, and a key for verifying SAML authentication responses received from the IdP.
        Table. Credential Provider Basic Information Tab Items
        Reference
        Credential provider information used in the ID Center cannot be modified.

        tag

        You can view, add, modify, or delete the tag information of a credential provider.

        CategoryDetailed description
        Tag listTag list
        • You can view the Key and Value information of the tag
        • Up to 50 tags can be added per resource
        • When entering a tag, you can search and select from the list of previously created Keys and Values
        Table. Credential Provider Tag Tab Items

        Delete Credential Provider

        Information
        Credential provider information used in the ID Center cannot be modified.

        To delete a credential provider, follow these steps.

        1. All Services > Management > IAM menu, click it. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Credential Provider menu. You will be taken to the Credential Provider List page.
        3. On the Credential Provider List page, click the name of the credential provider you want to delete. You will be taken to the Credential Provider Details page.
        4. On the Credential Provider Details page, click the Delete Credential Provider button.
        5. The credential provider is deleted, and you are redirected to the Credential Provider List page.

        To delete multiple credential providers simultaneously, follow these steps.

        1. Click the All Services > Management > IAM menu. You will be taken to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the Credential Provider menu. You will be taken to the Credential Provider List page.
        3. Select the credential provider to delete from the list of credential providers.
        4. Verify the selected credential provider and click the Delete Credential Provider button.
        5. The selected credential provider is deleted and the Credential Provider List page is refreshed.

        4.2.6 - My Info.

        My Info. provides basic user information and authentication key management functions.

        My Info. # Check

        User My Info. On the screen, you can view and edit the user’s basic information, and you can manage the authentication key.

        To view the information of My Info., follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the page.
          • My Info. The page displays basic information and consists of Basic Information, Authentication Key Management, Access IP Control, Service Settings tabs.
        Information
        The My Info. page can also be accessed from the top of the Console screen My menu > My Info. and from Console Home’s My Info..

        Basic Information

        My Info. > Basic Information tab, you can view the user’s basic information and, if necessary, edit the email, password, mobile phone number, password reuse restriction, and time zone.

        CategoryDetailed description
        UsernameUser’s name
        SRNUser’s SRN
        emailUser’s email
        mobile phone numberUser’s mobile phone number
        PasswordUser’s password
        Password reuse restrictionUser password reuse limit count
        time zoneUser’s time zone
        Terms and ConditionsUser’s name
        Table. Items of the Basic Information tab of My Info.
        information
        Refer to Edit Basic Information for how to modify basic information.

        Authentication Key Management

        My Info. > Authentication Key Management tab, you can view the user’s authentication key information and, if necessary, generate an authentication key.

        CategoryDetailed description
        authentication keyUser-generated authentication key
        Security SettingsSecurity settings for authentication keys
        • Authentication method: temporary password, authentication key
        • Allowed access IP: IP that controls user access
        Table. My Info. authentication key management tab items

        Access IP control

        My Info. > In the Access IP Control tab, you can register and manage IPs that are allowed to access.

        CategoryDetailed description
        Console access IP controlWhether to use the access IP control feature
        • Edit button can be clicked to change the usage status and register IPs
        • When access IP control is enabled, you can connect to the Console only from registered IP ranges
        Access IP ListList of IP addresses that can access the console
        Table. Access IP control tab items
        Guide
        • The access IP control feature is available only to the Root user and IAM users. * ID Center and role members cannot be used.
        • Even without using the access IP control feature, you can add and manage IP addresses.

        Service Settings

        My Info. In the Service Settings tab, you can view the user’s authentication key information and generate an authentication key if needed.

        CategoryDetailed description
        AI Recommendation Floating GuideWhen used, an AI recommendation floating guide is provided at the bottom of the screen
        • Edit button can be clicked to configure usage
        • The Copliot feature remains available even when not used
        Table. My Info. service settings tab items

        Edit Basic Information

        My Info. > Basic Information tab, you can edit email, password, mobile phone number, password reuse restriction, and time zone.

        Edit email

        You can edit the user’s email. To edit a user’s email, follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. go to the page.
        3. My Info. On the Basic Information tab, click Edit Email. 3. Edit Email The popup window opens.
        4. Email Edit In the popup window, enter the characters displayed for anti-automatic input and press the Confirm button.
        5. Enter Email and click the Verify button. 6. A verification code will be sent to the entered email.
        6. Enter the verification code sent to the entered email and click the Confirm button.
        7. Click the Confirm button in the Edit Email popup. 8. Password Confirmation popup opens.
        8. Password Confirmation After entering the password in the popup window, click the Confirm button. 9. Go to the Basic Information tab.
        Caution
        • If you enter the password incorrectly five or more times, you will be automatically logged out.
        • Please enter your email information accurately. * If you do not receive the verification code, check your spam folder.

        Change Password

        You can modify the user’s password. To change a user’s password, follow the steps below.

        1. Click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. Navigate to the My Info. page.
        3. On the Basic Information tab of the My Info. page, click Change Password. 3. Change Password the popup window opens.
        4. In the Password Change popup window, please enter Current Password, New Password, and Confirm Password.
        5. Change Password in the popup window, click the Confirm button. 5. Go to the Basic Information tab.
        Caution

        Precautions when changing your password

        • If you enter the existing password incorrectly more than five times, you will be automatically logged out.
        • It must contain at least one each of uppercase letters (English), lowercase letters (English), digits, and special characters (! @ # $ % & * ^).
        • The length must be 9 to 20 characters.
        • ID or username cannot be used as a password.
        • You cannot use the same character more than three times.
        • Passwords that are easy to guess cannot be used.
        • You cannot use a password that was recently used.
        • You cannot use consecutive characters or numbers of four or more.
        • The password change interval is 90 days.

        Edit mobile phone number

        You can edit the user’s mobile phone number. To modify the user’s mobile phone number, follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the page.
        3. On the Basic Information tab of the My Info. page, click the Change Mobile Phone Number button. 3. Change Mobile Phone Number a popup window opens.
        4. Change mobile phone number In the popup window, enter the characters displayed for anti-automation and press the Confirm button.
        5. Please select the mobile phone number authentication method.
          • SMS authentication: Send authentication code via mobile phone SMS
          • Authenticate with Knox Teams: Send authentication code via Knox Teams
        6. After entering the mobile phone number to change, click the Verify button.
        7. After entering the verification code sent via SMS or Knox Teams, click the Confirm button.
        8. Change mobile phone number popup, click the Confirm button. 8. Password Confirmation popup window opens.
        9. Password Confirmation In the popup window, after entering the password, click the Confirm button. 9. Navigate to the Basic Information tab.
        information
        Authenticate with Knox Teams is only available when using a Knox email account.
        Caution
        • If you enter the password incorrectly five or more times, you will be automatically logged out.
        • Please accurately enter your mobile phone number information. * If you do not receive the verification code, check your spam folder.

        Modify password reuse restriction

        You can modify the number of times a user can reuse a password. To change the password reuse limit count for a user, follow these steps.

        1. All Services > Management > IAM menu, click it. 1. Go to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. navigate to the page.
        3. On the Basic Information tab of the My Info. page, click Edit Password Reuse Restriction. 3. Edit password reuse restriction The popup window opens.
        4. Edit Password Reuse Restriction In the popup, select the number of recent passwords that cannot be reused.
        5. Password reuse restriction edit In the popup window, click the OK button. 5. Go to the Basic Information tab.

        Modify Timezone

        You can edit the user’s time zone. To modify the user’s time zone, follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the page.
        3. On the Basic Information tab of the My Info. page, click Edit Time Zone. 3. Edit Timezone The popup window opens.
        4. Edit Timezone Select the user’s timezone.
        5. Edit Timezone in the popup window, click the Confirm button. 5. Go to the Basic Information tab.

        Manage Authentication Keys

        My Info. > Authentication Key Management You can create authentication keys and manage security settings in the tab.

        Create authentication key

        You can generate a user’s authentication key. To generate a user’s authentication key, follow the steps below.

        1. Click the All Services > Management > IAM menu. 1. Navigate to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the My Info. menu. 2. Navigate to the My Info. page.
        3. My Info. Click the Authentication Key Management tab on the page. 3. Navigate to the Authentication Key Management tab.
        4. On the Authentication Key Management tab, click the Create Authentication Key button. 4. Go to the Create Authentication Key page.
        5. On the Create Authentication Key page, enter the Expiration Period and Usage Purpose.
          • Expiration period can be entered as a number from 1 to 365.
          • If you select permanent in the expiration period, it can be used permanently.
        6. Check the authentication key generation information and click the Create button. 6. Go to the Authentication Key Management tab.
        Reference
        • You can create up to two authentication keys.
        • After generating a new authentication key, you must apply the updated API authentication key to the service you are using.
        • In the security settings, you can configure the authentication method and allowed IP addresses.
        • You can call the API with the generated authentication key to issue temporary keys, and you can issue up to five per authentication key.

        Check authentication key details

        To view the detailed information of the authentication key, follow the steps below.

        1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the My Info page.
        3. My Info. Click the Authentication Key Management tab on the page. 3. Go to the Authentication Key Management tab.
        4. In the Authentication Key Management tab, click the authentication key you want to view. 4. Navigate to the Authentication Key Details page.
          • Authentication Key Details page consists of Basic Information, Authentication Key Management tabs.

        Basic Information

        Authentication Key Details > Basic Information tab allows you to view the basic information of the selected authentication key.

        CategoryDetailed description
        Use authentication keyDisplay whether the authentication key is used
        • Click the Use, Disable button to configure
        Delete authentication keyDelete the authentication key
        authentication keyAccess Key and Secret Key information
        • Authentication key button, when clicked, opens a Password verification popup where you can enter the password and confirm
        Intended usePurpose of the authentication key
        Creation date and timeThe date and time the user generated the authentication key
        Expiration date and timeExpiration time of the user-generated authentication key
        Secret VaultWhether to use the Secret Vault service
        • When using the Secret Vault service, disabling and deleting the authentication key is not allowed
        Table. My Info. authentication key management > Basic Information Item

        Caution
        If you enter the password incorrectly five or more times, you will be automatically logged out.

        User temporary key

        Authentication Key Details > User Token tab allows you to view the list of tokens for the selected authentication key.

        information
        Temporary keys can only be created via the API, and in the User Temporary Keys tab, only viewing and deletion are possible.
        CategoryDetailed description
        DeleteDelete the selected key from the user key list
        • Activate when a key is selected from the list
        MoreSelect whether to use the API key selected from the user API key list
        • Enabled when an API key is selected from the list
        Access KeyA unique string for calling the API
        Secret KeySecurity token used with the Access Key
        • View button, when clicked, opens a Password Confirmation popup where you can enter the password and then confirm
        Creation date and timeThe date and time the user generated the authentication key
        Expiration date and timeExpiration time of the user-generated authentication key
        statusWhether to use the authentication key
        Table. My Info. authentication key management > User temporary key detailed items
        Caution
        If you enter the password incorrectly five or more times, you will be automatically logged out.

        Secret Vault temporary key

        Authentication Key Details > Secret Vault Secret Key tab allows you to view the list of Secret Vault secret keys for the selected authentication key.

        information
        • You can check it when using the Secret Vault service.
        • The temporary key can only be created via the API, and in the Secret Vault tab, you can only view and delete it.
        CategoryDetailed description
        DeleteDelete the selected key from the user key list
        • Activate when a key is selected from the list
        MoreSelect the usage status of the selected user API key
        • Enable when an API key is selected from the list
        Access KeyA unique string for calling the API
        Secret KeySecurity token used with the Access Key
        • View button, when clicked, opens a Password Confirmation popup where you can enter the password and then confirm
        Creation date and timeThe date and time the user generated the authentication key
        Expiration date and timeExpiration time of the user-generated authentication key
        statusUse of authentication key
        Table. My Info's authentication key management > Secret Vault temporary key detailed items
        Caution
        If you enter the password incorrectly five or more times, you will be automatically logged out.

        Modify authentication key security settings

        You can register security settings for the user’s authentication key. To register security settings for a user’s authentication key, follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the page.
        3. My Info. Click the Authentication Key Management tab on the page. 3. Go to the Authentication Key Management tab.
        4. On the Authentication Key Management tab, click the Modify Security Settings button. 4. Modify Authentication Key Security Settings Navigate to the page.
        5. On the Edit Authentication Key Security Settings page, enter the Authentication Method and Allowed Access IP.
          • Authentication method: temporary key, authentication key
            • You can only access the API if the authentication configured as the authentication method is used when calling it.
            • Temporary key: Authenticate using the temporary key issued with the authentication key and authentication number.
            • Authentication key: Authenticate using the key generated in the Console
          • Allowed Access IP: IP that controls user access
            • When enabled, only access from a specific IP range is allowed.
            • After use is configured, if an IP is not registered, access is denied for all IPs.
            • When set to Not used, access is allowed for all IPs.
            • You can register up to 50.
            • You can enter an IP address or CIDR.
        6. Check the authentication key security settings and click the Confirm button. 6. Go to the Authentication Key Management tab.
        Reference
        • South Korea (kr-south) region constraints
          • When Allowed Access IP is set to Use, only IP addresses can be entered. * CIDR cannot be entered.
        Caution
        • It is recommended to use temporary key authentication and allow access from specific IP addresses.
        • When authenticating with an authentication key, the email or SMS verification step may be omitted, which can pose a security risk.
        • Allowed Access IP If not used, connections can be made from any IP, which may cause a security risk.
        • When using Allowed IP, if you do not register an IP, all access will be restricted.
        • Authentication keys with temporary keys generated by Secret Vault can be disabled and deleted after terminating the Secret Vault service in each region within the Account.

        Delete authentication key

        information
        • The authentication key can be deleted only when it is in disabled state. * Before deleting the authentication key, stop using it.
        • When using the Secret Vault service, you cannot disable the authentication key usage. * Please cancel the Secret Vault service first.

        To delete the authentication key, follow the steps below.

        1. All Services > Management > IAM Click the menu. 1. Go to the Service Home page of Identity and Access Management(IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the My Info page.
        3. Click the Authentication Key Management tab on the My Info. page. 3. Navigate to the Authentication Key Management tab.
        4. Click the authentication key you want to delete in the Authentication Key Management tab’s key list. 4. Navigate to the Authentication Key Details page.
        5. On the Authentication Key Details page, click the Delete Authentication Key button.
        6. The authentication key is deleted, and you are taken to the Authentication Key Management tab.

        To delete multiple policies simultaneously, follow these steps.

        1. Click the All Services > Management > IAM menu. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. Navigate to the My Info. page.
        3. My Info. Click the Authentication Key Management tab on the page. 3. Go to the Authentication Key Management tab.
        4. In the Authentication Key Management tab’s authentication key list, check the keys you want to delete.
        5. Verify the selected authentication keys and click the Delete Authentication Key button.
        6. The selected authentication keys are deleted and the Authentication Key Management tab is refreshed.

        Manage Access IP

        My Info. > In the Access IP Control tab, you can register and manage IPs that can access the Console.

        You can restrict Console access to only the registered IP ranges by using the access IP control feature.

        information
        • The access IP control feature is available only to the Root user and IAM users. * ID Center and role members cannot be used.
        • Even without using the access IP control feature, you can add and manage IP addresses.

        To use the access IP control feature and manage IPs, follow the steps below.

        1. All Services > Management > IAM menu, click it. 1. Go to the Service Home page of Identity and Access Management (IAM).
        2. On the Service Home page, click the My Info. menu. 2. My Info. Navigate to the page.
        3. On the My Info. page, click the Access IP Control tab. 3. Navigate to the Access IP Control page.
        4. On the Access IP Control page, click the Edit button of Console Access IP Control. 4. Password Confirmation popup window opens.
        5. After entering the password, click the Confirm button. 5. Edit Console Access IP Control A popup window opens.
        6. After enabling the access IP control feature, register the IP addresses that are allowed to access.

        CategoryDetailed description
        Remove console access IPWhether to use the access IP control feature
        • You can toggle by clicking the toggle button to change to ON or OFF
        • When enabled, you need to register at least one IP
        IP listAllowed IP list
        • After entering the IP to allow, click the Add button to register
        • Up to 50 entries can be registered as a single IP or CIDR format (10.0.0.0/16)
        • Delete All: removes all IPs registered in the list
        • Click the X next to an IP in the list to delete
        Table. Console access IP control edit items
        7. Click the Confirm button when registration is complete.

        Caution
        If you enter the password incorrectly five or more times, you will be automatically logged out.

        4.2.7 - JSON Writing Guide

        Policies are divided into credential-based policies and resource-based policies.

        • Credential-based policy: a policy assigned to the principal (the entity performing actions) such as users, groups, or roles.
        • Resource-based policy: a policy granted to a resource that decides whether to allow or deny (Effect) an action (Action) on a specific resource (Resource) only for a principal (Principal).
        Reference
        Generally, for credential-based policies you do not need to specify a separate Pricpal property, but for resource-based policies you must specify the Pricpal property.

        Resource-based policy

        A resource-based policy is a policy that grants the specified principal (requester) permission to perform specific actions on the resource. Therefore, a resource-based policy is attached directly to the resource, only the users defined in the policy can enforce it, and the user to whom the policy is assigned becomes the security principal.

        Caution
        Since a resource-based policy designates the principal through the Principal attribute, you must include the Principal attribute when creating the policy.
        Color mode
        {
          "Version": "2024-07-01"
          "Statement": [
                {
                    "Sid": "statement1"
                    "Action": ["object-store:UploadObject"],
                    "Principal": {
                        "scp":"srn:e::1234:::scp-iam:user/abc3d3442"
                    },
                    "Effect": "Allow"
                    "Resource": "srn:e:::::object-store:bucket/foo"
                }
            ]
        }
        {
          "Version": "2024-07-01"
          "Statement": [
                {
                    "Sid": "statement1"
                    "Action": ["object-store:UploadObject"],
                    "Principal": {
                        "scp":"srn:e::1234:::scp-iam:user/abc3d3442"
                    },
                    "Effect": "Allow"
                    "Resource": "srn:e:::::object-store:bucket/foo"
                }
            ]
        }
        Example of allowing the UploadObject action on a bucket resource to fool only for a specific user

        Resource-Based Policy Structure

        The syntax structure and item-by-item description of resource-based policies are as follows.

        Color mode
        {
          "Version": "2024-07-01",                                 # Policy grammar version (fixed to 2024-07-01)
          "Statement": [
            {
              "Sid": "statement1",                                 # policy element ID
              "Effect": "Allow",                                   # Policy effect
              "Action": ["iam:showUser"],                          # Action defined in the policy
              "Principal": {
                  "scp":"srn:e::1234:::iam:user/ROOT"              # the entity that is the target of the policy
              }
              "Resource": "srn:e::kr-west1:::scp-iam:group/foo",   # resource for which the policy action is allowed
              "Condition": {                                       # policy condition
                  "StringEquals": {
                    "iam:userName": [
                      scp_test_user
                      ]
                  }
                }
            }
          ]
        }
        {
          "Version": "2024-07-01",                                 # Policy grammar version (fixed to 2024-07-01)
          "Statement": [
            {
              "Sid": "statement1",                                 # policy element ID
              "Effect": "Allow",                                   # Policy effect
              "Action": ["iam:showUser"],                          # Action defined in the policy
              "Principal": {
                  "scp":"srn:e::1234:::iam:user/ROOT"              # the entity that is the target of the policy
              }
              "Resource": "srn:e::kr-west1:::scp-iam:group/foo",   # resource for which the policy action is allowed
              "Condition": {                                       # policy condition
                  "StringEquals": {
                    "iam:userName": [
                      scp_test_user
                      ]
                  }
                }
            }
          ]
        }
        Resource feeling policy grammar structure
        ItemdescriptionRequired
        Version
        • “Define the version of the policy language”
        • Used with a different meaning than the policy version, and the current version is ““2024-07-01""
        Required
        StatementInformation on the key elements of the policyRequired
        Statement.SidPolicy element ID (unique ID for elements within the same policy)Select
        Statement.EffectPolicy application effect ( Allow : Allow /  Deny : Deny )Required
        Statement.PrincipalSecurity PrincipalRequired
        Statement.ActionPolicy target action (must specify either Action or NotAction)Select
        Statement.ResourceList of resources subject to policy evaluationRequired
        Statement.ConditionPolicy decision condition informationSelection
        Table. Description of each item in the policy structure

        Version

        Version is used with a different meaning from the policy version, and the current version is “2024-07-01”.

        {
           "Version" : "2024-07-01"
        }
        

        Statement

        Statement is information about the main elements of a policy and can be defined as a single element or an array of individual elements.

        "Statement" : [{statement}]
        "Statement" : [{statement}, {statement}, {statement}]
        
        Reference
        If there are two or more policy elements, write multiple elements inside the array. In this case, the operation between each element is defined as OR.

        Statement.Effect

        Statement.Effect defines whether the policy action is allowed.

        "Effect" : "Allow" # 허용
        "Effect" : "Deny"  # 거부
        
        Caution
        Write with case sensitivity.

        Statement.Principal

        Statement.Principal specifies the entity that is allowed or denied access to a resource in a resource-based policy.
        The subjects that can be specified in the Principal element are as follows.

        • root user
        • IAM user
        • IAM role
        • service account
        Caution
        • Principal can have one or more values, and when there are multiple, write them as an array.
        • Principal cannot use wildcard(*).
        "Principal" : { "scp": "srn:e::1234:::iam:user/root_user_id" }
        
        "Principal" : {
            "scp": [
                "srn:e::1234:::iam:user/abc33333",
                "srn:e::1234:::iam:user/kef12344"
            ]
        }
        
        "Principal": {
            "Service": [
              "apigateway.samsungsdscloud.com"
            ]
        }
        

        Statement.Action

        Statement.Action은 정책 검사에 평가될 액션을 정의합니다.

        • 대소문자를 구분하여 작성하세요.
        • 액션은 action definition에 정의되어 있는 액션 이름의 형식대로 작성하세요.
        Caution
        액션은 해당 리소스를 제공하는 서비스의 액션만 입력할 수 있습니다(단, 공통 기능에서 제공하는 태그 추가, 통합 자원 조회 등의 액션은 추가 가능).
        "Action" : ["{action_expression}"]                               # single action
        "Action" : ["{action_expression}", "{action_expression}", ... ]  # multiple actions
        

        Statement.Resource

        Statement.Resource는 정책이 적용되는 특정 리소스 또는 리소스 집합을 지정하는 SRN을 정의합니다.

        • 대소문자를 구분하여 작성하세요.
        • resource_expression은 와일드 카드("*") 또는 SRN 형식으로 작성하세요.
        Caution
        • 리소스 기반 정책이 부여된 자원의 SRN이 반드시 포함되어야 하며, 해당 자원의 하위 자원이 있는 경우에는 하위 자원을 포함하여 작성할 수 있습니다.
        • 정책에 정의된 액션 정의(Action definition)에 기술된 자원에 한하여 Resources에 작성할 수 있으며, 정의되지 않은 자원의 경우에는 정책 평가 시 무시됩니다.
        • 하위 자원에도 와일드 카드(*)를 사용할 수 있습니다.
        "Resource" : ["{resource_expression}"]                                 # single resource
        "Resource" : ["{resource_expression}", "{resource_expression}", ... ]  # multiple resources
        
        Reference

        resource_expression에선 SRN 각 요소에서도 wildcard 형태로 표시할 수 있으며, 요소의 종류에 따라 지원 형태가 달라집니다.

        • wildcard 미지원 SRN 요소 SRN 요소 중 offering, account_id, service-type은 wildcard를 지원하지 않습니다.
        "Resource" : ["srn:*::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]   # offering wildcard notation (X)
        "Resource" : ["srn:e::*:kr-west1::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]                                  # account wildcard notation (X)
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::*:instance/d12937a6db0940499fdb0e18ad57b101"]   # service type notation (X)
        
        • wildcard 지원 SRN 요소
          • SRN 요소 중 resource-type, resource-identifier, region은 전체 또는 부분에 대한 wildcard를 지원합니다.
          • 부분 wildcard의 경우에는 “foo , foo*, foo, fo” 와 같은 표현식으로 작성 할 수 있습니다.
        # region
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:*::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]     # All (O)
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-*::scp-compute:instance/d12937a6db0940499fdb0e18ad57b101"]  # part (O)
        
        # resource-type
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:*/d12937a6db0940499fdb0e18ad57b101"]     # All (O)
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:ins*/d12937a6db0940499fdb0e18ad57b101"]  # part (O)
        
        # resource-identifier
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/*"]                             # All (O)
        "Resource" : ["srn:e::9b7653f6f47a42e38055934a0575a813:kr-west1::scp-compute:instance/d12*101"]                       # part (O)
        

        단일 자원일 경우, user 조회에 대한 action_definition resources 정의 형태

        Color mode
        kind: scp-iam:action-definition
        service: iam
        paths:
          /v1/users/{user_id}:
            get:
              resources:
              - "iam:user":
                   resource_id: "path['user_id']"  # 사용자 조회 액션에서 지원되는 자원의 범위
        kind: scp-iam:action-definition
        service: iam
        paths:
          /v1/users/{user_id}:
            get:
              resources:
              - "iam:user":
                   resource_id: "path['user_id']"  # 사용자 조회 액션에서 지원되는 자원의 범위
        For a single resource, an example of resources definition
        Color mode
        {
          "Version": "2024-07-01",
          "Statement": [
                {
                    "Sid": "statement1",
                    "Action": ["iam:showUser"], 
                    "Effect": "Allow",
                    "Resource": [ 
                            "*",  #  전체 자원에 대한 표현,
                            "srn:e:::::scp-iam:user/94c2ae8e7d5d471683a6135446183a12", # 특정 사용자 자원에 대한 표현 
                            "srn:e:::::scp-iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현 -> 사용자 조회 액션에서 해당 자원을 기술  경우 작성된 내용은 정책 평가  무시 된다.  
                     ]  
                }
            ]
        }
        {
          "Version": "2024-07-01",
          "Statement": [
                {
                    "Sid": "statement1",
                    "Action": ["iam:showUser"], 
                    "Effect": "Allow",
                    "Resource": [ 
                            "*",  #  전체 자원에 대한 표현,
                            "srn:e:::::scp-iam:user/94c2ae8e7d5d471683a6135446183a12", # 특정 사용자 자원에 대한 표현 
                            "srn:e:::::scp-iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현 -> 사용자 조회 액션에서 해당 자원을 기술  경우 작성된 내용은 정책 평가  무시 된다.  
                     ]  
                }
            ]
        }
        Example of defining a policy resource for a single resource

        여러 자원일 경우, user 정책 조회에 대한 action_definition resources 정의 형태

        서로 다른 여러 자원을 정의할 경우, 정책에 작성된 자원 유형을 정의하세요.

        Caution
        • 정책 판단 시 액션 정의 파일에 정의된 자원을 기준으로 정책에 작성된 내용이 조건에 만족한 경우에만 성공으로 판단합니다.
        • 액션 정의 파일에 정의된 모든 자원이 정책에 작성되어 있지 않은 경우, 정책 조건에 맞지 않음으로 판단합니다.
        kind: scp-iam:action-definition
        service: iam
        paths:
          /v1/user/{user_id}/policy/{policy_id}
            get:
              resources:
              - "iam:user"
                 resource_id : "path['user_id']"
              - "iam:policy"
                 resource_id : "path['policy_id']"
        
        • 정상: 특정 사용자의 특정 policy 예시
        Color mode
        {
          "Version": "2024-07-01",
          "Statement": [
                {
                    "Sid": "statement1",
                    "Action": ["iam:ShowUserPolicy"],
                    "Effect": "Allow",
                    "Resource": [
                            "srn:e:::::iam:user/94c2ae8e7d5d471683a6135446183a12",  # 특정 사용자 자원에 대한 표현
                            "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                     ] 
                }
            ]
        }
        {
          "Version": "2024-07-01",
          "Statement": [
                {
                    "Sid": "statement1",
                    "Action": ["iam:ShowUserPolicy"],
                    "Effect": "Allow",
                    "Resource": [
                            "srn:e:::::iam:user/94c2ae8e7d5d471683a6135446183a12",  # 특정 사용자 자원에 대한 표현
                            "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                     ] 
                }
            ]
        }
        Normal: Example of a specific policy for a specific user
        • 정상: 모든 사용자의 특정 policy 예시

          Color mode
          {
            "Version": "2024-07-01",
            "Statement": [
                  {
                      "Sid": "statement1",
                      "Action": ["iam:ShowUserPolicy"],
                      "Effect": "Allow",
                      "Resource": [
                              "srn:e:::::iam:user/*",                                 # 모든 사용자 자원에 대한 표현
                              "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                       ] 
                  }
              ]
          }
          {
            "Version": "2024-07-01",
            "Statement": [
                  {
                      "Sid": "statement1",
                      "Action": ["iam:ShowUserPolicy"],
                      "Effect": "Allow",
                      "Resource": [
                              "srn:e:::::iam:user/*",                                 # 모든 사용자 자원에 대한 표현
                              "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                       ] 
                  }
              ]
          }
          Normal: Example of a specific policy for all users

        • 비정상: user 자원 미기술 예시

          Color mode
          {
            "Version": "2024-07-01",
            "Statement": [
                  {
                      "Sid": "statement1",
                      "Action": ["iam:ShowUserPolicy"],
                      "Effect": "Allow",
                      "Resource": [
                              "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                       ] 
                  }
              ]
          }
          {
            "Version": "2024-07-01",
            "Statement": [
                  {
                      "Sid": "statement1",
                      "Action": ["iam:ShowUserPolicy"],
                      "Effect": "Allow",
                      "Resource": [
                              "srn:e:::::iam:policy/c23fb561c689455993874fa5d5ed4a2f" # 특정 정책 자원에 대한 표현
                       ] 
                  }
              ]
          }
          Abnormal: user resource not specified example

        Statement.Condition

        Statement.Condition은 정책 내에서 정책이 적용될 특정 대상에 대한 적용 조건을 정의합니다.

        • 대소문자를 구분하여 작성하세요.
        • 조건 연산자를 사용하여 정책에 정의된 자원의 속성 조건 키(또는 글로벌 조건 키), 값이 실제 요청(또는 자원의 속성)값과 비교하기 위한 조건 표현식을 작성하세요.
        "Condition" : {
        	"{qualifier:}{operator}" : {
            	"{condition-key}" : ["{condition-value}"],
        	    "{condition-key2}" : ["{condition-value}"]
        	}
        }
        
        ItemRequired or notCase-sensitiveExplanation
        operatorRequiredOConditional operator
        • when two or more operators are defined, it operates as AND
        condition-keyRequiredXPolicy condition key (global condition key, resource attribute condition key)
        • when two or more condition-keys are defined, it operates as AND
        condition-valueRequiredDepends on the operator.policy condition value
        qualifierSelectO
        • Qualifier, when there are two or more condition values extracted from the request context
        • Definition method for operand and comparison condition
        Table. Description of each option item for Statement.Condition
        Information

        동일한 Condition Operator의 Condition Key에 Value가 2개 이상 정의된 경우, Value간 판단은 OR로 동작합니다. 단, Operator가 부정 연산자(Negative Operator) 유형인 경우에는 연산이 OR가 아닌 NOR로 동작합니다.

        • 긍정 연산자(Positive Operator) 유형 및 예시(userName이 “foo” 또는 “bar"이고 company가 “Samsung"인 경우)
          긍정 연산자(Positive Operator) 유형
        "Condition": {
           "StringEquals": {
              "iam:userName": [  # When the user's name is foo or bar
                  "foo", "bar"
              ],
              "iam:userCompany": [  # when the user's company is Samsung
                  Samsung
              ]
           }
         }
        
        • 부정 연산자(Negative Operator) 유형 및 예시(IP가 1.1.1.1/24 와 2.2.2.2/24가 대역이 아닌 모든 IP)
          부정 연산자(Negative Operator) 유형
        "Condition": {
           "NotIpAddress": {
              "scp:SourceIp": [  # when the request IP is neither 1.1.1.1 nor 2.2.2.2
                  "1.1.1.1/24", "2.2.2.0/24"
              ]
           }
         }
        

        조건 연산자(operator)

        조건 연산자는 7가지(문자열, 숫자, 날짜, Bool, IP, SRN, Null) 연산자를 제공합니다.

        • 문자열 연산자 

          conditional operatorOperator typeExplanation
          StringEqualspositive operatorExact match, case-sensitive
          StringNotEqualsnegation operatormismatch
          StringEqualsIsIgnoreCasepositive operatorExact match, case insensitive
          StringNotEqualsIsIgnoreCasenegation operatorMismatch, case-insensitive
          StringLikepositive operatorCase-sensitive matching; multiple-character string matching (*) wildcard can be included in the value.
          StringNotLikenegation operatorCase sensitivity mismatch, wildcard that matches multiple characters (*) can be included in values
          Table. String operators

        • 숫자 연산자

          conditional operatorOperator Typesdescription
          NumericEqualspositive operatorMatch
          NumericNotEqualsnegation operatormismatch
          NumericLessThanpositive operatorMatch less than
          NumericLessThanEqualspositive operatoras follows
          NumericGreaterThanpositive operatorovermatch
          NumericGreaterThanEqualspositive operatorMatch above
          Table. Numeric operators

        • 날짜 연산자

          conditional operatorOperator typedescription
          DateEqualspositive operatorMatch specific date
          DateNotEqualsnegation operatormismatch
          DateLessThanpositive operatorMatch before a specific date/time
          DateLessThanEqualspositive operatorMatch on a specific date/time or earlier
          DateGreaterThanpositive operatorMatch after a specific date/time
          DateGreaterThanEqualspositive operatorMatch on a specific date/time or later
          Table. Date operators

        • Bool 연산자

          conditional operatorOperator Typesdescription
          Boolpositive operatorTrue, False match
          Table. Bool operator

        • IP 연산자

          conditional operatorOperator typedescription
          IpAddresspositive operatorspecified IP address or range
          NotIpAddressnegation operatorAll IP addresses except the specified IP address or range
          Table. IP operator

        • SRN 연산자

          conditional operatorOperator Typesdescription
          SrnEquals, SrnLikepositive operatorSRN match
          SrnNotEquals, SrnNotLikenegation operatorSRN mismatch
          Table. SRN operator

        • Null 연산자

          conditional operatorOperator typedescription
          Nullpositive operator
          • If the key is missing or the value is null \→ True
          • If the key exists and the value is not null \→ False
          Table. Null operator

        조건 키(condition-key)

        조건 키는 전역 조건 키과 자원 속성 키로 구분됩니다.

        Reference
        조건 키는 대소문자를 구분하지 않습니다.
        전역 조건 키(Global condition key)

        Samsung Cloud Platform에 사전 정의된 조건 키로써 요청 정보, 자원 공통 정보(ex-tag), 네트워크 정보 등의 데이터를 정의합니다.

        condition keyData typesingular/pluraldescriptionexample
        scp:UserIdstringsinglerequest user id“scp:UserId” : [“efda56a968cd45b2873d9bf5fab58e95”]
        scp:UserNamestringsingleRequest user name“scp:UserName” : [“foo”]
        scp:MultiFactorAuthPresentboolstringRequest via MFA authentication“scp:MultiFactorAuthPresent” : [“True”]
        scp:RequestedRegionstringsinglerequest region“scp:RequestedRegion” : [“kr-west1”]
        scp:RequestAttribute/{AttributeKey}stringsinglerequest attribute value(AttributeKey)
        • body
        • query
        • header
        “scp:RequestAttribute/body[‘foo’]” : [“true”]
        scp:TagKeysstringsingle / multiplerequest tag key“scp:TagKeys” : [“tag-key”]
        scp:RequestTagstringsingleRequest tag key value“scp:RequestTag/tag-key” : [“tag-value”]
        scp:ResourceTag/{TagKey}stringsingleResource tag key value“scp:ResourceTag/foo” : [“bab”]
        scp:SourceIpip_addresssingleIP of the current requesting entity“scp:SourceIp” : [“1.1.1.1/24”]
        scp:CurrentTimedatetimesingleRequest time (UTC, ISO 8601 format)“scp:CurrentTime” : [“2025-11-06T16:10:38Z”]
        Table. Types and formats of supported global condition keys
        자원 속성 키(Resource attribute key)

        고유 자원에 대한 속성 키로써 자원의 속성값을 기준으로 조건값을 검사할 때 사용합니다.

        {service}:{resource_type}{attribute_name}
        
        Information
        자원의 속성은 Resource definition에서 정의된 attributesabac:true인 대상의 속성에 한해서만 정의할 수 있으며 정의되지 않은 속성값을 입력할 경우, 해당 condition 정책은 무시됩니다(Not found).
        • 자원 속성명 사용 예시
        "iam:userLastname"  (O) # attribute name defined in the resource (service: iam, resource: user, attribute_name : lastname)
        "iam:userLASTNAME"  (O) # Property name defined in the resource (case-insensitive)
        "iam:userLast_name" (X) # When it is not an attribute name defined in the resource ㅎ
        "iam:userEmail"     (X) # when abac is false
        "iam:state"         (X) # when the abac field is not defined
        
        Color mode
        kind: scp-resourcemanager:resource-definition
        service_type: scp-iam
        name: scp-iam:user
        resources_uri: /v1/users
        resource_type: user
        display_name:
          ko: '사용자'
          en: 'User'
        product_id: IAM
        attributes:
          state:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.state
          firstname:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.first_name
            abac: true
          lastname:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.last_name
            abac: true
          email:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.email
            abac: false
        kind: scp-resourcemanager:resource-definition
        service_type: scp-iam
        name: scp-iam:user
        resources_uri: /v1/users
        resource_type: user
        display_name:
          ko: '사용자'
          en: 'User'
        product_id: IAM
        attributes:
          state:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.state
          firstname:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.first_name
            abac: true
          lastname:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.last_name
            abac: true
          email:
            type: string
            uri: /v1/users/{resource_id}
            method: GET
            jsonpath: $.email
            abac: false
        scp-iam:user resource_definition example
        Reference
        • 자원의 속성명은 Resource definition에서 정의된 attributes에 정의된 속성 데이터를 사용합니다.
        • Resource definition에 대한 자세한 내용은 Resource Definition 가이드를 참고하세요.
        Condition Key 정의 예시
        • 전역 조건 키(Global condition key) 예시: 특정 정책 자원 태그의 키(Environment)의 값이 “Local” 또는 “Dev"인 경우에만 그룹 상세 조회를 허용하는 정책
        Color mode
        {
          "Version": "2024-07-01",
          "Statement": [
            {
              "Sid": "statement1",
              "Action": ["iam:showPolicy"],
              "Effect": "Allow",
              "Resource": ["*"],
              "Condition": {
                  "StringEquals": {
                    "scp:ResourceTag/Environment": [  # 전역 조건 키(scp:ResourceTag)를 사용한 정의 형태
                      "Local", "Dev"
                    ]
                  }
              }      
            }
          ]
        }
        {
          "Version": "2024-07-01",
          "Statement": [
            {
              "Sid": "statement1",
              "Action": ["iam:showPolicy"],
              "Effect": "Allow",
              "Resource": ["*"],
              "Condition": {
                  "StringEquals": {
                    "scp:ResourceTag/Environment": [  # 전역 조건 키(scp:ResourceTag)를 사용한 정의 형태
                      "Local", "Dev"
                    ]
                  }
              }      
            }
          ]
        }
        Example of a global condition key
        • 자원 속성 키(Resource attribute key) 예시
          Color mode
          {
            "Version": "2024-07-01",
            "Statement": [
              {
                "Sid": "statement1",
                "Action": ["server:showInstance"],
                "Effect": "Allow",
                "Resource": ["*"],
                "Condition" : {
                     "StringEquals" : {
                         "virtual-servers:instanceFlavor" : ["m1.small"] # virtual-servers 서비스의 intance 리소스의 flavor 속성이 "m1.small" 경우
                      }          
                 }
              }
            ]
          }
          {
            "Version": "2024-07-01",
            "Statement": [
              {
                "Sid": "statement1",
                "Action": ["server:showInstance"],
                "Effect": "Allow",
                "Resource": ["*"],
                "Condition" : {
                     "StringEquals" : {
                         "virtual-servers:instanceFlavor" : ["m1.small"] # virtual-servers 서비스의 intance 리소스의 flavor 속성이 "m1.small" 경우
                      }          
                 }
              }
            ]
          }
          Resource attribute key example

        정책 조건값(condition-value)

        조건 키에 대한 값을 정의합니다.

        Reference
        여러 개의 정책 조건값이 정의되어 있는 경우에는 각 조건값은 OR로 동작합니다.
        "Condition" :  {
           "StringEquals" : {
                "scp:resourceTag/key1": ["value1", "value2", "value3"]    # If the resource's tag key is key1 and the value is value1, value2, or value3
         }
        

        한정자(quailfier)

        Condition key로부터 추출된 요청 컨텍스트값이 여러 개의 값을 가진인 경우에 동작 방법을 정의합니다.(요청 컨텍스트값이 1개일 경우에는 생략)
        한정자는 ForAnyValue, ForAllValues로 구분되며 한정자를 작성하지 않을 경우, ForAnyValue가 기본값으로 정의됩니다.

        • ForAnyValue: 요청 컨텍스트에 추출된 값들이 Condition에 정의된 Operand와 1개 이상 일치할 경우 True
        • ForAllValues: 요청 컨텍스트에 추출된 값들이 Condition에 정의된 Operand 리스트의 하위 집합일 경우 True
        {
          
          "Condition" :  {
               "ForAllValues:StringEquals" : {
                    "scp:TagKeys": ["key1", "key2", "key3"]
                }
          }
        }
        
        한정자 동작 예시
        • “scp:TagKeys”로 부터 추출되는 요청값이 1개인 경우: 한정자와 관계없이 Operand별로 OR로 동작
        • “scp:TagKeys”로 부터 추출되는 요청값이 2개 이상인 경우: 한정자에 따라 결과 차이
        Color mode
        # 추출되는 요청 컨텍스트값이 ["key1", "key2", "key4"]  경우
        Operand: ["key1", "key2", "key3"]  
           # 요청 컨텍스트값  key1 Operand에 포함되므로 True
           # 요청 컨텍스트값  key2 Operand에 포함되므로 True
           # 요청 컨텍스트값  key4 Operand에 포함되지 않으므로 False 
        
        ForAnyValue는 3개의 요청 컨텍스트   1개라도 일치할 경우엔 True로 판단
        ForAllValues는 3개의 요청 컨텍스트 값이 모두 True  경우에만 최종 True로 판단
        # 추출되는 요청 컨텍스트값이 ["key1", "key2", "key4"]  경우
        Operand: ["key1", "key2", "key3"]  
           # 요청 컨텍스트값  key1 Operand에 포함되므로 True
           # 요청 컨텍스트값  key2 Operand에 포함되므로 True
           # 요청 컨텍스트값  key4 Operand에 포함되지 않으므로 False 
        
        ForAnyValue는 3개의 요청 컨텍스트   1개라도 일치할 경우엔 True로 판단
        ForAllValues는 3개의 요청 컨텍스트 값이 모두 True  경우에만 최종 True로 판단
        ForAnyValue, ForAllValues operation example

        4.3 - API Reference

        API Reference

        4.4 - CLI Reference

        CLI Reference

        4.5 - Release Note

        IAM

        2026.05.21
        FEATURE Add user permission copy feature and improve CX
        • You can copy the permissions of another IAM user.
          • When creating or modifying an IAM user, you can copy and import policies that are attached to another user’s group or directly attached.
        • We have improved the CX-related functionality.
          • You can manage IAM user access key creation records.
          • You can configure the visibility of the AI recommendation floating guide displayed at the bottom of the screen.
          • When viewing the IAM user list, you can click the user group to navigate to the detail page.
        2026.03.19
        FEATURE Add automatic logout on password errors and other feature enhancements
        • If a password error occurs while using the console, you will be automatically logged out of the console.
          • When password entry is required, such as changing the password or updating the mobile phone number, you will be automatically logged out after five or more incorrect attempts.
        • We provide a guide on using the Json mode that can be referenced when creating policies.
        2025.10.23
        FEATURE Add IP access control functionality and other feature enhancements
        • You can share related information via email when creating a user or changing a password.
        • Virtual Server and Cloud Function have been added as the entities that perform role functions.
        • When changing roles, you can check the session expiration time in My Menu.
        • You can register and manage IPs that can access the console.
        • Root users and IAM users with the same information (phone number, email) can switch between each other even after logging in.
        2025.07.01
        FEATURE Provide role and credential provider functionality
        • The role feature has been added.
          • Users can switch from their own account to a different role to access the Account.
        • Credential provider functionality has been added.
          • You can create a credential provider and access the Account resource in the Console through the created credential provider.
        • You can directly associate users with policies.
        • You can add conditions for attribute-based access control (ABAC) when creating a policy.
        2025.04.28
        FEATURE My. info feature change
        • The mandatory requirements for creating a user password have been changed.
        • When editing an authentication key, CIDR input is optional.
        • A password reconfirmation step has been added when changing the user’s email or phone number.
        2025.02.27
        FEATURE IAM user group, user, policy, and access key feature changes
        • IAM(Identity and Access Management) feature change
          • Added user group and user functions, and policy creation functionality.
          • We provide a unified authentication key by consolidating the app authentication key and the storage authentication key.
        • Samsung Cloud Platform Common Feature Changes
          • Implemented common CX changes, including Account, Service Home, and tags.
        2024.07.02
        NEW Official release of IAM service
        • The IAM(Identity and Access Management) service has been released.
          • Provide user authentication and authorization management.
          • Access control policy management provided
        2024.07.02
        NEW IAM Beta service launch
        • The IAM(Identity and Access Management) service has been launched.
          • Provide user authentication and authorization management.
          • Provides access control policy management

        5 - ID Center

        5.1 - Overview

        Service Overview

        ID Center is a service that enables easy centralized management of access permissions for resources by account on the Samsung Cloud Platform. You can create permission policies for each service and assign accounts and policies linked to the Organization service to users, enabling management of tasks according to each user’s permissions.

        Features

        • Easy Access Permission Management: Through SAML (Security Assertion Markup Language) based credential authentication, you can receive authentication and authorization from Samsung Cloud Platform and access resources of multiple accounts within the organization.
        • Efficient Account Management: By integrating with the Organization service, you can centrally manage the costs and resource usage incurred by all Accounts within the organization.
        • Account Security Enhancement: Instead of the Samsung Cloud Platform Console, you can strengthen security by using the separately provided Access Portal so that only authorized ID Center users can access. Through the Access Portal, you can fundamentally prevent users outside the customer organization from accessing the Account.

        Configuration

        Diagram
        Figure. ID Center diagram

        Provided features

        ID Center provides the following functions.

        • User and User Group Management: You can create users and user groups and configure service-specific permission management policies. Users are required to have MFA (Multi-Factor Authentication) applied, strengthening the management of Account access.
        • Account Allocation Management: You can assign and manage Accounts corresponding to each user’s tasks.
        • Permission Set Management: You can create and manage permission sets by using the default policies or custom policies that exist in each Account, or by configuring policies directly.
        • Access Portal Provision: Provides an Access Portal that can be used instead of the Samsung Cloud Platform Console, allowing only ID Center users to access it.

        Component

        User

        Administrators can create users and add them to user groups. They can generate passwords automatically or manually, and provide users with Access Portal login information. Additionally, users can be assigned to accounts according to their respective tasks.

        Reference
        For detailed information on user management, see How-to guides > User Management.

        User Group

        You can link users and Accounts through user groups. You can create user groups appropriate for each task, register users, and assign them to Accounts.

        Reference
        For detailed information about user groups, please refer to How-to guides > User Group Management.

        Permission Set

        You can create permission sets by using the default policies and custom policies that exist in the Account, or by configuring policies directly.

        Reference
        For detailed information about permission sets, refer to How-to guides > Permission Set Management.

        Provision status by region

        ID Center is available in the environments below.

        RegionWhether provided
        Korea West (kr-west1)Provide
        Korea East (kr-east1)Provide
        South Korea South 1 (kr-south1)Provide
        South Korea South 2 (kr-south2)Provide
        South Korea 3 (kr-south3)Not provided
        Table. ID Center regional availability status

        Preceding Service

        This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

        Service CategoryServiceDetailed description
        ManagementOrganizationA service that organizes accounts by organizational units, manages them hierarchically, and controls resource access permissions.
        Table. ID Center Preceding Service

        5.2 - How-to guides

        Users can create the service by entering the required ID Center information and selecting detailed options through the Samsung Cloud Platform Console.

        Create ID Center

        You can create and use an ID Center in the Samsung Cloud Platform Console.

        information
        You can manage the ID Center only in the region where it was created.
        Reference
        Only the Management Account of the Organization can create an ID Center.

        To create an ID Center, follow these steps.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.

        2. On the Service Home page, click the ID Center Apply button. Navigate to the ID Center Create page.

        3. After entering the basic information on the ID Center creation page, click the Create button.

          Category
          Required
          Detailed description
          ID Center nameRequiredEnter the ID Center name
          • English letters, numbers, and special characters(+=-_@,.) within 3 to 128 characters
          descriptionSelectEnter a description of the organizational unit within 1,000 characters.
          Credential sourceRequiredSelect credential source type
          • ID Center’s own directory: Use a directory within ID Center
          • AD (Active Directory): Use an Active Directory managed directly by the user
            • Automatically synchronize AD information upon creation
          Table. ID Center creation basic information

        4. When the popup notifying the creation of the ID Center opens, click the Confirm button.

        5. On the Service Home page, view the ID Center dashboard.

          CategoryDetailed description
          ID Center informationDisplay the name, ID, and Access Portal URL of the ID Center
          • Click the ID Center Information item to go to the ID Center Settings page and view detailed ID Center information
          UserNumber of users created in ID Center
          • Click the user count to go to the User List page
          • Click the Create item to go to the User Creation page. Create User reference
          User groupNumber of user groups created in ID Center
          • Click the group count to go to the User Group List page
          Permission setNumber of permission sets created in ID Center
          • Click the permission set count to go to the Permission Set List page
          Table. ID Center Service Home Dashboard Items

        Check ID Center detailed information

        You can view detailed information of the ID Center and manage permissions.

        Follow these steps to view detailed information of the ID Center and manage permissions.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.
        2. On the Service Home page, click the ID Center Settings menu. You will be taken to the ID Center Settings page.
          CategoryDetailed description
          Delete ID CenterButton to delete ID Center
          • Not displayed on delegated Account
          ServiceService name
          Resource TypeResource Type
          SRNUnique resource ID in Samsung Cloud Platform
          Resource nameResource Name
          Resource IDUnique resource ID in the service
          constructorUser who created the service
          Creation TimestampService creation timestamp
          EditorUser who edited the service information
          Modification date and timeDate and time the service information was modified
          ID Center nameID Center name
          • Click the Edit button to change the usage status
          RegionRegion where the ID Center was created
          ExplanationDescription of ID Center
          • Edit button can be clicked to change usage status
          Organization IDOrganization ID
          Credential sourceCredential source type
          • Click the Edit button to change the credential source type
          • ID Center native directory: Directory within ID Center
          • AD (Active Directory): Active Directory managed directly by the user
            • AD Reset: A Reset AD Information popup opens, allowing AD information to be edited
              • After the reset is complete, proceed with synchronization
            • Synchronization: Synchronize with AD
          Access Portal URLURL to access the Access Portal
          Delegated authorityDisplay the Account name, Account ID, Email, and Delegation time of the account that delegated management authority in ID Center
          • For delegated accounts, the managing account’s information is displayed, and permission delegation or cancellation is not possible
          • Permission delegation: Allows delegating permission to an account within ID Center
            • Displayed when there is no delegation information
            • When the button is clicked, you can select an account on the Permission delegation page to set up delegation
          • Cancel permission delegation: Cancel the permission delegation
          Table. ID Center configuration items

        Managing Credential Sources

        You can change the credential source type or modify and manage the settings for the AD (Active Directory) type.

        AD (Active Directory) Apply for Integration

        If you want to use an AD (Active Directory) that the user manages directly, you must first prepare the VPC and Load Balancer, then submit a request through SR. To apply for AD integration, follow these steps.

        1. Secure a VPC to integrate with the user’s AD.

          • If a network connection is required, connect to the network where the user’s AD resides via the Direct Connect service.
          • For more details, refer to Direct Connect Create.
        2. Configure the Load Balancer.

          1. Create a Load Balancer and an LB server group.
          2. Add the IP that will be associated with AD as a member of the LB server group’s connected resource.
          3. Create a Listener from the Load Balancer’s connected resources and attach the LB server group.
            Information
            • Through the Load Balancer service, the call information for AD synchronization from ID Center can traverse the user’s VPC and invoke the user’s AD.
            • For detailed information on creating and using the Load Balancer service, see Using the Load Balancer service.
        3. Configure a PrivateLink Service in the user’s VPC.

          1. Create a PrivateLink Service for the user VPC that will be called from ID Center.
          2. When creating a PrivateLink Service, select the Load Balancer created in step 2 as the connection resource.
        4. When the preparation work is finished, click the All Services > Management > Support Center menu. You will be taken to the Service Home page.

        5. On the Service Home page, click the Service Request menu. You will be taken to the Service Request List page.

        6. On the Service Request List page, select and enter the information required for the service request.

          Category
          Required status
          Detailed description
          TitleRequiredEnter a title for the service request
          • using Korean, English, numbers, and special characters (+=,.@-_) within 64 characters
          RegionRequiredSelect the region for the service request
          ServiceRequiredManagement service group’s ID Center service selection
          Task classificationRequiredID Center AD Integration Request Select
          contentRequiredEnter information for ID Center AD integration application
          Table. ID Center AD linked application items

        7. Check the input information and click the Request button.

          • When creation is complete, check the Service Request List page.
        Information
        After requesting the service, you cannot edit or delete the content you have written.

        Changing the credential source type

        You can change the credential source or modify the configuration values.

        Caution
        If you change the credential source, all configuration information and resources such as previously set users, user groups, account assignments, and permission sets will be deleted.

        To change the credential source type, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the ID Center Settings menu. Navigate to the ID Center Details page.

        3. On the ID Center Details page, click the Edit button of the Credential Source item. The Change Credential Source popup will open.

        4. After selecting the credential source type to use, click the Confirm button. A popup notifying the credential source change will open.

          CategoryDetailed description
          ID Center’s own directoryUse directory within ID Center
          • No separate configuration items
          AD (Active Directory)Use a user-managed Active Directory
          • Connection URL: Enter the LDAP server address (e.g., ldap:// or ldaps:)
          • Bind DN: Enter the DN (Distinguished Name) of the administrator or service account used to access the LDAP server
          • Bind credentials: Enter the password for the account corresponding to the Bind DN
          • User DN: Enter the directory path where user accounts are located (e.g., OU=Employees, OU=Accounts, DC=sub, DC=org)
          • Username LDAP attribute: Enter the attribute that identifies the user account (e.g., sAMAccountName, uid)
          • RDN LDAP attribute: Enter the RDN (Relative Distinguished Name, the top-level attribute in the user DN)
          • User object classes: Enter a comma‑separated list of LDAP classes that define user objects (e.g., , ) (example: persion, organizationPersion, usersAMAccount)
          Table. Credential source type change items

        5. Check the precautions for changes, check the checkbox, and then click the Confirm button. Go to the Service Home page to start changing the credential source type.

          • The change time varies depending on the scale, and you can confirm it via a notification once the change is complete.
          • You cannot navigate to another menu page while changes are being made.

        Synchronize AD (Active Directory) Information

        You can synchronize AD information.

        Reference
        • AD information is automatically synchronized daily from 00:00 to 06:00 (Asia/Seoul, GMT +09:00).
        • If a new AD connection is required, click the AD Reset button to change the AD information, then synchronize.

        To synchronize AD information, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the ID Center Settings menu. You will be taken to the ID Center Details page.
        3. On the ID Center Detail page, click the Sync button next to the synchronization time of the Credential Source item. The AD Information Sync popup opens.
        4. After reviewing the synchronization notification, click the Confirm button. AD information synchronization will begin.
          • The change time varies depending on the scale.

        Manage Permissions

        You can delegate the ID Center’s administrative privileges to another account, or revoke previously delegated privileges.

        Delegating Permissions

        You can delegate the administrative rights of the ID Center to another account.

        To delegate administrative privileges to another account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.
        2. From the Service Home page, click the ID Center Settings menu. Navigate to the ID Center Details page.
        3. On the ID Center Details page, click the Permission Delegation button. You will be taken to the Permission Delegation page.
          • The Delegate Permission button is displayed only when there is no Account that has delegated the current permission.
        4. On the Permission Delegation page, select the Account to which you want to delegate permissions, then click the Complete button.
          CategoryDetailed description
          Account nameAccount name
          Account IDAccount ID
          emailAccount email
          Additional date/timeAccount creation or registration time in the organization
          Additional typeMethod of adding an Account in the Organization
          • Create: Add a new Account on the Add Account page
          • Sign up: Add an existing Account
          Table. ID Center Delegated Authority Account List
        Reference
        When you click the View Hierarchy button, you can view the Account list in a hierarchical format.

        Cancel delegation

        You can revoke the ID Center’s administrative permissions that were delegated to another account.

        To revoke delegated administrative rights, follow these steps.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.
        2. On the Service Home page, click the ID Center Settings menu. Navigate to the ID Center Details page.
        3. On the ID Center Details page, click the Cancel Delegation button.
        4. When the popup notifying the revocation of delegated authority opens, click the Confirm button.

        Delete ID Center

        Caution
        An account that has been delegated the management of the ID Center cannot delete the ID Center.
        Caution
        When an ID Center is deleted, all users, user groups, and permission sets within the ID Center are removed, and all entries assigned to the Account are deleted.

        To delete the ID Center, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. Click the ID Center Settings menu on the Service Home page. Navigate to the ID Center Settings page.
        3. On the ID Center Settings page, click the ID Center Delete button. The ID Center Delete popup window opens.
        4. Delete ID Center In the popup window, enter the name of the ID Center to delete, then click the Confirm button. You will be redirected to the Service Home page.
          • The deletion time for the ID Center varies depending on the size, and you can confirm completion via a notification.
          • You cannot navigate to other menu pages while the ID Center is being deleted.

        5.2.1 - Managing ID Center Users

        You can view and manage users in the ID Center.

        Create User

        You can create a user and add it to the ID Center. To create a user, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User menu. You will be taken to the User List page.

        3. User List page, click the Create User button. It navigates to the Create User page.

        4. On the User Creation page, after entering the basic and additional information, click the Create button.

          Category
          Required status
          Detailed description
          usernameRequiredEnter the user’s name
          • using English letters, numbers, and special characters (+=-_@,.) within 128 characters
          • The username cannot be changed after creation
          descriptionSelectionEnter a description of the user within 1,000 characters
          PasswordRequiredSelect password creation method
          • Auto-generate: Automatically generate the password and provide it in a popup when user creation is completed
          • Manual entry: Refer to the password creation rules and enter it manually
          User real nameRequiredEnter the user’s full name as their real name
          Enter affiliation informationSelectEnter the division, department, manager, and employee number information each within 128 characters.
          Select user groupSelectionSelect the user group to which the user will be added
          Table. User-generated information
          Password creation rules
          • It must contain at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^).
          • The length is 9 to 20 characters.
          • ID or username cannot be used as a password.
          • You cannot use the same character more than three times.
          • You cannot use passwords that are easy to guess.
          • You cannot use a password that was recently used.
          • Sequences of four or more consecutive characters or digits are not allowed.
          • The password change cycle is 90 days.

        5. When the popup notifying user addition opens, click the Create button. The ID Center user login information popup opens.

        6. After verifying the ID Center user login information, click the Confirm button.

          CategoryDetailed description
          Access Portal URLURL information for accessing the Access Portal
          UsernameGenerated username
          PasswordGenerated user’s password
          • View Click the icon to view the password
          Excel downloadDownload ID Center user login information as an Excel file
          Email sendingSend an Excel file containing ID Center user login information via email
          • After clicking the button, enter the address to receive the email
          Table. ID Center user login information items

        Check user detailed information

        You can view and manage detailed information about users, user groups, and account information. To view detailed user information, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the User menu. It navigates to the User List page.
        3. On the User List page, click the user name to view detailed information. You will be taken to the User Details page.
          • User Details page displays basic information and consists of Basic Information, User Group, Account tabs.

        Basic Information

        Check the user’s basic information, and if necessary, edit the user’s description and options.

        CategoryDetailed description
        Delete userUser deletion button
        • AD-linked accounts cannot be deleted
        usernameUser’s name
        User real nameUser’s actual name
        • Click the Edit button to modify the name
        • For AD-linked accounts, editing is not allowed
        descriptionDescription of the username
        • Click the Edit button to edit the description
        Last loginThe date and time of the user’s last login
        PasswordDate and time of the last password change
        • For AD-linked accounts, verification is not possible
        • You can change the password by clicking the Edit button
        Password reuse restrictionNumber of recent passwords that cannot be set as a password
        • Cannot be verified for AD-linked accounts
        emailEmail verification status
        • For AD-linked accounts, the email information provided by AD is displayed and cannot be edited
        mobile phone numberMobile phone number verification status
        Affiliation informationUser’s division, department, manager, and employee number information
        • Cannot verify for AD-linked accounts
        • Click the Edit button to modify affiliation information
        Table. User's basic information tab items

        User Group

        The user can view the registered user groups and, if necessary, add or remove user groups.

        Reference
        For detailed information about User Group, see 사용자 그룹.
        CategoryDetailed description
        ExcludeExclude the selected user group from the user group list
        • Enabled when one or more user groups are selected
        Add user groupAdd a user group to register users
        User group nameName of the user group
        descriptionDescription of the user group
        Modification date and timeUser group modification timestamp
        Table. User's user group tab items

        Account

        Verify the Account assigned to the user, and, if necessary, add a permission set or assign an Account.

        Reference
        CategoryDetailed description
        Add permission setAdd a new permission set to the Account
        • Activated when selecting an Account from the Account list
        More > Exclude all direct applicationsExclude all permission sets directly applied to the Account
        • If all permission sets are excluded, the Account assignment is canceled
        Account allocationAssign a new Account to the user
        Account nameAccount name
        Permission setNumber of permission sets applied to the Account
        • When the mouse cursor is placed over a permission set, a popup opens that allows you to exclude the permission set
        Application methodAccount permission set application method
        • Direct: Policies directly attached to the Account
        • Group: Policies attached through a user group
        Table. User's Account tab items

        Change Password

        You can change the user’s password. To change a user’s password, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the User menu. You will be taken to the User List page.
        3. On the User List page, click the username whose password you want to change. You will be taken to the User Details page.
        4. On the User Details page, click the Edit button for the Password field. The Password Reset popup will open.
        5. Password Reset After setting the password in the popup window, click the Confirm button. The ID Center User Login Information popup window will open.
          • Auto Generation: Automatically generate a password
          • Direct Input: Manually input according to the password creation rules
        Password creation rules
        • It must include at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^).
        • The length is 9 to 20 characters.
        • ID or username cannot be used as a password.
        • You cannot use the same character more than three times.
        • You cannot use passwords that are easy to guess.
        • You cannot use a password that was recently used.
        • Sequences of four or more consecutive characters or digits are not allowed.
        • The password change interval is 90 days.
        1. ID Center User Login Information After checking the user information in the popup window, click the Confirm button.
          CategoryDetailed description
          Access Portal URLURL information for accessing the Access Portal
          UsernameGenerated user name
          PasswordGenerated user’s password
          • View Click the icon to view the password
          Excel downloadDownload ID Center user login information as an Excel file
          Email sendingSend an Excel file containing ID Center user login information via email
          • After clicking the button, enter the address to receive the email
          Table. ID Center user login information items

        Add User Group

        You can add a new user group. To add a user group, follow the steps below.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User menu. You will be taken to the User List page.

        3. On the User List page, click the username to add to the user group. You will be taken to the User Details page.

        4. On the User Details page, click the User Group tab. The User Group list will be displayed.

        5. Click the Add User Group button. You will be taken to the Add User Group page.

        6. On the Add User Group page, select the user group you want to add from the list, then click the Done button.

          Category
          Required
          Detailed description
          Added user group-Name of the user group added by the user
          User groupRequiredSelect the user group to add users to
          • When selected, add to the Added User Group item
          Table. Add User Group Item

        7. When the popup that notifies the addition of a user group opens, click the Confirm button.

        Add Permission Set

        You can add a permission set to the Account. To add a permission set to an Account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User menu. You will be taken to the User List page.

        3. User List page, click the username to add a permission set. You will be taken to the User Details page.

        4. On the User Details page, click the Account tab. The Account list is displayed.

        5. From the Account list, select the Account to which you want to add a permission set, then click the Add Permission Set button. You will be taken to the Add Permission Set page.

        6. On the Add Permission Set page, select the permission set you want to add from the permission set list, then click the Done button.

          Category
          Required status
          Detailed description
          Selected Account-Account name to add permission set
          Applied permission set-Name of the permission set applied to the selected account
          Permission setRequiredSelect one or more permission sets to apply to the Account
          • When selected, add to the Applied Permission Set item
          Table. Add permission set item

        7. When the popup that notifies the addition of a permission set opens, click the Confirm button.

        Allocate Account

        You can assign a new Account to the user. To assign a new Account, follow the steps below.

        1. Click the All Services > Management > ID Center menu. You will be taken to the Service Home page of ID Center.

        2. On the Service Home page, click the User menu. You will be taken to the User List page.

        3. On the User List page, click the user name to assign an Account. You will be taken to the User Details page.

        4. On the User Details page, click the Account tab. The Account list will be displayed.

        5. Click the Account Allocation button. You will be taken to the Account Allocation page.

        6. On the Account Assignment page, after selecting the Account to assign and the permission set to apply to the Account, click the Complete button.

          Category
          Required status
          Detailed description
          Select AccountRequiredSelect Account to assign to the user
          • View hierarchy: Display Accounts in an organizational hierarchy format
          • View Account list: Display Accounts in a list format
          Select permission setRequiredSelect the permission set to apply to the selected Account
          Table. User Account Assignment Items
          Information
          If there is no IAM policy name that matches the custom policy name of the selected permission set, you cannot assign the account.

        7. When the pop-up notifying that the Account assignment has been added to the user group opens, click the Confirm button.

        Delete User

        To delete a user, follow the steps below.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.
        2. On the Service Home page, click the User menu. It navigates to the User List page.
        3. Please select at least one user to delete from the user list.
        4. After confirming the selected users, click the Delete button.
          • You can also delete individually from the User Details page of the user to be deleted.
        5. When the popup notifying user deletion opens, click the Confirm button.

        5.2.2 - Managing ID Center User Groups

        You can view and manage user groups in ID Center.

        Create User Group

        You can create a user group and add it to the ID Center. To create a user group, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.

        3. Click the Create User Group button on the User Group List page. You will be taken to the Create User Group page.

        4. On the User Group Creation page, after entering the basic and additional information, click the Create button.

          Category
          Required status
          Detailed description
          User group nameRequiredEnter the user group name
          • using English letters, numbers, and special characters (+=-_@,.) within 3 to 30 characters
          descriptionSelectionEnter a description of the user group within 1,000 characters.
          Add userSelectSelect users to add to the user group
          • Display the list of users registered in the Account
          • If the user you want to add does not exist when linking with AD, add the user in the AD provider and go to the ID Center Settings > Credential Source page to perform synchronization
          Table. User Group Creation Information

        5. When the popup notifying the addition of a user group opens, click the Confirm button.

        View detailed information of user group

        You can view and manage detailed information about user groups, as well as user group and account information.

        To view detailed information about a user group, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.
        3. On the User Group List page, click the user group name whose details you want to view. You will be taken to the User Group Details page.
          • The User Group Detail page displays basic information and consists of Basic Information, User, and Account tabs.

        Basic Information

        You can view the basic information of a user group and, if necessary, edit its description and options.

        CategoryDetailed description
        Delete user groupButton to delete a user group
        User group nameName of the user group
        User Group IDUser group ID
        constructorUser who created the service
        Creation date and timeService creation date and time
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        User group nameUser group name
        • Edit button can be clicked to modify the name
        ExplanationDescription of the user group name
        • Edit button can be clicked to edit the description
        Table. User group basic information tab items

        User

        You can view the users registered in a user group and, if necessary, add or remove users.

        Reference
        For more details about User, refer to 사용자.
        CategoryDetailed description
        ExcludeExclude the selected user(s) from the user list
        • Enabled when one or more users are selected
        Add userAdd a user group to register
        UsernameUser’s name
        User groupNumber of user groups the user is registered in
        Creation date and timeUser creation timestamp
        Table. User tab entries for user groups

        Account

        Check the Account assigned to the user, and if necessary, you can add a permission set or assign an Account.

        Reference
        CategoryDetailed description
        Add permission setAdd a new permission set to the Account
        • Activated when selecting an Account from the Account list
        More > Cancel AssignmentCancel the assignment of the selected Account
        • Automatically cancel the Account assignment when all permission sets are excluded
        Account allocationAssign a new Account to the user group
        Account nameAccount name
        Permission setNumber of permission sets applied to the Account
        • When you hover over a permission set, a popup opens that allows you to exclude the permission set
        Table. Account tab items for user groups

        Add User

        You can add a new user to a user group. To add a user, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.

        3. User Group List page, click the user group name to which you want to add a user. You will be taken to the User Group Details page.

        4. On the User Group Details page, click the User tab. The user list will be displayed.

        5. Click the Add User button. You will be taken to the Add User page.

        6. After selecting the user you want to add from the user list on the Add User page, click the Done button.

          Category
          Required status
          Detailed description
          Added user-Name of the user group added
          userRequiredUser groups without added users
          • Display list of users registered in the Account
          • When selected, add to Added User item
          • If there is no user to add when linking with AD, add the user at the AD provider and go to ID Center Settings > Credential Source page to synchronize
          Table. Add User Item

        7. Verify that the added user appears in the list.

        Add Permission Set

        You can add a permission set to the Account. To add a permission set to an Account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.

        3. Click the user group name to which you want to add a permission set on the User Group List page. You will be taken to the User Group Details page.

        4. On the User Group Details page, click the Account tab. Account list will be displayed.

        5. From the Account list, select the Account to which you want to add a permission set, then click the Add Permission Set button. You will be taken to the Add Permission Set page.

        6. On the Add Permission Set page, select the permission set you want to add from the list, then click the Done button.

          Category
          Required status
          Detailed description
          Selected Account-Account name to add permission set
          Applied permission set-Name of the permission set applied to the selected account
          Permission setRequiredSelect one or more permission sets to apply to the Account
          • When selected, add to the Applied Permission Set item
          Table. Add permission set item

        7. Verify that the added permission set has been applied to the Account.

        Allocate Account

        You can assign a new Account to a user group. To assign a new Account, follow the steps below.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.

        3. User Group List page, click the user group name to assign an Account. You will be taken to the User Group Details page.

        4. On the User Group Details page, click the Account tab. The Account list will be displayed.

        5. Click the Account Allocation button. You will be taken to the Account Allocation page.

        6. On the Account Assignment page, after selecting the Account to assign and the permission set to apply to the Account, click the Complete button.

          Category
          Required or not
          Detailed description
          Select AccountRequiredSelect Account to assign to user group
          • View hierarchy: Display Accounts in an organizational hierarchy
          • View account list: Display Accounts in a list format
          Select permission setRequiredSelect the permission set to apply to the selected Account
          Table. Account Assignment Items
          information
          If there is no IAM policy name that matches the custom policy name of the selected permission set, you cannot assign the Account.

        7. Verify that the added Account has been assigned to the user.

        Delete user group

        To delete a user group, follow the steps below.

        1. Click the All Services > Management > ID Center menu to go to the ID Center’s Service Home page.
        2. On the Service Home page, click the User Group menu. You will be taken to the User Group List page.
        3. Select at least one user group to delete from the user group list.
        4. After confirming the selected user group, click the Delete User Group button.
          • You can also delete individually from the User Group Details page of the user group to be deleted.
        5. When the popup notifying that a user group has been deleted opens, click the Confirm button.

        5.2.3 - Assigning ID Center Account

        You can view the Account in ID Center and assign it to a user or user group.

        Allocate Account

        You can assign an Account to a user or a user group.

        To assign an Account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.

        2. On the Service Home page, click the Account Assignment menu. You will be taken to the Account List page.

        3. On the Account List page, select the Account to assign, then click the Assign to User or Group button. You will be taken to the Assign to User or Group page.

        4. Assign to Users or Groups on the Select Assignment Target area, after selecting the assignment target, click the Next button.

          • You must select at least one user or user group to assign the account.
            Category
            Requirement status
            Detailed description
            Account to assign-Name of the Account to assign to a user or user group
            UserSelectSelect the user to assign the account
            User groupSelectSelect the user group to assign the Account
            Table. Account assignment target selection
        5. In the Permission Set Selection area, select the permission set to apply to the Account, then click the Next button.

          Category
          Required status
          Detailed description
          Account to assign-Name of the Account to assign to a user or user group
          Permission setRequiredSelect one or more permission sets to apply to the Account.
          Table. Account permission set selection items

        6. In the Input Information Confirmation area, after verifying the assignment target and permission set, click the Complete button.

        7. When the pop-up notifying the Account allocation opens, click the Confirm button.

        Check account detailed information

        You can view and manage detailed information about the account, its assignment targets, and permission sets.

        To view the detailed information of the Account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Navigate to the Service Home page of ID Center.
        2. On the Service Home page, click the Account Assignment menu. You will be taken to the Account Information page.
        3. Account Information page, click the Account for which you want to view detailed information. You will be taken to the Account Details page.
          • Account Details page displays basic information, and consists of Basic Information, Assignment Target, Permission Set tabs.

        Basic Information

        You can view the basic information of the Account.

        CategoryDetailed description
        Account nameAccount name
        Account IDAccount ID
        constructorUser who created the Account
        Creation dateAccount creation date and time
        EditorUser who modified the Account
        Modification date and timeDate and time the account was modified
        Table. Account Basic Information Tab Items

        allocation target

        You can view and manage the users and user groups assigned to an Account.

        Reference
        For more details about User, refer to 사용자.
        CategoryDetailed description
        UnassignCancel the Account assignment for the selected user or user group
        • Activated when an Account is selected from the Account list
        More > Add Permission SetAdd a permission set to the selected Account
        • Activated when an Account is selected from the Account list
        Assign to user or groupAssign the selected Account to a new user or user group
        Allocation target nameName of the allocation target
        Target typeType of assignment target (user, user group)
        Permission setNumber of permission sets applied to the Account
        • When the mouse cursor is placed over a permission set, a popup opens that allows the permission set to be excluded
        Table. Account assignment target tab items

        Permission Set

        You can check the permission sets applied to the Account and, if necessary, exclude them.

        CategoryDetailed description
        Exclude permission setExclude the selected permission set from the Account
        • Activate when a permission set is selected from the permission set list
        • Automatically cancel the Account assignment when all permission sets are excluded
        Permission set nameName of the permission set
        ExplanationDescription of the permission set
        Modification date and timeDate and time the permission set was last modified
        Table. Account permission set tab items

        Add Permission Set

        You can add a permission set to an account assigned to a user or user group.

        To add a permission set to an Account, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Account Assignment menu. You will be taken to the Account List page.

        3. On the Account list page, click the Account to assign. You will be taken to the Account details page.

        4. On the Account Details page, click the Allocation Target tab. The allocation target list will be displayed.

        5. After selecting the assignment target to which you want to add a permission set from the assignment target list, click the More > Add Permission Set button. You will be taken to the Add Permission Set page.

        6. Add Permission Set From the permission set list on the page, select the permission set you want to add, then click the Done button.

          Category
          Required status
          Detailed description
          allocation target-Name of the assignment target to add the permission set
          Applied permission set-Name of the permission set applied to the selected account
          Permission setRequiredSelect one or more permission sets to apply to the Account
          • When selected, add to the Applied Permission Set item
          Table. Add Permission Set Item

        7. When the popup notifying that a permission set has been added opens, click the Confirm button.

        8. Verify that the added permission set has been applied to the Account.

        Add assignment to user or group

        You can assign an additional Account to new users or user groups.

        To assign an Account to a new user or user group, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Account Assignment menu. You will be taken to the Account List page.

        3. On the Account List page, click the Account to assign. You will be taken to the Account Details page.

        4. On the Account Details page, click the Allocation Target tab.

        5. In the Assignment Target tab, click the Assign to User or Group button. You will be taken to the Assign to User or Group page.

        6. After selecting the allocation target in the Select Allocation Target area, click the Next button.

          • You must select at least one user or user group to assign the Account to.
            Category
            Whether required
            Detailed description
            Assigned user-Current user name assigned to the Account
            UserSelectSelect the user to assign to the Account
            • When selected, add to the Assigned User field
            • If the user you want to add does not exist when linking with AD, add the user in the AD provider and go to the ID Center Settings > Credential Source page to perform synchronization
            Assigned user group-Current user group name assigned to the Account
            User groupSelectSelect the user group to assign the Account
            • When selected, add to the Assigned User Group item
            Table. Account assignment target selection
        7. In the Permission Set Selection area, select the permission set to apply to the Account, then click the Next button.

          Category
          Required status
          Detailed description
          Permission setRequiredSelect one or more permission sets to apply to the Account
          Table. Account permission set selection items

        8. In the Input Information Confirmation area, after checking the assignment target and permission set, click the Complete button.

        9. When the pop-up notifying the Account allocation opens, click the Confirm button.

        Cancel Account Assignment

        To cancel an Account assignment for a user or user group, follow these steps.

        1. Click the All Services > Management > ID Center menu. You will be taken to the Service Home page of ID Center.
        2. On the Service Home page, click the Account Assignment menu. You will be taken to the Account List page.
        3. On the Account List page, click the Account to assign. You will be taken to the Account Details page.
        4. On the Account Details page, click the Allocation Target tab. The allocation target list is displayed.
        5. After selecting the assignment target to cancel the Account assignment from the assignment target list, click the Cancel Assignment button.
        6. When the popup notifying that the Account allocation has been canceled opens, click the Confirm button.

        5.2.4 - Managing ID Center Permission Sets

        You can view and manage the permission sets of the ID Center.

        Create Permission Set

        You can create a permission set and add it to ID Center. To create a permission set, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set List page.

        3. On the Permission Set List page, click the Create Permission Set button. You will be taken to the Create Permission Set page.

        4. On the Create Permission Set page, after entering the basic information in the Basic Information Input area, click the Next button.

          Category
          Required status
          Detailed description
          Permission set nameRequiredEnter the permission set name
          • using English letters, numbers, and special characters (+=-_@,.) within 32 characters
          descriptionSelectEnter a description of the permission set within 1,000 characters
          Maximum session durationRequiredEnter the session time allowed for the user when accessing the Console via the Access Portal
          • Select time: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
          • Enter duration: can be entered in seconds ranging from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
          Table. Permission set basic information items

        5. Permission Set Settings area, select the policy to use and configure the policy, then click the Next button.

          Category
          Required status
          Detailed description
          Default policySelectionConnect the default policies offered by the Samsung Cloud Platform Console
          • After selecting the Use item, select the default policy to associate with the permission set from the list
          Custom policySelectConnect a custom policy created under the Account
          • Select the Use item, then directly enter the custom policy to attach to the permission set
          • The permission set cannot be applied to Accounts that lack an IAM policy name matching the entered custom policy name
          Inline policySelectDirectly set the policies to apply to the permission set
          • Use after selecting the item, configure according to the policy setting mode
          • JSON mode: Directly configure using the JSON Editor
          Table. Permission set configuration items
          guide
          A permission set can be linked with up to 20 policies in total, combining default and custom policies.

        6. In the Input Information Confirmation area, after reviewing the basic information and permission policies of the permission set, click the Create button.

        7. When the popup notifying the creation of a permission set opens, click the Confirm button.

        View permission set details

        You can view and manage detailed information about permission sets, user groups, and account information. To view the detailed information of a permission set, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set List page.
        3. On the Permission Set List page, click the permission set whose details you want to view. You will be taken to the Permission Set Details page.
          • The Permission Set Details page displays basic information and consists of Basic Information, Permissions, Account tabs.

        Basic Information

        You can view and edit the basic information of the permission set.

        CategoryDetailed description
        Delete permission setDelete permission set button
        ServiceService name
        Resource TypeResource Type
        SRNUnique resource ID in Samsung Cloud Platform
        Resource nameresource name
        • In the policy, it means the policy name
        Resource IDUnique Resource ID
        constructorUser who created the service
        Creation dateService creation timestamp
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        Permission set namePolicy name
        Maximum session durationSession time allowed for users when entering the Console via Access Portal
        • Edit button can be clicked to change the duration
          • Select duration: 1 hour, 2 hours, 4 hours, 8 hours, 12 hours
          • Enter duration: can be entered in seconds from 3,200 seconds (1 hour) to 43,200 seconds (12 hours)
        descriptionDescription of the policy name
        • Edit button can be clicked to modify the description
        Table. Basic Information tab items of the permission set

        Permission

        You can view and manage policies attached to a permission set.

        CategoryDetailed description
        Default policyDefault policies attached to the permission set
        • After selecting a policy from the default policy list, Detach button can be clicked to detach
        • Click the Attach Policy button to attach a new default policy
        Custom policyCustom policies attached to the permission set
        • After selecting a policy from the custom policy list, you can detach it by clicking the Detach button.
        • Click the Attach Policy button to attach a new custom policy.
        Inline policyService name of the inline policy attached to the permission set
        • Delete button can be clicked to delete the attached inline policy
        • Edit Policy button can be clicked to modify the inline policy
        • If there is no attached inline policy, Create Policy button can be clicked to create one
        Table. Permission information items of the permission set

        Account

        You can view and edit the Account information of a permission set.

        CategoryDetailed description
        Account nameAccount name
        Account IDAccount ID
        emailAccount email
        Table. Account tab items of the permission set

        Connect the default policy

        You can attach a new default policy to a permission set. To link the default policy, follow the steps below.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set List page.

        3. On the Permission Set List page, click the permission set to which you want to attach the default policy. You will be taken to the Permission Set Details page.

        4. On the Permission Set Details page, click the Permission tab.

        5. In the Default Policy area, click the Policy Connection button. Navigate to the Default Policy Connection page.

        6. On the Basic Policy Connection page, select the policy you want to link from the default policy list, then click the Complete button.

          Category
          Required
          Detailed description
          Linked default policy-Default policy name attached to the permission set
          Default policy connectionRequiredSelect the default policy to attach to the permission set
          • When selected, add to the Connected Default Policy item
          Table. Attach default policy to permission set item

        7. When the popup notifying the policy connection opens, click the Confirm button.

        Connecting a custom policy

        You can attach a new custom policy to a permission set. To link a custom policy, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set page.

        3. Permission Set List page, click the permission set to attach a custom policy. You will be taken to the Permission Set Details page.

        4. On the Permission Set Details page, click the Permission tab.

        5. In the Custom Policy area, click the Policy Connect button. You will be taken to the Custom Policy Connect page.

        6. On the Custom Policy Connection page, select the policy you want to connect from the custom policy list, then click the Done button.

          Category
          Whether required
          Detailed description
          Attached custom policy-Default policy name attached to the permission set
          Custom policy associationRequiredDirectly enter a custom policy to attach to the permission set
          • When selected, add to the Attached Custom Policy item
          • Click the Add button to further enter custom policies to attach
          Table. Attach a custom policy to a permission set item

        7. When the popup notifying the policy connection opens, click the Confirm button.

        Create Inline Policy

        You can modify the inline policy attached to the permission set. To modify the inline policy, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.

        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set List page.

        3. Permission Set List page, click the permission set to edit the inline policy. You will be taken to the Permission Set Details page.

        4. On the Permission Set Details page, click the Permission tab.

        5. In the Inline Policy area, click the Create Policy button. You will be taken to the Create Inline Policy page.

        6. Inline Policy Creation page’s Permission Settings area, after selecting the policy configuration method and the service to apply, click the Next button.

          Category
          Required status
          Detailed description
          Basic mode/JSON modeRequiredSelect the policy configuration method
          • Default mode: Configure using the mode provided by the Console
          • JSON mode: Configure directly using the JSON Editor
          ServiceRequiredSelect the service to set the policy
          • Add Service: Add a service to configure the policy
          Table. Inline policy creation - Service configuration
          Caution

          The policy settings provide Basic Mode and JSON Mode.

          • After writing in Basic Mode and entering JSON Mode or navigating the screen, services with duplicate control requirements are consolidated into one, and services that have not completed configuration are deleted.
          • If the content written in JSON mode does not conform to JSON format, you cannot switch to basic mode.

        7. After setting the permissions, click the Next button.

          • To register an individual resource as an applied resource, refer to Register an individual resource as an applied resource and proceed.
            Category
            Whether required
            Detailed description
            Control typeRequiredSelect policy control type
            • Allow policy: A policy that permits the defined permissions
            • Deny policy: A policy that denies the defined permissions
            For the same target, the deny policy takes precedence
            ActionRequiredSelect actions provided for each service
            • Actions that can select individual resources are shown in purple
            • Actions that target all resources are shown in black
            • Add Action Directly: You can specify multiple actions at once using the wildcard *
            Applied resourceRequiredResources to which the action applies
            • All resources: Apply to all resources for the selected action
            • Individual resources: Apply only to the specified resources for the selected action
              • Individual resources are only available when selecting the purple action that allows individual resource selection
              • Click the Add resource button to specify target resources by resource type
            Authentication TypeRequiredAuthentication method of the user target to which the policy will be applied
            • All authentication: Applied regardless of authentication method
            • Authentication key authentication: Applied to users authenticated with an authentication key
            • Temporary key authentication, Console login: Applied to users with temporary key authentication or Console login
            Applied IPRequiredIP allowed for policy application
            • Custom IP: User registers and manages the IP directly
              • Applied IP: IP that the user registers directly, to which control policies are applied; can be registered as an IP address or range
              • Excluded IP: IP to be excluded from Applied IP, can be registered as an IP address or range
            • All IPs: No IP access restriction
              • Access is allowed for all IPs, but if exceptions are needed, register Excluded IP to restrict access for the specified IPs
            Additional conditionSelectAdd conditions for attribute-based access control (ABAC)
            • Condition Key: Select from Global condition keys and service condition key list
            • Qualifier: Default value, arbitrary value in the request, all values in the request
            • Operator: Bool, Null
            • Value: True, False
            Table. Policy Creation - Permission Settings
        8. After reviewing the information entered on the Check Input Information page, click the Complete button.

        9. When the popup notifying a policy change opens, click the Confirm button.

        Register individual resources as applied resources

        Permission Settings allows you to register individual resources as applied resources. To register individual resources as applied resources, follow these steps.

        1. In the action selection, select an action that can select individual resources.
          • Actions that allow individual resource selection are displayed in purple.
        2. In Applied Resource, click Individual Resource.
        3. Click the Add Resource button. The Add Resource popup opens.
          Category
          Whether required
          Detailed description
          Self-typeRequiredSelect the type of resource to add
          SRN-Unique resource ID in Samsung Cloud Platform
          • Automatically updated according to the input fields below
          AccountRequiredAccount ID Settings
          • Current Account: Current Account ID is auto-filled and cannot be edited
          • All Accounts: Add to all Accounts (not recommended)
          • Manual Input: Manually enter the Account ID using lowercase English letters and numbers, up to 100 characters (wildcard input not allowed)
          RegionSelectEnter the resource’s region information directly within 100 characters
          • Select All When checked, add resources from all regions
          Resource IDRequiredEnter the resource ID to add directly, up to 100 characters
          • Select All when checked adds all resources of that resource type
          Table. Policy creation - Register individual resources as applicable resources

        Delete Permission Set

        guide
        If a permission set is applied to an Account, it cannot be deleted.

        To delete a permission set, follow these steps.

        1. Click the All Services > Management > ID Center menu. Go to the Service Home page of ID Center.
        2. On the Service Home page, click the Permission Set menu. You will be taken to the Permission Set List page.
        3. Select at least one permission set to delete from the permission set list.
        4. After verifying the selected permission set, click the Delete button.
          • You can also delete individually from the Permission Set Details page of the permission set to be deleted.
        5. When the popup notifying the deletion of the permission set opens, click the Confirm button.

        5.2.5 - Using ID Center Access Portal

        You can access and use the Account resource through the Access Portal.

        information
        • To use the Access Portal, you must be registered as a user in the ID Center of the Samsung Cloud Platform Console.
        • For detailed information on user registration, refer to Create User.

        Access Portal First Login

        To log in to the Access Portal for the first time, follow these steps.

        1. Use the Access Portal URL to go to the login page.
        information
        • The Access Portal connection URL is activated when applying for ID Center and can be found on the ID Center Settings page.
        • A firewall request may be required depending on the user environment.
        1. Enter the username and password on the login page.
        Information
        For username and password information, contact the ID Center administrator.
        1. Select the method to send the verification code, and click the Send Verification Code button.

        2. Enter the received verification code and click the Next button. A Identity verification for multi-factor authentication (MFA) popup will open.

        3. Identity verification for multi-factor authentication (MFA) in the popup window, after completing personal information entry and terms verification for MFA, click the Confirm button. The Password change popup window opens.

          Item
          Required status
          description
          Prevent automatic inputRequiredEnter the characters displayed in the image into the input field, then click the Confirm button.
          mobile phone numberRequiredEnter mobile phone number
          • Enter the mobile phone number and click the Verify button to issue a verification code
          • Enter the verification code received on the mobile phone and click the Confirm button
          • If the verification code is valid, identity verification is completed
          emailRequiredEnter an email (up to 60 characters) to use for identity verification
          • For accounts whose credential source is linked as AD type, select provide email information registered on the AD side as read-only
          regionRequiredRegion selection for personal data collection
          Collection and Use of Personal InformationRequiredAfter reviewing the terms for the collection and use of personal data, check I agree
          Table. Identity verification items for multi-factor authentication (MFA)

        4. Password Change In the popup window, after entering the password change information, click the Confirm button. The Access Portal Terms of Use popup window will open.

          Item
          Required status
          description
          Existing passwordRequiredEnter the password received from the ID Center administrator
          New passwordRequiredRefer to the password creation rules and enter it manually.
          Confirm PasswordRequiredRe-enter the password
          Table. Password change items
          Password creation rules
          • It must include at least one uppercase letter (English), one lowercase letter (English), one digit, and one special character (! @ # $ % & * ^).
          • The length must be 9 to 20 characters.
          • ID or username cannot be used as a password.
          • You cannot use the same character more than three times.
          • You cannot use passwords that are easy to guess.
          • You cannot use a recently used password.
          • Consecutive characters or numbers of four or more are not allowed.
          • The password change cycle is 90 days.

        5. After reviewing the Access Portal terms of use, click the Confirm button. You will be redirected to the Access Portal page.

        Access Portal Log in

        information
        • If you are accessing the Access Portal for the first time, refer to Access Portal First-time Access, apply for the Access Portal URL first, and then log in.

        To log in to the Access Portal, follow these steps.

        1. Enter the Access Portal connection URL received through service request in the browser’s address bar. You will be taken to the Access Portal login page.
        2. On the login page, enter username and password.
        3. Choose the method to send the verification code, and click the Next button. You will be taken to the verification code confirmation page.
          • If you did not receive the verification code or it has expired, click the Resend verification code button to request the code again.
        4. Enter the received verification code and click the Login button. You will be taken to the Access Portal page.
        Find ID/Password
        • If you have lost your ID or password, click the Find Password button, then you can change it using the email or phone number registered in the Access Portal.
        • Accounts whose credential source is linked as AD type have Password Recovery disabled. Contact the ID Center administrator.
        Caution
        • Please enter the password and verification code correctly. If you enter the password or verification code incorrectly five or more times, your account will be locked for security.
        • If the account is locked, provide the locked account information to the user.

        Using Access Portal

        When you log in to Access Portal, you will be taken to the Access Portal page. Access Portal page consists of Account tab and My Info tab.

        Account

        Check the Account and permission set assigned to the user, and access the Samsung Cloud Platform Console using the Account’s permission set.
        By using temporary key issuance, you can obtain a temporary key to access the Account.

        CategoryDetailed description
        Account ListAccount name and ID assigned to the user, and root user email information
        • When the Account name is clicked, display the permission set applied to the Account
        Permission Set ListPermission set applied to the Account
        • Clicking the permission set name navigates to the Samsung Cloud Platform Console page
        • Issue token: Issue a token that can be used with the Account
        Table. Account tab items

        My Info.

        Verify the user’s basic information, and modify the user’s description and options as needed.

        CategoryDetailed description
        UsernameUser’s name
        emailEmail to be used for identity verification
        • Click the Edit button to change the email
        • For AD-linked accounts, the email information provided by AD is displayed and cannot be edited
        mobile phone numberMobile phone number to use for identity verification
        • Edit button can be clicked to change the phone number
        Last loginThe date and time the user last logged in
        PasswordDate and time of the last password change
        • Cannot be verified for AD-linked accounts
        • Click the Edit button to change the password
        • Refer to the password creation rules when changing the password
        Password reuse restrictionNumber of recent passwords that cannot be set as the password
        • Cannot be verified for AD-linked accounts
        • Click the Edit button to change the number
        • You can set up to 24 recent passwords that cannot be used
        time zoneUser Time Zone (Time Zone)
        • Edit Click the button to change the time zone
        Terms and ConditionsAgreement to terms
        • View Content Click the item to view the terms
        Table. My Info. Tab item
        Password creation rules
        • If you enter the password incorrectly five or more times, you will be automatically logged out.
        • It must contain at least one each of uppercase letters (English), lowercase letters (English), digits, and special characters (! @ # $ % & * ^).
        • The length is 9 to 20 characters.
        • ID or username cannot be used as a password.
        • You cannot use the same character more than three times.
        • You cannot use passwords that are easy to guess.
        • You cannot use a password that was recently used.
        • Sequences of four or more consecutive characters or digits are not allowed.
        • The password change cycle is 90 days.

        Account

        You can check the Account and permission set assigned to the user, and use the Account’s permission set to log in to the Samsung Cloud Platform Console or obtain a temporary token for access.

        CategoryDetailed description
        Account listAccount name and ID assigned to the user, and root user email information
        • When the Account name is clicked, display the permission set applied to the Account
        Permission Set ListPermission set applied to the Account
        • Clicking the permission set name navigates to the Samsung Cloud Platform Console page
        • Issue token: Issue a token that can be used for the Account
        Table. Account tab items

        Issue temporary key

        You can obtain a temporary key to access the Samsung Cloud Platform Console from the Access Portal. To obtain a temporary key, follow these steps.

        1. Enter the Access Portal connection URL received through service request into the browser’s address bar. You will be taken to the Access Portal login page.
        2. Log in to Access Portal. Go to the Access Portal page.
        3. Access Portal page, click the Account tab. You will be taken to the Account tab.
        4. From the permission set list, click the Temporary Key Issuance button for the permission set you want to receive a temporary key for. A popup notifying the temporary key issuance will open.
        5. After checking the account name, click the Confirm button. The ID Center temporary key issuance popup opens.
        6. After checking the token issuance information, click the Confirm button.
        Caution
        • ID Center Credential Issuance Please note that the information in the popup cannot be reviewed again.
        • If you lose the token issuance information, you must reissue the token.

        5.3 - Release Note

        ID Center

        2026.03.19
        CHANGED Access Portal automatic provision of access URL
        • When applying for the ID Center, we also provide the Access Portal URL.
          • The process of requesting the Access Portal URL through a service request has been changed to provide the Access Portal URL together when applying for the ID Center.
          • After completing the ID Center application, you can view the Access Portal connection URL on the ID Center settings screen.
        2025.10.23
        FEATURE AD (Active Directory) credential integration provided
        • You can select AD (Active Directory) as the credential source.
          • Using AD (Active Directory), users can manage credential sources directly.
        2025.07.01
        NEW ID Center Service Official Launch
        • We have officially launched the ID Center service.
          • You can create permission policies for each service and assign accounts and policies linked to the Organization service to users, enabling management of tasks according to each user’s permissions.
          • You can strengthen security so that only authorized ID Center users can access through the Access Portal.

        6 - Logging&Audit

        6.1 - Overview

        Service Overview

        Logging&Audit stores all actions performed by the user, enabling change tracking of cloud resources, troubleshooting, security checks, and more. Collected action logs are retained for 90 days and can be stored in the user’s Object Storage through Trail creation and management.

        Provided Features

        Logging&Audit provides the following features.

        • Task History Log Collection: All generated logs are collected and stored in real time. For the complete logs collected from multiple servers and services, you can search using various criteria such as resource type, resource name, time period, and operator name through a web-based console.
        • Activity Log Audit: All recorded activity details are retained for 90 days and can be viewed at any time through the Console.
        • Log Management: The numerous logs generated while using cloud services can be stored in the user’s Object Storage by creating a Trail.
        • Log Integrity Verification: After creating a Trail, you can verify through the log file verification feature whether the log files stored in Object Storage have been changed, modified, or deleted.

        Component

        Activity History

        It stores all user activities, enabling tracking of changes to cloud resources, troubleshooting, security audits, and more. Activity logs are retained for 90 days without additional configuration, and you can analyze logs using various search functions for effective log management.

        Trail

        Trail can store user activity logs generated through the Console and API calls in Object Storage for long-term retention. Additionally, you can select the services and accounts you wish to store to use it for tracking changes to cloud resources, troubleshooting, security audits, and more.

        Preceding Service

        This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

        Service CategoryServiceDetailed description
        StorageObject StorageObject storage that facilitates data storage and retrieval
        Table. Logging&Audit Pre-service

        6.2 - How-to guides

        Users can view activity logs through the Samsung Cloud Platform Console and store those logs using the Trail service without any time constraints. When issues such as security risks or resource changes occur, they can review the activity logs to determine the cause.

        Reference
        Activity logs are deleted after 90 days. If you need long-term retention, create a Trail and store it in Object Storage. For more details, see Create Trail.

        View Activity History

        To view the list of a user’s activity history, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Activity History menu. You will be taken to the Activity History List page.
        3. Activity History List page, view the activity history.
          CategoryDetailed description
          File downloadSave the activity log list in JSON or CSV file format
          Period filterSelect list search period
          • All, Last 30 minutes, Last 1 hour, Last 12 hours, Custom input Select from
          • Custom input: start and end date-times can be entered
          time zoneSelect searchable time range
          Search input fieldEnter a keyword to search the list
          Advanced SearchEnter a keyword or select information by category to search the list.
          Settings iconConfigure columns to display in the list
          Table. Activity log list items
        information
        • The list refreshes automatically every minute.
        • The list shows only the selected region’s entries.

        Activity History Comparison

        You can select up to five task histories from the activity log list to compare information.
        If you check and select the work history you want to compare, it will be added to the Activity History Comparison page, where you can compare and review the information.

        View detailed activity history information

        You can view the list of all activity logs and detailed information. On the Activity Log Details page, it consists of Work History Details, Work Log Details tabs.

        To view detailed information of the activity log, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Then navigate to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Activity History menu. It navigates to the Activity History List page.
        3. Activity Log List page, click the activity entry you want to view details for. You will be taken to the Activity Log Details page.
          • Activity Details page consists of Work History Details, Work Details tabs.

        Task History Details

        On the Work History Detail page, you can view detailed information about the work history.

        CategoryDetailed description
        Work date and timeLog occurrence time
        Operator InformationOperator account
        ServiceService name
        Role NameRole name of the user who entered as a role
        Resource NameResource Name
        Regionworking region
        Resource TypeResource Type
        Work historyWork details
        Resource IDResource’s unique ID
        Operation resultResult
        Event topicEvent details
        Table. Work History Detail Tab Items

        Task Details

        Work History Details page lets you view detailed information of the work history.

        CategoryDetailed description
        Basic mode JSON modeSelect view mode for task history details
        Copy codeCode copying is possible when JSON mode is selected
        accountIdAccount ID
        productNameService name
        requestedByRequester ID
        resourceNameResource Name
        resourceTypeService type
        stateResult
        Table. Work History Detail Tab Items

        6.2.1 - Managing Trails

        Users can view activity logs through the Samsung Cloud Platform Console and store those logs using the Trail service without time restrictions. Since activity logs are retained for 90 days, for long-term retention you must create a Trail service and store them in Object Storage.

        Create Trail

        In the Samsung Cloud Platform Console, you can use the Logging&Audit Trail service to store activity logs without any time restrictions.

        To create a Trail, follow the steps below.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. On the Trail List page, click the Create Trail button. You will be taken to the Create Trail page.
          • Enter or select the required information in the Service Information Input area.
            Category
            Required status
            Detailed description
            Trail nameRequiredTrail name
            • Enter using English letters, numbers, and the special character (-) with a length of 5 to 26 characters
            Target regionRequiredRegion where activity occurred
            • Services that are created without specifying a region select the target region as All
            • If a specific region selection is required, select from the region list
            • The target region can be changed after creation
            Target resource typeRequiredResource type of activity logs to be stored in Trail
            • Default: All
            • If you want to change to specify only certain resource types, click the Select button to choose the resource types to store
            • The target resource type can be changed after creation
            Target usersRequiredUser of the activity records to be stored in Trail
            • Default: All
            • If you want to change to specify only certain users, click the Select button to choose the users to be saved
            • The target users can be modified after creation
            Storage bucket regionRequiredLocation (region) of the Object Storage bucket for storing activity logs
            • The storage bucket cannot be changed after creation
            storage bucketRequiredObject Stroage bucket name for storing activity logs
            • The storage bucket cannot be changed after creation
            Save formatRequiredFile type to save (JSON, CSV)
            • The save format can be changed after creation
            Log file verificationSelectLog file verification usage
            • If you select Use, a Digest file is stored in the same bucket to verify changes or deletions of the Trail log file
            • Log file verification usage can be changed after creation
            ServiceWatch log collectionSelectTrail logs are sent to a ServiceWatch log group. By sending Trail logs to a ServiceWatch log group, you can monitor them through ServiceWatch and receive alerts when specific activities occur
            • If you select Use, you can view the automatically generated ServiceWatch log group name. You can also select the IAM role required for ServiceWatch log collection
            • The IAM role for ServiceWatch log collection requires the following configuration
              • Set the Principal’s Type to Service, and choose loggingaudit.samsungsdscloud.com for Value
              • Attach a policy to Policy that includes the following permissions
                • servicewatch:CreateBulkServiceLogEvents
                • servicewatch:CollectLogGroupLogStream
              • Whether ServiceWatch log collection is enabled can be changed after the Trail is created
            Table. Trail service information input fields
          • In the Additional Information Input area, enter or select the required information.
            Category
            Required
            Detailed description
            descriptionSelectEnter additional information or description about the Trail
            TagSelectionAdd Tag
            • Up to 50 can be added per resource
            • After clicking the Add Tag button, enter or select Key and Value values
            Table. Trail additional information input fields
        Reference
        If the saved file type is CSV, open the log file in a text editor (e.g., Notepad++).
        Reference

        When ServiceWatch log collection is enabled, refer to the following for the IAM policy permissions.

        • If you want to create the Authentication Type as All Authentication, write it as follows.
        {
        	"Statement": [
        		{
        			"Action": [
        				"servicewatch:CreateBulkServiceLogEvents",
        				"servicewatch:CollectLogGroupLogStream"
        			],
        			"Effect": "Allow",
        			"Resource": [
        				"*"
        			],
        			"Sid": "VisualEditor0"
        		}
        	],
        	"Version": "2024-07-01"
        }
        
        • If you want to create the authentication type as temporary authentication, Console login, you need a Condition clause as shown below.
        {
        	"Statement": [
        		{
        			"Action": [
        				"servicewatch:CreateBulkServiceLogEvents",
        				"servicewatch:CollectLogGroupLogStream"
        			],
        			"Effect": "Allow",
        			"Resource": [
        				"*"
        			],
        			"Sid": "VisualEditor0",
                    "Condition": {
                        "Bool": {
                                "scp:MultiFactorAuthPresent": [
                                    "True"
                            ]
                        }
                    }
        		}
        	],
            "Version": "2024-07-01"
        }
        
        Caution
        When creating IAM policy permissions for configuring ServiceWatch log collection, note that authentication type of authentication key authentication is not supported.
        1. Summary Check the detailed information and estimated billing amount generated in the panel, then click the Complete button.
          • Once creation is complete, check the created resources on the Trail List page.

        Check Trail detailed information

        The Trail service allows you to view and edit the full list and detailed information. Trail Details page consists of Details, Tags, Activity Log tabs.

        To view detailed information about the Trail, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource to view detailed information. You will be taken to the Trail Detail page.
          • Trail Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.
            CategoryDetailed description
            Trail statusStatus of the user-created Trail
            • Active: Trail running
            • Stopped: Trail stopped
            Trail controlButton to change the Trail status
            • Start: Starts a stopped Trail. Activity logs are saved again from the day the Trail is started.
            • Stop: Stops a running Trail. Activity logging is halted, and previously saved activity logs are retained.
            Delete TrailButton to delete the trail
            Table. Trail status information and additional features

        Detailed Information

        On the Trail list page, you can view detailed information of the selected resource and edit the information if needed.

        CategoryDetailed description
        ServiceService name
        Resource TypeResource Type
        SRNUnique resource ID in Samsung Cloud Platform
        • In the Trail service, it refers to the Trail SRN
        Resource NameResource name
        • In the Trail service, it refers to the Trail name
        Resource IDUnique resource ID in the service
        constructorUser who created the service
        Creation date and timeService creation date and time
        EditorUser who edited the service information
        Modification date and timeDate and time the service information was modified
        Trail nameTrail name
        Target regionThe region where the activity log occurred
        • You can specify the target region for the activity logs stored in the Trail when creating a Trail, and you can also modify it. Edit button allows you to change it, and for more details, see 대상 리전 수정하기
        Target resource typeIf you want to change the resource type of the activity history stored in Trail
        • , click the Edit button and select the resource type to save. For more information, see Modify resource type.
        Target usersIf you want to change the user of the activity log stored in Trail
        Storage bucket regionRegion of the Object Storage bucket storing activity logs
        storage bucketObject Stroage bucket name storing activity logs
        Save formatFile types stored in the bucket (JSON, CSV)
        • If you want to change the file types stored in the bucket, set them via the Edit button. For details, see 저장 형식 수정하기
        descriptionAdditional information or description about the Trail
        Log file verificationLog file verification usage
        • Enabled When enabled, a Digest file is stored in the same bucket to verify changes and deletions of Trail log files
        ServiceWatch log collectionSend Trail logs to a ServiceWatch log group
        • If you select Use, Trail logs are sent to a ServiceWatch log group, allowing monitoring through ServiceWatch and receiving alerts when specific activities occur. For more details, see Modify ServiceWatch log collection
        Initial collection timestampThe initial collection timestamp of activity logs stored in Trail
        Final collection date and timeThe most recent collection timestamp of activity logs stored in Trail
        Final execution resultFinal execution result of the activity log stored in Trail
        Table. Trail detailed information tab items

        tag

        On the Trail List page, you can view the tag information of the selected resource, and add, modify, or delete it.

        CategoryDetailed description
        Tag listTag list
        • You can view the Key and Value information of the tag
        • Up to 50 tags can be added per resource
        • When entering a tag, you can search and select from the list of previously created Keys and Values
        Table. Trail tag tab items

        Job History

        On the Trail list page, you can view the operation history of the selected resource.

        CategoryDetailed description
        Task History ListResource Change History
        • You can view operation details, operation time, resource type, resource name, operation result, and operator information
        • Provides detailed search functionality via the Detailed Search button
        • Click the relevant resource in the Operation History List. The Operation History Details popup will open.
        Table. Trail operation history tab detailed information items

        Managing Trail Resources

        Depending on the Trail’s state, you can start or stop it. To control the Trail’s resources, follow the steps below.

        Getting Started with Trail

        You can start a Stopped Trail. Activity history will be saved again from the day you start the Trail.

        1. Click the All Services > Management > Logging&Audit menu. You will be taken to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. On the Trail List page, click the resource (Trail) to restart the stopped Trail. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Start button at the top to start the server. Check the status of the changed Trail in the Status Display item.
          • When the Trail start is complete, the status changes from Stopped to Active.
          • For detailed information about the Trail status, please refer to Check Trail details.

        Stop Trail

        You can stop a Trail that is active. Stopping a Trail halts the recording of activity history, while preserving any previously saved activity history.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource (Trail) you want to stop. You will be taken to the Trail Details page.
        4. Trail Details page, click the Stop button at the top to stop the server. In the Status Display section, check the status of the updated Trail.
          • When the trail stop is complete, the status changes from Active to Stopped.
          • For detailed information about the Trail status, refer to Check Trail detailed information.

        Managing Trail Resources

        If you need control and management functions for the created Trail resource, you can perform tasks on the Trail Details page.

        Modify target region

        You can modify the target region of a Trail. To modify the target region of a Trail, follow the steps below.

        1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. On the Trail List page, click the resource (Trail) whose target region you want to change. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Edit button of the Target Region. You will be taken to the Edit Target Region popup.
        5. Select the region to modify from the region list, and click the Confirm button. You will be taken to the Trail Details page.
        6. Check the changed target region on the Trail Details page.
        Reference
        Changes to event logs stored in Trail are applied from the time they are created or modified and are saved in one‑hour intervals.

        Edit target resource type

        You can modify the target resource type of a Trail. To modify the target resource type of a Trail, follow the steps below.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. On the Trail List page, click the resource (Trail) whose target resource type you want to change. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Edit button of the Target Resource Type. You will be taken to the Edit Target Resource Type popup.
        5. Add or modify the target resource type, select it, and verify that the selected resource type appears in the selected item at the bottom.
        6. If you have completed adding or modifying the target resource type, click the Confirm button. You will be taken to the Trail Details page.
        7. On the Trail Detail page, check the changed Target Resource Type.

        Edit target user

        You can modify the target users of a Trail. To modify the target users of a Trail, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource (Trail) whose target user you want to change. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Edit button of the Target User. The Target User Edit popup opens.
        5. Add or modify the target user, select them, and verify that the selected user appears in the Selection Item at the bottom.
        6. If you have completed adding or modifying the target user, click the Confirm button. You will be taken to the Trail Details page.
        7. On the Trail Details page, check the changed Target Users.

        Modify Save Format

        You can modify the format of log files stored in Trail’s bucket. To change Trail’s storage format, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. You will be taken to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource (Trail) whose log file storage format you want to change. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Edit button of the Save Format. The Edit Save Format popup window opens.
        5. Change the file format and click the Confirm button. You will be taken to the Trail Details page.
        6. On the Trail Detail page, check the changed Save Format.

        Edit Trail description

        You can edit the description of a Trail. To edit the description of a Trail, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Go to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource (Trail) whose description you want to edit. You will be taken to the Trail Detail page.
        4. Click the Edit button of the Description on the Trail Details page. The Edit Description popup opens.
        5. Complete editing the description and click the Confirm button. You will be taken to the Trail Details page.
        6. Check the updated description on the Trail Detail page.

        Modify log file verification

        You can modify whether Trail’s log file verification is enabled. To modify the usage of Trail’s log file verification, follow the steps below.

        1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Click the resource (Trail) whose log file verification setting you want to change on the Trail List page. You will be taken to the Trail Details page.
        4. Click the Edit button of Log File Verification on the Trail Details page. You will be taken to the Log File Verification Edit popup.
        5. If you select Use, a Digest file is stored in the same bucket to verify whether the Trail log file has been modified or deleted. Choose whether to use it and click the Confirm button. You will be taken to the Trail Details page.
        6. On the Trail Details page, check the updated log file verification.

        Modify ServiceWatch Log Collection

        You can modify whether ServiceWatch log collection is enabled. To modify the ServiceWatch log collection setting for a Trail, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Proceed to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. On the Trail List page, click the resource (Trail) to change the ServiceWatch log collection setting. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Edit button of ServiceWatch log collection. You will be taken to the Edit ServiceWatch log collection popup.
        5. When you select Use, the ServiceWatch log group name that will receive the Trail logs is automatically generated and can be viewed. Also select the IAM role required for ServiceWatch log collection, and click the Confirm button. You will be taken to the Trail Details page.
          • ServiceWatch log collection requires the following configuration for the IAM role.
            • Select Service for the Category of Actor, and select loggingaudit.samsungsdscloud.com for Value.
            • In the policy, link a policy configured with the following permissions.
              • servicewatch:CreateBulkServiceLogEvents

              • servicewatch:CollectLogGroupLogStream

              • To create the authentication type as all authentication, write it as follows.

                Color mode
                {
                	"Statement": [
                		{
                			"Action": [
                				servicewatch:CreateBulkServiceLogEvents
                				servicewatch:CollectLogGroupLogStream
                			],
                			"Effect": "Allow"
                			"Resource": [
                				*
                			],
                			"Sid": "VisualEditor0"
                		}
                	],
                	"Version": "2024-07-01"
                }
                {
                	"Statement": [
                		{
                			"Action": [
                				servicewatch:CreateBulkServiceLogEvents
                				servicewatch:CollectLogGroupLogStream
                			],
                			"Effect": "Allow"
                			"Resource": [
                				*
                			],
                			"Sid": "VisualEditor0"
                		}
                	],
                	"Version": "2024-07-01"
                }
                Code block. IAM policy > Permission (authentication type: all credentials)

              • If you want to create the authentication type as temporary authentication, Console login, you need a Condition clause as shown below.

                Color mode
                {
                	"Statement": [
                		{
                			"Action": [
                				servicewatch:CreateBulkServiceLogEvents
                				servicewatch:CollectLogGroupLogStream
                			],
                			"Effect": "Allow"
                			"Resource": [
                				*
                			],
                			"Sid": "VisualEditor0"
                            "Condition": {
                                "Bool": {
                                        "scp:MultiFactorAuthPresent": [
                                            True
                                    ]
                                }
                            }
                		}
                	],
                    "Version": "2024-07-01"
                }
                {
                	"Statement": [
                		{
                			"Action": [
                				servicewatch:CreateBulkServiceLogEvents
                				servicewatch:CollectLogGroupLogStream
                			],
                			"Effect": "Allow"
                			"Resource": [
                				*
                			],
                			"Sid": "VisualEditor0"
                            "Condition": {
                                "Bool": {
                                        "scp:MultiFactorAuthPresent": [
                                            True
                                    ]
                                }
                            }
                		}
                	],
                    "Version": "2024-07-01"
                }
                Code block. IAM policy > permissions (authentication type: temporary key authentication, Console login)

        Caution
        When creating IAM policy permissions for setting up ServiceWatch log collection, please note that authentication type of authentication key authentication is not supported.
        1. Check the updated ServiceWatch log collection on the Trail Details page.

        Delete Trail

        You can reduce operational costs by deleting unused Trails. However, deleting a Trail may cause the running service to stop immediately, so you should carefully consider the impact of service interruption before proceeding with the termination.

        Caution
        Please note that data cannot be recovered after deleting a Trail.

        To delete a Trail, follow these steps.

        1. Click the All Services > Management > Logging&Audit menu. Navigate to the Service Home page of Logging&Audit.
        2. On the Service Home page, click the Trail menu. You will be taken to the Trail List page.
        3. Trail List page, click the resource (Trail) you want to delete. You will be taken to the Trail Details page.
        4. On the Trail Details page, click the Trail Delete button.
        5. After deletion is complete, check the Trail list page to confirm the resource has been removed.
        Caution
        Deleting the Trail will stop saving activity logs. Proceed with the deletion only after fully considering the impact that may occur during service interruption.

        List of resource types by service

        Resource type list per service. When creating a Trail or modifying the target resource type, this is the list of selectable target resource types.

        CategoryTarget resource typeScope
        AI&MLOps Platformaiml-brightix:aimlops-platformRegion
        API Gatewayapigateway:apiRegion
        Archive Storagearchivestorage:bucketRegion
        Backupbackup:backupRegion
        Backupbackup:backup-agentRegion
        Bare Metal Serverbaremetal:baremetalRegion
        Block Storage(BM)baremetal-blockstorage:volumeRegion
        Block Storage(BM)baremetal-blockstorage:volume-groupRegion
        CacheStorecachestore:cache-storeRegion
        Certificate Managercertificatemanager:certificateRegion
        Cloud Functionsscf:cloud-functionRegion
        Cloud LAN-Campusclancampus:campus-networkRegion
        Cloud LAN-Datacenterclandc:cloud-lan-networkRegion
        Cloud LAN-Datacenterclandc:interfaceRegion
        Cloud LAN-Datacenterclandc:vcableRegion
        Cloud LAN-Datacenterclandc:vdeviceRegion
        Cloud WANclanwan:attachmentRegion
        Cloud WANclanwan:networkRegion
        Cloud WANclanwan:segmentRegion
        Cloud WANclanwan:segment-locationRegion
        Cloud WANclanwan:segment-sharingRegion
        CloudMLaiml-brightix:cloud-mlRegion
        Config Inspectionconfiginspection:config-inspectionRegion
        Container Registryscr:container-registryRegion
        Cost Savingsbillingplan:cost-savingsRegion
        Data Flowdataanalytics-brightix:data-flowRegion
        Data Flow Servicedataanalytics-brightix:data-flow-serviceRegion
        Data Opsdataanalytics-brightix:data-opsRegion
        Data Ops Servicedataanalytics-brightix:data-ops-serviceRegion
        DevOps Servicedevopsservice:devops-serviceRegion
        Direct Connectdirect-connect:direct-connectRegion
        EPAS(DBaaS)epas:epasRegion
        Edge Serveredgeserver:edge-serverRegion
        Event Streamseventstreams:event-streamsRegion
        File Storagefilestorage:volumeRegion
        Firewallfirewall:firewallRegion
        GPU Servergpuserver:imageRegion
        GPU Servergpuserver:serverRegion
        GSLBgslb:gslbRegion
        Global CDNcdn:cdnRegion
        Hosted Zonedns:hosted-zoneRegion
        Identity Access Managementiam:access-keyRegion
        Identity Access Managementiam:groupRegion
        Identity Access Managementiam:policyRegion
        Identity Access Managementiam:roleRegion
        Identity Access Managementiam:userRegion
        Key Management Servicekms:kmsRegion
        Kubernetes Engineske:clusterRegion
        Kubernetes Engineske:nodepoolRegion
        LB Health Checkloadbalancer:lb-health-checkRegion
        LB Listenerloadbalancer:lb-listenerRegion
        LB Server Grouploadbalancer:lb-server-groupRegion
        Load Balancer Listener Oldloadbalancer-old:listenerRegion
        Load Balancer Oldloadbalancer-old:loadbalancerRegion
        Load Balancer Poolloadbalancer-old:poolRegion
        Load Balancerloadbalancer:loadbalancerRegion
        Logging&Auditloggingaudit:tralRegion
        MariaDB(DBaaS)mariadb:mariadbRegion
        Marketplacemarketplace:product-serviceRegion
        Microsoft SQL Server(DBaaS)sqlserver:sqlserverRegion
        Multi-node GPU Clustermultinodegpucluster:gpu-nodeRegion
        Multi-node GPU Clustermultinodegpucluster:cluster-fabricRegion
        MySQL(DBaaS)mysql:mysqlRegion
        Network Loggingnetwork-logging:network-loggingRegion
        Object Storageobjectstorage:bucketRegion
        Organizationorganization:delegation-policyRegion
        Organizationorganization:invitationiRegion
        Organizationorganization:organizationRegion
        Organizationorganization:organization-accountRegion
        Organizationorganization:ouRegion
        Organizationorganization:service-control-policyRegion
        Planned Computebillingplan:planned-computeRegion
        PostgreSQL(DBaaS)postgresql:postgresqlRegion
        Private 5G Cloudprivate-fivegen-cloud:private-fivegen-cloudRegion
        Private DNSdns:private-dnsRegion
        Private NATvpc:private-natRegion
        Public Domain Namedns:public-domain-nameRegion
        Public IPvpc:publicipRegion
        Quick Querydataanalytics-brightix:quick-queryRegion
        Repositoryscr:repositoryRegion
        Search Enginesearchengine:search-engineRegion
        Secret Vaultsecretvault:secretvaultRegion
        Security Groupsecurity-group:security-groupRegion
        SingleIDsingleid:singleidRegion
        Support Planbillingplan:support-planRegion
        Trailloggingaudit:trailRegion
        Transit Gatewayvpc:trasit-gatewayRegion
        VPCvpc:vpcRegion
        VPCvpc:internet-gatewayRegion
        VPCvpc:vpc-endpointRegion
        VPCvpc:vpc-peeringRegion
        VPCvpc:nat-gatewayRegion
        VPCvpc:portRegion
        VPCvpc:subnetRegion
        VPCvpc:private-natRegion
        VPCvpc:privatelink-endpointRegion
        VPCvpc:privatelink-serviceRegion
        VPCvpc:publicipRegion
        VPCvpc:transit-gatewayRegion
        VPNvpn:vpn-gatewayRegion
        VPNvpn:vpn-tunnelRegion
        Verticavertica:verticaRegion
        Virtual Servervirtualserver:serverRegion
        Virtual Servervirtualserver:auto-scaling-groupRegion
        Virtual Servervirtualserver:launch-configurationRegion
        Virtual Servervirtualserver:imageRegion
        Virtual Servervirtualserver:keypairRegion
        Virtual Servervirtualserver:server-groupRegion
        Virtual Servervirtualserver:volumeRegion
        Table. List of resource types by service

        6.3 - API Reference

        API Reference

        6.4 - CLI Reference

        CLI Reference

        6.5 - Release Note

        Logging&Audit

        2026.03.19
        FEATURE Logging&Audit ServiceWatch log collection integration
        • Logging&Audit ServiceWatch log collection integration
          • Configure the Trail logs to be sent to a ServiceWatch log group, allowing you to monitor them through ServiceWatch and receive alerts when specific activities occur.
        2025.07.01
        FEATURE Logging&Audit new release service addition integration
        • Logging & Audit: Add integration for newly launched service
          • API Gateway, Archive Storage, Backup Agent, Cloud Functions, Cloud LAN-Datacenter, Cloud WAN, CloudML, Cost Savings, GSLB, Global CDN, IAM > role, Load Balancer > LB Health Check, Marketplace, Organization, Private DNS, Private NAT, Public Domain Name, Quick Query, Secret Vault, SingleID, Support Plan, Transit Gateway, VPC Peering, Vertica
        • When viewing activity logs, we added a date-range filter/time zone and a comparison feature for activity logs.
        2025.04.28
        FEATURE Logging&Audit new launch service addition integration
        • Logging & Audit: Add integration for newly launched service
          • Data Flow, Data Ops
        2025.02.27
        FEATURE Logging&Audit new service launch addition integration
        • Logging & Audit new service launch integration
          • AI&MLOps Platform, Multi-node GPU Cluster, VPN, Cloud LAN-Campus, KMS, Event Streams, Serch Engine, EPAS, Microsoft SQL Server
        • Samsung Cloud Platform Common Feature Changes
          • Account, IAM, Service Home, tags, and other common CX changes have been reflected.
        2024.10.01
        NEW Logging&Audit Service Official Release
        • Logging&Audit service has been launched. It stores and searches all activity logs performed by customers (Console, API, CLI) and provides features such as change tracking of cloud resources, troubleshooting, and security inspections.
        2024.07.02
        NEW Beta version release
        • We have launched the Logging&Audit service. It stores and searches all activity logs performed by customers (Console, API, CLI), and provides functions such as change tracking of cloud resources, troubleshooting, and security inspection.

        7 - Notification Manager

        7.1 - Overview

        Service Overview

        The Notification Manager is a management service that provides notifications to users when alerts occur, according to the criteria set in the notification policy for each account.

        Provided features

        The Notification Manager provides the following features.

        • Alert Group Management: You can create and manage alert groups. You can add or remove users from an alert group.
        • Notification Policy Management: You can configure a notification policy to receive specific alerts generated within an Account. When creating a notification policy, if you associate a notification group, users in that group can receive the notifications set in the policy.

        Component

        Notification Manager provides notification groups and notification policies.

        Notification Group

        You can create and manage notification groups, and add or remove users from a notification group. The main features are as follows.

        • Alert Group Creation: You can create an alert group and add users.
        • Alert Group > Add User: You can add users to a created alert group.
        • For instructions on creating and using notification groups, see How-to guides > Notification Groups.

        Notification Policy

        You can create and manage alert policies, and you can disable or re‑enable an alert policy. The main features are as follows.

        • Alert Policy Creation: You can create an alert policy and attach an alert group.
        • Disable Notification Policy: You can disable the notification policy you are using.
        • Use Notification Policy: You can re-enable a notification policy that has been disabled.
        • Refer to How-to guides > Notification Policy for how to create and use notification policies.

        Preceding Service

        Notification Manager has no prerequisite service.

        7.2 - How-to Guides

        Users can enter the required information for an alert group and select detailed options to create it through the Samsung Cloud Platform Console.

        Create Notification Group

        You can create a notification group in the Samsung Cloud Platform Console and use it.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Alert Group List page in Notification Manager.
        2. On the Notification Group List page, click the Create Notification Group button. You will be taken to the Create Notification Group page.
        3. On the Create Notification Group page, enter the information required to create a service and select detailed options.
          • Enter the required information in the Basic Information area.
            Category
            Required status
            Detailed description
            Notification group nameRequiredNotification group name
            • Korean, English, numbers, special characters(+=,.@-_) using, input within 3 to 24 characters
            ExplanationSelectEnter a description for the notification group
            • Maximum length is 1,000 characters
            Table. Notification group basic information items
          • In the Add User area, select the user to add to the notification group.
            Category
            Required status
            Detailed description
            Add userSelectionUsers added to the notification group
            • Search for the desired user, then select and add that user
            • Users in the notification group can be removed using the Delete button
            • If the user you want to add does not exist, you need to create the user on the user creation page. See IAM > Create User
            • Only users with login history (registered email or mobile phone number) can be added to the notification group
            Table. Notification Group User Addition Item
            Caution
            In the case of IAM users, users who have no login history after account creation cannot receive notifications. Therefore, such users cannot be added to a notification group.

        View detailed information of the notification group

        Notification groups can view and edit the complete list and detailed information.

        To view detailed information for the alert group, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Go to the Alert Group List page in Notification Manager.
        2. On the Notification Group List page, click the notification group to view its details. You will be taken to the Notification Group Details page.
          • Notification Group Details page provides detailed information about the notification group, as well as edit and delete functions.
            CategoryDetailed description
            ServiceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            • In Notification Manager, it refers to the Notification Manager SRN
            Resource nameResource Name
            • In the Notification Manager service, it refers to the Notification Manager name
            Resource IDUnique resource ID in the service
            constructorUser who created the service
            Creation date and timeService creation timestamp
            EditorUser who edited the service information
            Modification dateDate and time the service information was modified
            Notification group nameNotification group name
            descriptionDescription of the notification group
            userList of users added to the notification group
            Table. Notification group detail items

        Add user to notification group

        You can add users to the notification group.

        To add a user to the notification group, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Notification Group List page in Notification Manager.
        2. Alert Group List page, click the Add button next to the user of the alert group you want to add a user to. You will be taken to the Add User page.
        3. Add User page, select the user to add to the notification group and add them.
          • If there is no user to add, create a user on the user creation page. Refer to IAM > Create User.
          • Only users with a login history (users who have registered an email or mobile phone number) can be added to the notification group.
        4. If you have added all users, click the Complete button. On the Alert Group List page, click the Expand button at the far right of the relevant alert group to verify the added users.
        Caution
        For IAM users, those who have not logged in after account creation cannot receive notifications. Therefore, such users cannot be added to a notification group.

        Edit Notification Group

        You can edit the items configured in the generated notification group.

        To modify the notification group, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Alert Group List page of Notification Manager.
        2. On the Notification Group List page, click the notification group you want to edit. You will be taken to the Notification Group Details page.
        3. On the Alert Group Details page, click the Edit button. You will be taken to the Edit Alert Group page.
        4. On the Edit Notification Group page, you can modify the notification group’s items.
          Category
          Whether required
          Detailed description
          Notification group nameRequiredEnter the notification group name
          • using Korean, English, numbers, and special characters(+=,.@-_) within 3 to 24 characters
          descriptionSelectEnter a description for the notification group
          • Maximum length is 1,000 characters
          UserSelectUsers added to the notification group
          • Search for the desired user, then select and add that user
          • Users in the notification group can be removed using the Delete button
          • If the user you want to add does not exist, you need to create the user on the user creation page. Refer to IAM > Create User
          • Only users with login history (registered email or mobile phone number) can be added to the notification group
          Table. Notification group edit items
        5. If the notification group edit is complete, click the Save button.
        Caution
        For IAM users, those who have not logged in after account creation cannot receive notifications. Therefore, such users cannot be added to a notification group.

        Delete notification group

        If you no longer use a created notification group, you can delete it. However, please note that once a notification group is deleted, it cannot be recovered.

        To delete a notification group, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Alert Group List page in Notification Manager.
        2. On the Notification Group List page, click the notification group you want to delete. You will be taken to the Notification Group Details page.
        3. On the Notification Group Details page, click the Delete button. After reviewing the text in the Notification popup, click the Confirm button.
        4. After deletion is complete, check the Alert Group List page to confirm that the alert group has been removed.

        7.2.1 - Notification Policy

        Users can enter the required information for an alert policy and select detailed options to create it through the Samsung Cloud Platform Console.

        Create Alert Policy

        You can create and use notification policies in the Samsung Cloud Platform Console.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Alert Group page of Notification Manager.
        2. On the Alert Group page, click the Alert Policy menu. You will be taken to the Alert Policy List page.
        3. On the Alert Policy List page, click the Create Alert Policy button. You will be taken to the Create Alert Policy page.
        4. On the Create Notification Policy page, enter the information required to create a service and select detailed options.
          Category
          Whether required
          Detailed description
          Whether to useRequiredAlert policy usage
          • ON: enabled
          • OFF: disabled
          Notification Policy NameRequiredAlert policy name
          • Enter within 30 characters
          descriptionSelectionEnter description for notification policy
          • Enter within 1,000 characters
          Notification itemRequiredSelect notification items
          • Select notification items that can be received
          • To select or deselect a specific notification name among the chosen notification items, click the Expand button at the far right to select or deselect the notification name
          • (Example) If you want to receive only notifications about Virtual Server creation failures, select Notification Item: Virtual Server > Notification Name: Virtual Server creation failure.
          Notification target groupRequiredSelect the notification group to deliver the alert
          • When you select a notification group, the group name is displayed at the top
          • Select or deselect the notification group name
          Table. Notification policy creation items
        Reference
        If there is no notification group to connect to, create a notification group first and then connect. Refer to Create Notification Group.
        1. After setting the required information, click the Done button.
          • Once creation is complete, check the created alert policy on the Alert Policy List page.

        View detailed notification policy information

        Notification policies can be viewed and edited, including the full list and detailed information.

        To view detailed information for the alert policy, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Alert Group List page of Notification Manager.
        2. On the Alert Group List page, click the Alert Policy menu. You will be taken to the Alert Policy List page.
        3. On the Alert Policy List page, click the alert policy whose details you want to view. You will be taken to the Alert Policy Details page.
          • Alert Policy Details page displays status information and additional feature information.
            CategoryDetailed description
            Notification policy statusWhether to use the notification policy
            EditEdit Notification Policy
            DeleteDelete notification policy
            Table. Notification policy status information and additional features
          • Notification Policy Details page displays the following detailed items.
            CategoryDetailed description
            Notification Policy NameAlert policy name
            descriptionExplanation of the alert policy
            constructorUser who created the alert policy
            Creation date and timeAlert policy creation time
            EditorUser who modified the notification policy
            Modification dateDate and time the notification policy was modified
            Notification itemNotification items configured in the notification policy
            Notification target groupNotification group linked in the alert policy
            Table. Notification Policy Detailed Items

        Modify Notification Policy

        You can edit the items configured in the generated alert policy.

        To modify the alert policy, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Go to the Alert Group List page of Notification Manager.
        2. On the Alert Group List page, click the Alert Policy menu. You will be taken to the Alert Policy List page.
        3. On the Alert Policy List page, click the Edit button. You will be taken to the Edit Alert Policy page.
        4. Alert Policy Edit page allows you to edit the alert policy items.
          Category
          Required status
          Detailed description
          Whether to useRequiredAlert policy usage
          • ON: enabled
          • OFF: disabled
          Notification Policy NameRequiredAlert policy name
          • Enter within 30 characters
          descriptionSelectEnter description for notification policy
          • Enter within 1,000 characters
          Notification itemRequiredSelect notification items
          • Select the notification items you can receive
          • To select or deselect a specific notification name among the chosen notification items, click the Expand button at the far right to select or deselect the notification name
          • (Example) If you want to receive only the notification for Virtual Server creation failure, Notification Item: Virtual Server > Notification Name: Virtual Server creation failure
          Notification target groupRequiredSelect the notification group to deliver the alert
          • When you select a notification group, the group name is displayed at the top
          • Select or deselect the notification group name
          Table. Notification policy edit items
        Reference
        If there is no notification group to connect to, create a notification group first and then connect. Refer to Create Notification Group.
        1. If the notification policy edit is complete, click the Save button.

        Using Notification Policy

        You can reuse a notification policy that is currently disabled.

        To enable the alert policy, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Go to the Alert Group List page in Notification Manager.
        2. On the Alert Group List page, click the Alert Policy menu. You will be taken to the Alert Policy List page.
        3. Notification Policy List page, click the More button at the far right of the notification policy you want to set to active, then click the Use button. Verify the text in the Notification popup window and click the Confirm button.
        4. Check the status of notification policies on the Notification Policy List page.

        Disable Notification Policy

        You can change a notification policy that is currently disabled to “unused.”

        To configure the alert policy as disabled, follow these steps.

        1. Click the All Services > Management > Notification Manager menu. Navigate to the Notification Group List page in Notification Manager.
        2. On the Alert Group List page, click the Alert Policy menu. You will be taken to the Alert Policy List page.
        3. Notification Policy List page, click the More button at the far right of the notification policy you want to set to active, then click the Unused button. Verify the text in the Notification popup window and click the Confirm button.
        4. On the Notification Policy List page, check the status of notification policies.

        7.3 - Release Note

        Notification Manager

        2024.10.01
        NEW Notification Manager release
        • We have launched the Notification Manager service. It provides a function to manage notifications delivered to users when alerts occur.
        • You can create and manage notification policies and groups for receiving alerts, and you can add users.

        8 - Organization

        8.1 - Overview

        Service Overview

        Organization is a service that organizes Accounts by organizational units, manages them hierarchically, and controls resource access permissions. Users can manage the resource usage of accounts belonging to an organization to optimize costs.

        Features

        • Hierarchical Project Management: You can invite an Account created within the organization to an Organization and configure it by organizational units for hierarchical management.
        • Organizational Unit Governance: You can configure the required policies as control policies based on the organizational unit and apply them uniformly to all organizational units and Accounts under the organization.
        • Efficient resource management and cost optimization: You can monitor the resource usage of all accounts within the organization to optimize costs.

        Configuration diagram

        Diagram
        Figure. Organization diagram

        Provided features

        Organization provides the following features.

        • Account Management: You can create a new Account within the organization or invite an existing Account to manage.
        • Organizational Unit Management: You can configure organizational units and manage them by creating subordinate organizational units or Accounts.
        • Control Policy Management: Manage settings related to compliance as unified policies, and apply policies by organizational unit and by Account to proactively prevent or detect regulatory violations.

        Preceding Service

        Organization has no prior service.

        8.2 - How-to guides

        Users can enter the required information for an Organization and select detailed options to create a service through the Samsung Cloud Platform Console.

        Create Organization

        You can create an Organization in the Samsung Cloud Platform Console and use it. To create an Organization, follow these steps.

        1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
        2. On the Service Home page, click the Create Organization button. The Create Organization popup will open.
        3. Create Organization In the popup window, enter the Organization Name, then click the Create button.
          • Write within 20 characters using Korean, English, numbers, spaces, and special characters (+=,.@-_).
        4. When the popup notifying the creation of an Organization opens, click the Confirm button.
        5. Check the Organization’s dashboard on the Service Home page.
          CategoryDetailed description
          Organization InformationDisplay Management Account information
          • Click the Organization Information item to go to the Settings page where you can view detailed organization information
          organizational unitNumber of organizational units that make up the organization
          • Click the count to go to the Organization Structure page
          AccountNumber of Accounts comprising the organization
          • Click the count to go to the Organization Structure page
          • Click the Add item to go to the Add Account page
          Control PolicyNumber of control policies constituting the organization
          • Click the count to go to the Control Policy page
          • Click the Add item to go to the Add Control Policy page
          Table. Organization Service Home dashboard items

        Organization Check detailed information

        You can view detailed information of the Organization and manage permissions. To view detailed information of the Organization and manage permissions, follow these steps.

        1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
        2. On the Service Home page, click the Organization Settings menu. You will be taken to the Organization Settings page.
          CategoryDetailed description
          Delete organizationDelete organization button
          Organization nameOrganization name
          • Click the Edit button to modify
          • Organization names distinguish between uppercase and lowercase English letters
          Organization IDOrganization ID
          constructorName of the user who initially created the organization
          Creation date and timeOrganization creation date and time
          EditorName of the user who last modified the organization information
          Modification date and timeLast modified timestamp of organization information
          Management Account nameManagement Account name
          Management Account IDManagement Account ID
          Management Account emailManagement Account email
          Control PolicyWhether the control policy is enabled
          • Click the Edit button to change the status
          Delegation of authorityOrganization Management Permission Delegation Information
          • Permission Delegation: Allows delegating permissions to accounts within the organization
            • Displayed when no delegation information is available
            • When the button is clicked, you can configure delegation at the Action level using the JSON Editor on the Permission Delegation page
          • Permission Edit: Modify permission information
            • Only the Management Account can be set
            • When the button is clicked, you can configure delegation at the Action level using the JSON Editor on the Permission Delegation page
          • Revoke Delegation: Delete delegated permission information
          Table. Organization configuration items
        guide
        • If Control policy is disabled, the connection to the associated control policy is removed, and even authorized users cannot view the control policy.
        • Permission Delegation information can only be managed in the Management Account.

        Invite Account to Organization

        You can manage the list of Accounts invited to the Organization.

        Information
        Only the Management Account can invite other Accounts.
        To manage the list of Accounts invited to the Organization, follow these steps.

        1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.

        2. On the Service Home page, click the Invitation History menu. You will be taken to the Invitation History List page.

        3. On the Invitation History List page, click the Account Invite button. Proceed to the Account Add page.

          CategoryDetailed description
          emailAccount email
          Account nameAccount name
          Account IDAccount ID
          Request date and timeAccount invitation date and time
          Completion Date and TimeInvitation canceled, rejected, , expired, completion time
          Invitation statusInvitation status
          Invitation canceledCancel the invitation for the selected account
          • Enabled when selecting an account in the invitation list
          • Multiple accounts can be canceled simultaneously
          Account invitationInvite a new Account to the organization
          • When clicking the Account Invite button, navigate to the Add Account page
          Table. Organization invitation list items

        4. On the Add Account page, create and register a new Account, or add an existing Account.

        Join another Organization

        If you are invited from another organization, you can review and approve the invitation information.

        guide
        Received invitations can be viewed in the Member Account.
        To manage the list of Accounts invited to an Organization, follow these steps.

        1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
        2. On the Service Home page, click the Received Invitations menu. You will be taken to the Received Invitations page.
          CategoryDetailed description
          Invitation emailEmail information for organization invitation
          Organization nameOrganization name
          Organization IDOrganization ID
          Management Account nameManagement Account name
          Management Account IDManagement Account ID
          Management Account emailManagement Account email
          Invitation expiration date and timeInvitation expiration date and time
          • Activated when selecting an account from the invitation list
          • Multiple accounts can be canceled simultaneously
          Invitation declinedDecline invitation
            Accept invitationAccept the invitation and join the Organization
              Table. Organization Received Invitation Items
            Reference

            In the following cases, you cannot register even if you approve the invitation.

            • When the number of accounts in the organization exceeds the limit.
            • When the approval time is the expense settlement date (the 1st of each month, Asia/Seoul GMT +09:00)
            • If the account has an outstanding balance.

            Delete Organization

            Information
            You can delete the Organization after removing all Accounts belonging to it.

            To delete the Organization, follow these steps.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
            2. On the Service Home page, click the Organization Settings menu. You will be taken to the Organization Settings page.
            3. On the Organization Settings page, click the Delete Organization button. The Delete Organization popup window opens.
            4. Delete Organization in the popup, click the Confirm button.

            8.2.1 - Organization Configuration Information

            You can view the hierarchical structure of the Organization and verify and manage the organizational units and Accounts that are configured.

            Check organization configuration information

            You can view the configuration information of the Organization. Follow these steps to view the configuration information of the Organization.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
            2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.
            3. Select the view mode for the Organization unit and Account management area.
              CategoryDetailed description
              View hierarchyDisplay organizational units in a hierarchical structure
              View Account ListDisplay the list of Accounts within the organization
              Add AccountInvite a new Account to the organization
              • When the Account Invite button is clicked, navigate to the Add Account page
              Table. Organization Organizational structure items

            View hierarchy

            On the Organization Configuration page, when you click the View Hierarchy button, you can view and manage the organizational units and Accounts that make up the Organization in a hierarchical structure.

            CategoryDetailed description
            Create a sub-organization unitAdd a new organizational unit under the selected organizational unit
            • Enabled only when a single organizational unit is selected in the hierarchy
            More > Delete organizational unitDelete the selected organizational unit
            • Enabled only when one or more organizational units are selected in the hierarchy
            More > Move AccountDelete the selected organizational unit
            • Enabled only when an Account is selected in the hierarchy
            More > Exclude AccountExclude the selected Account from the organization
            • Enabled only when an Account is selected in the hierarchy
            • The Management Account cannot be excluded
            More > Delete AccountDelete the selected Account
            • Enabled only when a single Account is selected in the hierarchy
            • Management Accounts and Accounts joined via invitation cannot be deleted
            Organization unit/Account nameDisplay the names of organizational units and Accounts in a measurement structure format
            • +, - button to expand or collapse the hierarchy
            ID/EmailOrganizational units display ID, and accounts display ID and email.
            Creation/Join Date and TimeOrganizational units display the creation date and time, while Accounts display the creation or registration date and time.
            Table. Organization hierarchy view items

            View Account List

            On the Organization Configuration page, clicking the View Account List button lets you view and manage the list of Accounts that compose the Organization.

            CategoryDetailed description
            Account TransferMove Account to another organization
            • It becomes active when you select an Account from the Account list
            More > Exclude from organizationExclude Account from organization
            • When an Account is selected from the Account list, it becomes active
            Account nameAccount name
            Account IDAccount ID
            emailAccount user email
            Additional date/timeAccount creation, addition timestamp
            Additional typeAccount addition method
            • Create: Add by creating a new one on the Account addition page
            • Sign up: Add an already created Account
            Table. View Organization Account List Items

            Manage Account

            You can view and manage the list of Accounts that make up the Organization.

            Add Account

            You can create a new Account or add an existing Account to an Organization. To add an Account to an Organization, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.

            2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.

            3. On the Organization Structure page, click the Add Account button. You will be taken to the Add Account page.

            4. On the Add Account page, enter the Account information to be added, then click the Complete button.

              Category
              Required status
              Detailed description
              Additional methodRequiredSelect the method to add an Account
              • Create New Account: Add by creating a new Account
              • Invite Existing Account: Add by entering the Root user email of an already created Account
              Account nameRequiredEnter the Account name to create
              • using Korean, English, numbers, spaces, special characters(+=-_@[](),.) within 3 to 30 characters
              emailRequiredEmail to set as the Root user of the new Account
              • When clicking the Account Invite button, navigate to the Account Add page
              Check emailRequiredReconfirm email information
              • When you click the Organization Info button, you are taken to the Settings page where you can view detailed organization information.
              IAM role nameRequiredDisplay organizational units in a hierarchical structure
              • English letters, numbers, special characters(+=-_@,.) to input within 64 characters
              Root user emailRequiredAccount’s Root user email
              • If Existing Account invitation is selected, only Root user email is entered
              • Click the Add button to add up to 10 simultaneously
              Table. Add Organization Account

            5. When the popup notifying account creation and invitation opens, click the Confirm button.

            Reference
            • You can add up to 200 accounts.
            • The newly created Account can be accessed by logging in directly with email or through an automatically generated role.
            • When logging in directly with email, you must use the password recovery feature to reset your password.

            Check Account Detailed Information

            You can view and edit the detailed information of the Account. To view the detailed information of the Account, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
            2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.
            3. On the Organization Structure page, click the View Account List button.
            4. In the Account list, click the Account name of the Account whose details you want to view. You will be taken to the Account Details page.
              • Account Details page consists of Basic Information tab and Control Policy tab.
                CategoryDetailed description
                Exclude from organizationExclude the Account from the organization
                • When you click the button, a popup notifying the Account exclusion opens
                Account TransferMove the Account to another organizational unit
                • Click the button to go to the Account Move page
                Basic Information TabDisplay basic information about the Account
                Control PolicyDisplay the control policies linked to the Account
                Table. Account detail page items

            Detailed information

            You can view detailed information of the organizational unit and edit the information if needed.

            CategoryDetailed description
            Account nameAccount name
            Account IDAccount ID
            constructorUser who created the Account
            Creation date and timeDate and time the account was created
            EditorUser who modified the Account
            Modification date and timeDate and time the account was modified
            emailAccount’s user email
            Additional typeAccount addition method
            • Create: Add by creating a new one on the Account addition page
            • Add existing: Add an already created Account
            higher-level organization unitDisplay the upper level of the current organizational unit in a hierarchical structure
            • When you click the upper organizational unit, you will be taken to the Organizational Unit Details page of that unit
            Table. Account detailed information tab items

            Control Policy

            You can view the control policies linked to the Account and change their connection status.

            CategoryDetailed description
            Direct disconnectDisconnect the selected control policy
            • Enabled only when one or more control policies are selected from the list
            • At least one control policy must be connected for an organizational unit
            Control policy connectionConnect a new control policy
            Control Policy NameControl Policy Name
            typeControl Policy Types
            Connection methodControl policy connection method
            • Direct: Policy directly linked to an organizational unit
            • Inherited: Policy linked to an organizational unit by inheritance
            Modification date and timeLast modified timestamp of the control policy
            Table. Account's Control Policy tab items

            Move Account

            You can move accounts between organizational units within an Organization.

            Information
            Accounts that are currently being worked on in Cloud Control cannot be moved.
            To move the Account, follow the steps below.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.

            2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.

            3. On the Organization Structure page, click the View Account List button.

            4. After selecting the Account to which you want to move the organization unit, click the Account Move button. You will be taken to the Account Move page.

            5. On the Account Transfer page, select the organizational unit to which you want to move the Account, then click the Complete button.

              CategoryDetailed description
              Select AccountEnter the name of the organizational unit
              • Organizational names distinguish between uppercase and lowercase English letters
              Organization unit to moveSelect the organizational unit to move the Account to
              Organizational unit nameName of the organizational unit
              Organization Unit IDOrganization unit ID
              Organization creation date and timeCreation date and time of the organizational unit
              Table. Organization: Create Organizational Unit

            6. When the popup notifying the Account transfer opens, review the transfer information, then click the Confirm button.

            Reference
            • The newly created Account can be accessed by logging in directly with email or through an automatically generated role.
            • When logging in directly with email, you must use the password recovery feature to reset your password.

            Exclude Account

            You can exclude an Account from the Organization.

            Information

            In the following cases, the Account cannot be excluded.

            • Account without a registered payment method
            • When there is credit assigned to the account
            • When the exclusion point is the cost settlement date (the 1st of each month, Asia/Seoul GMT +09:00)
            To exclude Account from Organization, follow these steps.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
            2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.
            3. On the Organization Structure page, click the View Account List button.
            4. After selecting the Account to exclude from the Organization, click the More > Exclude Account button.
            5. When a popup notifying the account exclusion opens, click the Confirm button.

            Delete Account

            You can delete the account.

            information
            • When deleting from the Account list, you must select only one Account to delete.
            • You cannot delete the Account in the following situations.
              • If you want to delete on the expense settlement date (the 1st of each month)
              • If there are resources in use
              • When authority is delegated by the ID Center
              • When credit is assigned to an account
              • In the case of a Management Account or an account that was joined via invitation.
              • If it is being registered in Cloud Control or already registered.
            To delete the Account, follow the steps below.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
            2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.
            3. On the Organization Structure page, click the View Account List button.
            4. From the Account list, select the Account to delete, then click the More > Delete Account button. The Delete Account popup window opens.
              • After clicking the Account name of the Account to be deleted, you can also delete it by clicking the Account Details page’s Delete Account button.
            5. After entering the password for the Account to be deleted, click the Confirm button.
            6. After entering the Account name to delete, click the Confirm button.
            Caution
            If you enter the password incorrectly five or more times, you will be automatically logged out.
            Reference

            If you delete the Account, an Account deletion notification email will be sent to the next user.

            • Administrator who created the Organization
            • Root user of the created Account
            • User who has delegation for the created Account

            Manage Organizational Units

            You can view and manage the organizational units and accounts that make up the Organization in a hierarchical structure.

            Create an organization unit

            You can create a new organizational unit. To create and add an organizational unit in Organization, follow these steps.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.

            2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.

            3. On the Organizational Structure page, click the View Hierarchy button.

            4. After selecting the location in the hierarchical list where you want to add an organizational unit, click the Create Organizational Unit Under button. You will be taken to the Create Organizational Unit page.

              • Root or you can select only one existing organizational unit.
              • You can create organizational units up to five levels below Root.
            5. On the Organization Unit Creation page, enter the information for the organization unit you want to add, then click the Create button.

              Category
              Required status
              Detailed description
              Organizational unit nameRequiredEnter the name of the organizational unit
              • Organizational names distinguish between uppercase and lowercase English letters
              descriptionSelectEnter a description of the organizational unit within 1,000 characters.
              Control policy connectionRequiredSelect a control policy to attach to the organizational unit
              Table. Organization: Create Organizational Unit

            6. When the popup notifying the creation of an organizational unit opens, click the Confirm button.

            Reference
            • You can add up to 200 accounts.
            • The newly created Account can be accessed by logging in directly with email or through an automatically generated role.
            • When logging in directly with email, you need to use the password recovery feature to reset your password.

            View detailed information of an organizational unit

            You can view and edit detailed information of an organizational unit. To view detailed information of an organizational unit, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
            2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.
            3. On the Organizational Structure page, click the View Hierarchy button.
            4. Click the Root/Account name of the organizational unit whose details you want to view in the hierarchical list. You will be taken to the Organizational Unit Details page.
              • Organization Unit Detail page is composed of Basic Information tab, Sub Items tab, and Control Policy tab.
                CategoryDetailed description
                Delete organization unitButton that deletes an organizational unit
                • When the button is clicked, a popup notifying the organization deletion opens
                Basic Information TabDisplay basic information about the organization unit
                Sub-itemDisplay sub-elements of an organizational unit
                Control PolicyDisplay control policies attached to the organizational unit
                Table. Organization unit detail page items

            Detailed information

            You can view detailed information of the organizational unit and edit the information if needed.

            CategoryDetailed description
            serviceService name
            Resource TypeService Type
            SRNUnique resource ID in Samsung Cloud Platform
            Resource NameResource Name
            Resource IDUnique resource ID in the service
            constructorUser who created the service
            Creation dateService creation timestamp
            EditorUser who edited the service information
            Modification date and timeDate and time the service information was modified
            Organizational unit nameOrganization unit name
            • Edit Click the button to change the name
            descriptionDescription of the organizational unit
            • Edit Click the button to modify the description
            higher-level organization unitDisplay the upper level of the current organizational unit in a hierarchical structure
            • When you click the upper organizational unit, you will be taken to the Organizational Unit Details page of that unit
            Table. Organization unit detailed information tab items

            Reference
            Root Details information page does not display Organization Unit Name, Description, Parent Organization Unit information.

            Sub-item

            You can view and manage the subordinate organization units and accounts of the current organization unit.

            CategoryDetailed description
            Create a sub-organization unitAdd a new organizational unit under the selected organizational unit
            • Enabled only when one or more organizational units are selected in the hierarchy
            More > Delete Organizational UnitDelete selected organization unit
            • Enabled only when one or more organization units are selected in the hierarchy
            • Multiple organization units can be selected
            Organization unit/Account nameDisplay the names of organizational units and Accounts in a measurement structure format
            • Click the +, - button to expand or collapse the hierarchy
            ID/EmailOrganizational units display ID, and Accounts display ID and email.
            Creation/Join DateOrganization units display the creation timestamp, and accounts display the creation or sign‑up timestamp.
            Table. Organization Sub-item tab entries of the organization unit detail page

            Control Policy

            You can view the control policies attached to an organizational unit and change their connection status.

            CategoryDetailed description
            Direct disconnectDisconnect the selected control policy
            • Enabled only when one or more control policies are selected from the list
            • At least one control policy must be connected for the organizational unit
            Control policy connectionConnect a new control policy. Click the
            Control Policy NameControl Policy Name
            typeControl Policy Types
            Connection methodControl policy connection method
            • Direct: policies directly linked to the organizational unit
            • Inherited: policies linked to the organizational unit by inheritance
            Modification date and timeLast modified date and time of the control policy
            Table. Organization Control Policy Tab Items on the Organization Unit Detail Page

            Delete organization unit

            You can delete an organizational unit in the Organization.

            guide
            To delete an organizational unit, it must have no subordinate elements.
            To delete an organizational unit in Organization, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
            2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.
            3. On the Organizational Structure page, click the View Hierarchy button.
            4. After selecting the organizational unit to delete from the hierarchical list, click the More > Delete Organizational Unit button.
            5. When the popup notifying the deletion of an organizational unit opens, click the Confirm button.

            Connect control policy

            You can attach control policies to an Organization’s organizational unit or Account. To attach a control policy, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.

            2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.

            3. On the Organization Structure page, click the View Hierarchy button.

            4. Click the organizational unit or Account where you want to add the control policy from the hierarchical list. You will be taken to the detail page of that item.

              • Root or you can select only one existing organizational unit.
              • You can create organizational units up to five levels below Root.
            5. On the detail page, click the Control Policy tab. You will be taken to the Control Policy Connection page.

            6. After selecting the control policy to connect, click the Complete button.

              CategoryDetailed description
              Linked control policyEnter the name of the organizational unit or the control policy linked to the current organizational unit or Account
              • Organizational names distinguish between uppercase and lowercase English letters
              Control Policy NameControl Policy Name
              typeControl Policy Types
              Modification date and timeControl policy modification timestamp
              Control policy connectionRequired
              Table. Control policy linkage items

            7. When a popup notifying the connection of the control policy opens, click the Confirm button.

              Reference
              To create a new control policy, refer to Create Control Policy.

            8.2.2 - Organization Control Policy

            You can view and manage the Organization’s control policies.

            Create Organization Control Policy

            You can create control policies for the Organization.

            To create a control policy, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.

            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.

            3. On the Control Policy List page, click the Create Control Policy button. You will be taken to the Create Control Policy page.

            4. After entering items in the Basic Information area, click the Next button.

              Category
              Required status
              Detailed description
              Control Policy NameRequiredEnter the name of the control policy
              • English letters, numbers, special characters(+=-_@,.) within 3 to 128 characters
              ExplanationSelectEnter a description of the organizational unit within 1,000 characters.
              Table. Create organization control policy - set basic information

            5. In the Control Requirement Setting area, after selecting the control policy configuration method and the service to apply, click the Next button.

              Category
              Required status
              Detailed description
              Load control policySelectEnter the name of the control policy
              • When loading a policy, all previously entered content will be deleted
              • For more details, see Load Policy
              Basic mode/JSON modeRequiredSelect the policy configuration method
              • Basic Mode: Configure using the mode provided by the Console
              • JSON Mode: Configure directly using the JSON Editor
              ServiceRequiredSelect the service to set the control policy
              • Add Service: Add a service to configure the control policy
              Table. Organization control policy creation - service configuration
              Caution

              In the control policy settings, Basic Mode and JSON Mode are provided.

              • After writing in Basic Mode and entering JSON Mode or navigating the screen, services with duplicate control requirements are merged into one, and services that have not completed configuration are deleted.
              • If the content written in JSON mode does not conform to JSON format, you cannot switch to basic mode.

            6. After setting the permissions, click the Next button.

              Category
              Required
              Detailed description
              Control TypeRequiredSelect control policy type
              • Allow Policy: Control policy that allows the defined permissions
              • Deny Policy: Control policy that denies the defined permissions
              For the same target, the deny policy takes precedence
              ActionRequiredSelect actions provided for each service
              • Actions that allow selection of individual resources are shown in purple
              • Actions that target all resources are shown in black
              • Add Action Directly: Use the wildcard * to specify multiple actions at once
              Applied resourceRequiredResources to which the action applies
              • All resources: Apply to all resources for the selected action
              • Individual resources: Apply only to the specified resources for the selected action
                • Individual resources are only available when selecting the purple action that allows individual resource selection
                • Click the Add resource button to specify target resources by resource type
              Authentication TypeRequiredAuthentication method of the user target to which the control policy will be applied
              • All authentication: Applies regardless of authentication method
              • Authentication key authentication: Applies to users with authentication key authentication
              • Temporary key authentication, Console login: Applies to users with temporary key authentication or Console login
              Applied IPRequiredIP that allows the application of control policies
              • Custom IP: User registers and manages the IP directly
                • Applied IP: User can directly register the IP address or range that the control policy applies to
                • Excluded IP: IP addresses or ranges that can be registered as exclusions from the Applied IP
              • All IPs: No IP access restriction
                • Access is allowed for all IPs, but if exceptions are needed, register Excluded IP to restrict access for the registered IPs
              Additional conditionSelectAdd conditions for attribute-based access control (ABAC)
              • Condition Key: Select from Global condition keys and service condition keys list
              • Qualifier: Default value, arbitrary value in the request, all values in the request
              • Operator: Bool, Null
              • Value: True, False
              Table. Create organization control policy - set permissions

            7. On the Check Input Information page, after confirming the entered information, click the Create button.

            8. When the popup notifying the creation of a control policy opens, click the Confirm button. You will be taken to the Integrated Policy List page.

            Load control policy

            When creating a control policy, you can generate it by modifying the policy requirements of an existing policy.

            Reference
            When you run Load Policy, all previously entered content will be deleted and replaced with the selected policy’s settings.

            To load an existing policy and create a control policy, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.

            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.

            3. On the Control Policy List page, click the Create Control Policy button. You will be taken to the Create Control Policy page.

            4. After entering items in the Basic Information area, click the Next button.

              Category
              Required status
              Detailed description
              Control Policy NameRequiredEnter the control policy name
              • English letters, numbers, and special characters (+=-_@,.) within 3 to 128 characters
              descriptionSelectEnter a description of the organizational unit within 1,000 characters.
              Table. Create organization control policy - set basic information

            5. In the Control Requirement Setting area, click the Load Control Policy button. The Load Control Policy popup window opens.

            6. Click the Load Policy button. The Load Control Policy popup opens.

            7. After selecting the control policy to load from the control policy list, click the Confirm button. The loaded policy’s settings will be entered automatically.

            8. After editing the information that needs to be changed, click the Next button.

            9. Check Input Information page, verify the entered information and click the Complete button. You will be taken to the Integrated Policy List page.

            Register individual resources as applied resources

            Permission Settings allows you to register individual resources as applied resources. To register individual resources as applied resources, follow the steps below.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.

            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.

            3. On the Control Policy List page, click the Create Control Policy button. You will be taken to the Create Control Policy page.

            4. After entering items in the Basic Information area, click the Next button.

              Category
              Required status
              Detailed description
              Control Policy NameRequiredEnter the control policy name
              • using English letters, numbers, special characters (+=-_@,.) within 3~128 characters
              descriptionSelectionEnter a description of the organizational unit within 1,000 characters.
              Table. Create organization control policy - set basic information

            5. In the Control Requirement Setting area, after selecting the service to which the control policy will be applied, click the Next button.

            6. Click the Load Policy button. The Load Control Policy popup opens.

            7. After selecting the control policy to load from the control policy list, click the Confirm button. The loaded policy’s settings will be entered automatically.

            8. After editing the information that needs to be changed, click the Next button.

            9. On the Check Input Information page, verify the entered information and click the Complete button. You will be taken to the Integrated Policy List page.

            10. Select an Action that allows selecting individual resources in the Action selection.

              • Actions that allow individual resource selection are displayed in purple.
            11. Click Individual Resource in Applied Resource.

            12. Click the Add Resource button. The Add Resource popup window opens.

              Category
              Whether required
              Detailed description
              Self typeRequiredSelect the resource type to add
              SRN-Unique resource ID in Samsung Cloud Platform
              • Automatically updated according to the input fields below
              AccountRequiredAccount ID Settings
              • Current Account: Current Account ID is auto-filled and cannot be edited
              • All Accounts: Add to all Accounts (not recommended)
              • Manual Input: Manually enter the Account ID using lowercase English letters and numbers, up to 100 characters (wildcard input not allowed)
              RegionSelectEnter the resource’s region information directly within 100 characters
              • Select All When checked, add resources from all regions
              Resource IDRequiredEnter the resource ID to add directly, up to 100 characters
              • Select All when checked adds all resources of that resource type
              Table. Create organization control policy - set basic information

            13. After the settings are completed, click the Next button. You will be taken to the Check Input Information page.

            14. After reviewing the entered information, click the Complete button. You will be taken to the Integrated Policy List page.

            Check detailed information of control policy

            On the Control Policy Details page, you can view and edit the detailed information of the control policy. To view detailed information of the control log, follow the steps below.

            1. All Services > Management > Organization Click the menu. Go to the Service Home page of Organization.
            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.
            3. Control Policy List page, click the control policy you want to view detailed information for. You will be taken to the Control Policy Details page.
              • The Policy Details page displays basic information and consists of the Basic Information tab, the Control Requirements tab, and the Connected Targets tab.

            Basic Information

            You can view the basic information of the control policy and, if necessary, edit the policy name and description.

            CategoryDetailed description
            serviceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            Resource nameResource Name
            • In the control policy, it refers to the policy name
            Resource IDUnique Resource ID
            constructorUser who created the service
            Creation date and timeService creation date and time
            EditorUser who edited the service information
            Modification date and timeDate and time the service information was modified
            Control Policy NameName of the control policy
            • Edit Click the button to change the name
            typeTypes of control policies
            • Default: The default control policy provided by Samsung Cloud Platform
            • Custom: A control policy created directly by the user
            ExplanationDescription of the control policy
            • Edit button can be clicked to change the description
            Table. Basic Information Tab Items of Control Policy

            Control Requirements

            You can view the services with permissions configured in the current control policy.

            • You can check in Basic mode and JSON mode.
            • Click the arrow to the right of the service name to display the control requirements set for that service.
            Reference
            Click the Edit button to modify the control requirements. For detailed information about the edit items, please refer to Create Control Policy.
            CategoryDetailed description
            Control TypeControl Policy Types
            • Allow Policy: Control policy that allows the defined permissions
            • Deny Policy: Control policy that denies the defined permissions
            actionFeatures provided by each service that are subject to the control policy
            Applied resourceResources to which the action applies
            • All resources: applied to all resources for the selected action
            • Individual resources: applied only to the specified resources for the selected action
            Authentication typeAuthentication method for the user target to which the control policy will be applied
            • All authentication: Applied regardless of authentication method
            • API key authentication: Applied to users with API key authentication
            • Temporary credential authentication, Console login: Applied to users with temporary credential authentication or Console login
            Applied IPIP that permits the application of control policies
            • Custom IP: The user directly registers and manages the IP
              • Applied IP: An IP that the user registers directly, to which the control policy is applied; can be registered as an IP address or a range
              • Excluded IP: An IP to be excluded from the Applied IP, can be registered as an IP address or a range
            • All IPs: No IP access restriction
              • Access is allowed for all IPs, but if an exception is needed, register an Excluded IP to restrict access for the registered IPs
            Table. Control policy control requirements tab items

            Connection target

            You can view the organizational units and accounts directly linked to the control policy.

            Reference
            Policies attached to the root and organizational units are inherited by child items.

            CategoryDetailed description
            RootThe connection status of the Root and the number of control policies attached to the Root are displayed
            • Click the Connect or Disconnect button to connect to or disconnect from the Root
            organizational unitThe organizational units currently linked to the control policy and the total number of control policies linked to those units
            • Disconnect: Unlink the selected organizational unit from the organizational unit list
            • Organizational Unit Link: Navigate to the Organizational Unit Link page
            AccountThe Account currently linked to the control policy and the total number of control policies linked to that Account
            • Disconnect: Disconnect the selected Account from the list
            • Account Connection: Go to the Account Connection page
            Table. Policy's linked target tab items

            Connect organization unit

            You can associate an organizational unit with a control policy. To connect an organizational unit, follow the steps below.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.

            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.

            3. On the Control Policy List page, click the control policy to link the organizational unit. You will be taken to the Control Policy Details page.

            4. On the Control Policy Details page, click the Connection Target tab.

            5. Click the Organization Unit Connection button in the Organization Unit area. You will be taken to the Organization Unit Connection page.

            6. After selecting the organization unit to connect, click the Complete button.

              CategoryDetailed description
              Organization unit/Account nameDisplay the names of organizational units and Accounts in a measurement structure format
              • Click the +, - button to expand or collapse the hierarchy
              ID/EmailOrganizational units display ID, and accounts display ID and email.
              Creation date and timeThe creation date and time of the organizational unit is the creation timestamp, and for Account it displays the creation or registration timestamp.
              Table. Organization Unit Connection Items

            7. When the popup notifying the organization unit connection opens, click the Confirm button.

            Connect Account

            You can link an Account to a control policy. To connect the Account, follow these steps.

            1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.

            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.

            3. On the Control Policy List page, click the control policy to link the Account. You will be taken to the Control Policy Details page.

            4. On the Control Policy Details page, click the Connection Target tab.

            5. Click the Account Connect button in the Account area. You will be taken to the Account Connect page.

            6. After selecting the Account to connect, click the Done button.

              CategoryDetailed description
              Organization unit/Account nameDisplay the names of organizational units and Accounts in a measurement structure format
              • Click the +, - buttons to expand or collapse the hierarchy
              ID/EmailOrganizational units display ID, and Accounts display ID and email.
              Creation date and timeThe creation date and time of the organizational unit is the creation date and time, and Account displays the creation or registration date and time.
              Table. Account linking items

            7. When a popup notifying the Account connection opens, click the Confirm button.

            Delete control policy

            You can delete the control policy.

            Information
            To delete a control policy, there must be no elements linked to the control policy.
            To delete a control policy, follow these steps.

            1. Click the All Services > Management > Organization menu. Navigate to the Service Home page of Organization.
            2. On the Service Home page, click the Control Policy menu. You will be taken to the Control Policy List page.
            3. On the Control Policy List page, click the control policy you want to delete. You will be taken to the Control Policy Details page.
            4. Click the Delete Control Policy button on the Control Policy Details page.
            5. When the popup informing you that the control policy will be deleted opens, click the Confirm button.

            8.3 - API Reference

            API Reference

            8.4 - CLI Reference

            CLI Reference

            8.5 - Release Note

            Organization

            2025.10.23
            FEATURE Account deletion feature improvement
            • You can also delete an Account created in the Organization from the Member Account.
              • Deletable Accounts are limited to those directly created in the Organization.
            2025.07.01
            NEW Official launch of Organization service
            • The Organization service has been officially launched.
              • You can organize accounts by organizational units, manage them hierarchically, and control resource access permissions.
              • You can monitor the resource usage of all accounts within the organization to optimize costs.

            9 - Resource Explorer

            9.1 - Overview

            Service Overview

            Resource Explorer is a service that provides search for resources (assets) created on the Samsung Cloud Platform.

            Features and Benefits

            Resource Explorer provides the following features.

            • Resource Search: You can search for resources across multiple regions and accounts using resource names, service names, resource types, etc.
            • Multi-Region Search: You can find resources across multiple regions with a single search.
            • Multiple Account Search: You can search resources across all accounts within Organizations. (Scheduled for release after July 2025)
            • Integrated Search: You can search resources using the integrated search feature. (Planned for release after July 2025)
            • Filtering feature: You can filter search results using resource name, region, tags, etc.
            • Tag addition feature: You can add tags to multiple resources in bulk.

            9.2 - How-to Guides

            Users can use the Samsung Cloud Platform Console to perform integrated searches of resources for the account and region through the Resource Explorer service, add tags, and navigate to resource details.

            Search resources with Resource Explorer

            You can search for resources through the Resource Explorer in the Samsung Cloud Platform Console.

            To search using Resource Explorer, follow these steps.

            1. All Services > Management > Resource Explorer Click the menu. Go to the Resource Explorer List page.
            2. On the Resource Explorer page, you can search for resources in various ways.
              CategoryDetailed description
              Input boxEnter text in the input box to select from the search results
              • Resource Name: Resource name
              • Service Name: Service name of the resource
              • Resource Type: Type of the resource
              Advanced SearchAdvanced Search When the button is clicked, additional searchable items
              • Resource Name: resource name
              • Service Name: service name (multiple selection possible, searchable)
              • Resource Type: resource type (multiple selection, searchable)
              • Region (multiple selection, searchable)
              Table. Resource Explorer resource search

            Add tags with Resource Explorer

            You can add tags through Resource Explorer in the Samsung Cloud Platform Console.

            To add tags using Resource Explorer, follow these steps.

            Reference
            If you select a resource that already has 50 or more tags, the add tag button is disabled.
            1. Click the All Services > Management > Resource Explorer menu. Go to the Resource Explorer List page.
            2. Resource Explorer List page: when you select a resource’s checkbox, the Add Tag button at the top of the list becomes active.
            3. Click the Add Tag button. You will be taken to the Add Tag page.
              • After entering key and value, click the Done button to add the tag.
              • Click the Add Tag button to add multiple tags.
            guide
            • You can add tags by selecting a key and value from the list or by entering them manually.
            • The list icon within the input field is enabled when a selectable list is available, and the value list varies according to the key value.
            • Tags can be added up to a maximum of 50 per selected resource.
            • If a tag with the same key is already applied, it will be replaced with the value of the newly added tag.

            Navigate to resource details with Resource Explorer

            In the Samsung Cloud Platform Console, you can navigate to the resource detail page via the Resource Explorer screen and view the resource’s detailed information.

            To navigate to the resource detail page via Resource Explorer, follow these steps.

            1. All Services > Management > Resource Explorer Click the menu. Navigate to the Resource Explorer List page.
            2. On the Resource Explorer List page, clicking a resource name takes you to that resource’s detail screen.
              • Detailed screens are not provided for some resource types.

            9.3 - Release Note

            Resource Explorer

            2025.02.27
            NEW Resource Explorer release
            • We have launched a search service for resources.
            • You can view resources from multiple regions at once using Resource Explorer.

            10 - Resource Groups

            10.1 - Overview

            Service Overview

            Resource groups is a service that groups resources for management.

            Provided features

            Resource groups provide the following capabilities.

            • Resource Grouping: You can logically group resources based on tags.
            • Tag-based query: You can search and group resources using tags.
            • Resource Search: You can search for resources that match the specified query.

            10.2 - How-to Guides

            You can create a resource group and configure it so that resources meeting the criteria are grouped together and displayed.

            Create Resource Group

            You can create and use the Resource Group service in the Samsung Cloud Platform Console.

            To create a Resource Group, follow these steps.

            1. Click the All Services > Management > Resource Group menu. Navigate to the Resource Group List page.

            2. On the Resource Group List page, click the Create Resource Group button. You will be taken to the Create Resource Group page.

            3. On the Create Resource Group page, enter the information required to create the service and select detailed options.

              • Select the required information in the Service Information Input area.
                Category
                Required status
                Detailed description
                Resource Group nameRequiredEnter group name
                ExplanationEnter description
                Resource TypeRequiredMulti-select from the full list or resource type list
                Group definition tagRequiredSet the grouping criteria tag
                • Key
                • Value
                Group target resourceUse the resource preview button to verify and select the target resource for the tool.
                Table. Resource Group resource creation input information
              • In the Additional Information Input area, enter or select the required information.
                Category
                Whether required
                Detailed description
                LockSelectSet Lock usage
                • Enabling Lock prevents actions such as server termination, start, and stop from being executed, preventing errors caused by mistakes.
                Init scriptSelectScript executed when the server starts
                • The init script must be written as a Batch script for Windows, a Shell script for Linux, or cloud‑init, depending on the image type.
                • Up to 45,000 bytes can be entered.
                tagSelectAdd Tag
                • Up to 50 can be added per resource
                • After clicking the Add Tag button, enter or select Key and Value
                Table. Resource Group additional information input fields
            4. Check the input information and click the Complete button.

              • When creation is complete, check the created resources on the Resource Group List page.

            View detailed information of Resource Group

            The Resource Group service allows you to view and edit the list of resource groups and their details. Resource Group Details page consists of Basic Information, Group Resources, and Tags tabs.

            To view detailed information about the Resource Group service, follow these steps.

            1. Click the All Services > Management > Resource Group menu. You will be taken to the Resource Group List page.
            2. On the Resource Group List page, click the resource you want to view details for. You will be taken to the Resource Group Details page.
              • The Resource Group Details page displays status information and additional feature information, and consists of Basic Information, Group Resources, Tags tabs.

            Basic Information

            On the Resource Group List page, you can view detailed information of the selected resource and edit the information if needed.

            CategoryDetailed description
            ServiceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            Resource nameResource name
            Resource IDUnique resource ID in the service
            constructorName of the constructor
            Creation date and timeCreated date and time
            EditorEditor’s name
            Modification date and timeModified date and time
            Resource Group nameUser-entered name
            ExplanationUser-written description
            Table. Resource Group Basic Information Tab Items

            Group resources

            On the Resource Group List page, you can view and modify the group resources of the selected resource.

            CategoryDetailed description
            Group Resources > Resource TypeGroup resource type
            Group Resources > Group Definition TagTag added when creating a resource group
            Group target resourceList of resources grouped by group definition tags
            • Resource Name: Resource name
            • Resource ID: Unique ID of the resource
            • Service Name: Service name of the resource
            • Resource Type: Resource type
            • Tags: Number of tags for the resource. View Tags button allows viewing the full list of tags for the resource
            • Creation Date/Time: Date and time the resource was created
            Table. Resource Group group resource tab items

            tag

            Resource Group List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

            CategoryDetailed description
            Tag listTag list
            • You can view the Key and Value information of tags
            • Up to 50 tags can be added per resource
            • When entering tags, you can search and select from the list of previously created Keys and Values
            Table. Resource Group tag tab items

            Managing Resource Group

            Modify basic information of Resource Group

            You can edit the description of a Resource Group. To edit the description of a Resource Group, follow these steps.

            1. Click the All Services > Management > Resource Group menu. You will be taken to the Resource Group list page.
            2. On the Resource Group list page, click the Resource Group name of the resource you want to edit. You will be taken to the Resource Group Details page.
            3. Click the Edit button for the description to the right of the Resource Group name. You will be taken to the Edit Description popup. After editing the description, click the Confirm button. On the Resource Group Details page, verify the updated description.

            Modify Resource Group resources

            You can modify the group resources of a Resource Group. To modify the group resources of a Resource Group, follow the steps below.

            1. Click the All Services > Management > Resource Group menu. You will be taken to the Resource Group list page.
            2. On the Resource Group list page, click the Resource Group name of the resource you want to edit. You will be taken to the Resource Group Details page. Click the Group Resources tab. You will be taken to the Group Resources tab.
            3. Click the Edit Resource Group button. You will be taken to the Edit Resource Group page.
              • After modifying the information of resource type and group definition tag, click Save.
                Category
                Required
                Detailed description
                Resource TypeRequiredMulti-select from the full list or resource type list
                Group definition tagRequiredSet the grouping criteria tag
                • Key
                • Value
                Group target resourceUse the resource preview button to verify and select the target resource for the tool.
                Table. Resource Group resource modification input information
            4. On the Resource Group Details page, check the updated information.

            Delete Resource Group

            You can delete unused Resource Groups. However, once a Resource Group is deleted, it cannot be recovered.

            To delete a Resource Group, follow these steps.

            1. All Services > Management > Resource Group Click the menu. You will be taken to the Resource Group List page.
            2. On the Resource Group List page, click the resource you want to delete. You will be taken to the Resource Group Details page.
            3. On the Resource Group Details page, click the Resource Group Delete button. Verify the message in the Notification popup and click the Confirm button.
              • On the Resource Group List page, select multiple Resource Group check boxes, and click the Delete button at the top of the resource list.

            10.3 - Release Note

            Resource Groups

            2025.02.27
            NEW Resource Groups release
            • We have launched a service that efficiently manages resources through grouping.
            • You can logically group and manage resources based on tags.

            11 - ServiceWatch

            11.1 - Overview

            Service Overview

            ServiceWatch is a service that provides various tools to collect metrics, logs, events, and other data from resources created on the Samsung Cloud Platform for monitoring, offering observability of resources overall, including performance and operational status.

            Features

            We provide the following special features.

            • Resource Monitoring: Collects and visualizes performance metrics of resources (CPU Usage, etc.). Also creates a dashboard that allows visual inspection of multiple metrics in one place for quick overview.
            • Alert Policy Configuration and Automatic Notification: You can create alert policies by setting predefined conditions and thresholds, and when a threshold is exceeded, you receive notifications, allowing you to quickly check and respond to resource status.
            • Log Analysis and Storage: Collect logs generated from resources for easy viewing and searching. Collected logs are stored in log groups for management, and log groups can be stored for free up to 5GB. Additionally, you can set a log retention policy to specify the retention period, and logs that exceed the retention period do not require separate management.
            • Cost Efficiency: ServiceWatch offers a flexible pay-as-you-go pricing model, allowing cost‑effective usage. It also provides a free usage tier, so you can try it for free and then scale to a paid plan as needed.

            Provided features

            We provide the following features.

            • Metric Monitoring
              • Metrics: ServiceWatch receives metric data from services of the Samsung Cloud Platform, and ServiceWatch collects and stores the metric data to provide it to users.
              • Dashboard: Visualizes metrics of a single region to provide an integrated view of resources. In ServiceWatch, dashboards are divided into automatically generated service dashboards for each service and user-created custom dashboards.
              • Alert: Provides an alert feature that allows monitoring of metric changes based on user-defined thresholds and sends notifications when thresholds are exceeded.
            • Log Monitoring
              • ServiceWatch provides log management capabilities. Logs collected from Samsung Cloud Platform services are stored in log groups for management. You can set log retention policies to manage the retention period. Additionally, you can view and search log data through the console, and it offers the ability to store log groups in Object Storage.
            • ServiceWatch Agent
              • Through the ServiceWatch Agent, you can collect detailed metrics on processes, CPU, memory, disk usage, and network performance from Virtual Servers, GPU Servers, Bare Metal Servers, and other resources. GPU performance metrics can also be collected. Additionally, the Agent can collect logs generated by the resources. (Planned for December 2025)
            • Event Monitoring
              • ServiceWatch can create event rules from system events about changes to resources created in the Samsung Cloud Platform, allowing you to receive notifications under specific conditions.

            Component

            Metric

            Metrics refer to system performance data. By default, we provide basic monitoring based on free metrics for resources of services integrated with ServiceWatch. Additionally, services such as Virtual Server can enable detailed monitoring to provide paid metrics.

            Indicator data can be viewed for up to 15 months (455 days).

            For detailed information related to metrics, please refer to Metrics.

            log

            You can collect, store, and view logs of systems, applications, and services used in Samsung Cloud Platform services such as Virtual Server resources and Kubernetes Engine.

            For detailed information related to logs, refer to 로그.

            event

            An event represents a change in the environment in the Samsung Cloud Platform service. Below are examples of events.

            • Generates an event when the status of a Virtual Server changes from Stopped to Running.
            • Generates an event when a new bucket is created in Object Storage.
            • An event is generated when an IAM user is removed from a user group.

            For detailed information about events, refer to the Events.

            Dashboard

            ServiceWatch provides a pre-built service dashboard for each service automatically, and users can also create dashboards manually.

            information
            Pre-built dashboards for each service will be available starting March 2026.

            ServiceWatch Agent

            The ServiceWatch Agent is a software component that collects metrics and logs from Virtual Servers, GPU Servers, and on‑premises servers, among others. This enables monitoring of infrastructure and applications with greater granularity than the default monitoring provided out of the box.

            Reference

            Collecting custom metrics/logs via the ServiceWatch Agent is currently available only on Samsung Cloud Platform For Enterprise. It will be offered in other offerings in the future.

            Constraints

            The limitations of ServiceWatch are as follows.

            CategoryExplanation
            Metric query periodMetric queries can be set up to a maximum of 455 days from the time of query
            • Applies to dashboards, widgets, and metric queries
            Number of metric queriesYou can select up to 500 indicators and view them in a graph.
            Download indicator image fileImage download available for metric data of up to 100 metrics
            Export Metrics to Object StorageUp to 10 metrics, and exporting to Obect Storage is possible for metric data with a maximum query period of up to 2 months (63 days).
            Number of widgets/metrics per dashboard
            • Up to 500 widgets per dashboard
            • Up to 500 metrics per widget within a dashboard
            • A single dashboard can have up to 2,500 metrics across all its widgets
            Number of alert policiesAccount/per region 5,000 or fewer
            Alarm HistoryAlert history is available for 30 days
            Number of notification recipients per alert policy100 or fewer
            Number of log groupsAccount/10,000 or fewer per region
            Log downloadExcel download: up to 1 MB per log event, with a maximum of 10,000 log events can be downloaded
            • If a log event exceeds 1 MB or the number of log events exceeds 10,000, it is recommended to use log group export
            Number of log group export tasks
            • Can execute export tasks one per Account at a time
            Log event size1 MB or less
            Number of event rulesAccount/No more than 300 per region
            Event pattern size2 MB or less
            Number of notification recipients per event rule100 or fewer
            Table. ServiceWatch constraints

            The following is ServiceWatch’s monthly free offering details.

            CategoryFree offering
            logUp to 5 GB of storage per month
            indicator
            • Basic monitoring metrics for each service
            • Detailed monitoring metrics / custom metrics / log pattern metrics, 10 per month
            DashboardFor dashboards referencing 50 or fewer metrics, up to 3 per month
            • If referencing 51 or more metrics, billing for 1 dashboard per month
            Alert Policy10 per month
            Table. ServiceWatch free offering scope

            Provision status by region

            ServiceWatch is available in the following environments.

            RegionWhether provided
            Korea West (kr-west1)Provide
            Korea East (kr-east1)Provide
            South Korea 1 (kr-south1)Provide
            South Korea South 2 (kr-south2)Provide
            South Korea 3(kr-south3)Provide
            Table. ServiceWatch regional availability status

            Preliminary Service

            There are no prerequisite services for ServiceWatch.

            11.1.1 - Metric

            Metric

            Metrics are data about system performance. By default, many services provide free metrics for resources (e.g., Virtual Server, File Storage, etc.), which are offered as basic monitoring through ServiceWatch. Detailed monitoring can be used for certain resources such as Virtual Server.

            Indicator data is retained for 15 months (455 days), so you can view both the latest data and historical data.

            TermExampledescription
            namespaceVirtual ServerLogical distinctions for separating and grouping metrics
            Metric (metric)CPU usagethe name of the specific data you want to collect
            Dimension(Dimensions)resource_idUnique identifier for the metric
            Collection interval5 minutesPlease refer to the collection interval of metric data from each service that provides metrics
            StatisticsaverageHow to aggregate metric data over a specified period
            unit%Statistical measurement units
            • unit please refer to.
            Aggregation period5 minutesThe period for aggregating collected metric data
            AlertCPU usage >= 80%Occurs for 5 minutesIf CPU usage stays above 80% for 5 minutes, change to Alert state.
            Table. ServiceWatch metric terms

            Namespace

            A namespace is a logical separation used to distinguish and group ServiceWatch metrics. In Samsung Cloud Platform services, namespaces are generally the same as the service name, and can be found in the ServiceWatch 연계 서비스 목록.

            For custom metrics, users can define a namespace in ServiceWatch to distinguish them from other metrics, and can define it via the ServiceWatch Agent settings or OpenAPI. Detailed information about custom metrics and logs can be found in 사용자 정의 지표 및 로그.

            Metric (metric)

            A metric represents a set of data points sorted chronologically as they are collected in ServiceWatch. Each data point consists of a timestamp, the collected data, and the unit of the data.

            For example, the CPU utilization of a specific Virtual Server is one of the basic monitoring metrics provided by Virtual Server. The data point itself can be generated by any application or activity that collects data.

            By default, the Samsung Cloud Platform services integrated with ServiceWatch provide resource metrics for free. Detailed monitoring for some resources is offered as a paid service and can be enabled in each service.

            Metrics can only be viewed in the region where they were created. Metrics cannot be arbitrarily deleted by users. However, if new data is not posted to ServiceWatch, they will automatically expire after 15 months. Data points older than 15 months (455 days) expire sequentially, and when new data points are added, data older than 15 months (455 days) is deleted.

            Timestamp

            The timestamp of a data point is the time information indicating when the data point was recorded. Each metric data point consists of a timestamp (time) and data.

            A timestamp consists of hours, minutes, seconds, and a date.

            Metric retention period

            We maintain ServiceWatch metric data as follows.

            • Data points with a collection interval set to 60 seconds (1 minute) are available for up to 15 days.
            • Data points with a collection interval set to 300 seconds (5 minutes) are available for up to 63 days.
            • Data points with a collection interval set to 3600 seconds (1 hour) are usable for up to 455 days (15 months).

            Data points that were initially collected at a short interval are downsampled and stored for long-term retention.

            For example, if data is collected at a 1‑minute interval, it is retained in 1‑minute granularity for 15 days. After 15 days, the data continues to be retained but can only be queried in 5‑minute intervals. After 63 days, the data is re‑aggregated and provided in 1‑hour intervals. If you need to retain metric data points longer than the metric retention period, you can archive them separately using the File Download or Object Storage Export features.

            Dimension(Dimensions)

            A key-value pair that serves as a unique identifier for a metric, allowing you to classify and filter data points.

            For example, you can identify metrics for a specific server by using the resource_id dimension of the Virtual Server metrics.

            Collection interval

            It refers to the interval for collecting data points for each service’s metrics and is provided according to the collection interval predefined by each service.

            Refer to each service’s ServiceWatch metrics page for the metric collection interval.

            Reference
            Refer to Metrics and Log Monitoring for the metric page of ServiceWatch integrated services.

            For example, Virtual Server provides a collection interval of 5 minutes during basic monitoring, and a 1‑minute interval when detailed monitoring is enabled.

            Statistics

            Statistics are a method of aggregating metric data over a specified period. ServiceWatch provides data aggregated as statistics based on metric data points supplied to ServiceWatch from each service. Aggregation is performed within the specified aggregation period using namespace, metric name, dimension, and data point units.

            The provided statistics are sum, average, minimum, maximum.

            • Total: sum of all data point values collected during the period
            • Average: During the specified period, (sum of all data pointer values during that period) / (number of data pointers during that period) value
            • Minimum: the lowest value observed during the specified period
            • Maximum: the highest value observed during the specified period

            unit

            Each statistic has a measurement unit. Examples of units include Bytes, Second, Count, Percent, etc.

            Aggregation period

            Each statistic calculates the data points of the metric collected during the selected aggregation interval. The aggregation interval can be chosen from 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, or 1 day, with the default being 5 minutes. The aggregation interval is closely related to the collection frequency of metric data points, and to obtain correct aggregation results, the aggregation interval must be equal to or longer than the collection frequency.

            For example, if you select average, choose 5 minutes as the aggregation period, and pick a metric with a 1‑minute collection interval, data points are collected every minute and the average is calculated over the data points collected during the 5‑minute period. Conversely, if the aggregation period is shorter than the collection interval, it means a valid aggregation result cannot be obtained.

            Downsampling is applied for long-term storage of metric data. For example, if data is collected at a 1‑minute interval, after 15 days the data can only be queried in 5‑minute increments. If you set the aggregation period for such metrics from 5 minutes to 30 minutes, up to 5 minutes may be required to retrieve the downsampled data correctly. After 63 days, the data is re‑aggregated and provided in 1‑hour intervals. At that point, selecting an aggregation period from 1 hour to 1 day may take up to 1 hour to retrieve the data correctly. This occurs because aggregating the downsampled metric data takes time, which can cause aggregation delays.

            Reference
            When querying metric data, the most recent data point may not be displayed due to aggregation delay. In this case, you can either reduce the aggregation period to be smaller than the set value or query after a certain time (5 minutes or 1 hour) to view the data correctly.
            Aggregation periodAggregation delay
            1 minute-
            5 minutesup to 5 minutes
            15 minutesup to 5 minutes
            30 minutesup to 5 minutes
            1 hourup to 1 hour
            3 hoursup to 1 hour
            6 hoursup to 1 hour
            12 hoursup to 1 hour
            Day 1up to 1 hour
            Table. Aggregation delay by ServiceWatch aggregation period

            Alert

            When creating an alert policy, you can evaluate a single metric over the specified evaluation period, and if it meets the condition set based on the threshold, you can notify the user with an alert.

            The alarm status is classified as Alert (alert), Normal (normal), Insufficient data (no data).

            • Alert(Alert): when the metric meets the configured condition
            • Normal (Normal): when the indicator does not meet the set conditions.
            • Insufficient data(no data): when the metric data does not exist, is missing, or has not yet arrived

            When the alarm status is Alert, after evaluating the alarm, if it deviates from the condition, the alarm status changes back to Normal.

            For detailed information about alerts, refer to the 경보 entry.

            Basic monitoring and detailed monitoring

            ServiceWatch provides two types of monitoring: basic monitoring and detailed monitoring.

            The Samsung Cloud Platform services integrated with ServiceWatch provide basic monitoring by publishing a default set of metrics to ServiceWatch for free. By default, if you use any of these services, basic monitoring is automatically enabled and can be viewed in ServiceWatch.

            Reference
            The services that provide basic monitoring can be found in the ServiceWatch Integrated Service List and will be gradually expanded.

            Detailed monitoring is available only for certain services and incurs charges. To use detailed monitoring, you must enable it in the service details.

            Detailed monitoring options vary depending on the service provided.

            • The default monitoring for Virtual Server has a collection interval of 5 minutes. When detailed monitoring is enabled, the metrics provided by default monitoring are collected at a 5 minutes → 1 minute interval.
            • Basic monitoring of Object Storage is provided for basic metrics, and enabling replication metrics provides additional replication metrics.

            The following includes services and guides that provide detailed monitoring.

            Table. ServiceWatch detailed monitoring service

            11.1.2 - Alert

            Alert

            You can create alerts that monitor metrics and send notifications. For example, you monitor the CPU usage and disk read/write of a Virtual Server, then send a notification to the user to handle the increased load.

            Alert Policy

            The alert policy can monitor metrics of the same Account and evaluate alerts for a single metric. This alert policy compares the specified threshold with metric conditions and sends a notification when the conditions are met.

            If you disable the alert policy, its evaluation continues, but you can restrict sending alerts to the designated recipients. If you want to temporarily stop sending alerts for resources with an alarm policy configured, you can use alarm policy deactivation.

            When you enable an alert policy, evaluation of the policy starts, and according to the configured conditions, the alert status changes to Alert, with a notification sent each time the alert status changes.

            The alarm policy status indicates whether the alarm policy is enabled or disabled.

            Alert policy statusdescription
            ActiveIn a state where the alert policy is enabled, notifications can be sent according to the configured conditions
            • Evaluates alerts according to the settings and sends notifications to the designated recipients
            InactiveAlert policy is disabled, and notification sending is restricted.
            • Alert evaluation for the policy is not stopped, only notification sending is limited.
            Table. Alarm Policy Status

            You can set alert stages in the alert policy. Depending on the alert stage, the alert color (red/pink/purple) is displayed differently, allowing visual distinction of stages by color. You can filter alarm policies by their alarm level and view policies for each level.

            Alert Leveldescription
            HighWhen you set the step for the alarm policy condition to High, the alarm level is displayed in red.
            MidleIf you set the stage to Middel in the alarm policy condition, the alarm stage is displayed in pink.
            LowIf you set the stage to Middel in the alert policy condition, the alert stage is displayed in purple.
            Table. Alert Policy Stages

            Alert Status

            The alarm state changes according to the alarm evaluation of the alarm policy. The alarm state is divided into three states: Normal (normal), Insufficient data (insufficient data), Alert (alert).

            Alarm statusdescription
            NormalIndicates a normal state that does not meet the conditions set in the alert policy
            • Normal state is displayed in green
            Insufficient dataThe alarm policy has just been created, the metric is unavailable, or there is insufficient data to determine the alarm state from the metric
            • The Insufficient data state is displayed in gray
            AlertState that meets the conditions set in the alert policy
            • Alert state is displayed in red
            • When the state changes to Alert, send a notification to the user
            Table. Alarm Status
            Reference
            When an alarm policy is first created, the alarm state is initialized to Insufficient data. When metric data is later collected, the alarm state changes to Normal or Alert.

            Alert Evaluation

            Termdescription
            Metric data pointStatistical data calculated from indicator data. Data points consist of a timestamp, collected statistical data, and the unit of the data
            • The statistics of a data point are calculated as sum, average, minimum, and maximum
            Metric collection intervalTime interval for collecting metric data per service
            • It is specified per metric in the namespace
            • Example: 1 minute or 5 minutes
            Alert evaluation cycleThe time interval for evaluating whether an alert meets the condition
            • If the metric collection interval is 1 minute or more, fix the alert evaluation interval to a 1 minute granularity
            • If the alert evaluation range × metric collection interval exceeds 24 hours, fix the alert evaluation interval to a 1 hour granularity
            Alert Evaluation ScopeIt is recommended to set the evaluation time range for alarm evaluation
            • to the collection interval or multiple of the collection interval
            Alarm evaluation count / Alarm violation countDuring the alarm evaluation interval, if the condition is satisfied for violation count out of evaluation count, the alarm state is switched to Alert
            • violation count can be set less than or equal to evaluation count
            • The default is set to 1
            Alert evaluation intervalAlarm evaluation range(seconds) X Alarm evaluation count
            Table. Alarm Evaluation Terms

            For example, for a metric with a 1‑minute collection interval, if you set a 1‑minute evaluation window with 4 violations out of 5 evaluation attempts, the evaluation interval is 5 minutes. For a metric with a 5‑minute collection interval, if you set a 10‑minute evaluation window with 3 violations out of 3 evaluation attempts, the evaluation interval is 30 minutes.

            CategoryExample 1Example 2
            Metric collection interval1 minute5 minutes
            Alert evaluation cycle (fixed)1 minute1 minute
            Alert Evaluation Scope1 minute10 minutes
            Alarm evaluation count5 times3 times
            Alarm violation count4th3 times
            Alert evaluation interval (seconds)5 minutes (300 seconds)30 minutes (1,800 seconds)
            ConditionIf evaluated 5 times within 5 minutes and meets the condition 4 times, change the alarm state to Alert.If evaluated three times within 30 minutes and the three-time condition is met, change the alarm state to Alert.
            Table. Alarm Evaluation Example

            Evaluation Scope

            The evaluation scope of an alert policy is the time range used for alert evaluation.

            • It is recommended to set it as the indicator’s collection interval or a multiple of the collection interval.
            • You can enter up to 604,800 (7 days) seconds.
            Caution
            If the evaluation range is set smaller than the collection interval or not a multiple of the collection interval, the alarm evaluation may not work properly.
            Evaluation scopeConfigurable evaluation count
            7 days (604,800 seconds)1
            1 day (86,400 seconds)7 or less
            6 hours (21,600 seconds)28 or less
            1 hour (3,600 seconds)168 or less
            15 minutes (900 seconds)96 or less
            5 minutes (300 seconds)288 or less
            1 minute (60 seconds)1,440 or less
            Table. Configurable number of evaluations by evaluation range
            Guide

            There are the following limitations on the evaluation scope and the number of evaluations:

            • When the evaluation range is at least 1 hour (3,600 seconds), the evaluation interval (evaluation count × evaluation range) can be up to 7 days (604,800 seconds).
            • When the evaluation range is less than 1 hour (3,600 seconds), the evaluation interval (evaluation count × evaluation range) can be up to 1 day (86,400 seconds).

            condition

            The conditions for alarm evaluation require a conditional operator and threshold setting.

            Termdescription
            StatisticsMethod for calculating metric data over the evaluation period for alert assessment
            conditional operatorFor alarm evaluation, after calculating metric data over the evaluation period, select the conditional operator to compare the value with the threshold.
            thresholdFor alarm evaluation, calculate the metric data over the evaluation range and then define a threshold to compare the values using conditional operators.
            Table. Condition Terms

            When the namespace is Virtual Server and the metric is CPU Usage (unit: %), the alarm evaluation condition is completed as follows.

            CategoryExample 1Example 2
            Metric collection interval1 minute5 minutes
            Alert evaluation cycle (fixed)1 minute1 minute
            Alert Evaluation Scope1 minute10 minutes
            Alarm evaluation count5 times3 times
            Alarm violation countRound 43 times
            Alert evaluation interval (seconds)5 minutes (300 seconds)30 minutes (1,800 seconds)
            StatisticsaverageTotal
            conditional operator>=<
            threshold8020
            ConditionIf the average CPU Usage >= 80% for 4 occurrences over 5 minutes, change the alert status to Alert.Change to < 20% 이면, 경보 상태를 Alert if the average CPU usage occurs three times within 30 minutes.
            Table. Alarm Evaluation Example - Conditional Operators, Thresholds, Statistics Added

            Alert Notification

            If the alarm evaluation criteria are met, change the alarm status to Alert and send a notification to the recipients configured in the alarm policy.

            Reference
            • Only users with a login history (users who have registered an email or mobile phone number) can be added as alert recipients.
            • The notification reception method (E-mail or SMS) can be set on the Notification Settings page by selecting the notification target as Service > Alert.
            • You can add up to 100 notification recipients.
            information
            • Users without login history cannot be designated as notification recipients.
            • On the Notification Settings page, if you select the notification target as Service > Alarm but do not configure a notification delivery method, you will not receive notifications.

            Method for handling missing data during alarm evaluation

            Some resources may be unable to send metric data to ServiceWatch under certain conditions. For example, if a resource is inactive or does not exist, it will not be sent to ServiceWatch. If metrics are not collected for a certain period, the alert evaluation will change the alert status to Insufficient data.

            ServiceWatch provides a way to handle missing data during alert evaluation. The methods for handling missing data are as follows:

            • Ignore: maintains the current alarm state. (default)
            • Missing: Treat missing data points as missing. If all data points within the evaluation range are missing, the alert status changes to Insufficient data.
            • Breaching: Process missing data points as satisfying the threshold condition.
            • Not breaching: Treat missing data points as normal when they do not satisfy the threshold condition.
            Reference
            • For alert policies created before the December 2025 release, missing data is handled with the default Ignore, and starting with the December 2025 release, you can directly select how to handle missing data.
            • In the alert policy, the method for handling missing data can be modified, and from the time of modification onward, missing data will be processed using the updated method.

            Alert History

            The change history of the alarm status is recorded in the alarm history. The alarm history can be viewed for 30 days.

            11.1.3 - Log

            Log

            By using ServiceWatch logs, you can monitor, store, and access log files collected from the resources of the service that provides the logs.

            Log Group 1Log Group 1Log Group 1Log Group 2Log Group 2Log Group 2
            Log Stream1Log Stream2Log Stream3Log Stream ALog Stream Blog stream
            Log EventLog EventLog EventLog EventLog EventLog Event
            Log EventLog EventLog EventLog EventLog Event
            Table. Log Configuration - Log Group, Log Stream, Log Event
            Reference

            The following is an example of log configuration.

            • 📂 Log Group: “WebApp-Logs”
              • 📄 Log Stream 1: “Server-1”
                • 📝 Log Event 1: “[2025-03-20 10:00:01] User logged in”
                • 📝 Log Event 2: “[2025-03-20 10:05:34] Database connection error”

            Log Group

            Log groups are containers for log streams that share the same retention policy settings. Each log stream must belong to a single log group. For example, if there are separate log streams for the logs of each cluster in Kubernetes Engine, you can group the log streams into a single log group called /scp/ske/{cluster name}.

            Log Retention Policy

            The log retention policy allows you to set the period for retaining log events in ServiceWatch. Log events whose retention period has expired are automatically deleted. Log The retention period assigned to the group applies to the log streams and log events belonging to the log group.

            The retention period can be selected from the following options and is set in days.

            Retention period
            • No expiration
            • 1 day
            • 3 days
            • 5 days
            • 1 week (7 days)
            • 2 weeks (14 days)
            • 1 month (30 days)
            • 2 months (60 days)
            • 3 months (90 days)
            • 4 months (120 days)
            • 5 months (150 days)
            • 6 months (180 days)
            • 1 year (365 days)
            • 13 months (400 days)
            • 18 months (545 days)
            • 2 years (731 days)
            • 3 years (1096 days)
            • 5 years (1827 days)
            • 6 years (2192 days)
            • 7 years (2557 days)
            • 8 years (2922 days)
            • 9 years (3288 days)
            • 10 years (3653 days)
            Table. Log Group Retention Policy Period

            Log stream

            A log stream is a collection of log events ordered by the sequence in which they occurred from the same source. For example, all log events generated by a particular Kubernetes Engine cluster can form a single log stream.

            Log Event

            Log events are individual records that capture logs generated by a resource. A log event record includes two attributes: a timestamp of when the event occurred and a log message. Each message must be encoded in UTF-8.

            log pattern

            You can create log patterns to filter log data that matches the pattern. Log patterns define the words or patterns to search for in the log data collected by ServiceWatch, allow you to view the status of log occurrences as graphs, and serve as metrics for creating alert policies.

            Log patterns are not applied retroactively to data. They are applied to log events collected after the log pattern is created.

            Log pattern namespace

            A namespace is a logical separation used to distinguish and group metrics. In ServiceWatch, it is divided into namespaces associated with services, namespaces for custom metrics, and namespaces for log patterns.

            • Namespace associated with services such as Virtual Server
            • A namespace consisting of custom metrics, i.e., the namespace of metrics collected through the custom metrics API or ServiceWatch Agent.
            • Namespace of the metric generated by the log pattern

            When creating metrics for a log pattern, you can either create a new namespace for the log pattern or select from existing log pattern namespaces.

            Metric name

            The monitored log information is the name of the metric generated by ServiceWatch. You must configure it so that the metric name does not duplicate within the namespace where the metric will exist.

            Metric Value

            It is the numeric value posted to the metric each time a log matching the pattern is found. For example, when counting occurrences of a specific word (e.g., Error), this value becomes 1 for each occurrence. When calculating transmitted bytes, it can be incremented by the actual number of bytes found in the log event.

            default value

            This is the value recorded in the log pattern for periods during log collection when no matching logs can be found. Setting the default to 0 prevents the metric from becoming irregular due to periods with no matching data.

            When setting a dimension on a metric created from a log pattern, you cannot set a default value for that metric.

            dimension

            Dimensions are key-value pairs that further define a metric. You can add dimensions to metrics generated from log patterns. Since dimensions are part of a metric’s unique identifier, each time a unique name/value pair is extracted from logs, a new variant of that metric is created.

            When you choose the log pattern format as either a whitespace-delimited pattern or a JSON format pattern, you can set the dimension, and it can be configured using one of the parameters defined in the pattern. You can assign up to three dimensions to an indicator. If a default value is set, you cannot configure dimensions. To set dimensions, you must disable the use of the default value.

            Pattern format

            This explains how ServiceWatch interprets data from each log event. The pattern format can be selected from three options as shown below.

            • String Pattern: log containing a specific string
            • Space-separated pattern: timestamps, IP addresses, strings, and other logs separated by spaces
            • JSON format pattern: log containing specific JSON fields

            Available regular expression syntax

            When using regular expressions to search and filter log data, you must enclose the expression with %.

            Patterns that contain regular expressions can only include the following.

            • Alphanumeric - An alphanumeric character is a character that corresponds to a letter (A~Z or a~z) or a digit (0~9).
              • It can be used with A-Z, a-z, 0-9.
            • The supported symbol characters are as follows.
              • :, _, #, =, @, /, ;, ,, -
              • For example, %servicewatch!% cannot be used because ! is not supported.
            • The supported operators are as follows.
              • It includes ^, $, ?, [, ], {, }, |, \, *, +, ..
              • (, ) The operator is not supported.
            operatorHow to use
            ^Fix the start position of the string to the matching item. For example, %^[ab]cd% matches acd and bcd, but does not match bcd.
            $Fix the end position of the string to the matching item. For example, %abc$% matches xyzabc and xyabc, but does not match abcd.
            ?? matches when the preceding character appears 0 or 1 times. For example, %abc?d% matches both abcd and abd, while abc and abccd do not match.
            []Matches a list of characters or a range of characters enclosed in square brackets. For example, %[abc]% matches a, b, c, and %[a-z]% matches all lowercase letters from a to z, and %[abcx-z]% matches a, b, c, x, y, z.
            {m, n}It matches when the preceding character is repeated m~n times. For example, %a{3,5}% matches only aaa, aaaa and aaaaa, and does not match a or aa.
            \By using an escape character, you can treat this character literally instead of as a special operator.
            *Matches the preceding character zero or more times. For example, %12*3% matches 13, 123, 122223.
            +Matches the preceding character one or more times. For example, %12+3% can match 123, 1223, 12223, but does not match 13.
            .Matches any character. For example, %.ab% matches cab, dab, bab, 8ab, #ab, ab (including spaces), and ab which end with a three-character string.
            \d, \DMatches digits and non-digit characters. For example, %\d% is equivalent to %[0-9]%, and %\D% matches all characters except digits, like %[^0-9]%.
            \s, \SMatches whitespace characters and non-whitespace characters. Whitespace characters include tab (\t), space ( ), and line break (\n) characters.
            \w, \WMatches alphanumeric and non-alphanumeric characters. For example, %\w% is equivalent to %[a-zA-Z_0-9]%, and %\W% is equivalent to %[^a-zA-Z_0-9]%.
            \xhhMatches the ASCII mapping of a two‑digit hexadecimal character. \x is an escape sequence indicating that the following character is the hexadecimal value in ASCII. hh specifies a two‑digit hexadecimal (0–9 and A–F) that refers to a character in the ASCII table.
            Table. Regular expression syntax operators available for log patterns
            Reference
            To represent an IP address such as 123.123.123.1 with a regular expression, use %123\.123\.123\.1%.

            string pattern

            String pattern using regular expressions

            You can search for matching patterns in log events using a regex string pattern wrapped with %(percentage) at the beginning and end. Below is an example pattern that retrieves all log events containing the ERROR keyword. Please refer to Available regex syntax.

            %ERROR%
            

            The above pattern matches log event messages like the ones below.

            • [2026-02-13 14:22:01] ERROR 500 POST /api/v1/checkout (192.168.1.10) - NullPointerException at com.app.controller.CheckoutController.java:55
            • [ERROR] Configuration file not found: /etc/app/config.yaml
            String pattern in unstructured log events

            It is a string pattern for searching strings in log events that are not in formats such as JSON. Below is an example of a log event message, and you can view log events that match various string pattern classifications.

            ERROR CODE 400 BAD REQUEST
            ERROR CODE 401 UNAUTHORIZED REQUEST
            ERROR CODE 419 MISSING ARGUMENTS
            ERROR CODE 420 INVALID ARGUMENTS
            
            CategoryPatternMatching log event message
            single stringERROR CODEERRORlog event containing
            • ERROR CODE 400 BAD REQUEST
            • ERROR CODE 401 UNAUTHORIZED REQUEST
            • ERROR CODE 419 MISSING ARGUMENTS
            • ERROR CODE 420 INVALID ARGUMENTS
            Multiple strings (AND condition)ERROR REQUESTlog events containing the strings ERROR and REQUEST
            • ERROR CODE 400 BAD REQUEST
            • ERROR CODE 401 UNAUTHORIZED REQUEST
            Multiple strings (Or condition)?ERROR ?400ERRORor 400log event containing the string
            • ERROR CODE 400 BAD REQUEST
            • ERROR CODE 401 UNAUTHORIZED REQUEST
            • ERROR CODE 419 MISSING ARGUMENTS
            • ERROR CODE 420 INVALID ARGUMENTS
            Exact match string“BAD REQUEST”“BAD REQUEST”log event containing the exact phrase
            • ERROR CODE 400 BAD REQUEST
            Exclude specific stringERROR -400A pattern that includes some terms and excludes others. Enter - before the string you want to exclude. The following is a log event that includes the string ERROR and excludes the string 400:
            • ERROR CODE 401 UNAUTHORIZED REQUEST
            • ERROR CODE 419 MISSING ARGUMENTS
            • ERROR CODE 420 INVALID ARGUMENTS
            Table. String patterns in unstructured log events

            Space-separated pattern

            Generate a pattern to search for matching strings in space-separated log events.

            Whitespace-separated pattern example (1)

            The following is an example of log events separated by spaces.

            2023-10-27T10:00:01Z [INFO] 1234 login success 192.168.1.1
            

            The above log event is a space‑separated log event that includes timestamp, logLevel, user_id, action, status, ip. Characters between brackets ([]) and double quotes ("") are considered a single field.

            To create a pattern that searches for matching strings in space-separated log events, enclose the pattern in brackets ([]) and specify name-separated fields with commas (,). The following pattern parses six fields.

            A pattern like [timestamp, logLevel, user_id, action, status = success, ip] can be used to find log events where the fifth field, status, is success.

            Whitespace-separated pattern example (2)
            abc xxx.log james 2023-10-27T10:00:01Z POST 400 1024
            abc xxx.log name 2023-10-27T10:00:02Z POST 410 512
            

            The above log event is a space‑separated log event that includes host, logName, user, timestamp, request, statusCode, and size.

            A pattern like [host, logName, user, timestamp, request, statusCode=4*, size] can find log events where the sixth field, statusCode, starts with 4.

            If you do not know the exact number of fields in a space-separated log event, you can use an ellipsis (). A pattern such as […, statusCode=4*, size] represents the first five fields using an ellipsis.

            AND(&&) operator and OR(||) operator can be used to create composite expressions. […, statusCode=400 || statusCode=410, size] can find log events where the sixth field, statusCode, is 400 or 410.

            You can use regular expressions to provide conditions in a pattern. [host, logName, user, timestamp, request, statusCode=%4[0-9]{2}%, size] can find log events where the sixth field, statusCode, is a number that starts with 4.

            JSON format pattern

            You can create a pattern to search for matching strings or numeric values in JSON log events. Patterns are enclosed in curly braces ({}).

            String-based JSON format pattern
            • Use $. to represent JSON fields.
            • The operator can use = or !=.
            • The string to compare with the field can be enclosed in double quotes (""). Strings containing characters other than alphanumerics and the underscore must be enclosed in double quotes. Use an asterisk (*) as a wildcard to match text.
            { $.resourceType = "trail" }
            { $.resourceType = "%trail%" }
            { $.arrayKey[0] = "value" }
            
            • Use $. to represent JSON fields.
            • You can use numeric operators.
              • greater than(>), less than(<), equal to(=), not equal to(!=), greater than or equal to(>=), less than or equal to(<=)
            • You can include addition(+) or subtraction(-) symbols. An asterisk(*) can be used as a wildcard.
            { $.errorCode = 400} 
            { $.errorCode >= 400} 
            { $.errorCode != 500 }
            { $.sourceIPAddress != 123.123.* }
            

            Export Log Group

            You can export log data from a log group to Object Storage for log retention and analysis. You can also export log groups for log data that resides in the same account.

            To start exporting a log group, you must create an Object Storage bucket to store the log data.

            Exporting a log group can take a long time depending on the amount of logs. When exporting a log group, you can reduce the export duration by specifying particular streams within the log group or by defining a time range.

            Log group export can only be executed one at a time per account. To start another log group export, the ongoing export task must be completed.

            You can delete a log group’s export history after the export succeeds or after the export cancellation is completed. Canceling a log group export does not delete the saved file exported from the log group. To delete the saved file exported from the log group, delete the stored file directly in Object Storage.

            Log group export statusdescription
            SuccessThe log group export operation completed successfully.
            PendingThe log group export task is pending.
            In progressThe log group export operation is in progress.
            FailedThe log group export operation failed.
            CancelingCancelling the log group export task. If the cancellation request fails, it will be set to a Failed state.
            CanceledThe log group export task has been cancelled.
            Table. Log Group Export Status

            11.1.4 - Event

            An event represents a change in the environment in the Samsung Cloud Platform service.

            ServiceWatch receives events generated by most Samsung Cloud Platform services. Events from each service can be viewed and processed in the ServiceWatch of the same Account.

            Refer to the ServiceWatch Event Reference for the list of services that send events to ServiceWatch and the events they send.

            Each service sends events to ServiceWatch based on Best Effort delivery. Best Effort delivery means that the service attempts to send all events to ServiceWatch, but occasionally some events may not be delivered.

            When a valid event is delivered to ServiceWatch, ServiceWatch compares the event with the rules and then sends a notification to the alert recipients configured in the event rule.

            Event Rules

            You can specify the actions that ServiceWatch performs on events delivered from each service to ServiceWatch. To do this, create an event rule. An event rule defines which events are sent to which targets.

            Event rules evaluate an event when it arrives. Each event rule checks whether the event matches the rule’s pattern. If the event matches, ServiceWatch processes the event.

            Based on the event data criteria (called an event pattern), you can generate matching rules for incoming events. When an event matches the criteria defined in the event pattern, the event is delivered to the target specified in the rule.

            • Event rules can, by default, designate the recipients who will receive notifications when an event occurs.
            • The event rules are planned to be expanded to include multiple Samsung Cloud Platform services as recipients when events occur. (Planned for 2026)

            To create an event rule, refer to How-to Guides > Create Event Rule.

            Event source

            In ServiceWatch, the event source can be selected as a Samsung Cloud Platform service name. You can select the service name of the event you want to receive as the event source.

            Service Categoryservice
            ComputeVirtual Server
            ComputeGPU Server
            ComputeBare Metal Server
            ComputeMulti-node GPU Cluster
            ComputeCloud Functions
            StorageBlock Storage(BM)
            StorageFile Storage
            StorageObject Storage
            StorageArchive Storage
            StorageBackup
            ContainerKubernetes Engine
            ContainerContainer Registry
            NetworkingVPC
            NetworkingSecurity Group
            NetworkingLoad Balancer
            NetworkingDNS
            NetworkingVPN
            NetworkingFirewall
            NetworkingDirect Connect
            NetworkingCloud LAN-Campus
            NetworkingCloud LAN-Datacenter
            NetworkingCloud WAN
            NetworkingGlobal CDN
            NetworkingGSLB
            DatabaseEPAS(DBaaS)
            DatabasePostreSQL(DBaaS)
            DatabaseMariaDB(DBaaS)
            DatabaseMySQL(DBaaS)
            DatabaseMicrosoft SQL Server(DBaaS)
            DatabaseCacheStore(DBaaS)
            Data AnalyticsEvent Streams
            Data AnalyticsSearch Engine
            Data AnalyticsVertica(DBaaS)
            Data AnalyticsData Flow
            Data AnalyticsData Ops
            Data AnalyticsQuick Query
            Application ServiceAPI Gateway
            SecurityKey Management Service
            SecurityConfig Inspection
            SecurityCertificate Manager
            SecuritySecret Vault
            ManagementCloud Control
            ManagementIdentity and Access Management(IAM)
            ManagementID Center
            ManagementLogging&Audit
            ManagementOrganization
            ManagementResource Groups
            ManagementServiceWatch
            ManagementSupport Center
            AI-MLCloudML
            AI-MLAI&MLOps Platform
            Table. ServiceWatch event source

            Event Type

            The Samsung Cloud Platform service has its own resource types. Event types are classified the same as resource types, and you select the type of events from the event source to use in an event rule.

            The following are the event types of a Virtual Server.

            Service CategoryServiceSubserviceEvent type
            ComputeVirtual ServerVirtual ServerServer
            ComputeVirtual ServerImageImage
            ComputeVirtual ServerKeypairKeypair
            ComputeVitual ServerServer GroupServer Group
            ComputeVirtual ServerLaunch ConfigurationLaunch Configuration
            ComputeVirtual ServerAuto-Scaling GroupAuto-Scaling Group
            ComputeVirtual ServerBlock StorageVolume
            ComputeVirtual ServerBlock StorageSnapshot
            Table. ServiceWatch - Virtual Server Event Types

            For other event types available in ServiceWatch, refer to ServiceWatch Event.

            Event

            Events can select either all events generated from an event source’s event type or specific events.

            The following are some events of the Server event type for Virtual Server.

            Service CategoryServiceSubserviceEvent typeEvent
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Create Error
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Delete Error
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Lock End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Unlock End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Stop Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Stop Success
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Start Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Start Success
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Reboot Error
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On Start
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On End
            ComputeVirtual ServerVirtual ServerServerCompute Virtual Server Power On Error
            Table. Some events of ServiceWatch - Virtual Server Server

            For other events available in ServiceWatch, refer to ServiceWatch Event.

            Applied Resources

            Set an event pattern for the selected event on all resources or a specific resource.

            event pattern

            When you select the event source, event type, event, and target resource, the event pattern configuration for the event rule is completed.

            The following is an example of an event pattern set in ServiceWatch’s event rule.

            Color mode
            {
            	"source": [ // namespace
            		"Virtual Server"
            	],
            	"detail-type": [ // event type
            		Server
            	],
            	"detail": {
            		"event": [ // individual event
            			Compute Virtual Server Create End
            		]
            	},
            	"resources": [ // individual resources
            		"srn:{offerring}::{account_id}:{region}::virtualserver:server/{resource_id}"
            	]
            }
            {
            	"source": [ // namespace
            		"Virtual Server"
            	],
            	"detail-type": [ // event type
            		Server
            	],
            	"detail": {
            		"event": [ // individual event
            			Compute Virtual Server Create End
            		]
            	},
            	"resources": [ // individual resources
            		"srn:{offerring}::{account_id}:{region}::virtualserver:server/{resource_id}"
            	]
            }
            code block. ServiceWatch - Virtual Server event pattern example

            To create an event rule, refer to How-to Guides > Create Event Rule.

            Event Notification

            If the event matches the pattern, a notification is sent to the alert recipients configured in the event rule.

            Reference
            • It is possible to send notifications to users with a login history (users who have registered an email or mobile phone number).
            • You can add up to 100 notification recipients.
            • The notification reception method (E-mail or SMS) can be changed on the Notification Settings page after selecting the notification target as Service > ServiceWatch.
            information
            • Users without login history cannot be designated as notification recipients.
            • If you select the notification target as Service > ServiceWatch on the Notification Settings page but do not configure a notification delivery method, you will not receive notifications.

            11.1.5 - ServiceWatch integration service

            You can view services integrated with ServiceWatch.

            Metrics and Log Monitoring

            Below you can see the service that integrates ServiceWatch with metric and log monitoring.

            Reference
            For information on basic monitoring and detailed monitoring, see ServiceWatch 기본 모니터링과 세부 모니터링.
            Service CategoryServicenamespaceIndicator
            Basic Monitoring
            indicator
            detailed monitoring
            Log monitoringGuide
            ComputeVirtual ServerVirtual Server-
            ComputeGPU ServerVirtual Server-
            ComputeBlock StorageTBDScheduled for July 2026--
            ComputeBare Metal Server----
            ComputeMulti-node GPU Cluster----
            ComputeCloud FuctionsCloud Functions-
            • Cloud Functions are automatically linked to ServiceWatch for log collection upon creation. No additional configuration is required.
            StorageBlock Storage(BM)TBDScheduled for July 2026--
            StorageFile StorageFile Storage-
            StorageObject StorageObject Storage--
            StorageArchive StorageArchive Storage--
            ContainerKubernetes EngineKubernetes Engine-
            ContainerContainer RegistryContainer Registry--
            NetworkingVPC - Internet GatewayInternet Gateway--
            NetworkingLoad BalancerLoad Balancer--
            NetworkingDNSDNS--
            NetworkingVPNVPN--
            NetworkingGlobal CDNGlobal CDN--
            NetworkingDirect ConnectDirect Connect--
            NetworkingCloud WANTBDScheduled for September 2026--
            DatabaseEPAS(DBaaS)TBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch is available starting July 2026.
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. After September 2026, monitoring via ServiceWatch will be possible. For more details, see EPAS(DBaaS) > How-to guides.
            DatabasePostgreSQL(DBaaS)TBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch will be available starting July 2026.
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. Monitoring via ServiceWatch will be available after September 2026. For more details, see PostgreSQL(DBaaS) > How-to guides.
            DatabaseMariaDB(DBaaS)MariaDB-
            • For new resources, monitoring via ServiceWatch is available starting March 2026
            • Resources created before March 2026 are scheduled to be transitioned by July 2026. After July 2026, monitoring via ServiceWatch will be available. For details, see MariaDB(DBaaS) > How-to guides.
            DatabaseMySQL(DBaaS)MySQL-
            • For new resources, monitoring via ServiceWatch is available starting March 2026
            • Resources created before March 2026 are scheduled to be transitioned by July 2026. After July 2026, monitoring via ServiceWatch will be available. For details, see MySQL(DBaaS) > How-to guides.
            DatabaseMicrosoft SQL Server(DBaaS)TBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch will be available starting July 2026
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. Monitoring via ServiceWatch will be available after September 2026. For more details, see Microsoft SQL Server(DBaaS) > How-to guides.
            DatabaseCachestore(DBaaS)TBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch will be available starting July 2026.
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. Monitoring via ServiceWatch will be available after September 2026. For more details, see Cachestore(DBaaS) > How-to guides.
            DatabaseScalable DB(DBaaS)Scalable DB-
            Data AnalyticsEvent StreamsEvent Streams-
            • For new resources, monitoring via ServiceWatch is available starting March 2026
            • Resources created before March 2026 are scheduled to be transitioned by July 2026. After July 2026, monitoring via ServiceWatch will be available. For more details, see Event Streams > How-to guides.
            Data AnalyticsSearch EngineTBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch will be available starting July 2026.
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. Monitoring via ServiceWatch will be possible after September 2026. For more details, see Search Engine > How-to guides.
            Data AnalyticsVertica(DBaas)TBDScheduled for July 2026-Scheduled for July 2026
            • For new resources, monitoring via ServiceWatch will be available starting July 2026.
            • Resources created before July 2026 are scheduled to be transitioned by September 2026. Monitoring via ServiceWatch will be available after September 2026. For more details, see Vertica(DBaas) > How-to guides.
            Data AnalyticsData FlowData Flow-
            Data AnalyticsData OpsData Ops-
            Data AnalyticsQuick QueryQuick Query-
            Data AnalyticsCloud HadoopCloud Hadoop-
            Application ServiceAPI GatewayAPI Gateway-
            Application ServiceQueue ServiceQueue Service--
            ManagementLoggiing&AuditLogging&Audit--
            AI/MLAIOSAIOS--
            Table. ServiceWatch metrics and log integration services and guide

            event

            Below you can see the service that integrates ServiceWatch with events.

            Reference
            For information related to event rules, see the Event. Refer to the list of Samsung Cloud Platform services that generate events and the events at ServiceWatch Event.
            Service CategoryServiceSubserviceEvent sourceResource type (event type)
            ComputeVirtual ServerVirtual ServerVirtual ServerServer
            ComputeVirtual ServerImageVirtual ServerImage
            ComputeVirtual ServerKeypairVirtual ServerKeypair
            ComputeVitual ServerServer GroupVirtual ServerServer Group
            ComputeVirtual ServerLaunch ConfigurationVirtual ServerLaunch Configuration
            ComputeVirtual ServerAuto-Scaling GroupVirtual ServerAuto-Scaling Group
            ComputeVirtual ServerBlock StorageVirtual ServerVolume
            ComputeVirtual ServerBlock StorageVirtual ServerSnapshot
            ComputeGPU ServerGPU ServerGPU ServerServer
            ComputeGPU ServerGPU ServerGPU ServerImage
            ComputeBare Metal ServerBare Metal ServerBare Metal ServerBare Metal Server
            ComputeMulti-node GPU ClusterGPU NodeMulti-node GPU ClusterGPU Node
            ComputeMulti-node GPU ClusterCluster FabricMulti-node GPU ClusterCluster Fabric
            ComputeCloud FunctionsFunctionCloud FunctionsCloud Functions
            StorageBlock Storage(BM)Block Storage(BM)Block Storage(BM)Volume
            StorageBlock Storage(BM)Volume Group(BM)Block Storage(BM)Volume Group
            StorageFile StorageFile StorageFile StorageVolume
            StorageObject StorageObject StorageObject StorageBucket
            StorageArchive StorageArchive StorageArchive StorageBucket
            StorageBackupBackupBackupBackup
            ContainerKubernetes EngineClusterKubernetes EngineCluster
            ContainerKubernetes EngineNodeKubernetes EngineNodepool
            ContainerContainer RegistryRegistryContainer RegistryContainer Registry
            ContainerContainer RegistryRepositoryContainer RegistryRepository
            NetworkingVPCVPCVPCVPC
            NetworkingVPCSubnetVPCSubnet
            NetworkingVPCPortVPCPort
            NetworkingVPCInternet GatewayVPCInternet Gateway
            NetworkingVPCNAT GatewayVPCNAT Gateway
            NetworkingVPCPublic IPVPCPublic IP
            NetworkingVPCPrivate NATVPCPrivate NAT
            NetworkingVPCVPC EndpointVPCVPC Endpoint
            NetworkingVPCVPC PeeringVPCVPC Peering
            NetworkingVPCPrivate Link ServiceVPCPrivate Link Service
            NetworkingVPCPrivate Link EndpointVPCPrivate Link Endpoint
            NetworkingVPCTransit GatewayVPCTransit Gateway
            NetworkingSecurity GroupSecurity GroupSecurity GroupSecurity Group
            NetworkingLoad BalancerLoad BalancerLoad BalancerLoad Balancer
            NetworkingLoad BalancerLoad BalancerLoad BalancerLB Listener
            NetworkingLoad BalancerLB server groupLoad BalancerLB Server Group
            NetworkingLoad BalancerLB health checkLoad BalancerLB Health Check
            NetworkingDNSPrivate DNSPrivate DNSPrivate DNS
            NetworkingDNSHosted ZoneHosted ZoneHosted Zone
            NetworkingDNSPublic Domain NamePublic Domain NamePublic Domain Name
            NetworkingVPNVPNVPNVPN Gateway
            NetworkingVPNVPN TunnelVPNVPN Tunnel
            NetworkingFirewallFirewallFirewallFirewall
            NetworkingDirect ConnectDirect ConnectDirect ConnectDirect Connect
            NetworkingCloud LAN-CampusCampus NetworkCloud LAN - Campus (Network)Cloud LAN - Campus (Network)
            NetworkingCloud LAN-DatacenterCloud LAN NetworkCloud LAN NetworkCloud LAN Network
            NetworkingCloud LAN-DatacentervDeviceCloud LAN NetworkvDevice
            NetworkingCloud LAN-DatacenterInterfaceCloud LAN NetworkInterface
            NetworkingCloud LAN-DatacentervCableCloud LAN NetworkvCable
            NetworkingCloud WANCloud WAN NetworkCloud WANNetwork(WAN)
            NetworkingCloud WANSegmentCloud WANSegment
            NetworkingCloud WANSegmentCloud WANSegment Location
            NetworkingCloud WANSegmentCloud WANSegment Sharing
            NetworkingCloud WANAttachmentCloud WANAttachment
            NetworkingGlobal CDNGlobal CDNGlobal CDNGlobal CDN
            NetworkingGSLBGSLBGSLBGSLB
            DatabaseEPAS(DBaaS)EPAS(DBaaS)EPASEPAS
            DatabasePostreSQL(DBaaS)PostreSQL(DBaaS)PostreSQLPostreSQL
            DatabaseMariaDB(DBaaS)MariaDB(DBaaS)MariaDBMariaDB
            DatabaseMySQL(DBaaS)MySQL(DBaaS)MySQLMySQL
            DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server(DBaaS)Microsoft SQL ServerMicrosoft SQL Server
            DatabaseCacheStore(DBaaS)CacheStore(DBaaS)CacheStoreCacheStore
            DatabaseScalable DB(DBaaS)Scalable DB(DBaaS)Scalable DBScalable DB
            Data AnalyticsEvent StreamsEvent StreamsEvent StreamsEvent Streams
            Data AnalyticsSearch EngineSearch EngineSearch EngineSearch Engine
            Data AnalyticsVertica(DBaaS)Vertica(DBaaS)VerticaVertica
            Data AnalyticsData FlowData FlowData FlowData Flow
            Data AnalyticsData FlowData Flow ServicesData FlowData Flow Service
            Data AnalyticsData OpsData OpsData OpsData Ops
            Data AnalyticsData OpsData Ops ServicesData OpsData Ops Service
            Data AnalyticsQuick QueryQuick QueryQuick QueryQuick Query
            Application ServiceAPI GatewayAPI GatewayAPI GatewayAPI Gateway
            Application ServiceQueue ServiceQueueQueueQueue
            SecurityKey Management ServiceKey Management ServiceKey Management ServiceKey
            SecurityConfig InspectionConfig InspectionConfig InspectionConfig Inspection
            SecurityCertificate ManagerCertificate ManagerCertificate ManagerCertificate
            SecuritySecrets ManagerSecrets ManagerSecrets ManagerSecret
            SecuritySecret VaultSecret VaultSecret VaultSecret
            ManagementCloud ControlCloud ControlCloud ControlLanding zone
            ManagementIdentity and Access Management(IAM)User groupIdentity and Access ManagementGroup
            ManagementIdentity and Access Management(IAM)UserIdentity and Access ManagementUser
            ManagementIdentity and Access Management(IAM)policyIdentity and Access Managementpolicy
            ManagementIdentity and Access Management(IAM)roleIdentity and Access Managementrole
            ManagementIdentity and Access Management(IAM)Credential ProviderIdentity and Access ManagementCredential Provider
            ManagementIdentity and Access Management(IAM)My Info.Identity and Access ManagementAccess Key
            ManagementID CenterID CenterIdentity CenterID Center
            ManagementID CenterPermission setIdentity CenterPermission set
            ManagementLogging&AuditTrailLogging&AuditTrail
            ManagementOrganizationOrganizational structureOrganizationorganization
            ManagementOrganizationOrganizational structureOrganizationOrganization account
            ManagementOrganizationOrganizational StructureOrganizationOrganization invitation
            ManagementOrganizationOrganizational StructureOrganizationorganizational unit
            ManagementOrganizationControl PolicyOrganizationControl Policy
            ManagementOrganizationOrganization SettingsOrganizationDelegation Policy
            ManagementResource GroupsResource GroupsResource GroupsResource Group
            ManagementServiceWatchDashboardServiceWatchDashboard
            ManagementServiceWatchAlertServiceWatchAlert
            ManagementServiceWatchlogServiceWatchLog group
            ManagementServiceWatchEvent RulesServiceWatchEvent Rules
            ManagementSupport CenterService requestSupportService request
            ManagementSupport CenterContactSupportContact
            AI-MLCloudMLCloudMLCloud MLCloud ML
            AI-MLAI&MLOps PlatformAI&MLOps PlatformAI&MLOps PlatformAI&MLOps Platform
            Table. ServiceWatch event service

            11.1.6 - Custom Metrics and Logs

            ServiceWatch can collect custom metrics defined by the user and can gather log files from resources created by the user.

            There are two ways to collect custom metrics and logs.

            The first method is to install the ServiceWatch Agent directly on the resource, configure the resources to be collected, and collect them.
            The second option is to collect custom metrics and logs using the OpenAPI/CLI offered by ServiceWatch.

            Reference
            Collecting custom metrics/logs via the ServiceWatch Agent is currently available only on Samsung Cloud Platform For Enterprise. It will be offered in other offerings in the future.
            Caution

            The ServiceWatch metric API incurs costs for calls. Collecting metrics via the ServiceWatch Agent also operates on an OpenAPI basis, so metric API calls incur costs.
            Caution is required to avoid excessive API calls when collecting metrics and logs. The billable metric APIs are listed below.

            APIdescription
            ListMetricDataRetrieve metric data list.
            • Since a single API call can request multiple metrics, charges are applied per 1,000 metric requests
            DownloadMetricDataImageMetric data widget image download.
            • Since a single API call can request multiple metrics, a fee is charged per 1,000 metric requests
            ListMetricInfosRetrieve indicator data.
            • This API incurs a charge per 1,000 calls
            CreateCustomMetricMetasCreate custom metric metadata
            • This API is billed per 1,000 calls
            CreateCustomMetricsCreate (send) custom metric data
            • This API incurs a charge per 1,000 calls
            ShowDashboardDashboard view
            • This API is charged per 1,000 calls
            ListDashboardsDashboard list retrieval
            • This API incurs a charge per 1,000 calls
            CreateDashboardCreate Dashboard
            • This API incurs a charge per 1,000 calls
            SetDashboardEdit Dashboard
            • This API is charged per 1,000 calls
            DeleteBulkDashboardsDelete Dashboard
            • This API incurs a charge per 1,000 calls
            Table. Indicator API Billing Information

            Since logs incur charges based on the amount of data collected, there is no additional charge for API calls.

            ※ For detailed pricing information, refer to the ServiceWatch pricing details on the Samsung Cloud Platform Service Portal.

            ServiceWatch Agent

            You can install the ServiceWatch Agent on user resources such as Virtual Server, GPU Server, Bare Metal Server, etc., to collect custom metrics and logs.

            ServiceWatch Agent Constraints

            ServiceWatch Agent network environment

            The ServiceWatch Agent is designed to collect data using OpenAPI by default, so installing and using it on server resources requires external communication over the Internet. Please create an Internet Gateway in the VPC where the resources reside and configure a NAT IP on the server resources to enable communication with the outside.

            ServiceWatch Agent Supported OS Image

            The OS images available for the ServiceWatch Agent are as follows.

            OS Image versionEOS Date
            Alma Linux 8.102029-05-31
            Alma Linux 9.62025-11-17
            Oracle Linux 8.102029-07-31
            Oracle Linux 9.62025-11-25
            RHEL 8.102029-05-31
            RHEL 9.42026-04-30
            RHEL 9.62027-05-31
            Rocky Linux 8.102029-05-31
            Rocky Linux 9.62025-11-30
            Ubuntu 22.042027-06-30
            Ubuntu 24.042029-06-30
            Windows 20192029-01-09
            Windows 20222031-10-14
            Table. OS images supported by ServiceWatch Agent

            Provides the same as the OS Image provided for Virtual Server. Refer to Virtual Server > OS Image 제공 버전.

            Quick Guide for Using ServiceWatch Agent

            Below, we present a Quick guide for collecting OS metrics and logs of a Virtual Server in a Linux environment.

            Installing and Configuring Node Exporter

            1. Refer to Node Exporter installation and install Node Exporter on the server to collect custom metrics.
              • When you install Node Exporter, you can collect OS metrics through Node Exporter in addition to the metrics provided by ServiceWatch’s default monitoring.
            2. Refer to ServiceWatch Agent 설정, then download the ServiceWatch_Agent archive, configure the ServiceWatch Manager, and run it.
              • By referring to the examples/os-metric-min-examples folder in the archive, you can run the ServiceWatch Agent by configuring at least two metrics.
            Caution

            Metric collection through the ServiceWatch Agent is classified as custom metrics and, unlike the default metrics collected from each service, incurs charges, so be careful not to configure unnecessary metric collection. Ensure that only the metrics that need to be collected are collected.

            • Free provision is limited to 10 per account/region.
            Reference
            For detailed information about using the ServiceWatch Agent, refer to How-to guides > Using ServiceWatch Agent.

            ServiceWatch Custom Metrics and Logs API

            You can collect custom metrics and logs using the OpenAPI/CLI provided by ServiceWatch.

            You can deliver custom metric data and custom logs to ServiceWatch via the ServiceWatch OpenAPI/CLI, and view the visualized information in the Console.

            Caution

            Collecting metrics via ServiceWatch OpenAPI/CLI is classified as custom metrics, and unlike the default metrics collected from each service, it incurs charges, so be careful not to configure unnecessary metric collection. Ensure that only the metrics that need to be collected are configured for collection.

            • Free provision is limited to 10 per account/region.

            Create custom metric metadata

            To collect metric data generated from a user’s resources or applications—not the metrics provided by Samsung Cloud Platform services (e.g., Virtual Server, etc.)—into ServiceWatch, you must create custom metric metadata.

            Parameterdescription
            namespaceUsers can define a namespace in ServiceWatch that distinguishes it from other metrics.
            • The namespace must be 3 to 128 characters long, consisting of letters, numbers, spaces, and special characters (_-/), and must start with a letter.
            metricMetas > metricNameSet the name of the metric to be collected. The metric name must be 3 to 128 characters, consisting of letters, numbers, and special characters (_), and must start with a letter.
            • Example: custom_cpu_seconds_total
            metricMetas > storageResolutionSet the collection interval for the relevant metric. The default is 60 (1 minute), and it can be set in seconds.
            metricMetas > unitMetric unit can be set
            • Example: Bytes, Count, etc.
            metricMetas > dimensionsYou can set dimensions to identify custom metric data and visualize it in the Console. When visualizing the collected metrics in the Console, they are displayed in combinations based on the dimension (dimensions) settings.
            metricMetas > descriptionKoKorean description of the metrics being collected
            metricMetas > descriptionEnEnglish description of the metrics being collected
            Table. Description of custom metric metadata parameters

            For detailed information on creating custom metric metadata, see CreateCustomMetricMetas.

            Create custom metric

            After generating custom metric metadata, you can send the resulting metric data to ServiceWatch using the CreateCustomMetrics API.

            The transmitted metric data can be queried, organized by the configured namespace.

            For detailed information on generating custom metric data, see CreateCustomMetrics.

            Metric Data Query

            Metric data, including custom metrics, can be retrieved using the Console and the ListMetricInfos API.

            For detailed information on retrieving metric data, see ListMetricInfos and ListMetricData.

            Create log stream

            A ServiceWatch log group is required for custom log collection. Log groups can only be created in the Console. After creating a log group in advance, you can use the log stream creation API to create a log stream that will be delivered to ServiceWatch.

            For detailed information on creating a log stream, see CreateCustomLogStream.

            Log Event Creation

            To collect custom logs, after creating a log group and log stream, we use the log event creation API to deliver individual log messages (log events) to ServiceWatch.

            For detailed information on creating log events, refer to CreateCustomLogEvents.

            11.2 - How-to guides

            Users can monitor resources created on the Samsung Cloud Platform through ServiceWatch.

            Using the Dashboard

            You can monitor resources on the ServiceWatch dashboard detail screen.

            information
            • To use the dashboard, you must first create a dashboard and register monitoring metrics as widgets.
            • Please refer to Creating a Dashboard for detailed information on dashboard creation.

            To monitor resources with the dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Navigate to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. 2. Navigate to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard for the resource you want to monitor. 3. Navigate to the Dashboard Details page.
            4. Dashboard Details page, select the monitoring period and time zone, then monitor resources using the widget.
              CategoryDetailed description
              Dashboard nameDashboard name
              • click to select another dashboard
              Period setting areaPeriod selection applied to widgets in the dashboard
              • Metric queries can be set from now up to a maximum of 455 days
              Time Zone Settings SectionSelect the time zone applied to the period setting
              Reset buttonReset all actions and settings made on the dashboard detail screen.
              Refresh Settings AreaSelect refresh interval for widget information
              • Refresh button displays information anew based on the current time
              • Click the refresh interval to select the desired period: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
              EditEdit dashboard information
              • When the Edit button is clicked, navigate to the Dashboard Edit page
              MoreDisplay additional tasks for managing the dashboard
              Alert StatusShow the number of active alerts linked to recommended metrics on the service dashboard, displayed by stage
              • When the View All Alert Policies button is clicked, navigate to the Alert Policy List page
              • When the Expand button is clicked, the content is provided as widgets (up to 12)
                • View Alert Policy: navigate to the Alert Policy Details page for the corresponding metric
              Dashboard statusDisplay metric widgets for monitoring each resource
              • Click the Widget Expand View button to view detailed information about the metric
              • Click the More button to manage widgets
              • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data for that point
              • You can drag the mouse to zoom in on a specific area of the graph
              • Clicking a resource name shown in the legend displays detailed information about that resource in a popup
              Table. Dashboard detailed items
            Reference
            • Click the More > View Metrics button at the top right of the widget to view metric information for that widget on the Metrics page.
            • For detailed information about the Metric page, please refer to Metric View.

            Setting dashboard favorites

            You can bookmark frequently used dashboards and easily navigate to the dashboard from the ServiceWatch Service Home page. To bookmark the dashboard, follow these steps.

            1. All Services > Management > ServiceWatch menu, click. 1. Go to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. 2. Navigate to the Dashboard List page.
            3. Dashboard List page, check the favorite icon of the dashboard you want to bookmark. Click the dashboard to view its details. 3. Navigate to the Dashboard Details page.
              • Bookmarked dashboards are added to the bottom of the Dashboard > Dashboard Favorites menu and the Dashboard Favorites section on the Service Home page.

            Widget Details

            You can enlarge widgets within the dashboard to view them individually. To enlarge and view an individual widget, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Go to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. 2. Navigate to the Dashboard List page.
            3. Dashboard List page, click the dashboard for the resource you want to monitor. 3. Navigate to the Dashboard Details page.
            4. On the Dashboard Details page, click the Widget Zoom button for the widget you wish to enlarge. 4. The Metric Details popup opens for this widget.
              CategoryDetailed description
              Widget nameDisplay widget name
              Period setting areaPeriod selection applied to the widget
              • Metric lookup can be set from now up to a maximum of 455 days
              Time Zone Settings SectionSelect the time zone applied to the period setting
              Reset buttonReset all actions and settings made on the dashboard detail screen.
              StatisticsSelect statistical basis for the metric displayed in the widget
              • Click the statistical basis to select: average, minimum, maximum, sum
              Aggregation Period Setting AreaSelect aggregation period for widget information
              • Click the aggregation period to choose the desired interval: 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
              Refresh Settings AreaSelect refresh interval for widget information
              • Refresh button displays information anew based on the current time
              • Click the refresh interval to select the desired period: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
              Chart areaDisplay monitoring results as a chart
              • When the mouse cursor is placed over the graph or legend area, a popup shows the time, data value, and metric data for that point
              • You can drag the graph area to zoom into the selected region
              • Clicking a resource name displayed in the legend opens a popup with the alarm status for that resource
              Table. Detailed indicator items

            Check alarm history

            You can view the alert history for metrics registered on the ServiceWatch dashboard. To view the alarm history, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Service Home Go to the page.
            2. On the Service Home page, click the Alarm > Alarm History menu. 2. Go to the Alarm History page.
            3. Check the alarm history on the Alarm History page.
              CategoryDetailed description
              Alert filter and search areaFilter or search alarm history
              • All alarm statuses: Filter by selecting an alarm status
              • Enter the alarm policy name in the search field to search
              • Advanced search: Search by entering the alarm policy name, alarm status, or change timestamp
              Alert Policy NameAlert policy name
              • Click the alert policy name to view detailed information of that alert policy
              ConditionAlarm trigger conditions and total occurrence time
              • Stage display according to severity: High, Middle, Low
              CategoryDistinguish alarm creation and alarm status change information
              Alarm statusCurrent alert status
              • Normal: when the metric does not meet the configured condition
              • Insulfficient data: when the metric data cannot be retrieved (missing, nonexistent, not arrived)
              • Alert: when the metric meets the configured condition
              Alert levelWhen the alarm status is Alert, display the alarm level
              • High, Middle, Low
              Table. Alarm History Items
            Reference
            • You can view the recent alarm status through Copilot.
              • ‘Alarm name’ or ‘ID’ alarm query: You can view the alarm status widget for the past 3 hours. * When you click the Alert Policy Shortcut button, you will be taken to the detail page of that alert policy.
              • ‘Show recent alerts’: You can view up to 5 of the most recent alerts. * Click the Alert Policy List Shortcut button to go to the alert policy list page.
            • You can create and manage new alert policies. * For detailed information about the alert policy, please refer to View alert policy.

            Monitoring Metrics

            You can view and monitor the metrics available in ServiceWatch.

            Compare by indicator

            You can select one or multiple metrics and resources to monitor. To compare and monitor by metric, follow these steps.

            1. All Services > Management > ServiceWatch menu, click. 1. Navigate to the Service Home page.

            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.

            3. On the Metrics page, in metric view mode, click Metric Comparison.

            4. Select the metric to monitor from the metric list on the Metric page. 4. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.

              CategoryDetailed description
              Indicator List AreaList of metrics that can be monitored in ServiceWatch
              • Click the + button in front of the namespace or dimension to view the sub-level list
              • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
              Search filter areaAfter setting the search items to filter, click the Apply Filter button to filter the metric list
              • Namespace-Dimension Name: Search based on the sub-dimension names of the selected namespace
              • Metric Name: Search by entering the exact metric name
              • Resource Name: Search by entering the exact resource name
              • Resource ID: Search by entering the exact resource ID
              • Keyword: Search based on the selected top-level category and the entered keyword
                • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
              • Tag Key: Search using the selected tag key
              Table. Indicator list items

            5. Check the monitoring chart in the Selected metric area.

              CategoryDetailed description
              Period setting areaSelect the period applied to the chart
              • Indicator lookup can be set from now up to a maximum of 455 days
              Time Zone Settings AreaSelect the time zone applied to the chart
              Reset buttonReset all modifications and settings made on the chart
              Refresh Settings AreaSelect chart refresh interval
              • Refresh button displays information anew based on the current time
              • Click the refresh interval to select the desired interval: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
              MoreDisplay additional tasks for managing charts
              graph areaData graph collected during the period applied to the chart
              • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data information for that point
              • You can drag the mouse to zoom in on a specific area of the graph
              • Clicking a label name displayed in the legend shows detailed information about that legend in a popup
              Table areaView and edit labels, statistics, and aggregation periods for each legend
              • Legend: Color per legend
                • Click a legend color to change it to another color
              • Label: Displays the namespace, resource name, and metric name of the selected metric
                • Click the legend name to edit it
                • Enter using letters, numbers, and special characters, between 3 and 255 characters
              • Statistics: Choose how to aggregate metric data
                • Select from Average (default), Minimum, Maximum, Sum
              • Aggregation period: Choose the time unit for aggregating metric values
                • Select from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
              • More: Delete a legend or create an alert policy for the legend
              Table. Indicator comparison monitoring chart items
              Reference
              • The statistical method is as follows.
                • Total: sum of all data point values collected during the period
                • Average: the value obtained by dividing the sum over the specified period by the number of data pointers during that period.
                • Minimum: the lowest value observed during the specified period
                • Maximum: the highest value observed during the specified period
              • For a detailed description of the metric, refer to Metric Overview.

            Compare by Date

            You can monitor by comparing a metric and a resource across dates or time periods. To compare and monitor by date or period, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. 1. Navigate to the Service Home page.

            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.

            3. On the Metrics page, in view mode, click Date Comparison.

            4. Select the metric to monitor from the metric list on the Metric page. 4. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.

              CategoryDetailed description
              Indicator List AreaList of metrics that can be monitored in ServiceWatch
              • Click the + button in front of the namespace or dimension to view the sub-level list
              • When you select a metric to monitor, it is displayed as a chart in the selected metric area
              Search filter areaAfter setting the search items to filter, click the Apply Filter button to filter the metric list
              • Namespace-Dimension Name: Search based on the sub-dimension names of the selected namespace
              • Metric Name: Search by entering the exact metric name
              • Resource Name: Search by entering the exact resource name
              • Resource ID: Search by entering the exact resource ID
              • Keyword: Search based on the selected top-level category and the entered keyword
                • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
              • Tag Key: Search using the selected tag key
              Table. Indicator list items

            5. Check the monitoring chart in the selected metric area.

              CategoryDetailed description
              Date comparison / period comparisonSelect criteria for comparing indicators
              • Date comparison: Compare by selecting a specific date
              • Period comparison: Compare by selecting a specific period
              Date and period setting areaSelect date or period to compare
              • Date comparison: Select the date to view on the chart
              • Period comparison: Select the period to view on the chart
              • You can select up to four dates or periods within a maximum of 455 days from today
              Time Zone Settings SectionSelect the time zone applied to the chart
              Reset buttonReset all manipulations and settings made on the chart
              Refresh Settings AreaSelect chart refresh interval
              • Refresh button updates the information based on the current time
              • Click the refresh interval to select the desired interval: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
              MoreDisplay additional tasks for managing charts
              graph areaData graph collected during the period applied to the chart
              • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data information for that point
              • You can drag the mouse to zoom in on a specific area of the graph
              • Clicking the date or period shown in the legend displays detailed information about that legend in a popup
              Table areaView and edit labels, statistics, and aggregation periods for each legend
              • Legend: Color per legend
                • Click a legend color to change it to another color
              • Period: Period applied to the chart
              • Metric: Displays the namespace, resource name, and metric name of the selected metric
              • Statistics: Choose how to aggregate metric data
                • Average(default), Minimum, Maximum, Sum can be selected.
                • Refer to the green icon displayed to the right of a meaningful metric in the relevant metric
              • Aggregation Period: Select the aggregation period unit for metric values
                • 1 minute, 5 minutes(default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day can be selected
              • More: Delete a legend or create an alert policy for a legend
              Table. Date comparison monitoring chart items
              Reference
              • The statistical method is as follows.
                • Total: sum of all data point values collected during the period
                • Average: the value obtained by dividing the sum over the specified period by the number of data pointers during that period
                • Minimum: the lowest value observed during the specified period
                • Maximum: the highest value observed during the specified period
              • For detailed explanations of the metrics, refer to the Metric Overview.

            Log Monitoring

            You can monitor logs collected from the Samsung Cloud Platform service.

            information
            To view log monitoring data, you must first create a log group and log stream. For detailed information about log groups, please refer to Log Monitoring.

            To view the log monitoring data, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Navigate to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. 2. Navigate to the Log Group List page.
            3. On the Log Group List page, click the log group name to view its details. 3. Navigate to the Log Group Details page.
            4. On the Log Group Details page, click the Log Stream tab. 4. Log Stream list is displayed.
            5. log stream Click the log stream name in the list to view detailed information. 5. Navigate to the Log Stream Details page.
              • Click the All Log Streams View button at the top of the log stream list to go to the All Log Streams Details page.
                CategoryDetailed description
                Excel downloadLog stream history can be downloaded as an Excel file
                Timestamp listMessage list by timestamp
                • Select period, user time zone, can filter using message input
                Table. Log group details - Log stream detail items

            Receive event notifications

            You can create a system event rule for changes to resources generated in Samsung Cloud Platform and receive them as notifications.

            guide
            To receive event notifications, you must first create an event rule. For detailed information on creating event rules, see Create Event Rule.

            Installing ServiceWatch Agent

            You can install the ServiceWatch Agent to collect custom metrics and logs from the monitoring target.

            Caution
            Collecting metrics through the ServiceWatch Agent is classified as custom metrics, and unlike the default metrics collected from each service, it incurs charges, so you should be careful not to configure unnecessary metric collection. Make sure to configure it so that only the metrics that need to be collected are collected.

            To install the ServiceWatch Agent, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Navigate to the Service Home page.
            2. On the Service Home page, click the Agent Setup & Guideline button. 2. Agent Setup & Guideline A popup window opens.
            3. Agent Setup & Guideline Copy the installation file URL from the popup window and go to that address. 3. Agent, manager, and configuration files can be downloaded.
            Reference
            Collecting custom metrics and logs via the ServiceWatch Agent is currently available only on Samsung Cloud Platform For Enterprise. It will also be available in other offerings in the future.

            11.2.1 - Managing Dashboards and Widgets

            In the Samsung Cloud Platform Console, you can create and manage dashboards to monitor the resources of the services you are using.

            Create Dashboard

            You can create a ServiceWatch dashboard.

            Creating a dashboard by adding individual widgets

            To create a dashboard, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. You will be taken to the Service Home page.

            2. Click the Dashboard > Dashboard List menu on the Service Home page. You will be taken to the Dashboard List page.

            3. On the Dashboard List page, click the Create Dashboard button.

            4. Please enter the dashboard name.

              • Enter the dashboard name using English letters, numbers, and special characters (-_) within 3 ~ 40 characters.
              • You cannot enter a name that is already in use on the service dashboard.
            5. Add a widget to configure the dashboard. A popup window appropriate to the widget addition method will open.

              • Add Individual Widget: You can add a single widget that combines metrics and resources. Clicking the button opens the Add Individual Widget popup.
                Category
                Required status
                Detailed description
                Indicator classificationSelectionIn ServiceWatch, filter the monitorable metrics as All or Key Metrics and display them in the metric list
                Indicator List AreaRequiredList of metrics that can be monitored in ServiceWatch
                • Click the + button in front of the namespace and dimension to view the sub-level list
                • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
                Search filter area-After setting the search items to filter, click the Apply Filter button to filter the metric list
                • Namespace-Dimension Name: Search based on the sub-dimension names of the selected namespace
                • Metric Name: Enter the exact metric name to search
                • Resource Name: Enter the exact resource name to search
                • Resource ID: Enter the exact resource ID to search
                • Keyword: Search based on the selected top-level category and the entered keyword
                  • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
                • Tag Key: Search using the selected tag key
                Selected metric area-Monitoring chart for the selected metric in the metric list area
                • Data graph collected during the period applied to the chart
                  • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data information for that point
                  • You can drag the mouse to zoom in on a specific area of the graph
                  • Clicking the resource name shown in the legend displays detailed information about that resource in a popup
                • Item values in the table area within the chart can be edited
                  • Label: Enter the legend name using English letters, numbers, or special characters, between 3 ~ 255 characters
                  • Statistics: Choose the method for aggregating metric data
                    • Options: average (default), minimum, maximum, sum
                  • Aggregation period: Select the aggregation period unit for metric values
                    • Options: 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours
                  • Delete: Remove the legend
                Table. Individual widget additional items
            6. Click the Complete button in the widget addition popup. The widget will be added to the dashboard on the dashboard creation page.

            7. After confirming the added widget, click the Create button. A popup indicating dashboard creation will appear.

            8. Click the Confirm button. Dashboard creation is complete.

            Creating a dashboard by adding multiple widgets

            To create a dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

            3. On the Dashboard List page, click the Create Dashboard button.

            4. Enter the name of the dashboard.

              • Enter the dashboard name using English letters, numbers, and special characters (-_) within 3 ~ 40 characters.
              • You cannot enter a name that is already in use on the service dashboard.
            5. Add a widget to configure the dashboard. A corresponding popup window will open according to the widget addition method.

              • Add Multiple Widgets: Select the desired resources by metric unit and add multiple widgets at once. Clicking the button opens the Add Multiple Widgets popup window.
                Category
                Required or not
                Detailed description
                Indicator classificationSelectIn ServiceWatch, filter the monitorable metrics as All or Key Metrics and display them in the metric list
                Indicator selection areaRequiredSelect the namespace and resources to add
                • Click the + button in front of the namespace and resources to view the list of sub-resources and metrics
                • When you check the metrics to add to the widget from the metric list, the Selected Metrics and Selected Resources sections are displayed
                • Multiple metrics can be selected
                Selection indicatorRequiredDisplay the list of selected metrics from the namespace and resource list
                • When a metric is clicked, the Selected Resources area shows the list of resources included in that metric
                Selected resourceRequiredSelected Indicator list, add resources to the selected indicator
                • After clicking the Select button, choose resources that can be added to the indicator, allowing up to five additions
                • Resources must be added for all indicators in the Selected Indicator list
                StatisticsRequiredSelect the statistical basis for the indicator value
                • You can choose from average (default), minimum, maximum, or sum
                Aggregation periodRequiredSelect the aggregation period unit for metric values
                • Choose from 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, or 12 hours
                Table: Additional items for multiple widgets
            6. Click the Complete button on the widget addition popup. The widget will be added to the dashboard on the dashboard creation page.

            7. After confirming the added widget, click the Create button. A popup indicating dashboard creation will appear.

            8. Click the Confirm button. The dashboard has been created.

            Create a dashboard by loading a dashboard

            To create a dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. Click the Dashboard > Dashboard List menu on the Service Home page. You will be taken to the Dashboard List page.

            3. On the Dashboard List page, click the Create Dashboard button.

            4. Enter the name of the dashboard.

              • Enter the dashboard name using English letters, numbers, and special characters (-_) within 3 ~ 40 characters.
              • You cannot enter a name that is already in use on the service dashboard.
            5. Add a widget to configure the dashboard. A corresponding popup window will open according to the widget addition method.

              • Dashboard Load: You can load widgets from dashboards registered in ServiceWatch. When you click the button, the Dashboard Load popup opens.
                Category
                Required
                Detailed description
                DashboardRequiredDisplay the list of dashboards registered in ServiceWatch
                • When a dashboard is selected, the widgets applied to the dashboard are displayed in the preview area
                PreviewRequiredDisplay widgets applied to the selected dashboard from the dashboard list
                • Check the widget name to select widgets to add to the dashboard to be created
                • If you check the Select All item, all metrics of that dashboard are selected
                Table. Load Dashboard Items
            6. Click the Complete button in the widget addition popup. The widget will be added to the dashboard on the dashboard creation page.

            7. After confirming the added widget, click the Create button. A popup indicating dashboard creation will open.

            8. Click the Confirm button. Dashboard creation is complete.

            Check the dashboard

            You can view the information of the selected dashboard on the Dashboard List page. To view the dashboard, follow the steps below.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
              CategoryDetailed description
              Dashboard nameDashboard name
              • User dashboards are the dashboard names set by the user. Service dashboards are the Samsung Cloud Platform service name that matches the service namespace
              Dashboard CategoryDashboard classification
              • User: Dashboard created directly by the user
              • Service: Dashboard automatically composed of pre-built key metrics for each service
              Modification date and timeDashboard modification timestamp
              Creation date and timeDashboard creation date and time
              FavoritesIf bookmarked, it is displayed in yellow
              • Click the star icon to set or remove a bookmark
              Table. Dashboard list items
            3. On the Dashboard List page, click the dashboard whose details you want to view. You will be taken to the Dashboard Detail page.
              CategoryDetailed description
              Dashboard nameDisplay the dashboard name
              • Click the name to select another dashboard
              Period setting areaPeriod selection applied to widgets in the dashboard
              • Metric queries can be set from now up to a maximum of 455 days
              Time zone setting areaSelect the time zone applied to the period setting
              Reset buttonReset all actions and settings made on the dashboard detail screen
              Refresh Settings AreaSelect refresh interval for widget information
              • Refresh button updates the information based on the current time
              • Click the refresh interval to choose the desired period: Off, 10 seconds, 1 minute, 2 minutes, 5 minutes, 15 minutes
              EditYou can edit the dashboard name or manage widgets
              • When you click the Edit button, you are taken to the Dashboard Edit page
              MoreDisplay additional tasks for managing the dashboard
              • Dashboard duplication and deletion, view details, view source are possible
              Widget areaDisplay widgets for monitoring each resource
              • You can manage the widget by clicking the More button at the top right of the widget
              • You can edit, duplicate, download files, view metrics, and view source of the widget
              Table. Dashboard detailed items

            Dashboard Management

            Dashboard Details page allows you to edit or manage dashboard information and widgets.

            Edit Dashboard

            You can modify the dashboard name and change the widget configuration.

            Information
            The service dashboard cannot be edited.

            To modify the dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Click the Dashboard > Dashboard List menu on the Service Home page. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard you want to view details for. You will be taken to the Dashboard Details page.
            4. Click the Edit button at the top right of the Dashboard Details page. You will be taken to the Dashboard Edit page.
            5. After modifying the dashboard’s information or widgets, click the Save button.
              CategoryDetailed description
              Dashboard nameDashboard name cannot be edited
              • Enter within 34 characters using English letters, numbers, and special characters (-_)
              • Dashboard names that are currently in use cannot be used
              Widget NameWidget name can be edited
              • English letters, numbers, spaces, special characters(-_.\
              Widget ManagementWhen you hover the mouse over a widget, a management button appears on the right side of the widget border
              • Edit: Widget Edit popup allows you to modify the widget’s metrics and resources
              • Duplicate: Duplicate the current widget and add it to the dashboard
              • Delete: Remove the current widget from the dashboard
              • Expand: Display the current widget with an expanded size
                • Collapse: If the widget is expanded, clicking again reduces its size
              Add widgetAdd a new widget to the dashboard
              • Add individual widget: Add a single widget that combines metrics and resources
              • Add multiple widgets: Select desired resources per metric to add multiple widgets at once
              • Load dashboard: Load and add widgets from another dashboard
              Table. Dashboard edit items

            View detailed dashboard information

            You can view detailed information about the dashboard. To view detailed information of the dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Click the Dashboard > Dashboard List menu on the Service Home page. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard you want to view details for. You will be taken to the Dashboard Details page.
            4. Dashboard Details page’s top right corner has a More > Details button. Click the button. The Dashboard Details popup opens.
              CategoryDetailed description
              Dashboard nameDashboard name
              Dashboard CategoryDashboard usage classification
              • User: dashboard created directly by the user
              • Service: dashboard composed of automatically pre-built key metrics for each service
              Serviceservice name
              Resource Typedashboard
              SRNUnique resource ID in Samsung Cloud Platform
              • In ServiceWatch, it refers to the dashboard’s SRN
              Resource nameResource Name
              • In ServiceWatch, the meaning of the dashboard name
              Resource IDUnique resource ID in the service
              ConstructorUser who created the dashboard
              Creation date and timeDashboard creation date and time
              EditorUser who edited the dashboard information
              Modification date and timeDashboard information modification timestamp
              Table. Dashboard Details - Detail Information Popup Items
            Reference

            When sorting dashboard names in the dashboard list, follow the sorting rules below.

            1. Whitespace and control characters
            2. Some special characters ( !"#$%&()*+,-./ )
            3. Numbers (0–9)
            4. Some special characters ( ; < = > ? @ )
            5. English (A–Z, a–z, case-insensitive)
            6. Remaining special characters ([\]^_`)
            7. Other characters

            Check the dashboard source code

            You can view the dashboard’s source code. To view the source code of the dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Click the Dashboard > Dashboard List menu on the Service Home page. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard you want to view details for. You will be taken to the Dashboard Details page.
            4. Dashboard Details on the top right of the page, click the More > View Source button. The Dashboard View Source popup opens.
              CategoryDetailed description
              Source informationDisplay the dashboard source code in JSON format
              Copy codeCopy the source code to the clipboard
              Table. Dashboard Details - Dashboard Source View Popup Items

            Duplicate Dashboard

            You can duplicate a widget from the current dashboard and add it to another dashboard.

            Information

            User permission is required to duplicate the dashboard.

            • User: {email}
            • Action: iam:CreatGroup
            • On resource: {SRN}
            • Context: no identity-based policy allows the action

            To duplicate the dashboard, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. You will be taken to the Service Home page.

            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

            3. On the Dashboard List page, click the dashboard you want to view details for. You will be taken to the Dashboard Details page.

            4. Click the More > Duplicate button at the top right of the Dashboard Details page. The Dashboard Duplicate popup opens.

            5. After selecting the dashboard duplication method, enter the required information. The required information varies depending on the duplication method.

              Category
              Required
              Detailed description
              Replication target-Name of the dashboard to duplicate
              Cloning methodRequiredAfter duplicating the dashboard widget, select the dashboard to add it to
              • New Dashboard: Create a new dashboard and generate it by duplicating the current dashboard’s widget
              • Existing Dashboard: Duplicate the current dashboard’s widget and add it to an existing dashboard
              Dashboard nameRequiredEnter the name of the new dashboard
              • Displayed when the duplication method is set to New Dashboard
              • Enter using English letters, numbers, and special characters (-_) within 3 to 40 characters
              Select DashboardRequiredSelect the dashboard to which the duplicated widget will be added from the existing dashboards
              • Displayed when the duplication method is selected as Existing dashboard
              Table. Dashboard clone items

            6. After entering the required information, click the Complete button. A popup notifying that the dashboard is being duplicated will appear.

            7. Click the Confirm button on the popup window. The dashboard duplication task is complete.

            Reference
            You can duplicate a service dashboard to add widgets to a user dashboard, or create a new dashboard.

            Delete dashboard

            You can delete unused dashboards.

            Information
            The service dashboard cannot be deleted.

            To delete the dashboard, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, select the checkbox of the dashboard you want to delete, then click the Delete button. A popup confirming the dashboard deletion will appear.
              • You can delete multiple dashboards simultaneously.
              • You can also delete individually by clicking the More > Delete button located at the top right of the Dashboard Details page.
            4. In the delete confirmation input field, type Delete and then click the Confirm button. The dashboard will be deleted.

            Manage Widgets

            Dashboard Details page lets you edit or manage widgets.

            Edit Widget

            You can modify the widget’s metrics and resources.

            Information
            Widgets on the service dashboard cannot be edited.

            To modify the widget, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard whose widget you want to edit. You will be taken to the Dashboard Details page.
            4. On the Dashboard Details page, click the More > Edit Widget button at the top right of the widget you want to edit. The Edit Widget popup will open.
            5. After modifying the widget’s metrics and resources, click the Confirm button. The widget modification is complete.
              Category
              Required status
              Detailed description
              Indicator classificationSelectIn ServiceWatch, filter the monitorable metrics as All or Key Metrics and display them in the metric list
              Indicator List AreaRequiredList of metrics that can be monitored in ServiceWatch
              • Click the + button in front of the namespace and dimension to view the sub-level list
              • When you select a metric to monitor, it is displayed as a chart in the Selected Metrics area
              Search filter area-After setting the search items to filter, click the Apply Filter button to filter the metric list
              • Namespace-Dimension Name: Search based on the sub-dimension names of the selected namespace
              • Metric Name: Enter the exact metric name to search
              • Resource Name: Enter the exact resource name to search
              • Resource ID: Enter the exact resource ID to search
              • Keyword: Search based on the selected top-level category and the entered keyword
                • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
              • Tag Key: Search using the selected tag key
              Selected metric area-Monitoring chart for the selected metric in the metric list area
              • Data graph collected during the period applied to the chart
                • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data information for that point
                • You can drag the mouse to zoom in on a specific area of the graph
                • Clicking the label name displayed in the legend shows detailed information for that legend in a popup
              • In the table area within the chart, you can view and edit legend labels, statistics, and aggregation periods
                • Legend: color per legend
                  • Click a legend color to change it to another color
                • Period: period applied to the chart
                • Metric: displays the selected metric’s namespace, resource name, and metric name
                • Statistics: select the method for aggregating metric data
                  • Choose among Average (default), Minimum, Maximum, Sum
                • Aggregation period: select the aggregation period unit for metric values
                  • Choose among 1 minute, 5 minutes (default), 15 minutes, 30 minutes, 1 hour, 3 hours, 6 hours, 12 hours, 1 day
                • Delete: remove the legend
              Table. Individual widget additional items

            Widget Replication

            You can copy the widget and add it to another dashboard.

            Information

            User permission is required to duplicate the dashboard.

            • User: {email}
            • Action: iam:CreatGroup
            • On resource: {SRN}
            • Context: no identity-based policy allows the action

            To duplicate a widget, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.

            3. On the Dashboard List page, click the dashboard you want to duplicate. You will be taken to the Dashboard Details page.

            4. On the Dashboard Detail page, click the More > Widget Clone button located at the upper right of the widget to be duplicated. The Widget Clone popup window opens.

            5. After selecting the widget duplication method, enter the required information. The required information varies depending on the duplication method.

              Category
              Whether required
              Detailed description
              Replication target-Name of the dashboard to duplicate
              Cloning methodRequiredAfter duplicating the widget, select the dashboard to add it to
              • Existing Dashboard: Add the widget to an existing dashboard
              • New Dashboard: Create a new dashboard and add the widget
              Select DashboardRequiredSelect the dashboard to which the duplicated widget will be added from the existing dashboards
              • When the duplication method is selected as Existing Dashboard, it is displayed
              Dashboard nameRequiredEnter the name of the new dashboard
              • Displayed when the duplication method is set to New Dashboard
              • Enter using English letters, numbers, and special characters (-_) within 3 to 40 characters
              Widget nameRequiredWhen adding a widget to the dashboard, enter the widget name
              • English letters, numbers, special characters(-_.\
              Table. Widget duplication items

            6. After entering the required information, click the Complete button. A popup window notifying the addition of the widget will open.

            7. Click the Confirm button in the popup window. The widget will be duplicated and added to the dashboard.

            Download widget file

            You can download widget information as a file. To download widget information, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard from which you want to download widget information. You will be taken to the Dashboard Detail page.
            4. Dashboard Details page, click the More > File Download button at the top right of the widget whose information you want to download. The File Download popup window opens.
            5. After selecting the file download method, click the Confirm button. The download will start.
              • Download methods can be selected simultaneously.
                CategoryDetailed description
                CSVConvert the widget’s metrics and monitoring data to an Excel (*.csv) file and download it.
                PNGConvert the widget chart to an image (*.png) file and download
                Table. Widget file download item

            Check widget metrics

            You can view the widget’s resource and metric information on the Metrics page. To view widget metrics on the metrics page, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard you want to view widget metrics for. You will be taken to the Dashboard Details page.
            4. On the Dashboard Detail page, click the More > View Metrics button at the top right of the widget you will view on the Metrics page. You will be taken to the Metrics page.
              • The resources and metric information of the selected widget are automatically configured and displayed on the Metrics page.
            Reference
            For detailed information about the Metric page, please refer to View Metrics.

            Check widget source code

            You can view the source code of the dashboard.

            information
            In the service dashboard, you cannot view the widget’s source information.

            To check the dashboard’s source code, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard you want to view details for. You will be taken to the Dashboard Detail page.
            4. On the Dashboard Details page, click the More > View Source button located at the top right of the widget to view its source code. The Widget Source View popup will open.
              CategoryDetailed description
              Source informationDisplay the widget source code in JSON format
              Copy codeCopy the source code to the clipboard
              Table. Widget source view item

            Download widget file

            You can download widget information as a file. To download widget information, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. Dashboard List page, click the dashboard to download widget information. You will be taken to the Dashboard Detail page.
            4. Dashboard Details page, click the More > File Download button at the top right of the widget whose information you want to download. The File Download popup window opens.
            5. After selecting the file download method, click the Confirm button. The download will start.
              • Download methods can be selected simultaneously.
                CategoryDetailed description
                CSVConvert the widget’s metrics and monitoring data to an Excel (*.csv) file and download it.
                PNGConvert the widget chart to an image (*.png) file and download
                Table. Widget file download item

            Export to Object Storage

            You can store widget information in Object Storage.

            information

            User permissions are required to store data in Object Storage.

            • User: {email}
            • Action: iam:CreatGroup
            • On resource: {SRN}
            • Context: no identity-based policy allows the action

            To store widget information in Object Storage, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Dashboard > Dashboard List menu. You will be taken to the Dashboard List page.
            3. On the Dashboard List page, click the dashboard from which you want to download widget information. You will be taken to the Dashboard Detail page.
            4. On the Dashboard Details page, click the More > Export to Object Storage button located at the top right of the widget whose information you want to download. The Export to Object Storage popup will open.
            5. After selecting the bucket to store widget information, click the Done button. A popup confirming the save will appear.
            6. Click the Confirm button in the popup window. Data export will begin.
            Information
            • The limitations of metrics that can be exported to Object Storage are as follows.
              • Number of indicators: up to 10
              • Query period: within 2 months (63 days)
            • If the query period exceeds 2 months (63 days), only data for up to 63 days will be stored.
            Reference
            • If there is no Object Storage to store metric data, create an Object Storage first, then proceed.
            • Metric data is stored in the “metricname-yyyymmddhhmmss.json” file format and can be accessed in the ~/servicewatch/metric path of the Object Storage bucket.

            11.2.2 - Alert

            In ServiceWatch, you can set threshold criteria for the metrics to be monitored, and create and manage alert policies that generate alert notifications when the specified conditions are met.

            Reference
            The Auto-Scaling Group policy will be integrated with ServiceWatch starting March 25, 2026. The policies of an Auto-Scaling Group are created in conjunction with ServiceWatch alarm policies, and alarm policies linked to an Auto-Scaling Group cannot be modified or deleted in ServiceWatch; they can only be managed through the Auto-Scaling Group.

            Create Alert Policy

            You can create an alert policy for a metric and set the criteria for alert triggering. To create an alert policy, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Alarm > Alarm Policy menu. You will be taken to the Alarm Policy List page.

            3. Click the Create Alert Policy button on the Alert Policy List page. You will be taken to the Create Alert Policy page.

            4. After entering the name and description of the alert policy in the Basic Information Input area, click the Select Metric button. The Select Metric popup window will open.

            5. Metric Selection In the popup window, after selecting the metric for which to create an alert policy, click the Confirm button. The Metric and Condition Settings area will be displayed.

              Category
              Required status
              Detailed description
              Indicator classificationRequiredIn ServiceWatch, filter the monitorable metrics as All or Key Metrics and display them in the metric list
              Indicator List AreaRequiredList of metrics that can be monitored in ServiceWatch
              • Click the **+** button in front of the namespace and dimension to view the sub-level list
              • When you select a metric to monitor, it is displayed as a chart in the **Selected Metric** area
                • If the metric is associated with a namespace, the **Service Dashboard** is displayed
                • Clicking the **Service Dashboard** navigates to the detailed page of that dashboard
              | | Search filter area | - | After setting the search items to filter, click the **Apply Filter** button to filter the metric list
              • **Namespace-Dimension Name**: Search based on the sub-dimension names of the selected namespace
              • **Metric Name**: Enter the exact metric name to search
              • **Resource Name**: Enter the exact resource name to search
              • **Resource ID**: Enter the exact resource ID to search
              • **Keyword**: Search based on the selected top-level category and the entered keyword
                • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
              • **Tag Key**: Search using the selected tag key
              | | Selected metric area | - | Monitoring chart for the selected metric in the metric list area
              • Data graph collected during the period applied to the chart
                • When the mouse cursor is placed on the graph, a popup displays the time, data value, and metric data information for that point
                • You can drag the mouse to zoom in on a specific area of the graph
                • Clicking a label displayed in the legend shows detailed information for that legend in a popup
              • In the table area within the chart, you can view and edit legend labels, statistics, and aggregation periods
                • **Legend**: color for each legend
                  • You can click a legend color to change it to another color
                • **Period**: period applied to the chart
                • **Metric**: displays the selected metric's namespace, resource name, and metric name
                • **Statistics**: select the method for aggregating metric data
                  • Choose among **Average** (default), **Minimum**, **Maximum**, **Sum**
                • **Aggregation Period**: select the aggregation period unit for metric values
                  • Choose among **1 minute**, **5 minutes** (default), **15 minutes**, **30 minutes**, **1 hour**, **3 hours**, **6 hours**, **12 hours**, **1 day**
                • **Delete**: remove the legend
              |
              Table. Indicator selection popup items

            6. Set the threshold values for generating alerts in the Indicator and Condition Settings area.

              Category
              Required status
              Detailed description
              namespace-Namespace of the selected metric
              Indicator name-Name of the selected metric
              unit-Data unit of the selected metric
              Evaluation scopeRequiredTime range (seconds) for alarm evaluation
              • Input allowed up to a maximum of 604,800 seconds in multiples of 60
              • If set smaller than the collection interval or not in a multiple of the collection interval, alarm evaluation may be applied abnormally
              StatisticsRequiredSelect the method for calculating metric data over the evaluation range
              • Sum: The sum of all data point values collected during the period
              • Average: The value obtained by dividing the Sum over the specified period by the number of data points during that period
              • Minimum: The lowest value observed during the specified period
              • Maximum: The highest value observed during the specified period
              Additional configurationSelectSetting evaluation count, violation count, and missing data handling method
              • When the additional configuration is set to Use, you can set the evaluation count and violation count used for alarm evaluation. If the number of violations meets the condition within the evaluation count during the evaluation period (seconds), the alarm state changes to Alert
                • Evaluation Count: Number of evaluations that trigger an alarm
                  • 1 ~ 8,640 enterable range
                • Violation Count: Allowed number of violations before an alarm is triggered
                  • 1 ~ Evaluation Count enterable range
                • If the evaluation period is less than 1 hour (3,600 seconds), evaluation count/evaluation period can be set up to a maximum of 1 day (86,400 seconds)
                • If the evaluation period is 1 hour (3,600 seconds) or more, evaluation count/evaluation period can be set up to a maximum of 7 days (604,800 seconds)
              • When the additional configuration is set to Use, you can specify how to handle missing data during alarm evaluation.
                • Treat missing data as missing (Missing)
                • Ignore missing data and maintain the current alarm state (Ignore)
                • Treat missing data as satisfying the condition (Breaching)
                • Treat missing data as not satisfying the condition (Not breaching)
              Condition settingRequired
              • Condition Operator: After calculating metric data over the evaluation period, select a condition operator to compare the value with the threshold
              • Threshold: After calculating metric data over the evaluation period, set the threshold to compare the value with the condition operator
                • Input allowed from 0 ~ 2,147,483,647
              • Condition: Explanation of alert state (Alert) change conditions based on the configured Condition Operator and Threshold
              Alert levelRequiredSelect alert stage based on the importance of the alert policy
              Resource ID-Metric monitoring target resource ID
              Resource Name-Metric Monitoring Target Resource Name
              Table. Indicator and Condition Setting Items

            7. In the Notification Settings area, select the user who will receive notifications when an alarm occurs.

              • Only users with a login history (users who have registered an email or mobile phone number) can be added as notification recipients.
              • You can add up to 100 notification recipients.
            Reference
            • If there is no user to add, you can create a user on the IAM service’s User Creation page. For detailed information on user creation, refer to Create User.
            • The notification reception method (E-mail or SMS) can be changed on the Alert Settings page after selecting the notification target as Service > Alert. For detailed information about alert settings, refer to 알림 설정 확인하기.
            1. Add tag information in the Additional Information Input area.
            2. After reviewing the summary information, click the Create button. A popup indicating the creation of the alert policy will open.
            3. Click the Confirm button. The alert policy has been created.
            Reference
            Creating an alert policy may take several tens of minutes depending on its scale.

            Check detailed alert policy information

            You can view and manage detailed information about alert policies. To view detailed information about the alert policy, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. Navigate to the Service Home page.
            2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
              • In the Alert Policy menu, you can click the Alert Level button to filter and view only the list of alert policies that correspond to that alert level.
            3. On the Alert Policy List page, click the alert policy name to view its details. You will be taken to the Alert Policy Details page.
              CategoryDetailed description
              Alert policy statusAlert policy status
              • Active: The alert policy is in an active state
              • Inactive: The alert policy is in an inactive state
              • You can change it by clicking the Activate or Deactivate button
              Delete alarm policyDelete the relevant alert policy
              Alarm statusCurrent alert status
              • Normal: when the metric does not meet the configured condition
              • Insulfficient data: when the metric data cannot be verified (missing, nonexistent, not arrived)
              • Alert: when the metric meets the configured condition
              • When the alert status is Alert, display the alert level (>High, Middle, Low) as well
              Metric Monitoring ChartMetric monitoring chart for the configured period
              Information Classification TabAlert policy information tabs
              • Details, notifications, alert history, tags, operation history
              • Click each tab to view the corresponding information
              Table. Alarm detailed items
            Reference

            When sorting alarm policy names in the alarm policy list, follow the sorting rules below.

            1. Whitespace and control characters
            2. Some special characters ( !"#$%&()*+,-./ )
            3. Numbers (0–9)
            4. Some special characters ( ; < = > ? @ )
            5. English (A–Z, a–z, case-insensitive)
            6. Remaining special characters ([\]^_`)
            7. Other characters

            Detailed Information

            On the Alert Policy List page, you can view the selected alert policy’s basic information and metric information.

            CategoryDetailed description
            Serviceservice name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            • In ServiceWatch, it refers to the SRN of the resource type
            Resource NameResource name
            • In ServiceWatch, it refers to the name of the alert policy
            Resource IDUnique resource ID in the service
            ConstructorUser who created the service
            Creation dateService creation timestamp
            EditorUser who edited the service information
            Modification date and timeDate and time the service information was modified
            Alert Policy NameName of the alert policy
            NamespaceMetric namespace
            Indicator NameIndicator name
            Evaluation scopeTime range for alert evaluation
            unitUnit of indicator data
            Evaluation countAlert policy evaluation count
            Number of violationsNumber of alert policy violations
            StatisticsMethod of calculating metric data during the evaluation period
            evaluation intervalEvaluation interval: evaluation range (unit) × number of evaluations
            ConditionAlert state change condition based on the configured condition operator and threshold
            Alert levelAlert level when an alert occurs
            Target metric information areaDescription of the alert policy target metric, resource ID, and resource name
            Table. Alert Policy Details – Details Tab Items

            Notification

            On the Alert Policy List page, you can view the notification recipients of the selected alert policy.

            CategoryDetailed description
            Notification recipient listUser ID, creation date and time, last login, status information
            • More button to click to change the notification status (enabled/disabled) for the user or delete the user
            DeleteDelete all selected users from the notification recipient list
            • Enabled when you check the users to delete from the notification recipient list
            MoreChange the notification status (enable/disable) for the selected user in the notification recipient list
            • When you check the user whose status you want to change in the notification recipient list, it becomes enabled
            Add notification recipientAdd new notification recipient possible
            • Add Notification Recipient Select users to add in the popup window
            Table. Alarm Policy Details - Notification Tab Items
            Reference
            • Only users with a login history (users who have registered an email or mobile phone number) can be added as notification recipients.
            • You can add up to 100 notification recipients.
            • If there is no user to add, you can create a user on the IAM service’s User Creation page. For detailed information on creating users, see Create User.
            • The notification delivery method (E-mail or SMS) can be changed on the Notification Settings page after selecting the notification target as Service > Alert. For more details on notification settings, see Check Notification Settings.
            Reference
            You cannot add notification recipients to alarm policies associated with an Auto-Scaling Group.

            Alert History

            Alarm Policy List page lets you view the alarm status change history of the selected alarm policy.

            CategoryDetailed description
            Alert History ListAlarm status change timestamp, change status classification information, alarm description
            • Click View Details to view the detailed information of the alarm history and the source code in JSON format
            View DetailsYou can view detailed alarm history information and the source code in JSON format
            • Enabled only when one alarm is selected from the alarm history list to view its details
            Table. Alert Policy Details - Alert History Tab Items

            tag

            Alert Policy List page lets you view the tag information of the selected alert policy, and you can add, modify, or delete it.

            CategoryDetailed description
            Tag listTag’s Key and Value information
            Edit tagYou can modify, delete, or add new tags to existing tag information
            • Up to 50 tags can be added per resource
            • When adding a tag, entering a Key and Value allows you to select from the list of previously created tag Keys and Values
            Table. Alert Policy Details - Tag Tab Items

            Job History

            You can view the operation history of the selected alert policy on the Alert Policy List page.

            CategoryDetailed description
            Task History ListResource Change History
            • You can view task details, task date and time, resource type, resource name, task result, and operator information
              • Click the Settings button to modify information fields
            • Filtering is possible using Period Selection, User Time Zone, entering operator information, and Advanced Search
            • Click a task entry in the Task History List to navigate to the Task Activity Details page for that task
            Table. Alert Policy Details - Work History Tab Items

            Modify Alert Policy

            You can modify the target metrics and policy settings of the alert policy. To modify the alert policy, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Alert > Alert Policy menu. It navigates to the Alert Policy List page.
            3. On the Alert Policy List page, click the alert policy name to view detailed information. You will be taken to the Alert Policy Details page.
            4. On the Detail Information tab of the Alert Policy Details page, click the Edit button of Metric Information. The Edit Metric Information popup opens.
            5. After modifying the metric information and policy settings, click the Confirm button. A popup notifying the metric modification will open.
            6. Click the Confirm button. The alert policy update is complete.
            Reference
            Alarm policies associated with an Auto-Scaling Group can be modified through the Auto-Scaling Group.

            Disable Alert Policy

            You can disable the alert policy to stop sending notifications when the alert status changes. Even if the alert policy is disabled, alert evaluation continues, and alert history accumulates as the alert status changes. However, notifications are not sent.

            If you want to block receiving notifications for a specific period, you can disable the corresponding alert policy.

            To disable the alert policy, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
            3. On the Alert Policy Details page, click the Disable button. The Alert Policy Deactivation Notification popup opens.
            4. Click the Confirm button. Check the status of the alert policy.
            Reference
            Alert policies associated with an Auto-Scaling Group cannot be enabled or disabled.

            Activate Alert Policy

            You can enable the alert policy to resume sending notifications when the alert status changes. To enable the alert policy, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
            3. On the Alert Policy Details page, click the Enable button. The Alert Policy Activation Notification popup window opens.
            4. Click the Confirm button. Check the status of the alert policy.
            Reference
            Alarm policies associated with an Auto-Scaling Group cannot be enabled or disabled.

            Delete Alert Policy

            You can delete unused alert policies. To delete an alert policy, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. You will be taken to the Service Home page.
            2. On the Service Home page, click the Alert > Alert Policy menu. You will be taken to the Alert Policy List page.
            3. On the Alert Policy List page, select the checkbox of the alert policy you want to delete, then click the Delete button. A popup notifying the alert policy deletion will appear.
              • You can delete multiple alert policies at once.
              • You can also delete individually by clicking the Delete button at the far right of each alert policy, or by clicking the Delete Alert Policy button on the corresponding Alert Policy Details page.
            4. Click the Confirm button. The alert policy will be deleted.
            Reference
            Alarm policies associated with an Auto-Scaling Group can be deleted through the Auto-Scaling Group.
            Reference
            Deleting an alarm policy can take several tens of minutes, depending on its scale.

            11.2.3 - indicator

            Users can monitor metrics of service resources in the Samsung Cloud Platform Console and use them for management.

            Check Indicators

            You can view the metrics available in ServiceWatch. To check the indicator, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. 1. Go to the Service Home page.
            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.
            3. Check the metrics in the metric list on the Metrics page.
            CategoryDetailed description
            Indicator Comparison ModeSelect the method for comparing indicators
            • Indicator Comparison: Select multiple indicators and resources to compare within a specific date or period
            • Date Comparison: Select a single indicator and resource to compare for a specific date or period
            • Only one indicator can be selected
            Indicator classificationDisplay the metrics that can be monitored in ServiceWatch, filtered and categorized as All or Key Metrics, in the metric list
            Indicator List AreaList of metrics that can be monitored in ServiceWatch
            • Click the + button in front of the namespace or dimension to view the sub-level list
            • Select a metric to monitor
            • If the metric is associated with a namespace, Service Dashboard is displayed
              • Click Service Dashboard to navigate to the detailed page of that dashboard
            Search filter areaAfter setting the search items to filter, click the Apply Filter button to filter the metric list
            • Namespace-Dimension Name: Search based on the sub-dimension names of the selected namespace
            • Metric Name: Enter the exact metric name to search
            • Resource Name: Enter the exact resource name to search
            • Resource ID: Enter the exact resource ID to search
            • Keyword: Search based on the selected top-level category and the entered keyword
              • Proceed with item-specific searches excluding metric name, resource name, resource ID, and tag key
            • Tag Key: Search using the selected tag key
            Selected indicatorDisplay monitoring information for the selected metric from the metric list
            Table. Indicator list items

            Manage Indicator Charts

            You can add the metric monitoring result chart as a widget or manage the data.

            Add as widget

            You can add the selected metric as a widget to the dashboard.

            information
            You can add it as a widget only when you select the Metric Comparison mode.

            To add a metric as a widget, follow these steps.

            1. All Services > Management > ServiceWatch Click the menu. 1. Go to the Service Home page.

            2. On the Service Home page, click the Metrics menu. 2. Navigate to the Indicator page.

            3. Select the metric to monitor from the metric list on the Metric page. 3. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.

            4. After configuring the table area in the monitoring chart of the Selected metric region, click the More > Add widget button. 4. Add Widget The popup window opens.

            5. After selecting the method to add the widget, enter the required information. 5. The required information varies depending on the addition method.

              Category
              Required status
              Detailed description
              Replication MethodRequiredAfter duplicating the widget, select the dashboard to add it to
              • Existing Dashboard: Add the widget to the existing dashboard
              • New Dashboard: Create a new dashboard and add the widget
              Select DashboardRequiredSelect the dashboard to which the duplicated widget will be added among the existing dashboards
              • Displayed when the duplication method is selected as Existing Dashboard
              Dashboard nameRequiredEnter the name of the new dashboard
              • Displayed when selecting the duplication method as New Dashboard
              • Enter using English letters, numbers, and special characters (-_) within 3 ~ 40 characters
              Widget nameRequiredWhen adding a widget to the dashboard, enter
              • English letters, numbers, special characters(-_.\
              Table. Widget additional items

            6. When you have finished entering the required information, click the Complete button. 6. A popup window notifying the addition of a widget opens.

            7. Click the Confirm button on the popup window. 7. A widget will be added to the dashboard.

            Share monitoring chart URL

            You can download monitoring chart information as a file. To download the monitoring chart information, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Navigate to the Service Home page.
            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.
            3. Select the metric to monitor from the metric list on the Metrics page. 3. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
            4. After setting the table area in the monitoring chart of the Selected metric region, click the More > URL Share button. 4. URL sharing A popup window opens.
            5. In the URL Share popup, click the Copy URL button. 5. The generated URL is copied.
              • Information within the monitoring chart is provided as metadata links.

            Download Monitoring Chart File

            You can download monitoring chart information as a file. To download the monitoring chart information, follow these steps.

            1. All Services > Management > ServiceWatch menu, click it. 1. Go to the Service Home page.
            2. On the Service Home page, click the Metrics menu. 2. Navigate to the Indicator page.
            3. Select the metric to monitor from the metric list on the Metric page. 3. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
            4. In the monitoring chart of the selected metric area, set the table region, then click the More > File Download button. 4. File Download popup window opens.
            5. After selecting the file download method, click the Confirm button. 5. The download will start.
              • The download method can be selected simultaneously.
                CategoryDetailed description
                CSVConvert chart metrics and monitoring data to an Excel (*.csv) file and download
                PNGConvert the chart to an image (*.png) file and download
                • Available only when the metric comparison mode is set to Metric Comparison
                • Up to 100 metric data items can be downloaded
                Table. Indicator monitoring file download item

            Export to Object Storage

            You can store monitoring chart data in Object Storage.

            information

            User permission is required to store in Object Storage.

            • User: {email}
            • Action: iam:CreatGroup
            • On resource: {SRN}
            • Context: no identity-based policy allows the action

            To store monitoring chart data in Object Storage, follow these steps.

            1. All Services > Management > ServiceWatch click the menu. 1. Go to the Service Home page.
            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.
            3. Select the metric to monitor from the metric list on the Metric page. 3. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
            4. In the monitoring chart of the Selected metric area, after setting the table region, click the More > Export to Object Storage button. 4. Object Storage Export The popup window opens.
            5. After selecting the bucket to store the data, click the Done button. 5. A popup window notifying data saving opens.
            6. Click the Confirm button in the popup window. 6. Data export is starting.
            information
            • The limitations of metrics that can be exported to Object Stroage are as follows.
              • Number of indicators: up to 10
              • Query period: within 2 months (63 days)
            • If the query period exceeds 2 months (63 days), only data for up to 63 days will be stored.
            Reference
            • If there is no Object Storage to store the metric data, create an Object Storage and then proceed.
            • Metric data is stored in the “MetricName-yyyymmddhhmmss.json” file format and can be accessed in the ~/servicewatch/metric path of the Object Storage bucket.

            View monitoring chart source

            You can view the source code of the monitoring chart.

            information
            You can view the source code only when you select the metric comparison mode as Metric Comparison.

            To view the source code of the monitoring chart, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. 1. Go to the Service Home page.
            2. On the Service Home page, click the Metrics menu. 2. Go to the Indicator page.
            3. Please select the metric to monitor from the metric list on the Metric page. 3. The monitoring chart for the selected metric is displayed in the Selected Metric area at the bottom.
            4. After setting the table area in the monitoring chart of the selected metric region, click the More > View Source button. 4. View Widget Source A popup window opens.
              CategoryDetailed description
              Source informationDisplay the source code of the monitoring chart in JSON format
              Copy codeCopy the source code to the clipboard
              Table. Monitoring chart source view items

            11.2.4 - Log

            In ServiceWatch, you can set threshold criteria for the metrics you monitor, and when the specified conditions are met, you can create and manage log groups to generate alarm notifications.

            Create Log Group

            You can create a log group for the metric. To create a log group, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.

            3. Log Group List page, click the Create Log Group button. You will be taken to the Create Log Group page.

            4. Enter the basic information and tag information required to create a log group.

              Category
              Whether required
              Detailed description
              Log group nameRequiredEnter the name of the log group to monitor in ServiceWatch
              • using English letters, numbers, and special characters (-_./#) within 3 ~ 512 characters
              Log retention policyRequiredSelect the retention period for monitored log data
              TagSelectAdd tag information
              • Up to 50 tags can be added per resource
              • When adding a tag, entering the Key and Value allows selection from the list of previously created tag Keys and Values
              Table. Log group creation items

            5. After reviewing the summary information, click the Create button. A popup notifying the creation of the log group will appear.

            6. Click the Confirm button. Log group creation is complete.

            Check log group details

            You can view and manage detailed information about log groups.

            To view detailed information about the log group, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. On the Log Group List page, click the log group name to view detailed information. You will be taken to the Log Group Details page.
              CategoryDetailed description
              Log group statusLog group status
              • Active: The log group is in an active state
              • Inactive: The log group is in an inactive state
              Export Log GroupStore log group log data in Object Storage
              Delete log groupDelete the corresponding log group
              Information Classification TabInformation tabs for log groups
              • Details, Log Streams, Tags, Activity History
              • Click each tab to view the corresponding information
              Table. Log Group Details
              Reference
              On the Log Group List page, click the More > Export Log Group button for the log group you want to store in Object Storage to export the data.
            Reference

            When sorting log group names in the log group list, follow the sorting rules below.

            1. Whitespace and control characters
            2. Some special characters ( !"#$%&()*+,-./ )
            3. Numbers (0–9)
            4. Some special characters ( ; < = > ? @ )
            5. English (A–Z, a–z, case-insensitive)
            6. Remaining special characters ([\]^_`)
            7. Other characters

            Detailed Information

            Log Group List page allows you to view the basic information and details of the selected log group.

            CategoryDetailed description
            ServiceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            • In ServiceWatch, it refers to the SRN of the resource type
            Resource NameResource name
            • In ServiceWatch, it refers to the name of the log group
            Resource IDUnique resource ID in the service
            ConstructorUser who created the service
            Creation date and timeService creation date and time
            EditorUser who edited the service information
            Modification date and timeDate and time the service information was modified
            Log group nameName of the log group
            Log retention policyRetention period of log data
            • Edit Click the button to change the retention period
            Log dataTotal stored log data size (bytes)
            Table. Log Group Details – Details Tab Items
            Reference
            Log data is the total stored log data (bytes). It may take time for the log aggregation capacity to be reflected.

            Log Stream

            Log Group List page allows you to view the log streams of the selected log group.

            CategoryDetailed description
            View all streamsDetailed information for all log streams in the log stream list can be viewed
            Create log streamCreate a new log stream
            Log stream listLog stream name and log modification timestamp
            • Delete button can be clicked to delete the log stream
            • After checking the log streams to delete, click the More > Delete button at the top of the list to delete them simultaneously
            Table. Log Group Details - Log Stream Tab Items

            log pattern

            Log Group List page allows you to view the log pattern of the selected log group.

            CategoryDetailed description
            Log pattern listLog pattern name, pattern, log pattern namespace, metric name, alert policy name information
            • Clicking the log pattern name or alert policy name navigates to the detail page of that item
            • Clicking the metric name navigates to the metric page that includes that metric name in the search query
            • Clicking the alert policy name navigates to the detail page of that alert policy
            • More button can be clicked to perform additional actions
              • Edit, Delete: modify or delete the log pattern
              • Create Alert Policy: navigate to the alert policy creation page
            DeleteDelete all selected log patterns from the log pattern list
            • Activates when a log pattern is checked in the log pattern list
            Generate log patternCreate a new log pattern
            Table. Log Group Details - Log Pattern Tab Items

            tag

            On the Log Group List page, you can view the tag information of the selected log group and add, modify, or delete it.

            CategoryDetailed description
            Tag listTag’s Key and Value information
            Edit tagYou can modify, delete, or add new tags to existing tag information
            • Up to 50 tags can be added per resource
            • When adding a tag, entering the Key and Value allows you to select from the list of previously created tag Keys and Values
            Table. Log Group Details - Tag Tab Items

            Job History

            Log Group List page lets you view the operation history of the selected log group.

            CategoryDetailed description
            Task History ListResource Change History
            • You can view task details, task date/time, resource type, resource name, task result, and operator information
              • Settings button can be clicked to modify information fields
            • Filtering is possible using Period Selection, User Time Zone, entering operator information, and Detailed Search
            • Click a task entry in the Task History List to navigate to the Task Activity Details page for that task
            Table. Log Group Details - Work History Tab Items

            Managing Log Streams

            You can create and manage log streams.

            Create Log Stream

            You can create a new log stream in a log group. To create a Hog stream, follow the steps below.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. On the Log Group List page, click the log group name for which you want to create a log stream. You will be taken to the Log Group Details page.
            4. Log Group Details page, click the Log Stream tab. The Log Stream list is displayed.
            5. Click the Create Log Stream button. The Create Log Stream popup opens.
            6. Enter the Log stream name, then click the Create button. Log stream creation is completed.
              • Enter the name using English letters and numbers, within 3~512 characters.

            Check detailed log stream information

            You can view and manage detailed information about log streams. To view detailed information about the log stream, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. Click the log group name on the Log Group List page to view detailed information. You will be taken to the Log Group Details page.
            4. On the Log Group Details page, click the Log Stream tab. The Log Stream list is displayed.
            5. Click the log stream name in the Log Stream list to view its details. You will be taken to the Log Stream Details page.
              CategoryDetailed description
              Excel downloadLog stream history can be downloaded as an Excel file
              Timestamp listMessage list by timestamp
              • Period selection, User time zone, can filter using message input
              Table. Log group details - Log stream detail items
              Reference
              When you click the View All Log Streams button at the top of the log stream list, you will be taken to the All Log Stream Details page.

            Delete Log Stream

            You can delete unused log streams. To delete a log stream, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. On the Log Group List page, click the log group name whose log stream you want to delete. You will be taken to the Log Group Details page.
            4. Log Group Details page, click the Log Stream tab. The log stream list will be displayed.
            5. Select the checkbox of the log stream to delete in the log stream list, then click the More > Delete button. A popup notifying the log stream deletion will open.
              • You can delete multiple log streams simultaneously.
              • You can also delete each individually by clicking the Delete button at the right end of each log stream.
            6. Click the Confirm button. The log stream will be deleted.

            Managing Log Patterns

            Create Log Pattern

            To create a log pattern, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.

            3. On the Log Group List page, click the log group name for which you want to create a log pattern. You will be taken to the Log Group Details page.

            4. Log Group Details page, click the Log Pattern tab. The log pattern list will be displayed.

            5. Click the Create Log Pattern button. You will be taken to the Create Log Pattern page.

            6. Set the basic information and metric information required to create a log group.

              • In the Basic Information area, enter and select the basic information for the log pattern.
                Category
                Required
                Detailed description
                Log pattern nameRequiredEnter the name of the log pattern
                • using English letters, numbers, and special characters (-_./#) within 3 ~ 512 characters
                Pattern formatRequiredSelect a pattern format or enter manually
                • Pattern format: Choose one of the string pattern, space-delimited pattern, or JSON format pattern provided as pattern formats
                • Direct input: After selecting one of the string pattern, space-delimited pattern, or JSON format pattern, enter a value between 1 ~ 1,024
                Pattern testSelectEnter or select log data to verify using a pattern
                • Direct Input: Enter the log data to be used directly into the Log Event Message
                  • Separate log events using line breaks
                  • Up to 50 log events can be entered
                  • Each log event can be entered within 1 ~ 1,024 bytes
                • Log Data Selection: Choose the log data to use
                  • When selecting log data, the corresponding log data is displayed in the Log Event Message
                • Pattern Test: Conduct a test on the log event message
                  • If the test succeeds, the test result is displayed at the bottom
                Table. Log Pattern Creation - Basic Information Items
              • Enter and select metric information in the Metric Information area.
                Category
                Required status
                Detailed description
                namespaceRequiredSelect a namespace for the log pattern
                • If there is no namespace for the log pattern, Create New to create one
                • Namespace Name: When creating a new namespace, use English letters, numbers, spaces, and special characters(-_\/#) to enter between 3 ~ 128 characters
                Indicator NameRequiredEnter the name of the indicator
                • using English letters, numbers, and special characters(_) within 3 ~ 128 characters
                indicator valueRequiredEnter the indicator value
                • a number greater than or equal to 0 or $indetifier
                defaultSelectIf you use the default value, enter
                • 0 or greater float value
                • When using the default, dimension cannot be used
                unitRequiredSelect indicator unit
                dimensionSelectionSet the dimension of metrics generated by log patterns
                • Log pattern format is available only when it is a space-delimited pattern or a JSON format pattern
                • Default value cannot be used when entered
                • If Use is checked, you can add custom dimension fields
                  • After clicking the Add button, add by entering Field name and Field value
                  • You can add up to a maximum of 3
                Table. Log pattern generation - metric information items
            7. After reviewing the summary information, click the Create button. A popup indicating log pattern creation will appear.

            8. Confirm click the button. Log pattern generation is complete.

            Check detailed log pattern information

            To view detailed information about the log pattern, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. Click the log group name to view detailed information on the Log Group List page. You will be taken to the Log Group Details page.
            4. Log Group Details page, click the Log Pattern tab. The log pattern list will be displayed.
            5. Log pattern Click the log pattern name in the list to view its details. Log pattern details page will open.
              CategoryDetailed description
              Create alert policyAlert policy creation available
              • When the button is clicked, navigate to the alert policy creation page
              Delete log patternDelete the log pattern currently being examined
              Log pattern nameLog pattern name
              constructorUser who created the log pattern
              Creation date and timeLog pattern creation timestamp
              EditorUser who modified the log pattern information
              Modification dateDate and time the log pattern information was modified
              PatternPattern format
              Indicator InformationMetric information of the pattern group
              • Namespace name, metric name, metric value, default value, unit, alarm policy name, dimension name
              • Edit button allows modification of metric value, default value, unit information
              Table. Log pattern detailed items

            Delete log pattern

            To delete a log pattern, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. On the Log Group List page, click the log group name whose log pattern you want to delete. You will be taken to the Log Group Details page.
            4. On the Log Group Details page, click the Log Pattern tab. The log pattern list will be displayed.
            5. After selecting the checkbox of the log pattern to delete in the log pattern list, click the Delete button. A popup notifying the log pattern deletion will open.
              • You can delete multiple log patterns simultaneously.
              • You can also delete individually by clicking the More > Delete button at the far right of each log pattern, or by clicking the Delete Log Pattern button on the log pattern’s detail page.
            6. Click the Confirm button. The log pattern will be deleted.

            Export Log Group

            Log group data can be stored in Object Storage. To store log group data in Object Storage, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Log > Log Group Export menu. You will be taken to the Log Group Export List page.

            3. Log Group Export List page, click the Log Group Export button. You will be taken to the Log Group Export page.

              Category
              Required
              Detailed description
              Select log groupRequiredSelect the log group to store in Object Storage
              • If the log group contains log streams, you can click the Select button to choose the log stream to store
              • If no log group is selected, the entire data of the log group will be stored
              Select periodSelectSelect the user time zone and data storage interval
              • In the Time Settings area, you can select the desired interval or click the Enter Manually button to set the start and end date and time
              storage bucketRequiredSelect the bucket to store data
              • Up to 50 tags can be added per resource
              • When adding a tag, entering the Key and Value allows you to select from the list of existing tag Keys and Values
              Table. Log group export items

            4. After selecting the bucket to store the data, click the Complete button. A popup notifying that the data has been saved will open.

            5. In the popup window, click the Confirm button. Data export will begin.

              • You can view the progress on the Log Group Export List page.
            Reference
            • If there is no Object Storage to store the log group data, create an Object Storage and then proceed.
            • Exporting log group data may take tens of minutes or more, depending on its size.
            • If there is an ongoing log group export task within the Account, you must first complete the ongoing task before proceeding with the export.
            • On the Log Group Export List page, you can cancel an export operation for a log group that is in progress by clicking the More > Cancel Log Group Export button.

            Delete Log Group

            You can delete unused log groups.

            Caution
            • Log Group Export does not delete files stored in Object Storage. However, the Log Group Export history is deleted together.
            • If you delete a log group while log group export is in progress, the export operation will not complete successfully.

            To delete a log group, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Log > Log Group menu. You will be taken to the Log Group List page.
            3. On the Log Group List page, select the checkbox of the log group you want to delete, then click the Delete button. A popup notifying the log group deletion will appear.
              • You can delete multiple log groups simultaneously.
              • You can delete individually by clicking the Delete button at the far right of each log group, or by clicking the Delete Log Group button on the Log Group Details page.
            4. Click the Confirm button. The log group will be deleted.

            11.2.5 - Event

            You can view and handle events generated by the Samsung Cloud Platform service in ServiceWatch.

            Create Event Rule

            You can create an event rule to receive notifications when an event occurs. To create an event rule, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.

            2. On the Service Home page, click the Event Rules menu. You will be taken to the Event Rules List page.

            3. Event Rule List page, click the Create Event Rule button. You will be taken to the Create Event Rule page.

            4. Enter the name and description of the event rule in the Basic Information Input area.

            5. Set the required information in the Event Pattern Configuration area. The configured event pattern is entered in Event Pattern Configuration Status as JSON code.

              Category
              Required status
              Detailed description
              Event sourceRequiredSelect the service name of the event you want to receive in ServiceWatch
              Event typeRequiredSelect the event type of the event source to use in the event rule
              • Classify the same as the resource type
              Apply EventRequiredSelect events to apply the event pattern from events generated by the event type
              • All events: Apply all events generated by the event type
              • Individual events: Choose events from those generated by the event type to set as the event pattern
              Applied resourceRequiredSelect the resource to apply the event pattern
              • All resources: Set the event pattern for events that occur in all resources
              • Individual resource: Set the event pattern for the specific event that occurs in a particular resource
                • When an individual resource is selected, display the event resource selection area
                • Add resource button can be clicked to select resources
                • Added resources can be removed by selecting the resource in the resource list and clicking the Delete button
              Event Pattern Configuration Status-Convert and display in JSON code format according to the event pattern settings
              • Changing the event pattern settings will reset
              • Copy code item can be clicked to copy the source code
              Table. Event pattern configuration items

            6. In the Notification Settings area, select the users who will receive notifications when an event occurs.

              • Only users with a login history (users who have registered an email or mobile phone number) can be added as notification recipients.
              • You can add up to 100 notification recipients.
            Reference
            • If there is no user to add, you can create a user on the User Creation page of the IAM service. For more details on creating users, see Create User.
            • The notification delivery method (E-mail or SMS) can be changed on the Notification Settings page after selecting the notification target as Service > Event Rule. For detailed information about notification settings, refer to 알림 설정 확인하기.
            1. Add tag information in the Additional Information Input area.
            2. After checking the summary information, click the Create button. A popup notifying the creation of an event rule will open.
            3. Click the Confirm button. Event rule creation is complete.

            Check detailed event rule information

            You can view and manage detailed information about event rules. Follow the steps below to view detailed information about the event rules.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Event Rules menu. You will be taken to the Event Rules List page.
            3. Event Rules List page, click the event name to view detailed information. You will be taken to the Event Rules Detail page.
              CategoryDetailed description
              Event rule statusEvent rule status
              • Active: The event rule is in an active state
              • Inactive: The event rule is in an inactive state
              • You can change it by clicking the Activate or Deactivate button
              Delete event ruleDelete the corresponding event rule
              Information Category TabInformation tabs for alert policies
              • Details, notifications, tags, activity history
              • Click each tab to view the corresponding information.
              Table. Event rule details

            Detailed Information

            Event Rule List page lets you view the basic information and event rule details of the selected rule.

            CategoryDetailed description
            ServiceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            • In ServiceWatch, it refers to the SRN of the resource type
            Resource nameResource name
            • In ServiceWatch, it refers to the name of the event rule
            Resource IDUnique resource ID in the service
            constructorUser who created the service
            Creation date and timeService creation date and time
            EditorUser who edited the service information
            Modification date and timeDate and time the service information was modified
            Event rule nameEvent rule name
            Event Pattern Configuration StatusDisplay event pattern settings in JSON code format
            • Edit button can be clicked to modify the event pattern
            • Copy Code item can be clicked to copy the source code
            descriptionDescription of event rules
            • Click the Edit button to edit the description
            Table. Alert Policy Details – Details Tab Items

            Notification

            Event Rule List page allows you to view the notification recipients of the selected event rule.

            CategoryDetailed description
            Notification recipient listUser ID, creation date and time, last login, status information
            • Click the More button to change the notification status (enabled/disabled) for the user or delete the user
            DeleteDelete all selected users from the notification recipient list
            • Enabled when you check the users to delete from the notification recipient list
            MoreChange the notification status (enable/disable) for the selected user in the notification recipient list
            • When you check the user whose status you want to change in the notification recipient list, it becomes enabled
            Add notification recipientAbility to add new notification recipients
            • Add Notification Recipient Select users to add in the popup window
            Table. Event rule details - Notification tab items
            Reference
            • Only users with a login history (users who have registered an email or mobile phone number) can be added as notification recipients.
            • You can add up to 100 notification recipients.
            • If there is no user to add, you can create a user on the IAM service’s User Creation page. For detailed information on creating users, refer to Create User.
            • The notification reception method (E-mail or SMS) can be changed on the Notification Settings page after selecting the notification target as Service > Event Rule. For detailed information about notification settings, refer to 알림 설정 확인하기.

            tag

            Event Rules page allows you to view the tag information of the selected event rule, and add, modify, or delete it.

            CategoryDetailed description
            Tag listTag’s Key and Value information
            Edit tagYou can modify or delete existing tag information, or add new tags
            • Up to 50 tags can be added per resource
            • When adding a tag, entering the Key and Value allows you to select from the list of previously created tag Keys and Values
            Table. Event Rule Details – Tag Tab Items

            Job History

            You can view the operation history of the event rule selected on the Alert Policy List page.

            CategoryDetailed description
            Task History ListResource Change History
            • You can view the task details, task date and time, resource type, resource name, task result, and operator information
              • Click the Settings button to modify information items
            • Filtering is possible using Period Selection, User Time Zone, entering operator information, and Detailed Search
            • Clicking a task entry in the Task History List navigates to the Task Activity Details page for that task
            Table. Event Rule Details - Work History Tab Items

            Modify event pattern

            You can modify the event pattern. To modify the event pattern, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Event Rules menu. You will be taken to the Event Rules List page.
            3. Event Rule List page, click the event name to edit the event pattern. You will be taken to the Event Rule Details page.
            4. Click the Edit button in the Event Pattern Configuration Status on the Event Rule Details page. The Edit Event Pattern popup opens.
            5. After modifying the event pattern settings, click the Confirm button. A popup notifying the event pattern modification will appear.
            6. Click the Confirm button. The event pattern modification is complete.

            Delete Event Rule

            You can delete unused event rules. To delete an event rule, follow these steps.

            1. Click the All Services > Management > ServiceWatch menu. You will be taken to the Service Home page.
            2. On the Service Home page, click the Event Rules menu. You will be taken to the Event Rules List page.
            3. On the Event Rule List page, select the checkbox of the event rule you want to delete, then click the Delete button. A popup notifying the deletion of the event rule will appear.
              • You can delete multiple event rules simultaneously.
              • You can also delete individually by clicking the More > Delete button at the far right of each alert policy, or by clicking the Delete Event Rule button on the Event Rule Details page.
            4. Click the Confirm button. The event rule will be deleted.

            11.2.6 - Using ServiceWatch Agent

            Users can install the ServiceWatch Agent on Virtual Server/GPU Server/Bare Metal Server, etc., to collect custom metrics and logs.

            Reference
            Collecting custom metrics/logs via the ServiceWatch Agent is currently available only on Samsung Cloud Platform For Enterprise. It will be offered in other offerings in the future.
            Caution
            Metric collection through the ServiceWatch Agent is classified as custom metrics and, unlike the default metrics collected from each service, incurs charges, so you must be careful not to configure unnecessary metric collection. Ensure that only the metrics that need to be collected are collected.

            ServiceWatch Agent

            The agents that need to be installed on the server to collect custom metrics and logs for ServiceWatch can be divided into two main types. It is a Prometheus Exporter and Open Telemetry Collector.

            CategoryDetailed description
            Prometheus ExporterProvide metrics of a specific application or service in a format that Prometheus can scrape
            • To collect OS metrics from servers, you can use Node Exporter for Linux servers and Windows Exporter for Windows servers, depending on the OS type.
              • Target
                • Virtual Server
                • GPU Server
                • Bare Metal Server
                • Multi-node GPU Cluster > GPU Node
            • You can use the DCGM (NVIDIA Data Center GPU Manager) Exporter for GPU metrics.
              • Target
                • GPU Server
                • Multi-node GPU Cluster > GPU Node
            Open Telemetry CollectorActs as a centralized collector that gathers telemetry data such as metrics and logs from distributed systems, processes (filtering, sampling, etc.) it, and exports it to various backends (e.g., Prometheus, Jaeger, Elasticsearch, etc.)
            • Exports data to the ServiceWatch Gateway so that ServiceWatch can collect metric and log data.
            • This guide provides instructions on how to use the OpenTelemetry Collector provided by ServiceWatch.
            Table. Explanation of Prometheus Exporter and Open Telemetry Collector
            Reference

            To link a server’s log files to ServiceWatch via the ServiceWatch Agent, you must first create a log group and a log stream within that log group.

            • For detailed information on creating log groups and log streams, refer to the 로그.

            Pre-configuration for ServiceWatch Agent

            You need to add a Security Group and firewall rules to enable communication between the ServiceWatch Agent and ServiceWatch.

            Reference
            Bare Metal Server does not support Security Groups.
            1. Add Security Group rule

              • To transmit the data collected by ServiceWatch from the ServiceWatch Agent installed on Virtual Server/GPU Server to ServiceWatch, you need to add a rule to the Security Group as follows.
                DirectiontypePortTarget address
                OutboundCustom TCP443ServiceWatch OpenAPI Endpoint IP Address
                Table. Security Group rules for ServiceWatch Agent communication
            2. Add firewall rule

              • If you configure the VPC’s Internet Gateway to use a firewall, you must add firewall rules as shown below.
                DirectiontypePortOperationSource addressDestination address
                OutboundTCP443AllowWhen creating a Virtual Server, the assigned Private IP address. The Virtual Server Private IP address can be found in Check Virtual Server Details.ServiceWatch OpenAPI Endpoint IP Address
                Table. Internet Gateway firewall rules for ServiceWatch Agent communication

            ServiceWatch OpenAPI Endpoint IP address

            The Endpoint IP address required for the ServiceWatch Agent to send the data collected to ServiceWatch is as follows.

            OfferingRegionURLIP address
            For Enterprisekr-west1https://servicewatch.kr-west1.e.samsungsdscloud.com112.107.105.24
            For Enterprisekr-east1https://servicewatch.kr-east1.e.samsungsdscloud.com112.107.105.68
            Table. ServiceWatch OpenAPI Endpoint Information

            Open Telemetry Collector configuration for ServiceWatch

            Install the OpenTelemetry Collector on the server following the steps below to collect ServiceWatch metrics and logs.

            1. Download the Agent file from the URL that provides the Agent file for ServiceWatch.
            information
            The file download link for installing the Agent for ServiceWatch can be found in ServiceWatch’s Service Home > Start Widget.
            Also, you can verify it using ServiceWatch’s ShowAgentDownloadLink API. For more information, see the ServiceWatch API Reference.
            Color mode
            wget [ServiceWatch Agent file download URL]
            wget [ServiceWatch Agent file download URL]
            Code block. Command to download the Agent installation file for ServiceWatch
            1. The Open Telemetry Collector Agent file for ServiceWatch can be found as follows.
              • Extract the Agent file for ServiceWatch.
                Color mode
                unzip ServiceWatch_Agent.zip
                unzip ServiceWatch_Agent.zip
                Code block. Extract the Agent file for ServiceWatch
              • When using the ServiceWatch Agent on a Linux OS, you must grant execution permission as shown below.
                Color mode
                chmod +x agent/otelcontribcol_linux_amd64
                chmod +x agent/servicewatch-agent-manager-linux-amd64
                chmod +x agent/otelcontribcol_linux_amd64
                chmod +x agent/servicewatch-agent-manager-linux-amd64
                Code block. Grant execution permission to the Agent file for ServiceWatch
                CategoryDetailed description
                examplesExample configuration file folder. Each folder contains agent.json, log.json, metric.json example files
                • os-metrics-min-examples: Minimal metric configuration example using Node Exporter
                • os-metrics-all-examples: Example of memory/filesystem Collector metric configuration using Node Exporter
                • gpu-metrics-min-examples: Minimal metric configuration example using DCGM Exporter
                • gpu-metrics-all-examples: Example of major metric configuration using DCGM Exporter
                otelcontribcol_linux_amd64Open Telemetry Collector for Linux for ServiceWatch
                otelcontribcol_windows_amd64.exeOpen Telemetry Collector for Windows for ServiceWatch
                servicewatch-agent-manager-linux-amd64ServiceWatch Agent Manager for Linux
                servicewatch-agent-manager-windows-amd64.exeServiceWatch Agent Manager for Windows
                Table. Agent file configuration for ServiceWatch
            Reference
            ServiceWatch Agent Manager is a tool that integrates with ServiceWatch to assist in configuring the OpenTelemetry Collector for efficiently transmitting custom metrics and logs. Through this, various custom metrics and log data can be delivered to ServiceWatch.
            1. Define the Agent configuration file in ServiceWatch Agent Manager for the ServiceWatch Open Telemetry Collector.

              CategoryDetailed description
              namespaceCustom namespace for custom metrics
              • A namespace is a logical separation used to distinguish and group metrics, designated as a custom metric for separating custom metrics
              • A namespace must be 3 to 128 characters long, may include letters, numbers, spaces, and special characters (-_/), and must start with a letter.
              accessKeyIAM authentication key Access Key
              accessSecretIAM authentication key Secret Key
              resourceIdResource ID of the server on Samsung Cloud Platform
              • Example: Resource ID of a Virtual Server
              openApiEndpointServiceWatch OpenAPI endpoint per region/offering
              • Example: https://servicewatch.region.offering.samsungsdscloud.com
              • region and offering information can be found in the Samsung Cloud Platform Console access URL
              telemetryPortServiceWatch Agent’s Telemetry Port
              • is typically used on port 8888. If port 8888 is in use, it needs to be changed
              Table. agent.json configuration file entries
              Color mode
              {
                 "namespace": "swagent-windows",     # Custom namespace for user-defined metrics
                 "accessKey": "testKey",             # IAM authentication key Access Key
                 "accessSecret": "testSecret",       # IAM authentication key Secret Key
                 "resourceId": "resourceID",         # Resource ID on the server's Samsung Cloud Platform
                 "openApiEndpoint": "https://servicewatch.kr-west1.e.samsungsdscloud.com",    # Region/Environment-specific ServiceWatch OpenAPI Endpoint
                 "telemetryPort": 8889               # ServiceWatch Agent's Telemetry Port (usually uses port 8888. If port 8888 is in use, change it)
              }
              {
                 "namespace": "swagent-windows",     # Custom namespace for user-defined metrics
                 "accessKey": "testKey",             # IAM authentication key Access Key
                 "accessSecret": "testSecret",       # IAM authentication key Secret Key
                 "resourceId": "resourceID",         # Resource ID on the server's Samsung Cloud Platform
                 "openApiEndpoint": "https://servicewatch.kr-west1.e.samsungsdscloud.com",    # Region/Environment-specific ServiceWatch OpenAPI Endpoint
                 "telemetryPort": 8889               # ServiceWatch Agent's Telemetry Port (usually uses port 8888. If port 8888 is in use, change it)
              }
              Code block. Example of agent.json configuration

            2. Defines the metric configuration file for collecting metrics for ServiceWatch.

              • If you want to collect metrics through the Agent, set up metric.json.
                CategoryDetailed description
                prometheus > scrape_configs > targetsEndpoint of the metric collection target
                • For servers, because the Prometheus Exporter is installed on the same machine, set it to that endpoint
                • Example: localhost:9100
                prometheus > scrape_configs > jobNameSet the Job Name. Usually set it to the type of Prometheus Exporter used for metric collection
                • Example: node-exporter
                metricMetas > metricNameSet the name of the metric to be collected. The metric name must be 3 to 128 characters long, include letters, numbers, and special characters (_), and start with a letter.
                • Example: node_cpu_seconds_total
                metricMetas > dimensionsSet the label of the Collector, among those provided to identify the source of the Exporter’s metric data, for visualization in the Console. When visualizing the collected metrics in the Console, combine them according to the dimensions setting.
                • Example: For metrics like the Memory Collector of Node Exporter that do not provide a special label, set it to resource_id.
                • Example: The Filesystem Collector metrics of Node Exporter can have the mountpoint, which represents the path where the filesystem is mounted on the system, set as a dimension.
                metricMetas > unitMetric unit can be set
                • Example: Bytes, Count, etc.
                metricMetas > aggregationMethodMethod to aggregate based on specified dimensions(dimensions)
                • Example: select from SUM, MAX, MIN, COUNT
                metricMetas > descriptionKoKorean description of the metrics being collected
                metricMetas > descriptionEnEnglish description of the metrics being collected
                Table. metric.json configuration file entries
                Color mode
                {
                   "prometheus": {
                      "scrape_configs": {
                         "targets": [
                            "localhost:9100" # Endpoint of the Prometheus Exporter installed on the server
                         ],
                         "jobName": "node-exporter" # Usually set to the name of the installed Exporter
                      }
                   },
                   "metricMetas": [
                      {
                         "metricName": "node_memory_MemTotal_bytes",    # Set the metric name to be linked with ServiceWatch among the metrics collected from the Prometheus Exporter
                         "dimensions": [
                            [
                               "resource_id"        # Set the label used for visualizing in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                                    # If no specific label is provided, such as for the Memory-related metric, set it to **resource_id**.
                            ]
                         ],
                         "unit": "Bytes",           # unit of the collected metric data
                         "aggregationMethod": "SUM",    # aggregation method
                         "descriptionKo": "Total physical memory size of the server",    # Korean description of the metric
                         "descriptionEn": "node memory total bytes"      # English description of the metric
                      },
                      {
                         "metricName": "node_filesystem_size_bytes",    # Set the metric name to be linked with ServiceWatch among the metrics collected from the Prometheus Exporter
                         "dimensions": [
                            [
                               "mountpoint"        # Set the label for visualizing in the Console among the Collector labels provided to identify the source of Node Exporter's metric data.
                                                   # Set the dimension (dimensions) of the Filesystem-related metric to the mountpoint, which indicates the path where the filesystem is mounted on the system.
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node filesystem size bytes"
                         "descriptionEn": "node filesystem size bytes"
                      },
                      {
                         "metricName": "node_memory_MemAvailable_bytes"
                         "dimensions": [
                            [
                               resource_id
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node memory available bytes"
                         "descriptionEn": "node memory available bytes"
                      },
                      {
                         "metricName": "node_filesystem_avail_bytes"
                         "dimensions": [
                            [
                               mountpoint
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node filesystem available bytes"
                         "descriptionEn": "node filesystem available bytes"
                      }
                   ]
                }
                {
                   "prometheus": {
                      "scrape_configs": {
                         "targets": [
                            "localhost:9100" # Endpoint of the Prometheus Exporter installed on the server
                         ],
                         "jobName": "node-exporter" # Usually set to the name of the installed Exporter
                      }
                   },
                   "metricMetas": [
                      {
                         "metricName": "node_memory_MemTotal_bytes",    # Set the metric name to be linked with ServiceWatch among the metrics collected from the Prometheus Exporter
                         "dimensions": [
                            [
                               "resource_id"        # Set the label used for visualizing in the Console among the Collector's labels provided to identify the source of Node Exporter's metric data
                                                    # If no specific label is provided, such as for the Memory-related metric, set it to **resource_id**.
                            ]
                         ],
                         "unit": "Bytes",           # unit of the collected metric data
                         "aggregationMethod": "SUM",    # aggregation method
                         "descriptionKo": "Total physical memory size of the server",    # Korean description of the metric
                         "descriptionEn": "node memory total bytes"      # English description of the metric
                      },
                      {
                         "metricName": "node_filesystem_size_bytes",    # Set the metric name to be linked with ServiceWatch among the metrics collected from the Prometheus Exporter
                         "dimensions": [
                            [
                               "mountpoint"        # Set the label for visualizing in the Console among the Collector labels provided to identify the source of Node Exporter's metric data.
                                                   # Set the dimension (dimensions) of the Filesystem-related metric to the mountpoint, which indicates the path where the filesystem is mounted on the system.
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node filesystem size bytes"
                         "descriptionEn": "node filesystem size bytes"
                      },
                      {
                         "metricName": "node_memory_MemAvailable_bytes"
                         "dimensions": [
                            [
                               resource_id
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node memory available bytes"
                         "descriptionEn": "node memory available bytes"
                      },
                      {
                         "metricName": "node_filesystem_avail_bytes"
                         "dimensions": [
                            [
                               mountpoint
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "node filesystem available bytes"
                         "descriptionEn": "node filesystem available bytes"
                      }
                   ]
                }
                Code block. metric.json configuration example
              • To display the resource name, set resource_name in commonLabels as shown below, and also set resource_name in metricMetas.dimensions; then ServiceWatch can retrieve the metric along with the resource name.
                Color mode
                   "commonLabels": {
                      "resource_name": "ResourceName" # Resource name visible in the User Console
                   },
                   "metricMetas": [
                      {
                         "metricName": "metric_name"
                         "dimensions": [
                            [
                               "resource_id"
                               "resource_name"        # Add the resource_name set in commonLabels to the dimensions of each metric
                
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "metric_name description"
                         "descriptionEn": "metric_name description"
                      },
                   ...
                   ]
                   "commonLabels": {
                      "resource_name": "ResourceName" # Resource name visible in the User Console
                   },
                   "metricMetas": [
                      {
                         "metricName": "metric_name"
                         "dimensions": [
                            [
                               "resource_id"
                               "resource_name"        # Add the resource_name set in commonLabels to the dimensions of each metric
                
                            ]
                         ],
                         "unit": "Bytes"
                         "aggregationMethod": "SUM"
                         "descriptionKo": "metric_name description"
                         "descriptionEn": "metric_name description"
                      },
                   ...
                   ]
                Code block. metric.json - Resource name setting
            3. Defines the log configuration file for collecting logs for ServiceWatch.

              • If you want to collect logs, you must configure log.json.
                CategoryDetailed description
                fileLog > includeLocation of log files to collect
                fileLog > operatorsDefinition for parsing log messages to be collected
                fileLog > operators > regexExpress the log message format as a regular expression
                fileLog > operators > timestampThe format of the Time Stamp of log messages to be sent to ServiceWatch
                logMetas > log_group_valueLog group name created for sending logs to ServiceWatch
                logMetas > log_stream_valueLog stream name in ServiceWatch log group
                Table. log.json configuration file entries
                Color mode
                {
                   "fileLog": {
                      "include": [
                         "/var/log/syslog",        # Log file to be collected by ServiceWatch
                         /var/log/auth.log
                      ],
                      "operators": {
                         "regex": "^(?P<timestamp>\\S+)\\s+(?P<hostname>\\S+)\\s+(?P<process>[^:]+):\\s+(?P<message>.*)$",    # Represent log file format with a regular expression
                         "timestamp": {            # Set the format of the log message's Time Stamp
                            "layout_type": "gotime"
                            "layout": "2006-01-02T15:04:05.000000Z07:00"
                         }
                      }
                   },
                   "logMetas": {
                      "log_group_value": "custom-log-group",    # Log group name of ServiceWatch created in advance
                      "log_stream_value": "custom-log-stream"   # Log stream name within the pre‑created ServiceWatch log group
                   }
                }
                {
                   "fileLog": {
                      "include": [
                         "/var/log/syslog",        # Log file to be collected by ServiceWatch
                         /var/log/auth.log
                      ],
                      "operators": {
                         "regex": "^(?P<timestamp>\\S+)\\s+(?P<hostname>\\S+)\\s+(?P<process>[^:]+):\\s+(?P<message>.*)$",    # Represent log file format with a regular expression
                         "timestamp": {            # Set the format of the log message's Time Stamp
                            "layout_type": "gotime"
                            "layout": "2006-01-02T15:04:05.000000Z07:00"
                         }
                      }
                   },
                   "logMetas": {
                      "log_group_value": "custom-log-group",    # Log group name of ServiceWatch created in advance
                      "log_stream_value": "custom-log-stream"   # Log stream name within the pre‑created ServiceWatch log group
                   }
                }
                Code block. log.json configuration example
            Reference

            To link a server’s log files to ServiceWatch via the ServiceWatch Agent, you must first create a log group and a log stream within that log group.

            • For detailed information on creating log groups and log streams, refer to Log.

            Running Open Telemetry Collector for ServiceWatch

            How to Run ServiceWatch Agent
            [ServiceWatch Agent executable] -action [run|stop] - dir [configuration file location] -collector [Open Telemetry Collector executable location]
            Execution optionsDetailed description
            -actionAction setting (run or stop)
            -dirthe location of ServiceWatch Agent configuration files such as agent.json, metric.json, log.json
            -collectorOpen Telemetry Collector executable file location
            Table. log.json configuration file entries

            ServiceWatch Agent execution (for Linux)

            Reference
            agent.json, metric.json, log.json files are in current location/agent/examples/os-metrics-min-examples, and the otelcontribcol_linux_amd64 file is in current location/agent. Execute as shown below.
            1. Run the ServiceWatch Agent.

              • Check the locations of agent.json, metric.json, log.json files and the locations of servicewatch-agent-manager-linux-amd64, otelcontribcol_linux_amd64 files, and start the ServiceWatch Agent.
                Color mode
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                Code block. ServiceWatch Agent start - collect all metrics/logs
              • If you only want to collect metrics, rename the log.json file to a different name or move it so that it is not in the same directory as agent.json, metric.json, and then run as shown below.
                Color mode
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                Code block. ServiceWatch Agent start - collect metrics only
              • If you only want to collect logs, rename the metric.json file to a different name or move it so that it is not in the same directory as agent.json, log.json, and run as shown below.
                Color mode
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                ./agent/servicewatch-agent-manager-linux-amd64 -action run -dir ./agent/examples/os-metrics-min-examples -collector ./agent/otelcontribcol_linux_amd64
                Code block. ServiceWatch Agent start - collect logs only
            2. Stop the ServiceWatch Agent.

              Color mode
              ./agent/servicewatch-agent-manager-linux-amd64 -action stop -dir ./agent/examples/os-metrics-min-examples
              ./agent/servicewatch-agent-manager-linux-amd64 -action stop -dir ./agent/examples/os-metrics-min-examples
              code block. Stop ServiceWatch Agent

            Running ServiceWatch Agent (for Windows)

            1. Run the ServiceWatch Agent.

              Color mode
              servicewatch-agent-manager-windows-amd64.exe -action run -dir ./examples -collector otelcontribcol_windows_amd64.exe
              servicewatch-agent-manager-windows-amd64.exe -action run -dir ./examples -collector otelcontribcol_windows_amd64.exe
              code block. Start ServiceWatch Agent

            2. Stop the ServiceWatch Agent.

              Color mode
              servicewatch-agent-manager-windows-amd64.exe -action stop -dir ./examples
              servicewatch-agent-manager-windows-amd64.exe -action stop -dir ./examples
              code block. Stop ServiceWatch Agent

            11.3 - API Reference

            API Reference

            11.4 - CLI Reference

            CLI Reference

            11.5 - ServiceWatch Event Reference

            Events represent changes in the environment in the Samsung Cloud Platform service. Below are examples of events.

            • Generates an event when the status of a Virtual Server changes from Stopped to Running.
            • Generates an event when a new bucket is created in Object Storage.
            • Generates an event when an IAM user is removed from a user group.
            Reference
            Refer to the list of Samsung Cloud Platform services that generate events and the events in ServiceWatch Event.

            11.5.1 - ServiceWatch Event

            Reference
            Events for the Samsung Cloud Platform service may differ across regions.
            Service CategoryServiceEvent source
            ComputeVirtual ServerVirtual Server
            ComputeGPU ServerGPU Server
            ComputeBare Metal ServerBare Metal Server
            ComputeMulti-node GPU ClusterMulti-node GPU Cluster
            ComputeCloud FunctionsCloud Functions
            StorageBlock Storage(BM)Block Storage(BM)
            StorageFile StoragefiFile Storagelestorage
            StorageObject StorageObject Storage
            StorageArchive StorageArchive Storage
            StorageBackupBackup
            ContainerKubernetes EngineKubernetes Engine
            ContainerContainer RegistryContainer Registry
            NetworkingVPCVPC
            NetworkingSecurity GroupSecurity Group
            NetworkingLoad BalancerLoad Balancer
            NetworkingDNSPrivate DNS
            Hosted Zone
            Public Domain Name
            NetworkingVPNVPN
            NetworkingFirewallFirewall
            NetworkingDirect ConnectDirect Connect
            NetworkingCloud LAN-CampusCloud LAN - Campus (Network)
            NetworkingCloud LAN-DatacenterCloud LAN Network
            NetworkingCloud WANCloud WAN
            NetworkingGlobal CDNGlobal CDN
            NetworkingGSLBGSLB
            DatabaseEPAS(DBaaS)EPAS
            DatabasePostreSQL(DBaaS)PostreSQL
            DatabaseMariaDB(DBaaS)MariaDB
            DatabaseMySQL(DBaaS)MySQL
            DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server
            DatabaseCacheStore(DBaaS)CacheStore
            DatabaseScalable DB(DBaaS)Scalable DB
            Data AnalyticsEvent StreamsEvent Streams
            Data AnalyticsSearch EngineSearch Engine
            Data AnalyticsVertica(DBaaS)Vertica
            Data AnalyticsData FlowData Flow
            Data AnalyticsData OpsData Ops
            Data AnalyticsQuick QueryQuick Query
            Application ServiceAPI GatewayAPI Gateway
            Application ServiceQueue ServiceQueue
            SecurityKey Management ServiceKey Management Service
            SecurityConfig InspectionConfig Inspection
            SecurityCertificate ManagerCertificate Manager
            SecuritySecrets ManagerSecret
            SecuritySecret VaultSecret Vault
            ManagementCloud ControlCloud Control
            ManagementIAMIdentity and Access Management
            ManagementID CenterIdentity Center
            ManagementLogging&AuditLogging&Audit
            ManagementOrganizationOrganization
            ManagementResource GroupsResource Group
            ManagementServiceWatchServiceWatch
            ManagementSupport CenterSupport
            AI-MLCloudMLCloud ML
            AI-MLAI&MLOps PlatformAI&MLOps Platform
            Table. ServiceWatch event source

            11.5.1.1 - Multi-node GPU Cluster

            Multi-node GPU Cluster event

            This is the list of events that the Multi-node GPU Cluster service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeMulti-node GPU ClusterGPU NodeMulti-node GPU ClusterGPU Node
            ComputeMulti-node GPU ClusterCluster FabricMulti-node GPU ClusterCluster Fabric
            Table. Multi-node GPU Cluster Event Types

            GPU Node

            Event sourceEvent typeEvent
            Multi-node GPU ClusterGPU Node
            • Multi-node GPU Cluster GPU Node creation started
            • Multi-node GPU Cluster GPU Node creation completed
            • Multi-node GPU Cluster GPU Node creation failed
            • Multi-node GPU Cluster GPU Node termination started
            • Multi-node GPU Cluster GPU Node termination completed
            • Multi-node GPU Cluster GPU Node termination failed
            • Multi-node GPU Cluster GPU Node start started
            • Multi-node GPU Cluster GPU Node start completed
            • Multi-node GPU Cluster GPU Node start failed
            • Multi-node GPU Cluster GPU Node stop started
            • Multi-node GPU Cluster GPU Node stop completed
            • Multi-node GPU Cluster GPU Node stop failed
            • Multi-node GPU Cluster GPU Node lock modification started
            • Multi-node GPU Cluster GPU Node lock modification completed
            • Multi-node GPU Cluster GPU Node lock modification failed
            • Multi-node GPU Cluster GPU Node NAT IP allocation started
            • Multi-node GPU Cluster GPU Node NAT IP allocation completed
            • Multi-node GPU Cluster GPU Node NAT IP allocation failed
            • Multi-node GPU Cluster GPU Node NAT IP release started
            • Multi-node GPU Cluster GPU Node NAT IP release completed
            • Multi-node GPU Cluster GPU Node NAT IP release failed
            • Multi-node GPU Cluster GPU Node member change started
            • Multi-node GPU Cluster GPU Node member change completed
            • Multi-node GPU Cluster GPU Node member change failed
            Table. Multi-node GPU Cluster - GPU Node event type events

            Cluster Fabric

            Event sourceEvent typeevent
            Multi-node GPU ClusterCluster Fabric
            • Multi-node GPU Cluster Cluster Fabric creation started
            • Multi-node GPU Cluster Cluster Fabric creation completed
            • Multi-node GPU Cluster Cluster Fabric creation failed
            • Multi-node GPU Cluster Cluster Fabric deletion started
            • Multi-node GPU Cluster Cluster Fabric deletion completed
            • Multi-node GPU Cluster Cluster Fabric deletion failed
            • Multi-node GPU Cluster Cluster Fabric member change started
            • Multi-node GPU Cluster Cluster Fabric member change completed
            • Multi-node GPU Cluster Cluster Fabric member change failed
            • Multi-node GPU Cluster Cluster Fabric member addition started
            • Multi-node GPU Cluster Cluster Fabric member addition completed
            • Multi-node GPU Cluster Cluster Fabric member addition failed
            • Multi-node GPU Cluster Cluster Fabric member removal started
            • Multi-node GPU Cluster Cluster Fabric member removal completed
            • Multi-node GPU Cluster Cluster Fabric member removal failed
            Table. Multi-node GPU Cluster – Cluster Fabric event type

            11.5.1.2 - MySQL(DBaaS)

            MySQL(DBaaS) event

            This is the list of events that the MySQL (DBaaS) service sends to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            DatabaseMySQL(DBaaS)MySQL(DBaaS)MySQLMySQL
            Table. MySQL(DBaaS) Event Types

            MySQL

            Event sourceEvent typeevent
            MySQLMySQL
            • MySQL Create Start
            • MySQL Create Error
            • MySQL Create End
            • MySQL Delete Start
            • MySQL Delete Error
            • MySQL Delete End
            • MySQL Start Start
            • MySQL Start Error
            • MySQL Start End
            • MySQL Stop Start
            • MySQL Stop Error
            • MySQL Stop End
            • MySQL Restart Start
            • MySQL Restart Error
            • MySQL Restart End
            • MySQL Sync Start
            • MySQL Sync Error
            • MySQL Sync End
            • MySQL Maintenance Modify Start
            • MySQL Maintenance Modify Error
            • MySQL Maintenance Modify End
            • MySQL Maintenance Delete Start
            • MySQL Maintenance Delete Error
            • MySQL Maintenance Delete End
            • MySQL Security Group Rule Modify Start
            • MySQL Security Group Rule Modify Error
            • MySQL Security Group Rule Modify End
            • MySQL Instance Resize Start
            • MySQL Instance Resize Error
            • MySQL Instance Resize End
            • MySQL Block Storage Create Start
            • MySQL Block Storage Create Error
            • MySQL Block Storage Create End
            • MySQL Block Storage Resize Start
            • MySQL Block Storage Resize Error
            • MySQL Block Storage Resize End
            • MySQL Parameter Sync Start
            • MySQL Parameter Sync Error
            • MySQL Parameter Sync End
            • MySQL Parameter Modify Start
            • MySQL Parameter Modify Error
            • MySQL Parameter Modify End
            • MySQL Patch Start
            • MySQL Patch Error
            • MySQL Patch End
            • MySQL Backup Config Create Start
            • MySQL Backup Config Create Error
            • MySQL Backup Config Create End
            • MySQL Backup Config Modify Start
            • MySQL Backup Config Modify Error
            • MySQL Backup Config Modify End
            • MySQL Backup Config Delete Start
            • MySQL Backup Config Delete Error
            • MySQL Backup Config Delete End
            • MySQL Backup Recover Start
            • MySQL Backup Recover Error
            • MySQL Backup Recover End
            • MySQL Backup History Delete Start
            • MySQL Backup History Delete Error
            • MySQL Backup History Delete End
            • MySQL Replica Create Start
            • MySQL Replica Create Error
            • MySQL Replica Create End
            • MySQL Replica Reset Start
            • MySQL Replica Reset Error
            • MySQL Replica Reset End
            • MySQL Replica Sync Start
            • MySQL Replica Sync Error
            • MySQL Replica Sync End
            • MySQL Switchover Start
            • MySQL Switchover Error
            • MySQL Switchover End
            • MySQL Log Export Config Create Start
            • MySQL Log Export Config Create Error
            • MySQL Log Export Config Create End
            • MySQL Log Export Config Delete Start
            • MySQL Log Export Config Delete Error
            • MySQL Log Export Config Delete End
            • MySQL Log Export Config Modify Start
            • MySQL Log Export Config Modify Error
            • MySQL Log Export Config Modify End
            • MySQL Log Export Start
            • MySQL Log Export Error
            • MySQL Log Export End
            • MySQL Archive Config Modify Start
            • MySQL Archive Config Modify Error
            • MySQL Archive Config Modify End
            • MySQL Archive Config Sync Start
            • MySQL Archive Config Sync Error
            • MySQL Archive Config Sync End
            • MySQL Database Users Modify Start
            • MySQL Database Users Modify Error
            • MySQL Database Users Modify End
            • MySQL Database Users Sync Start
            • MySQL Database Users Sync Error
            • MySQL Database Users Sync End
            • MySQL Access Control Modify Start
            • MySQL Access Control Modify Error
            • MySQL Access Control Modify End
            • MySQL Access Control Sync Start
            • MySQL Access Control Sync Error
            • MySQL Access Control Sync End
            • MySQL Replica Cluster Promote Start
            • MySQL Replica Cluster Promote Error
            • MySQL Replica Cluster Promote End
            • MySQL Db Connection Check Start
            • MySQL Db Connection Check Error
            • MySQL Db Connection Check End
            • MySQL Cluster Migrate Start
            • MySQL Cluster Migrate Error
            • MySQL Cluster Migrate End
            • MySQL Migration Cluster Promote Start
            • MySQL Migration Cluster Promote Error
            • MySQL Migration Cluster Promote End
            Table. MySQL - Event of MySQL event type

            11.5.1.3 - Global CDN

            Global CDN event

            This is the list of events delivered from the Global CDN service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingGlobal CDNGlobal CDNGlobal CDNGlobal CDN
            Table. Global CDN Event Types

            Global CDN

            Event sourceEvent typeevent
            Global CDNGlobal CDN
            • Network CDN creation start
            • Network CDN creation error
            • Network CDN creation complete
            • Network CDN update start
            • Network CDN update error
            • Network CDN update complete
            • Network CDN deletion complete
            Table. Global CDN - Event of Global CDN event type

            11.5.1.4 - Data Flow

            Data Flow event

            This is the list of events delivered from the Data Flow service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsData FlowData FlowData FlowData Flow
            Data AnalyticsData FlowData Flow ServicesData FlowData Flow Service
            Table. Data Flow Event Types

            Data Flow

            Event sourceEvent typeevent
            Data FlowData Flow
            • Data Flow Create Start
            • Data Flow Create End
            • Data Flow Create Error
            • Data Flow Delete Start
            • Data Flow Delete End
            • Data Flow Delete Error
            • Data Flow Modify Start
            • Data Flow Modify End
            • Data Flow Modify Error
            Table. Data Flow - Event of the Data Flow event type

            Data Flow Service

            Event sourceEvent typeevent
            Data Flow ServicesData Flow Service
            • Data Flow Service Create Start
            • Data Flow Service Create End
            • Data Flow Service Create Error
            • Data Flow Service Delete Start
            • Data Flow Service Delete End
            • Data Flow Service Delete Error
            • Data Flow Service Modify Start
            • Data Flow Service Modify End
            • Data Flow Service Modify Error
            Table. Data Flow - Event of type Data Flow Service

            11.5.1.5 - GSLB

            GSLB event

            This is the list of events that the GSLB service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingGSLBGSLBGSLBGSLB
            Table. GSLB Event Types

            GSLB

            Event sourceEvent typeevent
            GSLBGSLB(cdn)
            • GSLB creation started
            • GSLB creation error
            • GSLB creation completed
            • GSLB update started
            • GSLB update completed
            • GSLB deletion completed
            • GSLB health check update started
            • GSLB health check update completed
            • GSLB resource update started
            • GSLB resource update completed
            Table. GSLB - Event of GSLB event type

            11.5.1.6 - Cloud Control

            Cloud Control event

            This is the list of events delivered from the Cloud Control service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementCloud ControlCloud ControlCloud ControlCloud Control
            Table. Cloud Control event types

            Landing Zone

            Event sourceEvent typeevent
            Cloud ControlLanding zone
            • Landing zone creation completed
            • Landing zone deletion started
            • Landing zone deletion error
            • Landing zone deletion completed
            Table. Cloud Control - Landing Zone event type events

            11.5.1.7 - Cloud WAN

            Cloud WAN event

            This is the list of events delivered from the Cloud WAN service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingCloud WANCloud WAN NetworkCloud WANNetwork(WAN)
            NetworkingCloud WANSegmentCloud WANSegment
            NetworkingCloud WANSegmentCloud WANSegment Location
            NetworkingCloud WANSegmentCloud WANSegment Sharing
            NetworkingCloud WANAttachmentCloud WANAttachment
            Table. Cloud WAN Event Types

            Network(WAN)

            Event sourceEvent typeevent
            Cloud WANNetwork(WAN)
            • Network(WAN) creation started
            • Network(WAN) creation error
            • Network(WAN) creation completed
            • Network(WAN) modification started
            • Network(WAN) modification error
            • Network(WAN) modification completed
            • Network(WAN) deletion started
            • Network(WAN) deletion error
            • Network(WAN) deletion completed
            Table. Cloud WAN - Network (WAN) event type events

            Segment

            Event sourceEvent typeevent
            Cloud WANSegment
            • Segment creation started
            • Segment creation error
            • Segment creation completed
            • Segment modification started
            • Segment modification error
            • Segment modification completed
            • Segment deletion started
            • Segment deletion error
            • Segment deletion completed
            Table. Event of the Cloud WAN - Segment type

            Segment Location

            Event sourceEvent typeEvent
            Cloud WANSegment Location
            • Segment Location creation start
            • Segment Location creation error
            • Segment Location creation completed
            • Segment Location edit start
            • Segment Location edit error
            • Segment Location edit completed
            • Segment Location deletion start
            • Segment Location deletion error
            • Segment Location deletion completed
            Table. Cloud WAN - Segment Location event type event

            Segment Sharing

            Event sourceEvent typeevent
            Cloud WANSegment Sharing
            • Segment Sharing creation started
            • Segment Sharing creation error
            • Segment Sharing creation completed
            • Segment Sharing modification started
            • Segment Sharing modification error
            • Segment Sharing modification completed
            • Segment Sharing deletion started
            • Segment Sharing deletion error
            • Segment Sharing deletion completed
            Table. Cloud WAN - Segment Sharing event type event

            Attachment

            Event sourceEvent typeEvent
            Cloud WANAttachment
            • Attachment creation started
            • Attachment creation error
            • Attachment creation completed
            • Attachment modification started
            • Attachment modification error
            • Attachment modification completed
            • Attachment deletion started
            • Attachment deletion error
            • Attachment deletion completed
            • Attachment approval started
            • Attachment approval error
            • Attachment approval completed
            • Attachment cancellation started
            • Attachment cancellation error
            • Attachment cancellation completed
            • Attachment rejection started
            • Attachment rejection error
            • Attachment rejection completed
            Table. Cloud WAN - Attachment event type events

            11.5.1.8 - Object Storage

            Object Storage event

            This is the list of events delivered from the Object Storage service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            StorageObject StorageObject StorageObject StorageBucket
            Table. Object Storage Event Types

            Bucket

            Event sourceEvent typeevent
            Object StorageBucket
            • Object Storage bucket creation started
            • Object Storage bucket creation completed
            • Object Storage bucket creation failed
            • Object Storage bucket deletion started
            • Object Storage bucket deletion completed
            • Object Storage bucket deletion failed
            • Object Storage bucket versioning update started
            • Object Storage bucket versioning update completed
            • Object Storage bucket versioning update failed
            • Object Storage bucket access control creation started
            • Object Storage bucket access control creation completed
            • Object Storage bucket access control creation failed
            • Object Storage bucket access control update started
            • Object Storage bucket access control update completed
            • Object Storage bucket access control update failed
            • Object Storage bucket access control deletion started
            • Object Storage bucket access control deletion completed
            • Object Storage bucket access control deletion failed
            • Object Storage bucket encryption creation started
            • Object Storage bucket encryption creation completed
            • Object Storage bucket encryption creation failed
            • Object Storage bucket encryption update started
            • Object Storage bucket encryption update completed
            • Object Storage bucket encryption update failed
            • Object Storage bucket encryption deletion started
            • Object Storage bucket encryption deletion completed
            • Object Storage bucket encryption deletion failed
            • Object Storage bucket replication policy update started
            • Object Storage bucket replication policy update completed
            • Object Storage bucket replication policy update failed
            • Object Storage bucket replication policy deletion started
            • Object Storage bucket replication policy deletion completed
            • Object Storage bucket replication policy deletion failed
            Table. Object Storage - Bucket event type events

            11.5.1.9 - VPC

            VPC event

            This is the list of events that the VPC service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingVPCVPCVPCVPC
            NetworkingVPCSubnetVPCSubnet
            NetworkingVPCPortVPCPort
            NetworkingVPCInternet GatewayVPCInternet Gateway
            NetworkingVPCNAT GatewayVPCNAT Gateway
            NetworkingVPCPublic IPVPCPublic IP
            NetworkingVPCPrivate NATVPCPrivate NAT
            NetworkingVPCVPC EndpointVPCVPC Endpoint
            NetworkingVPCVPC PeeringVPCVPC Peering
            NetworkingVPCPrivate Link ServiceVPCPrivate Link Service
            NetworkingVPCPrivate Link EndpointVPCPrivate Link Endpoint
            NetworkingVPCTransit GatewayVPCTransit Gateway
            Table. VPC Event Types

            VPC

            Event sourceEvent typeevent
            VPCVPC
            • VPC creation completed
            • VPC update completed
            • VPC deletion completed
            Table. VPC - VPC event type events

            Subnet

            Event sourceEvent typeevent
            VPCSubnet
            • Subnet creation started
            • Subnet creation error
            • Subnet creation completed
            • Subnet update completed
            • Subnet deletion started
            • Subnet deletion error
            • Subnet deletion completed
            Table. VPC - Subnet event type events

            Port

            Event sourceEvent typeevent
            VPCPort
            • Port creation completed
            • Port creation error
            • Port update completed
            • Port update error
            • Port deletion completed
            • Port deletion error
            Table. VPC - Subnet event type events

            Internet Gateway

            Event sourceEvent typeEvent
            VPCInternet Gateway
            • Internet Gateway creation started
            • Internet Gateway creation completed
            • Internet Gateway creation error
            • Internet Gateway update completed
            • Internet Gateway deletion started
            • Internet Gateway deletion error
            • Internet Gateway deletion completed
            Table. VPC - Internet Gateway event type

            NAT Gateway

            Event sourceEvent typeevent
            VPCNAT Gateway
            • Start NAT Gateway creation
            • NAT Gateway creation completed
            • NAT Gateway creation error
            • NAT Gateway update completed
            • Start NAT Gateway deletion
            • NAT Gateway deletion error
            • NAT Gateway deletion completed
            Table. VPC - NAT Gateway event type events

            Public IP

            Event sourceEvent typeEvent
            VPCPublic IP
            • Public IP creation completed
            • Public IP update completed
            • Public IP deletion completed
            Table. Event of VPC - Public IP event type

            Private NAT

            Event sourceEvent typeevent
            VPCPrivate NAT
            • Private NAT creation started
            • Private NAT creation completed
            • Private NAT creation error
            • Private NAT update completed
            • Private NAT deletion started
            • Private NAT deletion error
            • Private NAT deletion completed
            • Private NAT IP creation completed
            • Private NAT IP update completed
            • Private NAT IP deletion completed
            Table. VPC - Private NAT event type events

            VPC Endpoint

            Event sourceEvent typeevent
            VPCVPC Endpoint
            • VPC Endpoint creation started
            • VPC Endpoint creation completed
            • VPC Endpoint creation error
            • VPC Endpoint update completed
            • VPC Endpoint deletion started
            • VPC Endpoint deletion error
            • VPC Endpoint deletion completed
            Table. VPC - VPC Endpoint event type events

            VPC Peering

            Event sourceEvent typeevent
            VPCVPC Peering
            • VPC Peering creation started
            • VPC Peering creation error
            • VPC Peering creation completed
            • VPC Peering update completed
            • VPC Peering deletion started
            • VPC Peering deletion error
            • VPC Peering deletion completed
            • VPC Peering rule creation started
            • VPC Peering rule creation error
            • VPC Peering rule creation completed
            • VPC Peering rule deletion started
            • VPC Peering rule deletion error
            • VPC Peering rule deletion completed
            • VPC Peering creation approval requested
            • VPC Peering creation approval completed
            • VPC Peering creation approval rejected
            • VPC Peering creation approval canceled
            • VPC Peering creation approval re-requested
            • VPC Peering deletion approval requested
            • VPC Peering deletion approval completed
            • VPC Peering deletion approval rejected
            • VPC Peering deletion approval canceled
            Table. VPC - VPC Peering event type
            Event sourceEvent typeevent
            VPCPrivate Link Service
            • PrivateLink Service creation started
            • PrivateLink Service creation completed
            • PrivateLink Service creation error
            • PrivateLink Service update completed
            • PrivateLink Service deletion started
            • PrivateLink Service deletion error
            • PrivateLink Service deletion completed
            Table. VPC - Private Link Service event type events
            Event sourceEvent typeevent
            VPCPrivateLink Endpoint
            • PrivateLink Endpoint creation started
            • PrivateLink Endpoint creation approval request
            • PrivateLink Endpoint creation approval completed
            • PrivateLink Endpoint creation approval rejected
            • PrivateLink Endpoint creation approval canceled
            • PrivateLink Endpoint creation approval re-request
            • PrivateLink Endpoint creation error
            • PrivateLink Endpoint creation completed
            • PrivateLink Endpoint update completed
            • PrivateLink Endpoint disconnect completed
            • PrivateLink Endpoint disconnect completed
            • PrivateLink Endpoint deletion started
            • PrivateLink Endpoint deletion error
            • PrivateLink Endpoint deletion completed
            Table. VPC - PrivateLink Endpoint event type events

            Transit Gateway

            Event sourceEvent typeevent
            VPCTransit Gateway
            • Transit Gateway creation started
            • Transit Gateway creation error
            • Transit Gateway creation completed
            • Transit Gateway update completed
            • Transit Gateway uplink creation completed
            • Transit Gateway uplink deletion completed
            • Transit Gateway uplink update completed
            • Transit Gateway SNMP interface creation completed
            • Transit Gateway SNMP interface deletion completed
            • Transit Gateway deletion started
            • Transit Gateway deletion error
            • Transit Gateway deletion completed
            • Transit Gateway VPC attachment creation started
            • Transit Gateway VPC attachment creation error
            • Transit Gateway VPC attachment creation completed
            • Transit Gateway VPC attachment deletion started
            • Transit Gateway VPC attachment deletion error
            • Transit Gateway VPC attachment deletion completed
            • Transit Gateway rule creation started
            • Transit Gateway rule creation error
            • Transit Gateway rule creation completed
            • Transit Gateway rule deletion started
            • Transit Gateway rule deletion error
            • Transit Gateway rule deletion completed
            Table. VPC - Transit Gateway event type events

            11.5.1.10 - GPU Server

            GPU Server Event

            This is the list of events that the GPU Server service passes to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeGPU ServerGPU ServerGPU ServerServer
            ComputeGPU ServerImageGPU Server
            Table. GPU Server Event Types

            Server

            ServiceEvent typeevent
            GPU ServerServer(server)
            • Compute GPU Server Create Start
            • Compute GPU Server Create End
            • Compute GPU Server Create Error
            • Compute GPU Server Delete Start
            • Compute GPU Server Delete End
            • Compute GPU Server Delete Error
            • Compute GPU Server Update End
            • Compute GPU Server Lock End
            • Compute GPU Server Unlock End
            • Compute GPU Server Reboot Start
            • Compute GPU Server Reboot End
            • Compute GPU Server Reboot Error
            • Compute GPU Server Power On Start
            • Compute GPU Server Power On End
            • Compute GPU Server Power On Error
            • Compute GPU Server Power Off Start
            • Compute GPU Server Power Off End
            • Compute GPU Server Power Off Error
            • Compute GPU Server Rebuild Start
            • Compute GPU Server Rebuild End
            • Compute GPU Server Rebuild Error
            • Compute GPU Server Resize Start
            • Compute GPU Server Resize End
            • Compute GPU Server Resize Error
            • Compute GPU Server Resize Revert Start
            • Compute GPU Server Resize Revert End
            • Compute GPU Server Resize Revert Error
            • Compute GPU Server Dump Start
            • Compute GPU Server Dump End
            • Compute GPU Server Dump Error
            • Compute GPU Server Volume Attach Start
            • Compute GPU Server Volume Attach End
            • Compute GPU Server Volume Attach Error
            • Compute GPU Server Volume Detach Start
            • Compute GPU Server Volume Detach End
            • Compute GPU Server Volume Detach Error
            • Compute GPU Server Volume Update End
            • Compute GPU Server Volume Update Error
            • Compute GPU Server Interface Attach End
            • Compute GPU Server Interface Attach Error
            • Compute GPU Server Interface Detach End
            • Compute GPU Server Interface Detach Error
            • Compute GPU Server Interface Change Start
            • Compute GPU Server Interface Change End
            • Compute GPU Server Interface Change Error
            Table. GPU Server - Server event type events

            Image

            ServiceEvent typeEvent
            GPU ServerImage
            • Compute Image Create Start
            • Compute Image Create End
            • Compute Image Import Start
            • Compute Image Update End
            • Compute Image Delete End
            • Compute Image Member Create End
            • Compute Image Member Update End
            • Compute Image Member Delete End
            • Compute Image Import End
            • Compute Image Import Error
            • Compute Sharing Image Create Start
            • Compute Sharing Image Create End
            • Compute Sharing Image Create Error
            Table. GPU Server - Image event type event

            11.5.1.11 - Virtual Server

            Virtual Server event

            This is the list of events that the Virtual Server service passes to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeVirtual ServerVirtual ServerVirtual ServerServer
            ComputeVirtual ServerImageVirtual ServerImage
            ComputeVirtual ServerKeypairVirtual ServerKeypair
            ComputeVitual ServerServer GroupVirtual ServerServer Group
            ComputeVirtual ServerLaunch ConfigurationVirtual ServerLaunch Configuration
            ComputeVirtual ServerAuto-Scaling GroupVirtual ServerAuto-Scaling Group
            ComputeVirtual ServerBlock StorageVirtual ServerVolume
            ComputeVirtual ServerBlock StorageVirtual ServerSnapshot
            Table. Virtual Server Event Types

            Server

            Event sourceEvent typeevent
            Virtual ServerServer
            • Compute Virtual Server Create Start
            • Compute Virtual Server Create End
            • Compute Virtual Server Create Error
            • Compute Virtual Server Delete Start
            • Compute Virtual Server Delete End
            • Compute Virtual Server Delete Error
            • Compute Virtual Server Update End
            • Compute Virtual Server Lock End
            • Compute Virtual Server Unlock End
            • Compute Virtual Server Reboot Start
            • Compute Virtual Server Reboot End
            • Compute Virtual Server Reboot Error
            • Compute Virtual Server Power On Start
            • Compute Virtual Server Power On End
            • Compute Virtual Server Power On Error
            • Compute Virtual Server Power Off Start
            • Compute Virtual Server Power Off End
            • Compute Virtual Server Power Off Error
            • Compute Virtual Server Rebuild Start
            • Compute Virtual Server Rebuild End
            • Compute Virtual Server Rebuild Error
            • Compute Virtual Server Resize Start
            • Compute Virtual Server Resize End
            • Compute Virtual Server Resize Error
            • Compute Virtual Server Resize Revert Start
            • Compute Virtual Server Resize Revert End
            • Compute Virtual Server Resize Revert Error
            • Compute Virtual Server Dump Start
            • Compute Virtual Server Dump End
            • Compute Virtual Server Dump Error
            • Compute Virtual Server Volume Attach Start
            • Compute Virtual Server Volume Attach End
            • Compute Virtual Server Volume Attach Error
            • Compute Virtual Server Volume Detach Start
            • Compute Virtual Server Volume Detach End
            • Compute Virtual Server Volume Detach Error
            • Compute Virtual Server Volume Update End
            • Compute Virtual Server Volume Update Error
            • Compute Virtual Server Interface Attach End
            • Compute Virtual Server Interface Attach Error
            • Compute Virtual Server Interface Detach End
            • Compute Virtual Server Interface Detach Error
            • Compute Virtual Server Interface Change Start
            • Compute Virtual Server Interface Change End
            • Compute Virtual Server Interface Change Error
            Table. Virtual Server - Server event type events

            Image

            Event sourceEvent typeevent
            Virtual ServerImage
            • Compute Image Create Start
            • Compute Image Create End
            • Compute Image Import Start
            • Compute Image Update End
            • Compute Image Delete End
            • Compute Image Member Create End
            • Compute Image Member Update End
            • Compute Image Member Delete End
            • Compute Image Import End
            • Compute Image Import Error
            • Compute Sharing Image Create Start
            • Compute Sharing Image Create End
            • Compute Sharing Image Create Error
            Table. Event of the Virtual Server - Image event type

            Keypair

            Event sourceEvent typeevent
            Virtual ServerKeypair
            • Compute Keypair Create End
            • Compute Keypair Delete End
            Table. Virtual Server - Keypair event type events

            Server Group

            Event sourceEvent typeevent
            Virtual ServerServer Group
            • Compute Server Group Create End
            • Compute Server Group Delete End
            Table. Virtual Server - Server Group event type.

            Launch Configuration

            Event sourceEvent typeevent
            Virtual ServerLaunch Configuration
            • Compute Launch Configuration Create End
            • Compute Launch Configuration Delete End
            Table. Event of the Virtual Server - Launch Configuration event type

            Auto-Scaling Group

            Event sourceEvent typeevent
            Virtual ServerAuto-Scaling Group
            • Compute Auto-Scaling Group Create End
            • Compute Auto-Scaling Group Delete End
            • Compute Auto-Scaling Group Delete Error
            • Compute Auto-Scaling Group Policy Create End
            • Compute Auto-Scaling Group Policy Delete End
            • Compute Auto-Scaling Group Policy Update End
            • Compute Auto-Scaling Group Virtual Server Attach End
            • Compute Auto-Scaling Group Virtual Server Detach End
            • Compute Auto-Scaling Group LB Server Group Update Start
            • Compute Auto-Scaling Group LB Server Group Update End/li>
            • Compute Auto-Scaling Group LB Server Group Update Error
            • Compute Auto-Scaling Group Policy Receive Alarm End
            • Compute Auto-Scaling Group Server Count Update End
            • Compute Auto-Scaling Group Update End
            • Compute Auto-Scaling Group Schedule Execute End
            • Compute Auto-Scaling Group Scale Out Start
            • Compute Auto-Scaling Group Scale Out End
            • Compute Auto-Scaling Group Scale In Start
            • Compute Auto-Scaling Group Scale In End
            • Compute Auto-Scaling Group Scale Out Error
            • Compute Auto-Scaling Group Scale In Error
            • Compute Auto-Scaling Group Schedule Create End
            • Compute Auto-Scaling Group Schedule Delete End
            • Compute Auto-Scaling Group Schedule Update End
            • Compute Auto-Scaling Group Notification Create End
            • Compute Auto-Scaling Group Notification Delete End
            • Compute Auto-Scaling Group Notification Update End
            • Compute Auto-Scaling Group Scale Request End
            Table. Virtual Server - Auto-Scaling Group event type

            Volume

            Event sourceEvent typeevent
            Virtual ServerVolume
            • Block Storage Volume Create Start
            • Block Storage Volume Create Error
            • Block Storage Volume Create End
            • Block Storage Volume Delete Start
            • Block Storage Volume Delete Error
            • Block Storage Volume Delete End
            • Block Storage Volume Update End
            • Block Storage Volume Resize Start
            • Block Storage Volume Resize Error
            • Block Storage Volume Resize End
            • Block Storage Volume Attach Start
            • Block Storage Volume Attach Error
            • Block Storage Volume Attach End
            • Block Storage Volume Detach Start
            • Block Storage Volume Detach Error
            • Block Storage Volume Detach End
            • Block Storage Volume Transfer Create Start
            • Block Storage Volume Transfer Create Error
            • Block Storage Volume Transfer Create End
            • Block Storage Volume Transfer Delete Start
            • Block Storage Volume Transfer Delete Error
            • Block Storage Volume Transfer Delete End
            • Block Storage Volume Transfer Accept Start
            • Block Storage Volume Transfer Accept Error
            • Block Storage Volume Transfer Accept End
            Table. Events of the Virtual Server - Volume event type

            Snapshot

            Event sourceEvent typeevent
            Virtual ServerSnapshot
            • Block Storage Snapshot Revert Start
            • Block Storage Snapshot Revert Error
            • Block Storage Snapshot Revert End
            • Block Storage Snapshot Create Start
            • Block Storage Snapshot Create Error
            • Block Storage Snapshot Create End
            • Block Storage Snapshot Delete Start
            • Block Storage Snapshot Delete Error
            • Block Storage Snapshot Delete End
            • Block Storage Snapshot Update End
            Table. Virtual Server - Snapshot event type

            11.5.1.12 - Firewall

            Firewall event

            This is the list of events that the Firewall service passes to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingFirewallfirewallFirewallFirewall
            Table. Firewall Event Types

            Firewall

            Event sourceEvent typeevent
            FirewallFirewall
            • Firewall creation error
            • Firewall creation completed
            • Firewall deletion error
            • Firewall deletion completed
            • Firewall resize completed
            • Firewall resize error
            • Firewall activation completed
            • Firewall activation error
            • Firewall deactivation completed
            • Firewall deactivation error
            • Firewall update completed
            • Firewall update error
            • Firewall Rule creation completed
            • Firewall Rule creation error
            • Firewall Rule deletion completed
            • Firewall Rule deletion error
            • Firewall Rule update completed
            • Firewall Rule update error
            Table. Firewall - Event of firewall event type

            11.5.1.13 - ID Center

            ID Center Event

            This is the list of events that the ID Center service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementID CenterID CenterIdentity CenterID Center
            ManagementID CenterPermission setIdentity CenterPermission Set
            Table. ID Center Event Types

            ID Center

            Event sourceEvent typeevent
            Identity CenterID Center
            • Identity Center ID Center creation started
            • Identity Center ID Center creation failed
            • Identity Center ID Center creation completed
            • Identity Center ID Center modification started
            • Identity Center ID Center modification failed
            • Identity Center ID Center modification completed
            • Identity Center ID Center deletion started
            • Identity Center ID Center deletion failed
            • Identity Center ID Center deletion completed
            Table. ID Center - ID Center event of the event type

            Permission Set

            Event sourceEvent typeevent
            Identity CenterPermission set
            • Identity Center permission set creation started
            • Identity Center permission set creation failed
            • Identity Center permission set creation completed
            • Identity Center permission set modification started
            • Identity Center permission set modification failed
            • Identity Center permission set modification completed
            • Identity Center permission set deletion started
            • Identity Center permission set deletion failed
            • Identity Center permission set deletion completed
            Table. ID Center - Permission Set Event Type Event

            11.5.1.14 - Microsoft SQL Server(DBaaS)

            Microsoft SQL Server(DBaaS) Event

            This is the list of events that the Microsoft SQL Server (DBaaS) service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            DatabaseMicrosoft SQL Server(DBaaS)Microsoft SQL Server(DBaaS)Microsoft SQL ServerMicrosoft SQL Server
            Table. Microsoft SQL Server(DBaaS) Event Types

            Microsoft SQL Server

            Event sourceEvent typeEvent
            Microsoft SQL ServerMicrosoft SQL Server
            • SQL Server Create Start
            • SQL Server Create Error
            • SQL Server Create End
            • SQL Server Delete Start
            • SQL Server Delete Error
            • SQL Server Delete End
            • SQL Server Start Start
            • SQL Server Start Error
            • SQL Server Start End
            • SQL Server Stop Start
            • SQL Server Stop Error
            • SQL Server Stop End
            • SQL Server Restart Start
            • SQL Server Restart Error
            • SQL Server Restart End
            • SQL Server Sync Start
            • SQL Server Sync Error
            • SQL Server Sync End
            • SQL Server Audit Log Modify Start
            • SQL Server Audit Log Modify Error
            • SQL Server Audit Log Modify End
            • SQL Server Maintenance Modify Start
            • SQL Server Maintenance Modify Error
            • SQL Server Maintenance Modify End
            • SQL Server Maintenance Delete Start
            • SQL Server Maintenance Delete Error
            • SQL Server Maintenance Delete End
            • SQL Server Security Group Rule Modify Start
            • SQL Server Security Group Rule Modify Error
            • SQL Server Security Group Rule Modify End
            • SQL Server Instance Resize Start
            • SQL Server Instance Resize Error
            • SQL Server Instance Resize End
            • SQL Server Block Storage Create Start
            • SQL Server Block Storage Create Error
            • SQL Server Block Storage Create End
            • SQL Server Block Storage Resize Start
            • SQL Server Block Storage Resize Error
            • SQL Server Block Storage Resize End
            • SQL Server Parameter Sync Start
            • SQL Server Parameter Sync Error
            • SQL Server Parameter Sync End
            • SQL Server Parameter Modify Start
            • SQL Server Parameter Modify Error
            • SQL Server Parameter Modify End
            • SQL Server Patch Start
            • SQL Server Patch Error
            • SQL Server Patch End
            • SQL Server Backup Config Create Start
            • SQL Server Backup Config Create Error
            • SQL Server Backup Config Create End
            • SQL Server Backup Config Modify Start
            • SQL Server Backup Config Modify Error
            • SQL Server Backup Config Modify End
            • SQL Server Backup Config Delete Start
            • SQL Server Backup Config Delete Error
            • SQL Server Backup Config Delete End
            • SQL Server Backup Recover Start
            • SQL Server Backup Recover Error
            • SQL Server Backup Recover End
            • SQL Server Backup History Delete Start
            • SQL Server Backup History Delete Error
            • SQL Server Backup History Delete End
            • SQL Server Switchover Start
            • SQL Server Switchover Error
            • SQL Server Switchover End
            • SQL Server Database Modify Start
            • SQL Server Database Modify Error
            • SQL Server Database Modify End
            • SQL Server Log Export Config Create Start
            • SQL Server Log Export Config Create Error
            • SQL Server Log Export Config Create End
            • SQL Server Log Export Config Delete Start
            • SQL Server Log Export Config Delete Error
            • SQL Server Log Export Config Delete End
            • SQL Server Log Export Config Modify Start
            • SQL Server Log Export Config Modify Error
            • SQL Server Log Export Config Modify End
            • SQL Server Log Export Start
            • SQL Server Log Export Error
            • SQL Server Log Export End
            • SQL Server Database Users Modify Start
            • SQL Server Database Users Modify Error
            • SQL Server Database Users Modify End
            • SQL Server Database Users Sync Start
            • SQL Server Database Users Sync Error
            • SQL Server Database Users Sync End
            • SQL Server Secondary Add Start
            • SQL Server Secondary Add Error
            • SQL Server Secondary Add End
            Table. Microsoft SQL Server - Event of Microsoft SQL Server event type

            11.5.1.15 - Block Storage(BM)

            Block Storage(BM) Event

            List of events sent from the Block Storage (BM) service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            StorageBlock Storage(BM)Block Storage(BM)Block Storage(BM)Volume
            StorageBlock Storage(BM)Volume Group(BM)Block Storage(BM)Volume Group
            Table. Block Storage(BM) Event Types

            Volume

            Event sourceEvent typeevent
            Block Storage(BM)Volume
            • Block Storage(BM) Volume creation started
            • Block Storage(BM) Volume creation completed
            • Block Storage(BM) Volume creation failed
            • Block Storage(BM) Volume attachment server creation started
            • Block Storage(BM) Volume attachment server creation completed
            • Block Storage(BM) Volume attachment server creation failed
            • Block Storage(BM) Volume attachment server deletion started
            • Block Storage(BM) Volume attachment server deletion completed
            • Block Storage(BM) Volume attachment server deletion failed
            • Block Storage(BM) Volume deletion started
            • Block Storage(BM) Volume deletion completed
            • Block Storage(BM) Volume deletion failed
            • Block Storage(BM) Volume snapshot capacity creation started
            • Block Storage(BM) Volume snapshot capacity creation completed
            • Block Storage(BM) Volume snapshot capacity creation failed
            • Block Storage(BM) Volume snapshot capacity modification started
            • Block Storage(BM) Volume snapshot capacity modification completed
            • Block Storage(BM) Volume snapshot capacity modification failed
            • Block Storage(BM) Volume snapshot capacity deletion started
            • Block Storage(BM) Volume snapshot capacity deletion completed
            • Block Storage(BM) Volume snapshot capacity deletion failed
            • Block Storage(BM) Volume snapshot creation started
            • Block Storage(BM) Volume snapshot creation completed
            • Block Storage(BM) Volume snapshot creation failed
            • Block Storage(BM) Volume snapshot restore started
            • Block Storage(BM) Volume snapshot restore completed
            • Block Storage(BM) Volume snapshot restore failed
            • Block Storage(BM) Volume snapshot deletion started
            • Block Storage(BM) Volume snapshot deletion completed
            • Block Storage(BM) Volume snapshot deletion failed
            • Block Storage(BM) Volume snapshot schedule creation started
            • Block Storage(BM) Volume snapshot schedule creation completed
            • Block Storage(BM) Volume snapshot schedule creation failed
            • Block Storage(BM) Volume snapshot schedule modification started
            • Block Storage(BM) Volume snapshot schedule modification completed
            • Block Storage(BM) Volume snapshot schedule modification failed
            • Block Storage(BM) Volume snapshot schedule deletion started
            • Block Storage(BM) Volume snapshot schedule deletion completed
            • Block Storage(BM) Volume snapshot schedule deletion failed
            • Block Storage(BM) Volume name modification started
            • Block Storage(BM) Volume name modification completed
            • Block Storage(BM) Volume name modification failed
            • Block Storage(BM) Volume replication creation started
            • Block Storage(BM) Volume replication creation completed
            • Block Storage(BM) Volume replication creation failed
            • Block Storage(BM) Volume replication deletion started
            • Block Storage(BM) Volume replication deletion completed
            • Block Storage(BM) Volume replication deletion failed
            • Block Storage(BM) Volume replication policy creation started
            • Block Storage(BM) Volume replication policy creation completed
            • Block Storage(BM) Volume replication policy creation failed
            • Block Storage(BM) Volume replication policy modification started
            • Block Storage(BM) Volume replication policy modification completed
            • Block Storage(BM) Volume replication policy modification failed
            • Block Storage(BM) Volume replication policy deletion started
            • Block Storage(BM) Volume replication policy deletion completed
            • Block Storage(BM) Volume replication policy deletion failed
            • Block Storage(BM) Volume relationship creation started
            • Block Storage(BM) Volume relationship creation completed
            • Block Storage(BM) Volume relationship creation failed
            • Block Storage(BM) Volume relationship deletion started
            • Block Storage(BM) Volume relationship deletion completed
            • Block Storage(BM) Volume relationship deletion failed
            • Block Storage(BM) Volume replication cycle modification started
            • Block Storage(BM) Volume replication cycle modification completed
            • Block Storage(BM) Volume replication cycle modification failed
            • Block Storage(BM) Volume backup creation started
            • Block Storage(BM) Volume backup creation completed
            • Block Storage(BM) Volume backup creation failed
            Table. Block Storage (BM) - Volume event type events

            Volume Group

            Event sourceEvent typeevent
            Volume Group(BM)Volume Group
            • Block Storage(BM) Volume Group creation started
            • Block Storage(BM) Volume Group creation completed
            • Block Storage(BM) Volume Group creation failed
            • Block Storage(BM) Volume Group member addition started
            • Block Storage(BM) Volume Group member addition completed
            • Block Storage(BM) Volume Group member addition failed
            • Block Storage(BM) Volume Group member removal started
            • Block Storage(BM) Volume Group member removal completed
            • Block Storage(BM) Volume Group member removal failed
            • Block Storage(BM) Volume Group deletion started
            • Block Storage(BM) Volume Group deletion completed
            • Block Storage(BM) Volume Group deletion failed
            • Block Storage(BM) Volume Group snapshot creation started
            • Block Storage(BM) Volume Group snapshot creation completed
            • Block Storage(BM) Volume Group snapshot creation failed
            • Block Storage(BM) Volume Group snapshot restore started
            • Block Storage(BM) Volume Group snapshot restore completed
            • Block Storage(BM) Volume Group snapshot restore failed
            • Block Storage(BM) Volume Group snapshot deletion started
            • Block Storage(BM) Volume Group snapshot deletion completed
            • Block Storage(BM) Volume Group snapshot deletion failed
            • Block Storage(BM) Volume Group snapshot schedule creation started
            • Block Storage(BM) Volume Group snapshot schedule creation completed
            • Block Storage(BM) Volume Group snapshot schedule creation failed
            • Block Storage(BM) Volume Group snapshot schedule modification started
            • Block Storage(BM) Volume Group snapshot schedule modification completed
            • Block Storage(BM) Volume Group snapshot schedule modification failed
            • Block Storage(BM) Volume Group snapshot schedule deletion started
            • Block Storage(BM) Volume Group snapshot schedule deletion completed
            • Block Storage(BM) Volume Group snapshot schedule deletion failed
            • Block Storage(BM) Volume Group replication creation started
            • Block Storage(BM) Volume Group replication creation completed
            • Block Storage(BM) Volume Group replication creation failed
            • Block Storage(BM) Volume Group replication deletion started
            • Block Storage(BM) Volume Group replication deletion completed
            • Block Storage(BM) Volume Group replication deletion failed
            • Block Storage(BM) Volume Group replication policy creation started
            • Block Storage(BM) Volume Group replication policy creation completed
            • Block Storage(BM) Volume Group replication policy creation failed
            • Block Storage(BM) Volume Group replication policy modification started
            • Block Storage(BM) Volume Group replication policy modification completed
            • Block Storage(BM) Volume Group replication policy modification failed
            • Block Storage(BM) Volume Group replication policy deletion started
            • Block Storage(BM) Volume Group replication policy deletion completed
            • Block Storage(BM) Volume Group replication policy deletion failed
            • Block Storage(BM) Volume Group relationship creation started
            • Block Storage(BM) Volume Group relationship creation completed
            • Block Storage(BM) Volume Group relationship creation failed
            • Block Storage(BM) Volume Group relationship deletion started
            • Block Storage(BM) Volume Group relationship deletion completed
            • Block Storage(BM) Volume Group relationship deletion failed
            • Block Storage(BM) Volume Group replication interval modification started
            • Block Storage(BM) Volume Group replication interval modification completed
            • Block Storage(BM) Volume Group replication interval modification failed
            • Block Storage(BM) Volume Group recovery point creation started
            • Block Storage(BM) Volume Group recovery point creation completed
            • Block Storage(BM) Volume Group recovery point creation failed
            Table. Block Storage (BM) - Volume Group event type events

            11.5.1.16 - Resource Groups

            Resource Groups event

            This is the list of events that the Resource Groups service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementResource GroupsResource GroupsResource GroupsResource Group
            Table. Resource Groups event types

            Resource Group

            Event sourceEvent typeevent
            Resource GroupsResource Group
            • Resource Group creation completed
            • Resource Group modification completed
            • Resource Group deletion completed
            Table. Resource Groups - Resource Group event type

            11.5.1.17 - Cloud Functions

            Cloud Functions event

            This is a list of events delivered from the Cloud Functions service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeCloud FunctionsFunctionCloud FunctionsCloud Functions
            Table. Cloud Functions event types

            Cloud Functions

            Event sourceEvent typeevent
            Cloud FunctionsCloud Functions
            • Function creation started
            • Function creation failed
            • Function creation completed
            • Function modification started
            • Function modification failed
            • Function modification completed
            • Function deletion started
            • Function deletion failed
            Table. Cloud Functions - Event of the Cloud Functions event type

            11.5.1.18 - AI&MLOps Platform

            AI&MLOps Platform event

            This is the list of events delivered from the AI&MLOps Platform service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            AI-MLAI&MLOps PlatformAI&MLOps PlatformAI&MLOps PlatformAI&MLOps Platform
            Table. AI&MLOps Platform Event Types

            AI&MLOps Platform

            Event sourceEvent typeevent
            AI&MLOps PlatformAI&MLOps Platform
            • AI&MLOps Platform Create Start
            • AI&MLOps Platform Create End
            • AI&MLOps Platform Create Error
            • AI&MLOps Platform Delete Start
            • AI&MLOps Platform Delete End
            • AI&MLOps Platform Delete Error
            • AI&MLOps Platform Modify Start
            • AI&MLOps Platform Modify End
            • AI&MLOps Platform Modify Error
            Table. AI&MLOps Platform – Event of the AI&MLOps Platform event type

            11.5.1.19 - Event Streams

            Event Streams event

            This is the list of events delivered from the Event Streams service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsEvent StreamsEvent StreamsEvent StreamsEvent Streams
            Table. Event Streams Event Types

            Event Streams

            Event sourceEvent typeEvent
            Event StreamsEvent Streams
            • Event Streams Create Start
            • Event Streams Create Error
            • Event Streams Create End
            • Event Streams Delete Start
            • Event Streams Delete Error
            • Event Streams Delete End
            • Event Streams Start Start
            • Event Streams Start Error
            • Event Streams Start End
            • Event Streams Stop Start
            • Event Streams Stop Error
            • Event Streams Stop End
            • Event Streams Restart Start
            • Event Streams Restart Error
            • Event Streams Restart End
            • Event Streams Sync Start
            • Event Streams Sync Error
            • Event Streams Sync End
            • Event Streams Maintenance Modify Start
            • Event Streams Maintenance Modify Error
            • Event Streams Maintenance Modify End
            • Event Streams Maintenance Delete Start
            • Event Streams Maintenance Delete Error
            • Event Streams Maintenance Delete End
            • Event Streams Security Group Rule Modify Start
            • Event Streams Security Group Rule Modify Error
            • Event Streams Security Group Rule Modify End
            • Event Streams Instance Resize Start
            • Event Streams Instance Resize Error
            • Event Streams Instance Resize End
            • Event Streams Instance Add Start
            • Event Streams Instance Add Error
            • Event Streams Instance Add End
            • Event Streams Block Storage Resize Start
            • Event Streams Block Storage Resize Error
            • Event Streams Block Storage Resize End
            • Event Streams Parameter Sync Start
            • Event Streams Parameter Sync Error
            • Event Streams Parameter Sync End
            • Event Streams Parameter Modify Start
            • Event Streams Parameter Modify Error
            • Event Streams Parameter Modify End
            • CacheStore Backup Config Modify Start
            • CacheStore Backup Config Modify Error
            • CacheStore Backup Config Modify End
            • CacheStore Backup Config Delete Start
            • CacheStore Backup Config Delete Error
            • CacheStore Backup Config Delete End
            • CacheStore Backup Recover Start
            • CacheStore Backup Recover Error
            • CacheStore Backup Recover End
            • CacheStore Backup History Delete Start
            • CacheStore Backup History Delete Error
            • CacheStore Backup History Delete End
            • CacheStore Command Sync Start
            • CacheStore Command Sync Error
            • CacheStore Command Sync End
            • CacheStore Command Modify Start
            • CacheStore Command Modify Error
            • CacheStore Command Modify End
            • CacheStore Switchover Start
            • CacheStore Switchover Error
            • CacheStore Switchover End
            Table. Event Streams - Event type events

            11.5.1.20 - Security Group

            Security Group event

            This is the list of events that the Security Group service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingSecurity GroupSecurity GroupSecurity GroupSecurity Group
            Table. Security Group event types

            Security Group

            Event sourceEvent typeevent
            Security GroupSecurity Group
            • Security Group creation completed
            • Security Group deletion completed
            • Security Group modification completed
            • Security Group rule creation completed
            • Security Group rule deletion completed
            Table. Security Group – Security Group event type events

            11.5.1.21 - Archive Storage

            Archive Storage event

            This is the list of events delivered from the Archive Storage service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeArchive StorageArchive StorageArchive StorageBucket
            Table. Archive Storage Event Types

            Bucket

            Event sourceEvent typeEvent
            Archive StorageBucket
            • Archive Storage bucket creation started
            • Archive Storage bucket creation completed
            • Archive Storage bucket creation failed
            • Archive Storage bucket deletion started
            • Archive Storage bucket deletion completed
            • Archive Storage bucket deletion failed
            • Archive Storage bucket archiving policy creation started
            • Archive Storage bucket archiving policy creation completed
            • Archive Storage bucket archiving policy creation failed
            • Archive Storage bucket archiving policy update started
            • Archive Storage bucket archiving policy update completed
            • Archive Storage bucket archiving policy update failed
            • Archive Storage bucket archiving policy deletion started
            • Archive Storage bucket archiving policy deletion completed
            • Archive Storage bucket archiving policy deletion failed
            • Archive Storage bucket recovery history cancellation started
            • Archive Storage bucket recovery history cancellation completed
            • Archive Storage bucket recovery history cancellation failed
            • Archive Storage bucket archiving history cancellation started
            • Archive Storage bucket archiving history cancellation completed
            • Archive Storage bucket archiving history cancellation failed
            • Archive Storage bucket versioning modification started
            • Archive Storage bucket versioning modification completed
            • Archive Storage bucket versioning modification failed
            • Archive Storage bucket encryption modification started
            • Archive Storage bucket encryption modification completed
            • Archive Storage bucket encryption modification failed
            • Archive Storage bucket archiving policy status modification started
            • Archive Storage bucket archiving policy status modification completed
            • Archive Storage bucket archiving policy status modification failed
            Table. Archive Storage - Bucket event type event

            11.5.1.22 - API Gateway

            API Gateway event

            This is the list of events that the API Gateway service passes to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            Application ServiceAPI GatewayAPI GatewayAPI GatewayAPI Gateway
            Table. API Gateway event types

            API Gateway

            Event sourceEvent typeevent
            API GatewayAPI Gateway
            • API Gateway API creation request
            • API Gateway API creation failed
            • API Gateway API creation succeeded
            • API Gateway API update failed
            • API Gateway API update succeeded
            • API Gateway API deletion request
            • API Gateway API deletion failed
            • API Gateway API deletion succeeded
            • API Gateway resource creation failed
            • API Gateway resource creation succeeded
            • API Gateway resource deletion failed
            • API Gateway resource deletion succeeded
            • API Gateway method creation failed
            • API Gateway method creation succeeded
            • API Gateway method update failed
            • API Gateway method update succeeded
            • API Gateway method deletion failed
            • API Gateway method deletion succeeded
            • API Gateway stage creation failed
            • API Gateway stage creation succeeded
            • API Gateway stage update failed
            • API Gateway stage update succeeded
            • API Gateway stage deletion failed
            • API Gateway stage deletion succeeded
            • API Gateway deployment creation failed
            • API Gateway deployment creation succeeded
            • API Gateway deployment update failed
            • API Gateway deployment update succeeded
            • API Gateway authorizer creation failed
            • API Gateway authorizer creation succeeded
            • API Gateway authorizer update failed
            • API Gateway authorizer update succeeded
            • API Gateway authorizer deletion failed
            • API Gateway authorizer deletion succeeded
            • API Gateway access control creation failed
            • API Gateway access control creation succeeded
            • API Gateway access control update failed
            • API Gateway access control update succeeded
            • API Gateway access control deletion failed
            • API Gateway access control deletion succeeded
            • API Gateway usage plan creation failed
            • API Gateway usage plan creation succeeded
            • API Gateway usage plan description update failed
            • API Gateway usage plan description update succeeded
            • API Gateway usage plan quota update failed
            • API Gateway usage plan quota update succeeded
            • API Gateway usage plan deletion failed
            • API Gateway usage plan deletion succeeded
            • API Gateway API Key creation failed
            • API Gateway API Key creation succeeded
            • API Gateway API Key update failed
            • API Gateway API Key update succeeded
            • API Gateway API Key deletion failed
            • API Gateway API Key deletion succeeded
            Table. API Gateway - Event of API Gateway event type

            11.5.1.23 - Load Balancer

            Load Balancer event

            This is the list of events delivered from the Load Balancer service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingLoad BalancerLoad BalancerLoad BalancerLoad Balancer
            NetworkingLoad BalancerLoad BalancerLoad BalancerLB Listener
            NetworkingLoad BalancerLB server groupLoad BalancerLB Server Group
            NetworkingLoad BalancerLB health checkLoad BalancerLB Health Check
            Table. Load Balancer Event Types

            Load Balancer

            Event sourceEvent typeevent
            Load BalancerLoad Balancer(security-group)
            • Load Balancer creation completed
            • Load Balancer deletion completed
            • Load Balancer update completed
            Table. Load Balancer - Load Balancer event type events

            LB Listener

            Event sourceEvent typeevent
            LB ListenerLB Listener
            • LB Listener creation completed
            • LB Listener deletion completed
            • LB Listener update completed
            Table. Load Balancer - LB Listener event type events

            LB Server Group

            Event sourceEvent typeevent
            LB Server GroupLB Server Group
            • LB Server Group creation completed
            • LB Server Group deletion completed
            • LB Server Group update completed
            • LB Server Group deletion completed
            • LB Server Group member creation completed
            • LB Server Group member update completed
            • LB Server Group member deletion completed
            Table. Load Balancer - LB Server Group event type events

            LB Health Check

            Event sourceEvent typeevent
            LB Health CheckLB Health Check
            • LB Health Check creation completed
            • LB Health Check deletion completed
            • LB Health Check update completed
            Table. Load Balancer - LB Health Check event type event

            11.5.1.24 - Data Ops

            Data Ops event

            This is the list of events that the Data Ops service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsData OpsData OpsData OpsData Ops
            Data AnalyticsData OpsData Ops ServicesData OpsData Ops Service
            Table. Data Ops Event Types

            Data Ops

            Event sourceEvent typeevent
            Data OpsData Ops
            • Data Ops Create Start
            • Data Ops Create End
            • Data Ops Create Error
            • Data Ops Delete Start
            • Data Ops Delete End
            • Data Ops Delete Error
            • Data Ops Modify Start
            • Data Ops Modify End
            • Data Ops Modify Error
            Table. Data Ops - Event of the Data Ops event type

            Data Ops Service

            Event sourceEvent typeevent
            Data Ops ServicesData Ops Service
            • Data Ops Service Create Start
            • Data Ops Service Create End
            • Data Ops Service Create Error
            • Data Ops Service Delete Start
            • Data Ops Service Delete End
            • Data Ops Service Delete Error
            • Data Ops Service Modify Start
            • Data Ops Service Modify End
            • Data Ops Service Modify Error
            Table. Data Ops - Data Ops Service event type events

            11.5.1.25 - Scalable DB(DBaaS)

            Scalable DB event

            This is the list of events that the Scalable DB (DBaaS) service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsScalable DB(DBaaS)Scalable DB(DBaaS)Scalable DBScalable DB
            Table. Scalable DB Event Types

            Scalable DB

            Event sourceEvent typeevent
            Scalable DBScalable DB
            • Scalable DB Create Start
            • Scalable DB Create Error
            • Scalable DB Create End
            • Scalable DB Delete Start
            • Scalable DB Delete Error
            • Scalable DB Delete End
            • Scalable DB Start Start
            • Scalable DB Start Error
            • Scalable DB Start End
            • Scalable DB Stop Start
            • Scalable DB Stop Error
            • Scalable DB Stop End
            • Scalable DB Sync Start
            • Scalable DB Sync Error
            • Scalable DB Sync End
            • Scalable DB Instance Group Restart Start
            • Scalable DB Instance Group Restart Error
            • Scalable DB Instance Group Restart End
            • Scalable DB Maintenance Modify Start
            • Scalable DB Maintenance Modify Error
            • Scalable DB Maintenance Modify End
            • Scalable DB Maintenance Delete Start
            • Scalable DB Maintenance Delete Error
            • Scalable DB Maintenance Delete End
            • Scalable DB Security Group Rule Modify Start
            • Scalable DB Security Group Rule Modify Error
            • Scalable DB Security Group Rule Modify End
            • Scalable DB Backup Config Create Start
            • Scalable DB Backup Config Create Error
            • Scalable DB Backup Config Create End
            • Scalable DB Backup Config Modify Start
            • Scalable DB Backup Config Modify Error
            • Scalable DB Backup Config Modify End
            • Scalable DB Backup Config Delete Start
            • Scalable DB Backup Config Delete Error
            • Scalable DB Backup Config Delete End
            • Scalable DB Backup History Delete Start
            • Scalable DB Backup History Delete Error
            • Scalable DB Backup History Delete End
            • Scalable DB Scale In Start
            • Scalable DB Scale In Error
            • Scalable DB Scale In End
            • Scalable DB Scale Out Start
            • Scalable DB Scale Out Error
            • Scalable DB Scale Out End
            • Scalable DB Proxy Parameter Modify Start
            • Scalable DB Proxy Parameter Modify Error
            • Scalable DB Proxy Parameter Modify End
            • Scalable DB Proxy Parameter Sync Start
            • Scalable DB Proxy Parameter Sync Error
            • Scalable DB Proxy Parameter Sync End
            • Scalable DB Auto Scaling Policy Create Start
            • Scalable DB Auto Scaling Policy Create Error
            • Scalable DB Auto Scaling Policy Create End
            • Scalable DB Auto Scaling Policy Modify Start
            • Scalable DB Auto Scaling Policy Modify Error
            • Scalable DB Auto Scaling Policy Modify End
            • Scalable DB Auto Scaling Policy Delete Start
            • Scalable DB Auto Scaling Policy Delete Error
            • Scalable DB Auto Scaling Policy Delete End
            • Scalable DB Server Count Modify Start
            • Scalable DB Server Count Modify Error
            • Scalable DB Server Count Modify End
            • Scalable DB Replica Sync Start
            • Scalable DB Replica Sync Error
            • Scalable DB Replica Sync End
            • Scalable DB Replica Sync End
            Table. Scalable DB - Queue event type events

            11.5.1.26 - Cloud LAN-Campus

            Cloud LAN-Campus event

            This is the list of events that the Cloud LAN-Campus service delivers to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            NetworkingCloud LAN-CampusCloud LAN-CampusCloud LAN - Campus (Network)Cloud LAN - Campus (Network)
            Table. Cloud LAN-Campus Event Types

            Cloud LAN - Campus (Network)

            Event sourceEvent typeevent
            Cloud LAN - Campus (Network)Cloud LAN - Campus (Network)
            • Cloud LAN - Campus Network creation started
            • Cloud LAN - Campus Network creation error
            • Cloud LAN - Campus Network creation completed
            • Cloud LAN - Campus Network modification started
            • Cloud LAN - Campus Network modification error
            • Cloud LAN - Campus Network modification completed
            • Cloud LAN - Campus Network deletion started
            • Cloud LAN - Campus Network deletion error
            • Cloud LAN - Campus Network deletion completed
            Table. Cloud LAN-Campus - Cloud LAN - Campus (Network) event type

            11.5.1.27 - EPAS(DBaaS)

            EPAS(DBaaS) event

            List of events sent from the EPAS (DBaaS) service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            DatabaseEPAS(DBaaS)EPAS(DBaaS)EPASEPAS
            Table. EPAS(DBaaS) Event Types

            EPAS

            Event sourceEvent typeevent
            EPASEPAS
            • EPAS Create Start
            • EPAS Create Error
            • EPAS Create End
            • EPAS Delete Start
            • EPAS Delete Error
            • EPAS Delete End
            • EPAS Start Start
            • EPAS Start Error
            • EPAS Start End
            • EPAS Stop Start
            • EPAS Stop Error
            • EPAS Stop End
            • EPAS Restart Start
            • EPAS Restart Error
            • EPAS Restart End
            • EPAS Sync Start
            • EPAS Sync Error
            • EPAS Sync End
            • EPAS Audit Log Modify Start
            • EPAS Audit Log Modify Error
            • EPAS Audit Log Modify End
            • EPAS Maintenance Modify Start
            • EPAS Maintenance Modify Error
            • EPAS Maintenance Modify End
            • EPAS Maintenance Delete Start
            • EPAS Maintenance Delete Error
            • EPAS Maintenance Delete End
            • EPAS Security Group Rule Modify Start
            • EPAS Security Group Rule Modify Error
            • EPAS Security Group Rule Modify End
            • EPAS Instance Resize Start
            • EPAS Instance Resize Error
            • EPAS Instance Resize End
            • EPAS Block Storage Create Start
            • EPAS Block Storage Create Error
            • EPAS Block Storage Create End
            • EPAS Block Storage Resize Start
            • EPAS Block Storage Resize Error
            • EPAS Block Storage Resize End
            • EPAS Parameter Sync Start
            • EPAS Parameter Sync Error
            • EPAS Parameter Sync End
            • EPAS Parameter Modify Start
            • EPAS Parameter Modify Error
            • EPAS Parameter Modify End
            • EPAS Patch Start
            • EPAS Patch Error
            • EPAS Patch End
            • EPAS Backup Config Create Start
            • EPAS Backup Config Create Error
            • EPAS Backup Config Create End
            • EPAS Backup Config Modify Start
            • EPAS Backup Config Modify Error
            • EPAS Backup Config Modify End
            • EPAS Backup Config Delete Start
            • EPAS Backup Config Delete Error
            • EPAS Backup Config Delete End
            • EPAS Backup Recover Start
            • EPAS Backup Recover Error
            • EPAS Backup Recover End
            • EPAS Backup History Delete Start
            • EPAS Backup History Delete Error
            • EPAS Backup History Delete End
            • EPAS Replica Create Start
            • EPAS Replica Create Error
            • EPAS Replica Create End
            • EPAS Replica Reset Start
            • EPAS Replica Reset Error
            • EPAS Replica Reset End
            • EPAS Replica Sync Start
            • EPAS Replica Sync Error
            • EPAS Replica Sync End
            • EPAS Switchover Start
            • EPAS Switchover Error
            • EPAS Switchover End
            • EPAS Log Export Config Create Start
            • EPAS Log Export Config Create Error
            • EPAS Log Export Config Create End
            • EPAS Log Export Config Delete Start
            • EPAS Log Export Config Delete Error
            • EPAS Log Export Config Delete End
            • EPAS Log Export Config Modify Start
            • EPAS Log Export Config Modify Error
            • EPAS Log Export Config Modify End
            • EPAS Log Export Start
            • EPAS Log Export Error
            • EPAS Log Export End
            • EPAS Archive Config Modify Start
            • EPAS Archive Config Modify Error
            • EPAS Archive Config Modify End
            • EPAS Archive Config Sync Start
            • EPAS Archive Config Sync Error
            • EPAS Archive Config Sync End
            • EPAS Archive Log Delete Start
            • EPAS Archive Log Delete Error
            • EPAS Archive Log Delete End
            • EPAS Database Users Modify Start
            • EPAS Database Users Modify Error
            • EPAS Database Users Modify End
            • EPAS Database Users Sync Start
            • EPAS Database Users Sync Error
            • EPAS Database Users Sync End
            • EPAS Access Control Modify Start
            • EPAS Access Control Modify Error
            • EPAS Access Control Modify End
            • EPAS Access Control Sync Start
            • EPAS Access Control Sync Error
            • EPAS Access Control Sync End
            • EPAS Replica Cluster Promote Start
            • EPAS Replica Cluster Promote Error
            • EPAS Replica Cluster Promote End
            • EPAS DB Connection Check Start
            • EPAS DB Connection Check Error
            • EPAS DB Connection Check End
            • EPAS Cluster Migrate Start
            • EPAS Cluster Migrate Error
            • EPAS Cluster Migrate End
            • EPAS Migration Cluster Promote Start
            • EPAS Migration Cluster Promote Error
            • EPAS Migration Cluster Promote End
            Table. EPAS – Event of EPAS event type

            11.5.1.28 - PostreSQL(DBaaS)

            PostreSQL(DBaaS) event

            This is the list of events that the PostreSQL (DBaaS) service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            DatabasePostreSQL(DBaaS)PostreSQL(DBaaS)PostreSQLPostgreSQL
            Table. PostreSQL(DBaaS) Event Types

            PostreSQL

            Event sourceEvent typeEvent
            PostreSQLPostgreSQL
            • PostgreSQL Create Start
            • PostgreSQL Create Error
            • PostgreSQL Create End
            • PostgreSQL Delete Start
            • PostgreSQL Delete Error
            • PostgreSQL Delete End
            • PostgreSQL Start Start
            • PostgreSQL Start Error
            • PostgreSQL Start End
            • PostgreSQL Stop Start
            • PostgreSQL Stop Error
            • PostgreSQL Stop End
            • PostgreSQL Restart Start
            • PostgreSQL Restart Error
            • PostgreSQL Restart End
            • PostgreSQL Sync Start
            • PostgreSQL Sync Error
            • PostgreSQL Sync End
            • PostgreSQL Audit Log Modify Start
            • PostgreSQL Audit Log Modify Error
            • PostgreSQL Audit Log Modify End
            • PostgreSQL Maintenance Modify Start
            • PostgreSQL Maintenance Modify Error
            • PostgreSQL Maintenance Modify End
            • PostgreSQL Maintenance Delete Start
            • PostgreSQL Maintenance Delete Error
            • PostgreSQL Maintenance Delete End
            • PostgreSQL Security Group Rule Modify Start
            • PostgreSQL Security Group Rule Modify Error
            • PostgreSQL Security Group Rule Modify End
            • PostgreSQL Instance Resize Start
            • PostgreSQL Instance Resize Error
            • PostgreSQL Instance Resize End
            • PostgreSQL Block Storage Create Start
            • PostgreSQL Block Storage Create Error
            • PostgreSQL Block Storage Create End
            • PostgreSQL Block Storage Resize Start
            • PostgreSQL Block Storage Resize Error
            • PostgreSQL Block Storage Resize End
            • PostgreSQL Parameter Sync Start
            • PostgreSQL Parameter Sync Error
            • PostgreSQL Parameter Sync End
            • PostgreSQL Parameter Modify Start
            • PostgreSQL Parameter Modify Error
            • PostgreSQL Parameter Modify End
            • PostgreSQL Patch Start
            • PostgreSQL Patch Error
            • PostgreSQL Patch End
            • PostgreSQL Backup Config Create Start
            • PostgreSQL Backup Config Create Error
            • PostgreSQL Backup Config Create End
            • PostgreSQL Backup Config Modify Start
            • PostgreSQL Backup Config Modify Error
            • PostgreSQL Backup Config Modify End
            • PostgreSQL Backup Config Delete Start
            • PostgreSQL Backup Config Delete Error
            • PostgreSQL Backup Config Delete End
            • PostgreSQL Backup Recover Start
            • PostgreSQL Backup Recover Error
            • PostgreSQL Backup Recover End
            • PostgreSQL Backup History Delete Start
            • PostgreSQL Backup History Delete Error
            • PostgreSQL Backup History Delete End
            • PostgreSQL Replica Create Start
            • PostgreSQL Replica Create Error
            • PostgreSQL Replica Create End
            • PostgreSQL Replica Reset Start
            • PostgreSQL Replica Reset Error
            • PostgreSQL Replica Reset End
            • PostgreSQL Replica Sync Start
            • PostgreSQL Replica Sync Error
            • PostgreSQL Replica Sync End
            • PostgreSQL Switchover Start
            • PostgreSQL Switchover Error
            • PostgreSQL Switchover End
            • PostgreSQL Log Export Config Create Start
            • PostgreSQL Log Export Config Create Error
            • PostgreSQL Log Export Config Create End
            • PostgreSQL Log Export Config Delete Start
            • PostgreSQL Log Export Config Delete Error
            • PostgreSQL Log Export Config Delete End
            • PostgreSQL Log Export Config Modify Start
            • PostgreSQL Log Export Config Modify Error
            • PostgreSQL Log Export Config Modify End
            • PostgreSQL Log Export Start
            • PostgreSQL Log Export Error
            • PostgreSQL Log Export End
            • PostgreSQL Archive Config Modify Start
            • PostgreSQL Archive Config Modify Error
            • PostgreSQL Archive Config Modify End
            • PostgreSQL Archive Config Sync Start
            • PostgreSQL Archive Config Sync Error
            • PostgreSQL Archive Config Sync End
            • PostgreSQL Archive Log Delete Start
            • PostgreSQL Archive Log Delete Error
            • PostgreSQL Archive Log Delete End
            • PostgreSQL Database Users Modify Start
            • PostgreSQL Database Users Modify Error
            • PostgreSQL Database Users Modify End
            • PostgreSQL Database Users Sync Start
            • PostgreSQL Database Users Sync Error
            • PostgreSQL Database Users Sync End
            • PostgreSQL Access Control Modify Start
            • PostgreSQL Access Control Modify Error
            • PostgreSQL Access Control Modify End
            • PostgreSQL Access Control Sync Start
            • PostgreSQL Access Control Sync Error
            • PostgreSQL Access Control Sync End
            • PostgreSQL Replica Cluster Promote Start
            • PostgreSQL Replica Cluster Promote Error
            • PostgreSQL Replica Cluster Promote End
            • PostgreSQL Db Connection Check Start
            • PostgreSQL Db Connection Check Error
            • PostgreSQL Db Connection Check End
            • PostgreSQL Cluster Migrate Start
            • PostgreSQL Cluster Migrate Error
            • PostgreSQL Cluster Migrate End
            • PostgreSQL Migration Cluster Promote Start
            • PostgreSQL Migration Cluster Promote Error
            • PostgreSQL Migration Cluster Promote End
            Table. PostgreSQL - Event of PostgreSQL event type

            11.5.1.29 - Logging&Audit

            Logging&Audit event

            This is the list of events that the Logging&Audit service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementLogging&AuditTrailLogging&AuditTrail
            Table. Logging&Audit event types

            Trail

            Event sourceEvent typeevent
            Logging&AuditTrail
            • Logging&Audit Trail creation start
            • Logging&Audit Trail creation complete
            • Logging&Audit Trail deletion start
            • Logging&Audit Trail deletion complete
            • Logging&Audit Trail update start
            • Logging&Audit Trail update complete
            • Logging&Audit Trail start
            • Logging&Audit Trail stop
            • Logging&Audit Trail batch start
            • Logging&Audit Trail batch complete
            • Logging&Audit Trail batch count
            Table. Logging&Audit - Trail event type event

            11.5.1.30 - Search Engine

            Search Engine event

            This is the list of events passed from the Search Engine service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsSearch EngineSearch EngineSearch EngineSearch Engine
            Table. Search Engine Event Types

            Search Engine

            Event sourceEvent typeevent
            Search EngineSearch Engine
            • Search Engine Create Start
            • Search Engine Create Error
            • Search Engine Create End
            • Search Engine Delete Start
            • Search Engine Delete Error
            • Search Engine Delete End
            • Search Engine Start Start
            • Search Engine Start Error
            • Search Engine Start End
            • Search Engine Stop Start
            • Search Engine Stop Error
            • Search Engine Stop End
            • Search Engine Restart Start
            • Search Engine Restart Error
            • Search Engine Restart End
            • Search Engine Sync Start
            • Search Engine Sync Error
            • Search Engine Sync End
            • Search Engine Patch Start
            • Search Engine Patch Error
            • Search Engine Patch End
            • Search Engine Maintenance Modify Start
            • Search Engine Maintenance Modify Error
            • Search Engine Maintenance Modify End
            • Search Engine Maintenance Delete Start
            • Search Engine Maintenance Delete Error
            • Search Engine Maintenance Delete End
            • Search Engine Security Group Rule Modify Start
            • Search Engine Security Group Rule Modify Error
            • Search Engine Security Group Rule Modify End
            • Search Engine Instance Resize Start
            • Search Engine Instance Resize Error
            • Search Engine Instance Resize End
            • Search Engine Instance Add Start
            • Search Engine Instance Add Error
            • Search Engine Instance Add End
            • Search Engine Block Storage Create Start
            • Search Engine Block Storage Create Error
            • Search Engine Block Storage Create End
            • Search Engine Block Storage Resize Start
            • Search Engine Block Storage Resize Error
            • Search Engine Block Storage Resize End
            • Search Engine Backup Config Create Start
            • Search Engine Backup Config Create Error
            • Search Engine Backup Config Create End
            • Search Engine Backup Config Modify Start
            • Search Engine Backup Config Modify Error
            • Search Engine Backup Config Modify End
            • Search Engine Backup Config Delete Start
            • Search Engine Backup Config Delete Error
            • Search Engine Backup Config Delete End
            • Search Engine Backup Recover Start
            • Search Engine Backup Recover Error
            • Search Engine Backup Recover End
            • Search Engine Backup History Delete Start
            • Search Engine Backup History Delete Error
            • Search Engine Backup History Delete End
            Table. Search Engine - Event of the Search Engine event type

            11.5.1.31 - DNS

            DNS event

            This is the list of events passed from the DNS service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingDNSPrivate DNSPrivate DNSPrivate DNS
            NetworkingDNSHosted DNSHosted DNSHosted DNS
            NetworkingDNSPublic Domain NamePublic Domain NamePublic Domain Name
            Table. DNS Event Types

            Private DNS

            Event sourceEvent typeEvent
            Private DNSPrivate DNS
            • Private DNS creation start
            • Private DNS creation completed
            • Private DNS modification start
            • Private DNS modification completed
            • Private DNS deletion completed
            Table. Private DNS - Event of Private DNS event type

            Hosted DNS

            Event sourceEvent typeEvent
            Hosted DNSHosted DNS
            • Hosted Zone creation started
            • Hosted Zone update completed
            • Hosted Zone record creation completed
            • Hosted Zone record update completed
            • Hosted Zone record deletion completed
            • Hosted Zone deletion completed
            Table. Hosted DNS - Event of Hosted DNS event type

            Public Domain Name

            Event sourceEvent typeevent
            Public Domain NamePublic Domain Name
            • Public Domain Name creation completed
            • Public Domain Name modification completed
            • Public Domain Name deletion completed
            Table. Public Domain Name - Public Domain Name event of the event type

            11.5.1.32 - VPN

            VPN Event

            This is the list of events transmitted from the VPN service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingVPNVPNVPNVPN Gateway
            NetworkingVPNVPNVPNVPN Tunnel
            Table. VPN Event Types

            VPN Gateway

            Event sourceEvent typeevent
            VPNVPN Gateway
            • VPN Gateway creation started
            • VPN Gateway creation error
            • VPN Gateway creation completed
            • VPN Gateway modification completed
            • VPN Gateway deletion started
            • VPN Gateway deletion error
            • VPN Gateway deletion completed
            Table. VPN - VPN Gateway event type events

            VPN Tunnel

            Event sourceEvent typeEvent
            VPNVPN Tunnel
            • VPN Tunnel creation started
            • VPN Tunnel creation error
            • VPN Tunnel creation completed
            • VPN Tunnel modification completed
            • VPN Tunnel deletion started
            • VPN Tunnel deletion error
            • VPN Tunnel deletion completed
            Table. Events of the VPN - VPN Tunnel event type

            11.5.1.33 - Secrets Manager

            Secret event

            This is the list of events that the Secrets Manager service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsSecrets ManagerSecrets ManagerSecrets ManagerSecret
            Table. Secret event type

            Secret

            Event sourceEvent typeEvent
            Secrets ManagerSecret
            • Secret creation started
            • Secret creation completed
            • Secret creation error
            • Secret update completed
            • Secret deletion error
            • Secret deletion completed
            Table. Secrets Manager - Secret event type event

            11.5.1.34 - Quick Query

            Quick Query event

            This is the list of events that the Quick Query service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsQuick QueryQuick QueryQuick QueryQuick Query
            Table. Quick Query Event Types

            Quick Query

            Event sourceEvent typeevent
            Quick QueryQuick Query
            • Quick Query Create Start
            • Quick Query Create End
            • Quick Query Create Error
            • Quick Query Delete Start
            • Quick Query Delete End
            • Quick Query Delete Error
            • Quick Query Modify Start
            • Quick Query Modify End
            • Quick Query Modify Error
            Table. Quick Query - Event of type Quick Query

            11.5.1.35 - File Storage

            File Storage Event

            This is the list of events delivered from the File Storage service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            StorageFile StorageFile StorageFile StorageVolume
            Table. File Storage event types

            Volume

            Event sourceEvent typeevent
            File StorageVolume
            • File Storage volume creation started
            • File Storage volume creation completed
            • File Storage volume creation failed
            • File Storage volume deletion started
            • File Storage volume deletion completed
            • File Storage volume deletion failed
            • File Storage snapshot creation started
            • File Storage snapshot creation completed
            • File Storage snapshot creation failed
            • File Storage snapshot deletion started
            • File Storage snapshot deletion completed
            • File Storage snapshot deletion failed
            • File Storage snapshot recovery started
            • File Storage snapshot recovery completed
            • File Storage snapshot recovery failed
            • File Storage snapshot schedule creation started
            • File Storage snapshot schedule creation completed
            • File Storage snapshot schedule creation failed
            • File Storage snapshot schedule modification started
            • File Storage snapshot schedule modification completed
            • File Storage snapshot schedule modification failed
            • File Storage snapshot schedule deletion started
            • File Storage snapshot schedule deletion completed
            • File Storage snapshot schedule deletion failed
            • File Storage volume modification started
            • File Storage volume modification completed
            • File Storage volume modification failed
            • File Storage access control modification started
            • File Storage access control modification completed
            • File Storage access control modification failed
            • File Storage access control (Bulk) modification started
            • File Storage access control (Bulk) modification completed
            • File Storage access control (Bulk) modification failed
            • File Storage replication creation started
            • File Storage replication creation completed
            • File Storage replication creation failed
            • File Storage replication relationship creation started
            • File Storage replication relationship creation completed
            • File Storage replication relationship creation failed
            • File Storage replication deletion started
            • File Storage replication deletion completed
            • File Storage replication deletion failed
            • File Storage replication modification started
            • File Storage replication modification completed
            • File Storage replication modification failed
            Table. File Storage - Volume event type events

            11.5.1.36 - CacheStore(DBaaS)

            CacheStore (DBaaS) event

            This is the list of events delivered from the CacheStore (DBaaS) service to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            DatabaseCacheStore(DBaaS)CacheStore(DBaaS)CacheStoreCacheStore
            Table. CacheStore(DBaaS) Event Types

            CacheStore

            Event sourceEvent typeevent
            CacheStore(DBaaS)CacheStore
            • CacheStore Create Start
            • CacheStore Create Error
            • CacheStore Create End
            • CacheStore Delete Start
            • CacheStore Delete Error
            • CacheStore Delete End
            • CacheStore Start Start
            • CacheStore Start Error
            • CacheStore Start End
            • CacheStore Stop Start
            • CacheStore Stop Error
            • CacheStore Stop End
            • CacheStore Restart Start
            • CacheStore Restart Error
            • CacheStore Restart End
            • CacheStore Sync Start
            • CacheStore Sync Error
            • CacheStore Sync End
            • CacheStore Maintenance Modify Start
            • CacheStore Maintenance Modify Error
            • CacheStore Maintenance Modify End
            • CacheStore Maintenance Delete Start
            • CacheStore Maintenance Delete Error
            • CacheStore Maintenance Delete End
            • CacheStore Security Group Rule Modify Start
            • CacheStore Security Group Rule Modify Error
            • CacheStore Security Group Rule Modify End
            • CacheStore Instance Resize Start
            • CacheStore Instance Resize Error
            • CacheStore Instance Resize End
            • CacheStore Block Storage Resize Start
            • CacheStore Block Storage Resize Error
            • CacheStore Block Storage Resize End
            • CacheStore Parameter Sync Start
            • CacheStore Parameter Sync Error
            • CacheStore Parameter Sync End
            • CacheStore Parameter Modify Start
            • CacheStore Parameter Modify Error
            • CacheStore Parameter Modify End
            • CacheStore Backup Config Create Start
            • CacheStore Backup Config Create Error
            • CacheStore Backup Config Create End
            • CacheStore Backup Config Modify Start
            • CacheStore Backup Config Modify Error
            • CacheStore Backup Config Modify End
            • CacheStore Backup Config Delete Start
            • CacheStore Backup Config Delete Error
            • CacheStore Backup Config Delete End
            • CacheStore Backup Recover Start
            • CacheStore Backup Recover Error
            • CacheStore Backup Recover End
            • CacheStore Backup History Delete Start
            • CacheStore Backup History Delete Error
            • CacheStore Backup History Delete End
            • CacheStore Command Sync Start
            • CacheStore Command Sync Error
            • CacheStore Command Sync End
            • CacheStore Command Modify Start
            • CacheStore Command Modify Error
            • CacheStore Command Modify End
            • CacheStore Switchover Start
            • CacheStore Switchover Error
            • CacheStore Switchover End
            • SQL Server Switchover Start
            • SQL Server Switchover Error
            • SQL Server Switchover End
            • SQL Server Database Modify Start
            • SQL Server Database Modify Error
            • SQL Server Database Modify End
            • SQL Server Log Export Config Create Start
            • SQL Server Log Export Config Create Error
            • SQL Server Log Export Config Create End
            • SQL Server Log Export Config Delete Start
            • SQL Server Log Export Config Delete Error
            • SQL Server Log Export Config Delete End
            • SQL Server Log Export Config Modify Start
            • SQL Server Log Export Config Modify Error
            • SQL Server Log Export Config Modify End
            • SQL Server Log Export Start
            • SQL Server Log Export Error
            • SQL Server Log Export End
            • SQL Server Database Users Modify Start
            • SQL Server Database Users Modify Error
            • SQL Server Database Users Modify End
            • SQL Server Database Users Sync Start
            • SQL Server Database Users Sync Error
            • SQL Server Database Users Sync End
            • SQL Server Secondary Add Start
            • SQL Server Secondary Add Error
            • SQL Server Secondary Add End
            Table. CacheStore (DBaaS) - Event of CacheStore event type

            11.5.1.37 - Secret Vault

            Secret Vault event

            This is the list of events that the Secret Vault service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            SecuritySecret VaultSecret VaultSecret VaultSecret Vault
            Table. Secret Vault event types

            Secret Vault

            Event sourceEvent typeEvent
            Secret VaultSecret Vault
            • Secret Vault creation started
            • Secret Vault creation completed
            • Secret Vault creation error
            • Secret Vault update started
            • Secret Vault update completed
            • Secret Vault update error
            • Secret Vault deletion started
            • Secret Vault deletion error
            • Secret Vault deletion completed
            • Secret Vault temporary key generation error
            • Secret Vault temporary key generation completed
            Table. Secret Vault - Event of type Secret Vault

            11.5.1.38 - Queue Service

            Queue Service event

            This is the list of events that the Queue Service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            Data AnalyticsQueue ServiceQueueQueueQueue
            Table. Queue Service Event Types

            Queue

            Event sourceEvent typeevent
            QueueQueue
            • Queue creation started
            • Queue creation failed
            • Queue creation completed
            • Queue deletion started
            • Queue deletion failed
            • Queue deletion completed
            • Queue modification started
            • Queue modification failed
            • Queue modification completed
            Table. Queue Service - Queue event type events

            11.5.1.39 - Kubernetes Engine

            Kubernetes Engine event

            List of events passed from the Kubernetes Engine service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ContainerKubernetes EngineClusterKubernetes EngineCluster
            ContainerKubernetes EngineNodeKubernetes EngineNodepool
            Table. Kubernetes Engine Event Types

            Cluster

            Event sourceEvent typeEvent
            Kubernetes EngineCluster
            • Cluster creation request completed
            • Cluster creation completed
            • Cluster creation failed
            • Cluster deletion completed
            • Cluster deletion failed
            • Cluster modification request completed
            • Cluster modification completed
            • Cluster creation failed
            Table. Kubernetes Engine - Cluster event type events

            Nodepool

            Event sourceEvent typeEvent
            Kubernetes EngineNodepool
            • Nodepool creation completed
            • Nodepool creation failed
            • Nodepool deletion request completed
            • Nodepool deletion completed
            • Nodepool deletion failed
            Table. Kubernetes Engine - Nodepool event type

            11.5.1.40 - Config Inspection

            Config Inspection event

            This is the list of events that the Config Inspection service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            SecurityConfig InspectionConfig InspectionConfig InspectionConfig Inspection
            Table. Config Inspection Event Types

            Config Inspection

            Event sourceEvent typeevent
            Config InspectionConfig Inspection
            • Config Inspection creation started
            • Config Inspection creation completed
            • Config Inspection monthly creation completed
            • Config Inspection creation error
            • Config Inspection modification started
            • Config Inspection modification completed
            • Config Inspection modification error
            • Config Inspection deletion started
            • Config Inspection deletion error
            • Config Inspection monthly deletion completed
            • Config Inspection deletion completed
            • Config Inspection request started
            • Config Inspection request completed
            • Config Inspection request error
            • Config Inspection reservation request error
            • Config Inspection response started
            • Config Inspection response completed
            • Config Inspection response error
            Table. Config Inspection - Event of the Config Inspection event type

            11.5.1.41 - Cloud LAN-Datacenter

            Cloud LAN-Datacenter event

            This is the list of events that the Cloud LAN-Datacenter service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingCloud LAN-DatacenterCloud LAN NetworkCloud LAN NetworkCloud LAN Network
            NetworkingCloud LAN-DatacenterInterfaceCloud LAN NetworkInterface
            NetworkingCloud LAN-DatacentervCableCloud LAN NetworkvCable
            NetworkingCloud LAN-DatacentervDeviceCloud LAN NetworkvDevice
            Table. Cloud LAN Network Event Types

            Cloud LAN Network

            Event sourceEvent typeevent
            Cloud LAN NetworkCloud LAN Network(cloud-lan-network)
            • Cloud LAN Network creation started
            • Cloud LAN Network creation error
            • Cloud LAN Network creation completed
            • Cloud LAN Network modification started
            • Cloud LAN Network modification error
            • Cloud LAN Network modification completed
            • Cloud LAN Network deletion started
            • Cloud LAN Network deletion error
            • Cloud LAN Network deletion completed
            Table. Cloud LAN Network – Event of type Cloud LAN Network

            Interface

            Event sourceEvent typeevent
            Cloud LAN NetworkInterface(interface)
            • Interface creation start
            • Interface creation error
            • Interface creation complete
            • Interface modification start
            • Interface modification error
            • Interface modification complete
            • Interface deletion start
            • Interface deletion error
            • Interface deletion complete
            Table. Cloud LAN Network - Interface event type events

            vCable

            Event sourceEvent typeEvent
            Cloud LAN NetworkvCable(vcable)
            • vCable creation started
            • vCable creation error
            • vCable creation completed
            • vCable modification started
            • vCable modification error
            • vCable modification completed
            • vCable deletion started
            • vCable deletion error
            • vCable deletion completed
            Table. Cloud LAN Network - vCable event type events

            vDevice

            Event sourceEvent typeEvent
            Cloud LAN NetworkvDevice(vdevice)
            • vDevice creation started
            • vDevice creation error
            • vDevice creation completed
            • vDevice modification started
            • vDevice modification error
            • vDevice modification completed
            • vDevice deletion started
            • vDevice deletion error
            • vDevice deletion completed
            Table. Cloud LAN Network - vDevice event type events

            11.5.1.42 - Identity Access Management

            Identity Access Management event

            This is the list of events that the Identity Access Management service delivers to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            ManagementIdentity Access Management(IAM)User groupIdentity Access ManagementGroup
            ManagementIdentity Access Management(IAM)UserIdentity Access ManagementUser
            ManagementIdentity Access Management(IAM)policyIdentity Access ManagementPolicy
            ManagementIdentity Access Management(IAM)roleIdentity Access Managementrole
            ManagementIdentity Access Management(IAM)Credential ProviderIdentity Access ManagementCredential Provider
            ManagementIdentity Access Management(IAM)My Info.Identity Access ManagementAccess Key
            Table. Identity Access Management Event Types

            Group

            Event sourceEvent typeevent
            Identity Access ManagementGroup
            • Group creation completed
            • Group creation started
            • Group creation error
            • Group modification completed
            • Group deletion started
            • Group deletion error
            • Group deletion completed
            • Group member addition completed
            • Group member deletion started
            • Group member deletion error
            • Group member deletion completed
            Table. Identity Access Management - Group Event Type Events

            User

            Event sourceEvent typeevent
            Identity Access ManagementUser
            • User creation completed
            • User login completed
            • User deletion completed
            Table. Identity Access Management – User Event Type Events

            Policy

            Event sourceEvent typeevent
            Identity Access Managementpolicy
            • Policy creation completed
            • Policy modification started
            • Policy modification error
            • Policy modification completed
            • Policy deletion started
            • Policy deletion error
            • Policy deletion completed
            Table. Identity Access Management - Policy Event Type Events

            role

            Event sourceEvent typeEvent
            Identity Access Managementrole
            • Role creation completed
            • Role modification completed
            • Role deletion completed
            Table. Identity Access Management - Role Event Type Events

            Credential Provider

            Event sourceEvent typeevent
            Identity Access ManagementCredential Provider
            • Credential provider creation started
            • Credential provider creation error
            • Credential provider creation completed
            • Credential provider update started
            • Credential provider update error
            • Credential provider update completed
            • Credential provider deletion started
            • Credential provider deletion error
            • Credential provider deletion completed
            Table. Identity Access Management - Events of Credential Provider Event Types

            Access Key

            Event sourceEvent typeEvent
            Identity Access ManagementAccess Key
            • Access Key creation started
            • Access Key creation error
            • Access Key creation completed
            • Access Key deletion started
            • Access Key deletion error
            • Access Key deletion completed
            Table. Identity Access Management - Access Key event type events

            11.5.1.43 - Bare Metal Server

            Bare Metal Server Event

            This is the list of events that the Bare Metal Server service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ComputeBare Metal ServerBare Metal ServerBare Metal ServerBare Metal Server
            Table. GPU Server Event Types

            Bare Metal Server

            Event sourceEvent typeevent
            Bare Metal ServerBare Metal Server
            • Bare Metal Server Create started
            • Bare Metal Server Create completed
            • Bare Metal Server Create error
            • Bare Metal Server Delete started
            • Bare Metal Server Delete completed
            • Bare Metal Server Delete error
            • Bare Metal Server Start started
            • Bare Metal Server Start completed
            • Bare Metal Server Start error
            • Bare Metal Server Stop started
            • Bare Metal Server Stop completed
            • Bare Metal Server Stop error
            • Bare Metal Server Lock Update started
            • Bare Metal Server Lock Update completed
            • Bare Metal Server Lock Update error
            • Bare Metal Server ISCSI IP allocation started
            • Bare Metal Server ISCSI IP allocation completed
            • Bare Metal Server ISCSI IP allocation error
            • Bare Metal Server Backup Agent IP allocation started
            • Bare Metal Server Backup Agent IP allocation completed
            • Bare Metal Server Backup Agent IP allocation error
            • Bare Metal Server IP allocation started
            • Bare Metal Server IP allocation completed
            • Bare Metal Server IP allocation error
            • Bare Metal Server Local Subnet IP allocation started
            • Bare Metal Server Local Subnet IP allocation completed
            • Bare Metal Server Local Subnet IP allocation error
            • Bare Metal Server ISCSI IP release started
            • Bare Metal Server ISCSI IP release completed
            • Bare Metal Server ISCSI IP release error
            • Bare Metal Server Backup Agent IP release started
            • Bare Metal Server Backup Agent IP release completed
            • Bare Metal Server Backup Agent IP release error
            • Bare Metal Server IP release started
            • Bare Metal Server IP release completed
            • Bare Metal Server IP release error
            • Bare Metal Server Local Subnet IP release started
            • Bare Metal Server Local Subnet IP release completed
            • Bare Metal Server Local Subnet IP release error
            • Bare Metal Server Public NAT IP allocation started
            • Bare Metal Server Public NAT IP allocation completed
            • Bare Metal Server Public NAT IP allocation error
            • Bare Metal Server Public NAT IP release started
            • Bare Metal Server Public NAT IP release completed
            • Bare Metal Server Public NAT IP release error
            • Bare Metal Server IP change started
            • Bare Metal Server IP change completed
            • Bare Metal Server IP change error
            • Bare Metal Server IP change Step1 started
            • Bare Metal Server IP change Step1 completed
            • Bare Metal Server IP change Step1 error
            • Bare Metal Server IP change Step2 started
            • Bare Metal Server IP change Step2 completed
            • Bare Metal Server IP change Step2 error
            • Bare Metal Server IP change Step3 started
            • Bare Metal Server IP change Step3 completed
            • Bare Metal Server IP change Step3 error
            • Bare Metal Server Private NAT IP allocation started
            • Bare Metal Server Private NAT IP allocation completed
            • Bare Metal Server Private NAT IP allocation error
            • Bare Metal Server Private NAT IP release started
            • Bare Metal Server Private NAT IP release completed
            • Bare Metal Server Private NAT IP release error
            Table. Bare Metal Server - Bare Metal Server event type

            11.5.1.44 - ServiceWatch

            ServiceWatch event

            This is a list of events delivered from the ServiceWatch service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementServiceWatchDashboardServiceWatchDashboard
            ManagementServiceWatchAlertServiceWatchAlert
            ManagementServiceWatchLogServiceWatchLog Group
            ManagementServiceWatchEvent RulesServiceWatchEvent Rules
            Table. ServiceWatch Event Types

            Dashboard

            Event sourceEvent typeEvent
            ServiceWatchDashboard
            • ServiceWatch dashboard creation completed
            • ServiceWatch dashboard modification completed
            • ServiceWatch dashboard deletion completed
            Table. ServiceWatch - Dashboard event type events

            Alert

            Event sourceEvent typeEvent
            ServiceWatchAlert
            • ServiceWatch alert creation completed
            • ServiceWatch alert modification completed
            • ServiceWatch alert deletion completed
            • ServiceWatch alert status change completed
            Table. ServiceWatch - event of alarm event type

            Log group

            Event sourceEvent typeEvent
            ServiceWatchLog group
            • ServiceWatch log group creation completed
            • ServiceWatch log group modification completed
            • ServiceWatch log group deletion started
            • ServiceWatch log group deletion completed
            • ServiceWatch log group log events bulk deletion started
            • ServiceWatch log group log events bulk deletion completed
            • ServiceWatch log group log stream creation completed
            • ServiceWatch log group log stream deletion completed
            • ServiceWatch log group log stream log events bulk deletion completed
            Table. ServiceWatch - Event of log group event type

            Event Rules

            Event sourceEvent typeEvent
            ServiceWatchEvent Rules
            • ServiceWatch event rule creation completed
            • ServiceWatch event rule modification completed
            • ServiceWatch event rule deletion completed
            Table. ServiceWatch - Event rule events of the event type

            11.5.1.45 - MariaDB(DBaaS)

            MariaDB(DBaaS) Event

            List of events sent from the MariaDB (DBaaS) service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            DatabaseMariaDB(DBaaS)MariaDB(DBaaS)MariaDBMariaDB
            Table. MariaDB(DBaaS) Event Types

            MariaDB

            Event sourceEvent typeEvent
            MariaDBMariaDB
            • MariaDB Create Start
            • MariaDB Create Error
            • MariaDB Create End
            • MariaDB Delete Start
            • MariaDB Delete Error
            • MariaDB Delete End
            • MariaDB Start Start
            • MariaDB Start Error
            • MariaDB Start End
            • MariaDB Stop Start
            • MariaDB Stop Error
            • MariaDB Stop End
            • MariaDB Restart Start
            • MariaDB Restart Error
            • MariaDB Restart End
            • MariaDB Sync Start
            • MariaDB Sync Error
            • MariaDB Sync End
            • MariaDB Audit Log Modify Start
            • MariaDB Audit Log Modify Error
            • MariaDB Audit Log Modify End
            • MariaDB Maintenance Modify Start
            • MariaDB Maintenance Modify Error
            • MariaDB Maintenance Modify End
            • MariaDB Maintenance Delete Start
            • MariaDB Maintenance Delete Error
            • MariaDB Maintenance Delete End
            • MariaDB Security Group Rule Modify Start
            • MariaDB Security Group Rule Modify Error
            • MariaDB Security Group Rule Modify End
            • MariaDB Instance Resize Start
            • MariaDB Instance Resize Error
            • MariaDB Instance Resize End
            • MariaDB Block Storage Create Start
            • MariaDB Block Storage Create Error
            • MariaDB Block Storage Create End
            • MariaDB Block Storage Resize Start
            • MariaDB Block Storage Resize Error
            • MariaDB Block Storage Resize End
            • MariaDB Parameter Sync Start
            • MariaDB Parameter Sync Error
            • MariaDB Parameter Sync End
            • MariaDB Parameter Modify Start
            • MariaDB Parameter Modify Error
            • MariaDB Parameter Modify End
            • MariaDB Patch Start
            • MariaDB Patch Error
            • MariaDB Patch End
            • MariaDB Backup Config Create Start
            • MariaDB Backup Config Create Error
            • MariaDB Backup Config Create End
            • MariaDB Backup Config Modify Start
            • MariaDB Backup Config Modify Error
            • MariaDB Backup Config Modify End
            • MariaDB Backup Config Delete Start
            • MariaDB Backup Config Delete Error
            • MariaDB Backup Config Delete End
            • MariaDB Backup Recover Start
            • MariaDB Backup Recover Error
            • MariaDB Backup Recover End
            • MariaDB Backup History Delete Start
            • MariaDB Backup History Delete Error
            • MariaDB Backup History Delete End
            • MariaDB Replica Create Start
            • MariaDB Replica Create Error
            • MariaDB Replica Create End
            • MariaDB Replica Reset Start
            • MariaDB Replica Reset Error
            • MariaDB Replica Reset End
            • MariaDB Replica Sync Start
            • MariaDB Replica Sync Error
            • MariaDB Replica Sync End
            • MariaDB Switchover Start
            • MariaDB Switchover Error
            • MariaDB Switchover End
            • MariaDB Log Export Config Create Start
            • MariaDB Log Export Config Create Error
            • MariaDB Log Export Config Create End
            • MariaDB Log Export Config Delete Start
            • MariaDB Log Export Config Delete Error
            • MariaDB Log Export Config Delete End
            • MariaDB Log Export Config Modify Start
            • MariaDB Log Export Config Modify Error
            • MariaDB Log Export Config Modify End
            • MariaDB Log Export Start
            • MariaDB Log Export Error
            • MariaDB Log Export End
            • MariaDB Archive Config Modify Start
            • MariaDB Archive Config Modify Error
            • MariaDB Archive Config Modify End
            • MariaDB Archive Config Sync Start
            • MariaDB Archive Config Sync Error
            • MariaDB Archive Config Sync End
            • MariaDB Database Users Modify Start
            • MariaDB Database Users Modify Error
            • MariaDB Database Users Modify End
            • MariaDB Database Users Sync Start
            • MariaDB Database Users Sync Error
            • MariaDB Database Users Sync End
            • MariaDB Access Control Modify Start
            • MariaDB Access Control Modify Error
            • MariaDB Access Control Modify End
            • MariaDB Access Control Sync Start
            • MariaDB Access Control Sync Error
            • MariaDB Access Control Sync End
            • MariaDB Replica Cluster Promote Start
            • MariaDB Replica Cluster Promote Error
            • MariaDB Replica Cluster Promote End
            • MariaDB Db Connection Check Start
            • MariaDB Db Connection Check Error
            • MariaDB Db Connection Check End
            • MariaDB Cluster Migrate Start
            • MariaDB Cluster Migrate Error
            • MariaDB Cluster Migrate End
            • MariaDB Migration Cluster Promote Start
            • MariaDB Migration Cluster Promote Error
            • MariaDB Migration Cluster Promote End
            Table. MariaDB - Event of MariaDB event type

            11.5.1.46 - Container Registry

            Container Registry event

            This is the list of events passed from the Container Registry service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ContainerContainer RegistryRegistryContainer RegistryContainer Registry
            ContainerContainer RegistryNodeContainer RegistryRepository
            Table. Container Registry event types

            Container Registry

            Event sourceEvent typeevent
            Container RegistryContainer Registry
            • Start creating Container Registry
            • Failed to create Container Registry
            • Container Registry creation completed
            • Start creating Container Registry bucket
            • Failed to create Container Registry bucket
            • Container Registry bucket creation completed
            • Start updating Container Registry
            • Failed to update Container Registry
            • Container Registry update completed
            • Start deleting Container Registry
            • Failed to delete Container Registry
            • Container Registry deletion completed
            • Start deleting Container Registry bucket
            • Failed to delete Container Registry bucket
            • Container Registry bucket deletion completed
            • Start rollback after Container Registry create/delete failure
            • Rollback after Container Registry create/delete failure failed
            • Rollback after Container Registry create/delete failure completed
            • Container Registry login failed
            • Container Registry login completed
            • Failed to retrieve Container Registry catalog
            • Container Registry catalog retrieval completed
            Table. Container Registry – events of the Container Registry event type

            Repository

            Event sourceEvent typeevent
            Container RegistryRepository
            • Repository creation started
            • Repository creation failed
            • Repository creation completed
            • Repository modification started
            • Repository modification failed
            • Repository modification completed
            • Repository deletion started
            • Repository deletion failed
            • Repository deletion completed
            • Repository push failed
            • Repository push completed
            • Repository pull failed
            • Repository pull completed
            • Image creation failed
            • Image creation completed
            • Image modification started
            • Image modification failed
            • Image modification completed
            • Image deletion started
            • Image deletion failed
            • Image deletion completed
            • Image deletion policy test started
            • Image deletion policy test failed
            • Image deletion policy test completed
            • Tags creation failed
            • Tags creation completed
            • Tags modification started
            • Tags modification failed
            • Tags modification completed
            • Tags deletion started
            • Tags deletion failed
            • Tags deletion completed
            • Tags vulnerability scan started
            • Tags vulnerability scan failed
            • Tags vulnerability scan completed
            Table. Container Registry - Repository event type events

            11.5.1.47 - Vertica(DBaaS)

            Vertica(DBaaS) Event

            This is the list of events that the Vertica (DBaaS) service delivers to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            DatabaseVertica(DBaaS)Vertica(DBaaS)VerticaVertica
            Table. Vertica(DBaaS) Event Types

            Vertica

            Event sourceEvent typeevent
            VerticaVertica
            • Vertica Create Start
            • Vertica Create Error
            • Vertica Create End
            • Vertica Delete Start
            • Vertica Delete Error
            • Vertica Delete End
            • Vertica Start Start
            • Vertica Start Error
            • Vertica Start End
            • Vertica Stop Start
            • Vertica Stop Error
            • Vertica Stop End
            • Vertica Restart Start
            • Vertica Restart Error
            • Vertica Restart End
            • Vertica Sync Start
            • Vertica Sync Error
            • Vertica Sync End
            • Verticat Maintenance Modify Start
            • Verticat Maintenance Modify Error
            • Verticat Maintenance Modify End
            • Verticat Maintenance Delete Start
            • Verticat Maintenance Delete Error
            • Verticat Maintenance Delete End
            • Vertica Security Group Rule Modify Start
            • Vertica Security Group Rule Modify Error
            • Vertica Security Group Rule Modify End
            • Verticat Instance Resize Start
            • Verticat Instance Resize Error
            • Verticat Instance Resize End
            • Vertica Block Storage Create Start
            • Vertica Block Storage Create Error
            • Vertica Block Storage Create End
            • Vertica Block Storage Resize Start
            • Vertica Block Storage Resize Error
            • Vertica Block Storage Resize End
            • Vertica Backup Config Create Start
            • Vertica Backup Config Create Error
            • Vertica Backup Config Create End
            • Vertica Backup Config Modify Start
            • Vertica Backup Config Modify Error
            • Vertica Backup Config Modify End
            • Vertica Backup Config Delete Start
            • Vertica Backup Config Delete Error
            • Vertica Backup Config Delete End
            • Verticat Backup Recover Start
            • Verticat Backup Recover Error
            • Verticat Backup Recover End
            • Vertica Backup History Delete Start
            • Vertica Backup History Delete Error
            • Vertica Backup History Delete End
            Table. Vertica - Event of Vertica event type

            11.5.1.48 - Backup

            Backup event

            This is the list of events that the Backup service sends to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            StorageBackupBackupBackupBackup
            Table. Backup Event Types

            Backup

            Event sourceEvent typeEvent
            BackupBucket
            • Backup Create Start
            • Backup Create End
            • Backup Create Error
            • Backup Modify Start
            • Backup Modify End
            • Backup Modify Error
            • Backup Delete Start
            • Backup Delete End
            • Backup Delete Error
            • Backup Restore Create Start
            • Backup Restore Create End
            • Backup Restore Create Error
            • Backup Cancel Start
            • Backup Cancel End
            • Backup Cancel Error
            • Backup Manual Backup Request Start
            • Backup Manual Backup Request End
            • Backup Manual Backup Request Error
            • Backup Restore Target Delete Start
            • Backup Restore Target Delete End
            • Backup Restore Target Delete Error
            • Backup Restore Target Delete Cancel Start
            • Backup Restore Target Delete Cancel End
            • Backup Restore Target Delete Cancel Error
            • Backup Filesystem Path Modify Start
            • Backup Filesystem Path Modify End
            • Backup Filesystem Path Modify Error
            • Backup Filesystem Restore Request Start
            • Backup Filesystem Restore Request End
            • Backup Filesystem Restore Request Error
            • Backup Fail
            Table. Backup - Event of type Backup

            11.5.1.49 - Organization

            Organization event

            List of events delivered from the Organization service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementOrganizationOrganizational StructureOrganizationorganization
            ManagementOrganizationOrganizational StructureOrganizationOrganization Account
            ManagementOrganizationOrganizational StructureOrganizationOrganization Invitation
            ManagementOrganizationOrganizational StructureOrganizationOrganizational Unit
            ManagementOrganizationControl PolicyOrganizationControl Policy
            ManagementOrganizationOrganization SettingsOrganizationDelegation Policy
            Table. Organization Event Types

            organization

            Event sourceEvent typeevent
            Organizationorganization
            • Organization creation completed
            • Organization modification started
            • Organization modification error
            • Organization deletion started
            • Organization deletion error
            • Organization deletion completed
            • Organization withdrawal started (admin account)
            • Organization withdrawal error (admin account)
            • Organization withdrawal completed (admin account)
            • Organization withdrawal completed (member account)
            Table. Organization - Event of organization event type

            Organization account

            Event sourceEvent typeevent
            OrganizationOrganization account
            • Organization account creation completed
            • Organization account migration started
            • Organization account migration error
            • Organization account deletion started
            • Organization account deletion error
            • Organization account deletion completed
            Table. Organization - Event of organization account event type

            Organization Invitation

            Event sourceEvent typeEvent
            OrganizationOrganization invitation
            • Organization invitation creation completed
            • Organization invitation acceptance started
            • Organization invitation acceptance error
            • Organization invitation rejection started
            • Organization invitation rejection error
            • Organization invitation rejection completed
            • Organization invitation cancellation started
            • Organization invitation cancellation error
            • Organization invitation cancellation completed
            Table. Organization - Event of organization invitation type

            organizational unit

            Event sourceEvent typeEvent
            Organizationorganizational unit
            • Organization unit creation completed
            • Organization unit modification started
            • Organization unit modification error
            • Organization unit deletion started
            • Organization unit deletion error
            • Organization unit deletion completed
            Table. Organization - Event of organization unit event type

            Control Policy

            Event sourceEvent typeevent
            OrganizationControl Policy
            • Control policy creation completed
            • Control policy modification started
            • Control policy modification error
            • Control policy deletion started
            • Control policy deletion error
            • Control policy deletion completed
            Table. Organization - Event of control policy event type

            Delegation Policy

            Event sourceEvent typeevent
            OrganizationDelegation Policy
            • Delegation policy creation completed
            • Delegation policy modification started
            • Delegation policy modification error
            • Delegation policy deletion started
            • Delegation policy deletion error
            • Delegation policy deletion completed
            Table. Organization - Delegated policy event type events

            11.5.1.50 - Cloud ML

            Cloud ML Event

            This is the list of events sent from the Cloud ML service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            AI-MLCloudMLCloudMLCloud MLCloud ML
            Table. Cloud ML Event Types

            Cloud ML

            Event sourceEvent typeevent
            Cloud MLCloud ML
            • Cloud ML Create Start
            • Cloud ML Create End
            • Cloud ML Create Error
            • Cloud ML Delete Start
            • Cloud ML Delete End
            • Cloud ML Delete Error
            • Cloud ML Modify Start
            • Cloud ML Modify End
            • Cloud ML Modify Error
            Table. Cloud ML - Event of Cloud ML event type

            11.5.1.51 - Certificate Manager

            Certificate Manager event

            This is the list of events that the Certificate Manager service passes to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            SecurityCertificate ManagerCertificate ManagerCertificate ManagerCertificate Manager
            Table. Certificate Manager Event Types

            Certificate Manager

            Event sourceEvent typeevent
            Certificate ManagerCertificate Manager
            • Security certificate creation started
            • Security certificate creation completed
            • Security certificate expiration alert
            • Security certificate deletion completed
            • Security certificate alarm recipient registration started
            • Security certificate alarm recipient registration completed
            • Security certificate alarm recipient registration error
            • Security certificate alarm recipient deletion started
            • Security certificate alarm recipient deletion completed
            • Security certificate alarm recipient deletion error
            Table. Certificate Manager - Event of the Certificate Manager event type

            11.5.1.52 - Key Management Service

            Key Management Service event

            This is the list of events that the Key Management Service delivers to ServiceWatch.

            Service CategoryserviceSubserviceEvent sourceEvent type
            SecurityKey Management ServiceKey Management ServiceKey Management ServiceKey
            Table. Key Management Service event types

            Key

            Event sourceEvent typeevent
            Key Management ServiceKey
            • KMS creation started
            • KMS creation completed
            • KMS creation error
            • KMS update completed
            • KMS update error
            • KMS deletion started
            • KMS deletion error
            • KMS deletion completed
            • KMS encryption error
            • KMS encryption completed
            • KMS decryption error
            • KMS decryption completed
            • KMS signing error
            • KMS signing completed
            • KMS verification error
            • KMS verification completed
            • KMS data key error
            • KMS data key completed
            • KMS rewrapping error
            • KMS rewrapping completed
            • KMS HMAC generation error
            • KMS HMAC generation completed
            • KMS HMAC verification error
            • KMS HMAC verification completed
            Table. Key Management Service – Key event type events

            11.5.1.53 - Direct Connect

            Direct Connect event

            This is the list of events delivered from the Direct Connect service to ServiceWatch.

            Service CategoryServiceSubserviceEvent sourceEvent type
            NetworkingDirect ConnectDirect ConnectDirect ConnectDirect Connect
            Table. Direct Connect event types

            Direct Connect

            Event sourceEvent typeEvent
            Direct ConnectDirect Connect
            • Direct Connect creation started
            • Direct Connect creation error
            • Direct Connect creation completed
            • Direct Connect update completed
            • Direct Connect deletion started
            • Direct Connect deletion completed
            • Direct Connect deletion error
            • Routing rule creation started
            • Routing rule creation error
            • Routing rule creation completed
            • Routing rule deletion started
            • Routing rule deletion error
            • Routing rule deletion completed
            Table. Direct Connect - Direct Connect event type event

            11.5.1.54 - Support Center

            Support Center event

            This is a list of events that the Support Center service forwards to the Support Center.

            Service CategoryServiceSubserviceEvent sourceEvent type
            ManagementSupport CenterService requestSupportService Request
            ManagementSupport CenterContactSupportContact
            Table. Support Center Event Types

            Service Request

            Event sourceEvent typeevent
            Support CenterService request
            • Service Request Create End
            • Service Request Set End
            • Service Request Iops Result Set End
            Table. Support Center – Service Request Event Type Event

            Contact

            Event sourceEvent typeEvent
            Support CenterContact
            • Inquiry Create End
            • Inquiry Operator Create End
            Table. Support Center - Inquiry event type

            11.6 - Release Note

            ServiceWatch

            2026.05.21
            CHANGED Improved date-wise metric comparison feature and Copliot alert search improvement
            • When comparing metrics by date, you can select a period to compare.
              • When viewing the chart of metric comparison results by date, you can select a specific period for comparison.
            • You can easily view the alarm occurrence status through Copilot.
              • You can enter a specific alarm name (or ID) or view the list of recently triggered alarms.
            2026.03.19
            FEATURE Release of new ServiceWatch features and improvement of existing functions
            • ServiceWatch Service Dashboard Release
              • We provide a service dashboard composed of key metrics for each service.
              • When the service’s resources are created and metric data is collected by ServiceWatch, the service dashboard is automatically generated and can be viewed.
            • Improved ServiceWatch metric search functionality
              • Enhance the indicator search to display results that contain the search term.
              • When searching for indicators, you can specify a period for a particular indicator to see how the indicator’s data changes over multiple periods.
            • ServiceWatch log pattern feature release
              • You can create a log pattern to filter log data collected in ServiceWatch that matches the pattern.
              • For detailed information, refer to the 로그 패턴.
            2025.12.16
            FEATURE ServiceWatch custom metric feature release
            • Release of ServiceWatch custom metric feature
              • Collecting custom metrics via ServiceWatch Agent
              • Collecting custom metrics via the ServiceWatch API
            • ServiceWatch custom log feature released
              • Collecting custom metrics via ServiceWatch Agent
            • Provide a feature to select the missing data handling method during alarm evaluation.
            2025.10.23
            NEW ServiceWatch service official version release
            • The official version of ServiceWatch has been released.
              • You can collect and monitor metrics, logs, events, and other data for resources created on the Samsung Cloud Platform.
                • Dashboard: You can check the status of resources through various dashboards provided by ServiceWatch.
                • Notification: You can receive a notification when specific conditions are met.
                • Log: You can view logs collected by ServiceWatch.
                • Event: By using ServiceWatch, you can analyze resource events to quickly identify and resolve issues.
              • The Samsung Cloud Platform services that integrate with ServiceWatch are as follows.
                • Metric Monitoring: Virtual Server, GPU Server, File Storage, Kubernetes Engine, Container Registry, VPC - Internet Gateway, Direct Connect
                • Log Monitoring: Kubernetes Engine
                • Event: Multiple services such as Virtual Server
                • For more details, please refer to ServiceWatch Integrated Service.

            12 - Support Center

            12.1 - Overview

            Service Overview

            The Support Center is a service that provides technical support, standard architecture, incident response, and service inquiries/answers needed when using the Samsung Cloud Platform.

            Provided features

            The Support Center provides the following features.

            1. Service Request: You can view the service request history and register a new request.

              • Typical situations that require service request are as follows.
                1. Create some services in the Security service category
                2. Request for additional features for some services in the Networking service category
            2. Contact: You can view the 1:1 inquiry history and register a new inquiry.

              • The typical situations that require Contact are as follows.
                1. Questions about how to use the service and inquiries regarding errors that occur during use
                2. Inquiries about questions regarding the use of Samsung Cloud Platform Console outside the service and errors that occur during use.
            3. Knowledge Center: You can view frequently asked questions and their answers for each service.

            4. Support Plan: Service tier that provides technical support, standard architecture provision, and incident response support required when using the Samsung Cloud Platform.

              • The typical situations that require a Support Plan are as follows.
                1. When experimenting or testing
                2. If there is a production workload
              • Support Plan can be used by selecting a level such as Standard or Proserv Plan according to the user’s situation.

            12.2 - How-to Guides

            In the Support Center, you can view service requests, inquiries, and frequently asked questions for each service along with their answers in the Knowledge Center.

            information
            The Support Center can be accessed after logging into the ID Center.

            Request Service

            You can request services through the Support Center on Samsung Cloud Platform.

            To request a service, follow the steps below.

            1. Click the All Services > Management > Support Center menu. 1. Go to the Service Home page.

            2. On the Service Home page, click the Service Request menu. 2. Navigate to the Service Request List page.

            3. On the Service Request List page, click the Service Request button.

              • Select and enter the information required for the service request.
                Category
                required status
                Detailed description
                TitleRequiredTitle of the service request
                • Enter within 64 characters using Korean, English, numbers, and special characters(+=,.@-_)
                RegionEssentialSelect the region for the service request
                ServiceRequiredSelect service group
                • Select services available for that service group
                Task classificationRequiredSelect the type of operation you want to request
                contentRequiredWrite the content according to the template for requesting the selected task
                • You can attach up to 5 files, each not exceeding 5 MB, and only the file types listed below are allowed.
                  (doc, docx, xls, xlsx, ppt, pptx, hwp, txt, pdf, jpg, jpeg, png, gif, tif)
                Table. Service request items
            4. Check the input information and click the Request button.

              • When creation is complete, check the Service Request List page.
            information
            • After submitting a service request, the content you entered cannot be edited or deleted.

            Check service request details

            In service requests, you can view the complete list, see detailed information, and check the progress.

            To view the detailed service request information, follow these steps.

            1. All Services > Management > Support Center menu, please click. 1. Service Home page is accessed.
            2. On the Service Home page, click the Service Request menu. 2. Navigate to the Service Request List page.
            3. Service Request List page, click the request for which you want to view detailed information. 3. Go to the Service Request Details page.
              CategoryDetailed description
              statusService request status
              • Requesting: initial request state
              • Assignment Completed: state assigned to a worker
              • In Progress: state where the worker is processing
              • Completed: work completed state
              Inquiry codeUnique identifier code for the service request
              Task classificationTask classification of the selected service when requesting a service
              Inquiry targetThe service group and service name selected during a service request
              RegionRegion selected during service request
              AuthorUser who requested the service request
              Request date and timeService request creation date and time
              TitleService Request Title
              contentContent entered when requesting a service
              AttachmentFile attached with the service request
              Table. Service request detail page items
            Reference
            • Service requests may take about 5~10 days depending on the requested work.

            12.2.1 - Contact Us

            Users can ask questions about the Samsung Cloud Platform through inquiries and view the responses.

            Create Inquiry

            You can create an inquiry through the Support Center on Samsung Cloud Platform.

            information
            • Technical support may vary depending on the inquiry, based on the Support Plan tier.
            • For detailed information about Support Plan tiers, see Support Plan.

            To create an inquiry, follow these steps.

            1. All Services > Management > Support Center Click the menu. 1. Go to the Service Home page.
            2. On the Service Home page, click the Contact Us menu. 2. Navigate to the Contact List page.
            3. On the Inquiry List page, click the Contact button.
              • Select and enter the information required for the inquiry.
                Category
                Required status
                Detailed description
                TitleEssentialTitle of the inquiry
                • Enter within 64 characters
                Inquiry TypeRequiredSelect inquiry type
                • Feature Inquiry: For questions about usage and utilization of a feature, additional selection or entry of Region, Inquiry Target (service group/service), Resource Name is required
                • Resource Error Inquiry: For error inquiries about a resource, additional selection or entry of Region, Inquiry Target (service group/service), Resource Name is required
                • Service Inquiry: For service-related inquiries such as feature improvement requests, additional selection or entry of Region, Inquiry Target (service group/service), Resource Name is required
                • General Inquiry: For account or usage fee related inquiries, Region selection is required
                • Incident Inquiry: For inquiries about incident situations, for usage and utilization questions, additional selection or entry of Region, Inquiry Target (service group/service), Resource Name is required
                Inquiry TypeRequiredSelect the inquiry type
                • Depending on the inquiry type, you must additionally enter/select Region, Inquiry Target, and Resource Name.
                RegionRequiredRegion to inquire
                Inquiry targetRequiredFirst, select a service group
                • You can then additionally select the available services that belong to that service group.
                Resource nameRequiredName of the resource to query
                SeverityRequiredThe level at which the inquiry affects the service
                • No impact on the current service
                • Development/Test environment request
                • Production environment request
                contentRequiredWrite your inquiry
                • You can attach up to 5 files, each not exceeding 5 MB, and only the following file types are allowed.
                  (doc, docx, xls, xlsx, ppt, pptx, hwp, txt, pdf, jpg, jpeg, png, gif, tif)
                Table. Contact item
            Information
            For incident inquiry types, this refers to inquiries about Samsung Cloud Platform incidents where certain functions in the production environment are unavailable, or functions in non‑production environments such as development or testing are unavailable.
            1. Check the input information and click the Request button.
              • When creation is complete, check the Inquiry List page.

            Check detailed inquiry information

            In the Inquiry section, you can view the full list of inquiries, see detailed information, and check the progress.

            To view the detailed inquiry information, follow these steps.

            1. Click the All Services > Management > Support Center menu. 1. Go to the Service Home page.
            2. On the Service Home page, click the Contact Us menu. 2. Go to the Inquiry List page.
            3. On the Inquiry List page, click the request to view detailed information. 3. Navigate to the Inquiry Details page.
              CategoryDetailed description
              statusInquiry status
              • Inquiry Received: Initial inquiry receipt status
              • Awaiting Response: The responsible person is reviewing the inquiry
              • Pending Customer Action: Waiting after requesting additional information from the customer regarding the inquiry
              • Response Completed: The response has been completed
              Inquiry codeUnique identifier code for inquiry
              Inquiry targetThe service group and service name selected when making an inquiry
              Resource nameResource name entered when making an inquiry
              RegionRegion selected when making an inquiry
              SeveritySeverity selected when making an inquiry
              AuthorUser who requested an inquiry
              Request date and timeDate and time the inquiry was created
              TitleContact Title
              contentContent entered when submitting an inquiry
              AttachmentFile attached when making an inquiry
              Table. Inquiry detail page items

            12.2.2 - Support Plan

            The Support Plan is a service that provides technical support, standard architecture provision, and incident response support needed when using the Samsung Cloud Platform, categorized into stages. Since service operating hours, technical support, and incident response service types differ by service tier, users can select an efficient service tier based on the applicable workload, such as testing, routine tasks, or critical operations.

            information
            Samsung Cloud Platform strives to respond and take action within the specified time after an initial request occurs, through the Support Plan.

            Learn about Support Plan

            Samsung Cloud Platform offers Support Plans in Standard and Proserv Plan tiers.

            To check the Support Plan you are currently using, follow these steps.

            1. All Services > Management > Support Center. Click the menu to go to the Service Home page.
            2. On the Service Home page, click the Support Plan menu. You will be taken to the Support Plan page.
              CategoryDetailed description
              Support Plan application statusCurrent application status of the Support Plan
              • Active: Properly applied. No changes planned.
              • In Progress: Scheduled for change.
              Plan changeButton to change the applied Support Plan
              Support Plan TypesSupport Plan names and descriptions by tier
              • Current Plan: The Support Plan tier currently applied
              • Future Plan: The Support Plan tier to be applied after the plan change
              Table. Support Plan page items
            Reference
            • On the Service Home page, you can view the currently used Support Plan and the list of Support Plans per Account.
            • The list of Support Plans for each Account can only be viewed in the organization management Account.

            Standard grade

            The Standard tier is the recommended level for handling tasks that are experimental or require testing.

            CategoryDetailed description
            Service targetRecommended for experimental or testing purposes
            Response time
            • General inquiry (Priority 4): within 1 business day
            Operating Hours9H * 5D Biz Hour
            Request / Response MethodOn-line (Console)
            Support Service
            • Simple inquiry handling
            • Update, patch, and EOS (EOL) management and announcement (Console)
            • Technical knowledge material provision (Online)
            Incident responseReceipt (action and notification)
            FeeFree
            Table. Standard tier service details

            Proserv Plan Level

            The Proserv Plan tier is the minimum tier recommended when there is a production workload.

            CategoryDetailed description
            Service TargetRecommended for production workloads
            Response time
            • System outage (Priority 1): within 1 hour
            • System damage (Priority 2): within 4 hours
            • System error (Priority 3): within 1 business day
            • General inquiry (Priority 4): within 1 business day
            Operating Hours24H * 7D
            Request / Response MethodAssign dedicated TAM (phone, email, On-line (Console))
            Support Service
            • Technology, Standard Architecture Response
            • Update, Patch and EOS (EOL) Management and Notification (Console)
            • Technical Knowledge Material Provision (On-line)
            Incident response
            • Samsung Cloud Platform incident response and analysis support
            • Connection to specialized operations teams and response support
            • Provision of Samsung Cloud Platform incident cause and analysis report (common)
            FeeMonthly usage fee per customer * Apply tiered rates (differential)
            • 0 ~ 200 million KRW: 10%
            • 200 million KRW~ 500 million KRW: 7%
            • 500 million KRW~ 1 billion KRW: 5%
            • 1 billion KRW and above: 3%
            Table. Proserv Plan tier service details

            Change Support Plan

            You can apply changes to the Support Plan as needed.

            Information

            Requests to enroll, cancel, or modify a Support Plan are applied on the 1st of each month.

            To change the Support Plan you are using, follow the steps below.

            1. All Services > Management > Support Center menu, click it. You will be taken to the Service Home page.
            2. On the Service Home page, click the Support Plan menu. You will be taken to the Support Plan page.
              • From the My Support Plan widget, you can click the Plan Upgrade or Plan Change button to navigate to the Support Plan Change page.
            3. On the Support Plan page, click the Change Plan button. You will be taken to the Support Plan Change page.
            4. On the Support Plan Change page, select the Support Plan you want to change, then click the Change Plan button.
            5. When the popup notifying a Support Plan change request opens, click the Confirm button. You will be taken to the Support Plan page.
            6. Check that the Support Plan’s applied status changes to In Progress and that the plan to be changed item is displayed in the Support Plan to be modified.
              • Cancel Plan Change button, when clicked, cancels the change request and keeps the current Support Plan.
            Reference
            • You can view the application, cancellation, and modification history of the Support Plan on the logging&Audit > Activity Log page.
            • Change history is provided free of charge for up to 90 days.

            12.2.3 - Knowledge Center

            Users can search for and view service-specific FAQs and their answers in the Knowledge Center.

            Using the Knowledge Center

            You can view the list of frequently asked questions for each service and see the answers.

            To use the Knowlegde Center, follow these steps.

            1. Click the All Services > Management > Support Center menu. Navigate to the Service Home page.
            2. On the Service Home page, click the Knowledge Center menu. You will be taken to the Knowledge Center List page.
            3. Select the Category you want to check and view the list. If there is an item whose detailed information you want to view, select it. You can view the detailed information on that page. You can expand or collapse the content using the Expand, Collapse buttons at the far right.

            12.3 - Release Note

            Support Center

            2025.10.23
            FEATURE Add Support Plan widget
            • Added a Support Plan widget to the Service Home page.
              • Now you can view the Support Plan you are currently using on the Service Home page.
            2025.07.01
            FEATURE Add Support Plan
            • Added a Support Plan. Users can receive technical support, standard architecture provision, incident response support, and more, categorized by stage, while using the Samsung Cloud Platform.
              • Depending on the user’s situation, you can select and use the Standard, Proserv Plan tier.
            2024.02.27
            NEW Support Center launch
            • We have launched the Support Center. It is a system for users of the Samsung Cloud Platform to receive necessary technical support, standard architecture, incident response, and service inquiries/answers.
              • You can manually request services that cannot be applied through the system from the Console.
              • You can ask questions about any issues while using it, and receive technical support if problems arise.

            13 - Quota Service

            13.1 - Overview

            Service Overview

            Quota Service is a service that manages the maximum number of resources, tasks, or items (quotas) set for each service within an account. Quota is a limit set to ensure high availability and stability for customers and to prevent unintended overuse. For example, the number of Virtual Server instances, the number of buckets, and similar resources fall under this. Through the Quota Service, you can view these quotas in one place and request an increase when needed.

            Types of quotas:

            • Default Quota (Default Quota): The initial value set by Samsung Cloud Platform for each service.
            • Applied Quota: the increased value requested by the user (applied upon approval).
            • Adjustability (Adjustable): Some quotas can be increased upon request, while others are fixed.

            Features

            We provide the following special features.

            • Centralized Management: You can manage more than 100 service quota items from a single console (e.g., Virtual Server, VPC, Firewall, etc.).
            • Integration with other services: You can smoothly request and process quota increase requests through Support (some are auto-approved).
            • Scalability and Flexibility: You can manage quotas finely from account-level quotas to region-level quotas, and adjustable quotas can scale with business growth.
            • Cost Efficiency: Quota Service has no additional cost, and by managing quotas in advance, it can prevent cost increases caused by unintended excessive resource usage.

            Provided features

            We provide the following features.

            • Quota lookup and detailed information provision: Check each service’s default quota, applied quota, and whether it can be adjusted, and display quotas separately for region-level and account-level.
            • Quota Increase Request: Through the Console, you can process quota increase requests in a single interface, and track and manage request statuses (Pending, Approved, Denied).
            • History and Analysis: You can review past quota increase request records and usage trends to inform resource planning and optimization.

            Prerequisite product

            There are no services that need to be pre-configured before creating this service.

            13.2 - How-to guides

            Check Quota Service details

            To view detailed information of the Quota Service, follow these steps.

            1. Click the All Services > Management > Quota Service menu. Go to the Service Home page of Quota Service.
            2. On the Service Home page, click the Quota Service menu. You will be taken to the Quota Service List page.
            3. Click the Quota Item name to view detailed information on the Quota Service List page. You will be taken to the Quota Service Details page.
              • Quota Service Details page consists of the Basic Information, Request History, Tag tabs.

            Basic Information

            On the Quota Service List page, you can view detailed information of the selected resource and, if necessary, edit the information.

            CategoryDetailed description
            ServiceService name
            Resource TypeResource Type
            SRNUnique resource ID in Samsung Cloud Platform
            Resource nameResource Name
            Resource IDUnique resource ID in the service
            Quota Item nameQuota Item name
            Applicable targetApplicable Target Classification
            • Region or Account
            descriptionQuota Item description
            AdjustabilityWhether a quota change request is possible
            Current allocation valueCurrent allocated capacity
            • Change request Click the button to request a change
            default allocation valueAllocated capacity by default
            • Click the Change Request button to request a change
            Table. Quota Service Basic Information Tab Items

            Request History

            You can view the change request history of the selected resource on the Quota Service List page.

            CategoryDetailed description
            Request date and timeDate and time of the change request
            requesterRequested user name
            request valueThe value requested by the user
            applied valueValues that are automatically approved or approved and entered by the administrator
            • before approval is completed - displayed
            Completion date and timeDate and time the change request was approved
            statusCurrent status of change request
            • Pending: before approver processes
            • On Hold: approver puts on hold
            • Approved: automatically approved or approver completed
            • Partially Approved: approved after applying less than requested
            • Auto Reduction: reduced according to auto-reduction policy
            • Request Rejected: approval denied
            • When in this state, the request detail popup opens
            Table. Quota Service request history tab items

            tag

            Quota Service List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

            CategoryDetailed description
            Tag listTag list
            • You can view the Key and Value information of the tag
            • Up to 50 tags can be added per resource
            • When entering a tag, you can search and select from the list of previously created Keys and Values
            Table. Quota Service tag tab items

            Request quota change

            To request a quota change, follow these steps.

            1. Click the All Services > Management > Quota Service menu. Navigate to the Service Home page of Quota Service.

            2. On the Service Home page, click the Quota Service menu. You will be taken to the Quota Service List page.

            3. On the Quota Service List page, select the Quota Service to change, then click the Quota Change Request button. The Quota Change Request popup window opens.

            4. Quota Change Request In the popup window, after entering Requested Value and Requested Message, click the Confirm button.

              Category
              Required status
              Detailed description
              request valueRequiredEnter the value the user wants to change
              • When reducing: automatically approved and applied
              • When expanding: applied after manager confirmation
              Request messageRequiredExplanation of the purpose of change and usage
              Table. Product name resource list item
              Reference

              If the requested resource has the automatic scaling policy applied, see the following.

              • The quota will be automatically adjusted based on usage after one month of request approval.
              • If the amount of resources in use exceeds the resource margin setting value (%), the quota is automatically reduced, leaving only the setting value.

            5. When a popup notifying a change request opens, click the Confirm button.

            Check quota change request history

            You can view the quota change request details and current status. To view the quota change request details, follow these steps.

            1. Click the All Services > Management > Quota Service menu. Go to the Service Home page of Quota Service.
            2. On the Service Home page, click the Request History menu. You will be taken to the Request History List page.
              CategoryDetailed description
              ServiceService name
              Quota Item nameQuota Item name
              Applicable targetApplicable Target Classification
              • Region or Account
              Resource IDUnique resource ID in the service
              request valueThe value requested by the user
              applied valueValues that are automatically approved or approved and entered by the administrator
              • before approval is completed, display -
              Auto scaling policyWhether automatic reduction policy is applied
              • When not applied, display Not Applied
              • When applied, display Margin(%)
              Request date and timeDate and time of the change request
              Completion Date/TimeDate and time the change request was approved
              statusCurrent status of change request
              • Pending: before approver processes
              • On hold: approver puts on hold
              • Approved: automatically approved or approver completed
              • Partially approved: approved after applying less than requested
              • Auto reduction: reduced according to auto-reduction policy
              • Request rejected: approval denied
              • When in this state, the request detail popup opens
              Table. List of change request items
            Reference

            If the requested resource has the automatic scaling policy applied, see the following.

            • The quota will be automatically adjusted based on usage after one month of request approval.
            • If the amount of resources in use meets or exceeds the resource margin setting value (%), the quota is automatically reduced, leaving only the setting value.

            13.2.1 - Organization Quota Template

            By using an organization quota template, when a new Account is created in the organization, you can automatically request the Quota service for the new Account based on the template created by the admin Account.

            guide
            Organization quota templates can only be viewed in the organization’s Management Account and can only be managed in the region where the organization was created. The automatically requested quota service can be reviewed by the responsible person, who can accept or reject it, or adjust the quota.

            Using organization quota template

            To use the organization quota template of the Quota Service, follow these steps.

            1. Click the All Services > Management > Quota Service menu. Navigate to the Service Home page of Quota Service.
            2. On the Service Home page, click the Organization Quota Template menu. You will be taken to the Organization Quota Template page.
              CategoryDetailed description
              Whether to useSet whether to use the organization allocation template
              • When Enabled, apply the service’s default allocation values to newly created Accounts in the organization
              • When Disabled, automatically request a change to the quota of newly created Accounts in the organization
              • Click the Edit button to change the usage setting
              Organization Assignment TemplateList of registered organization allocation templates
              • Applicable target, region, service, Quota Item name, request value can be checked
              Add quotaNew quotas can be registered
              • Up to 10 can be registered
              DeleteDelete the selected quota from the organization assignment template list
              Table. Organization quota template items
            Caution
            • If no additional quota is added, setting the organization allocation template to use will not automatically apply the template.
            • Even if the template is set to unused, the added quota will not be deleted.

            Add quota

            You can set a new quota and add it to the template.

            Caution
            You can register up to 10 quotas.
            To add a quota, follow the steps below.

            1. Click the All Services > Management > Quota Service menu. Navigate to the Service Home page of Quota Service.

            2. On the Service Home page, click the Organization Quota Template menu. You will be taken to the Organization Quota Template page.

            3. On the Organization Quota Template page, click the Add Quota button. You will be taken to the Add Quota page.

            4. After entering the required quota information, click the Complete button.

              CategoryRequiredDetailed description
              RegionRequiredSelect the region to use for the organization quota
              ServiceRequiredSelect services available in the selected region
              • Activates when Region is selected
              Quota Item nameRequiredSelect Quita Item included in the selected service
              • Service activation upon selection
              • Quota Items currently used in other quotas cannot be selected
                • If needed, delete the quota and then register
              request valueRequiredEnter request value for the selected Quita Item
              • Quita Item name Activates when selected
              • Can be entered up to the value set by the administrator
              Table. Additional quota items

            5. When the pop-up notifying the addition opens, click the Confirm button. The quota will be added to the organization quota template list.

            Delete organization quota

            You can delete the quota added to the template. To delete a quota, follow these steps.

            1. Click the All Services > Management > Quota Service menu. Go to the Service Home page of Quota Service.
            2. On the Service Home page, click the Organization Quota Template menu. You will be taken to the Organization Quota Template page.
            3. On the Organization quota template page, select the quota to delete from the list, then click the Delete button.
              • You can delete one or multiple quotas simultaneously.
            4. When a pop-up notifying deletion opens, click the Confirm button. The quota will be removed from the list.

            13.3 - Release Note

            Quota Service

            2026.03.19
            FEATURE Add tag and organization quota template feature
            • A tag tab has been added in the detailed information.
              • You can set tags on the Quota Service to use it.
            • Organization quota template feature has been added.
              • By using the organization quota template, you can automatically request a quota change when creating a new account in the organization.
              • The organization quota template feature is available only in the Management Account.
            2025.07.01
            NEW Quota Service official version release
            • We have launched the Quota Service.
              • You can manage the maximum number of resources, tasks, or items (quotas) set for each service within an account.