

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# 信任的修復程式中的修復日誌
<a name="tr-logging"></a>

Trusted Remediator 會以 JSON 格式建立日誌，並將其上傳至 Amazon Simple Storage Service。日誌檔案會上傳至 AMS 建立且名為 的 S3 儲存貯體`ams-trusted-remediator-{your-account-id}-logs`。AMS 會在委派管理員帳戶中建立 S3 儲存貯體。您可以將日誌檔案匯入 Quick，以產生自訂的修補報告。

如需詳細資訊，請參閱[與 Quick 的可信任修復程式整合](tr-qs-integration.md)。

## 修復項目日誌
<a name="tr-logging-rem-item"></a>

建立修復 OpsItem `Remediation item log`時，信任的修復程式會建立 。此日誌包含手動修復 OpsItem 和自動修復 OpsItem。您可以使用 `Remediation item log`來追蹤所有修補的概觀。

**Compute Optimizer 建議的修復項目日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs/compute_optimizer_remediation_items/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp}}-{{Compute Optimizer check ID}}- {{Resource ID}}.json`

** Trusted Advisor 檢查的修復項目日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs/remediation_items/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp}}-{{Trusted Advisor check ID}}- {{Resource ID}}.json`

**Security Hub CSPM 建議的修復項目日誌位置**

 `s3://ams-trusted-remediator-{{delegated-administrator-account}}-id-logs/security_hub_remediation_items/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp-Security Hub CSPM check ID- Resource ID}}.json`

**修復項目日誌範例檔案 URL**

`s3:///ams-trusted-remediator-{{111122223333}}-logs/remediation_items/{{2023-02-06}}/{{1675660464-DAvU99Dc4C-vol-00bd8965660b4c16d.json}}`

**Compute Optimizer 修復項目日誌格式**

```
{
  "AccountID": "{{Account_ID}}",
  "ComputeOptimizerCheckID": "{{Compute Optimizer check ID}}",
  "ComputeOptimizerCheckName": "{{Compute Optimizer check name}}",
  "ResourceID": "{{Resource ID}}",
  "RemediationTime": {{Remediation creation time}},
  "ExecutionMode": "{{Automated or Manual}}",
  "OpsItemID": "{{OpsItem ID}}"
}
```

**Trusted Advisor 修復項目日誌格式**

```
{
   "TrustedAdvisorCheckID": {{Trusted Advisor check ID}},
   "TrustedAdvisorCheckName": {{Trusted Advisor check name}},
   "TrustedAdvisorCheckResultTime": {{10 digits epoch time or unix timestamp}},
   "ResourceID": {{Resource ID}},
   "RemediationTime": {{Remediation creation time}},
   "ExecutionMode": {{Automated or Manual}},
   "OpsItemID": {{OpsItem ID}}
}
```

**Security Hub CSPM 修復項目日誌格式**

```
{
 "AccountID": "{{Account_ID}}",
 "SecurityHubCheckID": "{{Security Hub check ID}}",
 "SecurityHubCheckName": "{{Security Hub check name}}",
 "ResourceID": "{{Resource ID}}",
 "RemediationTime": {{Remediation creation time}},
 "ExecutionMode": "{{Automated or Manual}}",
 "OpsItemID": "{{OpsItem ID}}" 
}
```

**Compute Optimizer Remediation 項目日誌格式範例內容**

```
{
  "AccountID": "123456789012",
  "ComputeOptimizerCheckID": "compute-optimizer-ebs",
  "ComputeOptimizerCheckName": "EBS volumes",
  "ResourceID": "vol-1235589366f77aca7",
  "RemediationTime": 1755044783,
  "ExecutionMode": "Manual",
  "OpsItemID": "oi-b8888b38fe78"
}
```

**Trusted Advisor 修復項目日誌格式範例內容**

```
{
    "TrustedAdvisorCheckID": "DAvU99Dc4C", 
    "TrustedAdvisorCheckName": "Underutilized Amazon EBS Volumes",
    "TrustedAdvisorCheckResultTime": 1675614749,
    "ResourceID": "vol-00bd8965660b4c16d",
    "RemediationTime": 1675660464,
    "OpsItemID": "oi-cca5df7af718"
}
```

**Security Hub CSPM 修復項目日誌格式範例內容**

```
{
    "AccountID": "012345678901",
    "SecurityHubControlID": "security-hub-lambda-7",
    "SecurityHubControlName": "Lambda functions should have AWS X-Ray active tracing enabled",
    "SecurityHubControlResultTime": 1764580147,
    "ResourceID": "test-lambda-7-xray-disabled",
    "RemediationTime": 1764900171,
    "ExecutionMode": "Manual",
    "OpsItemID": "oi-ea12c3456d7f"
}
```

## 自動化修復執行日誌、運算最佳化工具、Security Hub CSPM 和 Trusted Advisor
<a name="tr-logging-rem-exe"></a>

當自動化 SSM 文件執行完成`Automated remediation execution log`時，信任的修復程式會建立 。此日誌僅包含自動修復 OpsItem 的 SSM 執行詳細資訊。您可以使用此日誌檔案來追蹤自動化修復。

**Compute Optimizer 自動化修復日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs//remediation_executions/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp}}-{{Compute Optimizer recommendation ID}}.json`

**Security Hub CSPM 自動化修復日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs//remediation_executions/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp}}-{{Security Hub CSPM recommendation ID}}.json`

**Trusted Advisor 自動化修復日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs//remediation_executions/{{remediation creation time in yyyy-mm-dd format}}/{{10 digits epoch time or unix timestamp}}-{{Trusted Advisor check ID}}-{{Resource ID}}.json`

**Compute Optimizer 自動化修復日誌位置範例**

`s3://ams-trusted-remediator-{{111122223333}}-logs/remediation_executions/2025-06-26/1750908858-123456789012-compute-optimizer-ec2-i-1235173471d2cd789.json`

**Security Hub CSPM 自動化修復日誌位置範例**

`s3://ams-trusted-remediator-{{111122223333}}-logs/remediation_executions/2025-06-26/763247655-066028476520-security-hub-rds-8-miz-tr-sh-test-rds-instance-1.json`

**Trusted Advisor 自動化修復日誌位置範例**

`s3://ams-trusted-remediator-{{111122223333}}-logs/remediation_executions/2023-02-06/1675660573-DAvU99Dc4C-vol-00bd8965660b4c16d.json`

**自動化修復日誌格式範例內容**

```
{
    "OpsItemID": "oi-767c77e05301",
    "SSMExecutionID": "93d091b2-778a-4cbc-b672-006954d76b86",
    "SSMExecutionStatus": "Success"
}
```

## 成員帳戶日誌
<a name="tr-logging-member-account"></a>

當您的帳戶加入或退出`Member accounts log`時，信任的修復程式會建立 。您可以使用 `Member accounts log` 尋找每個成員帳戶的帳戶 ID AWS 區域、加入的 和執行時間。

**成員帳戶日誌位置**

`s3://ams-trusted-remediator-{{delegated-administrator-account-id}}-logs/configuration_logs/member_accounts.json`

**成員帳戶日誌範例檔案 URL**

`s3://ams-trusted-remediator-{{111122223333}}-logs/configuration_logs/member_accounts.json`

**成員帳戶日誌格式**

```
{
    "delegated_administrator_account_id": {{Delegated Administrator account id}},
    "appconfig_configuration_region": {{Trusted Remediator AppConfig Region}},
    "member_accounts": [
        {
            "account_id": {{Member account id}}
            "account_partition": {{Member account partition (for example, aws)}},
            "regions": [
                {
                    "execution_time": {{Remediation execution time in cron schedule expression}},
                    "execution_timezone": {{Timezone for the remediation execution time}},
                    "region_name": {{AWS 區域 name}}
                }
                ...
            ]
        }
        ...
    ],
    "updated_at": {{Log update time}},
}
```

**成員帳戶日誌格式範例內容**

```
{
    "delegated_administrator_account_id": "111122223333",
    "appconfig_configuration_region": "ap-southeast-2",
    "member_accounts": [
        {
            "account_id": "222233334444",
            "account_partition": "aws",
            "regions": [
                {
                    "execution_time": "0 9 * * 6",
                    "execution_timezone": "Australia/Sydney",
                    "region_name": "ap-southeast-2"
                },
                {
                    "execution_time": "0 5 * * 7",
                    "execution_timezone": "UTC",
                    "region_name": "us-east-1"
                }
            ]
        },
        {
            "account_id": "333344445555",
            "account_partition": "aws",
            "regions": [
                {
                    "execution_time": "0 1 * * 5",
                    "execution_timezone": "Asia/Seoul",
                    "region_name": "ap-northeast-2"
                }
            ]
        }
    ],
    "updated_at": "1730869607"
}
```