腾讯云企业账号问题

moe

3年前

本帖最后由 lwin 于 2022-1-31 10:43 编辑

   腾讯云企业账号问题
   我只会账号密码登录，每次都是账号密码登录，但是操作记录里出现了夜里0点至6点多次AssumeRole(申请扮演角色）！
   是不是腾讯云企业账号被api控制了，记录如下，请高手帮我看看。

2022-01-31 06:10:36 root AssumeRole(申请扮演角色) sts(安全凭证服务) role/4611686018431228749
来源 ApiCall
基本信息
事件说明
密钥 ID
–
事件名称
AssumeRole
事件时间
2022-01-31 06:10:36
源 IP 地址
0.0.0.0 (未知)
资源区域
–
CAM 错误码
–
事件区域
ap-shanghai
事件源
sts.tencentcloudapi.com
请求 ID
05c2adb2-7e08-4010-a11c-044aac4ee7a8
用户名
100023541157(root)
来源
ApiCall
查看事件

查看事件代码如下
{
"userIdentity": {
      "principalId": "100023541157",
      "accountId": "100023541157",
      "secretId": "",
      "type": "Root",
      "userName": "root",
      "sessionContext": {}
},
"@timestamp": "2022-01-30T18:30:40.075311",
"onlyRecordNotSeen": "0",
"eventRegion": "ap-shanghai",
"eventVersion": 2,
"errorCode": "0",
"errorMessage": "permission verify",
"requestID": "6118c5ed-4bbf-48c4-a881-4ddccd9fa0d3",
"eventID": "6118c5ed-4bbf-48c4-a881-4ddccd9fa0d3",
"apiVersion": "3.0",
"eventType": "ApiCall",
"actionType": "Write",
"authMode": "2",
"isRisk": "0",
"ruleId": "0",
"httpMethod": "POST",
"apiErrorCode": 0,
"apiErrorMessage": "",
"userAgent": "",
"eventTime": 1643567437,
"updateEsTime": 16435674458760980,
"sensitiveAction": "",
"cliIp": "",
"eventPlatform": "0",
"sourceIPAddress": "0.0.0.0",
"resourceType": "sts",
"eventName": "AssumeRole",
"eventSource": "sts.tencentcloudapi.com",
"requestParameters": "",
"resources": "["qcs::cam::uin\/100023541157:role\/4611686018431228749"]",
"resourceName": "role/4611686018431228749",
"cloudapi": 0,
"auth": 1,
"signature": 0
}

发个工单问客服

还有这种操作？赶紧问问客服确认下