Back to Details

huawei-cloud-cdn-traffic-anomaly-analysis

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

CDN Traffic Anomaly Analysis

CDN流量异常分析

Overview

概述

This skill analyzes CDN domain traffic anomalies by querying billing mode and corresponding traffic/bandwidth metrics. It automatically determines the appropriate metric based on the account's billing mode (bw_95, flux, combine_flux, bw, bw_peak), queries historical data over a configurable time range, establishes a 3-month baseline for comparison, and identifies potential traffic theft or abuse using both absolute thresholds and relative baseline deviation.
Key Features:
  • Automatic billing mode detection and metric selection
  • Support for all billing modes: bw_95, flux, combine_flux, bw, bw_peak
  • Domain validation and traffic analysis
  • 3-month baseline analysis — detects relative traffic surges against historical norms
  • Dual-threshold anomaly detection — absolute thresholds + relative baseline comparison
  • Three-tier conclusions: Normal / Watch (relative surge) / Anomalous (absolute threshold exceeded)
  • Comprehensive analysis reports with baseline comparison and daily breakdowns
Tool: hcloud CLI (KooCLI)
Timestamp Tool: 
scripts/cdn_timestamp.py
(built-in)
Analysis Scope: Past 7 days for current window (configurable); past 3 months for baseline
Core Principle: Query only the metric corresponding to the billing mode; use API capabilities efficiently to cover both current and baseline windows with minimal API calls
本技能通过查询计费模式及对应的流量/带宽指标来分析CDN域名流量异常情况。它会根据账户的计费模式（bw_95、flux、combine_flux、bw、bw_peak）自动确定合适的指标，查询可配置时间范围内的历史数据，建立3个月的基准数据用于对比，并结合绝对阈值和相对基准偏差来识别潜在的流量盗刷或滥用行为。
核心特性：
  • 自动检测计费模式并选择对应指标
  • 支持所有计费模式：bw_95、flux、combine_flux、bw、bw_peak
  • 域名验证与流量分析
  • 3个月基准分析 — 检测相对于历史标准的流量突增情况
  • 双阈值异常检测 — 绝对阈值 + 相对基准对比
  • 三级结论：正常 / 关注（相对突增） / 异常（超出绝对阈值）
  • 包含基准对比和每日细分数据的全面分析报告
工具：hcloud CLI (KooCLI)
时间戳工具：
scripts/cdn_timestamp.py
（内置）
分析范围：当前窗口默认过去7天（可配置）；基准数据为过去3个月
核心原则：仅查询与计费模式对应的指标；高效利用API能力，通过最少API调用覆盖当前和基准窗口

⛔ Prohibited Operations (Security Constraints)

⛔ 禁止操作（安全约束）

This skill strictly forbids the following operations, regardless of user requests:
Prohibited OperationAPI/CommandReason
❌ Modify domain configuration
ModifyDomainConfig
/ 
hcloud CDN UpdateDomain
Write operation; may affect production traffic
❌ Delete domain
DeleteDomain
/ 
hcloud CDN DeleteDomain
Irreversible; removes domain from CDN
❌ Disable domain acceleration
DisableDomain
/ 
hcloud CDN DisableDomain
Affects production traffic
❌ Modify billing mode
UpdateBillingMode
Financial impact; requires explicit authorization
If a user requests a prohibited operation, you must refuse and inform: "Per security constraints, this skill does not allow write/delete operations. This skill is read-only for traffic analysis. Please use the Huawei Cloud CDN console or hcloud CLI manually for configuration changes."
无论用户请求如何，本技能严格禁止以下操作：
禁止操作API/命令原因
❌ 修改域名配置
ModifyDomainConfig
/ 
hcloud CDN UpdateDomain
写入操作，可能影响生产流量
❌ 删除域名
DeleteDomain
/ 
hcloud CDN DeleteDomain
操作不可逆，会将域名从CDN中移除
❌ 禁用域名加速
DisableDomain
/ 
hcloud CDN DisableDomain
影响生产流量
❌ 修改计费模式
UpdateBillingMode
产生财务影响，需要明确授权
如果用户请求禁止操作，必须拒绝并告知： "根据安全约束，本技能不允许执行写入/删除操作。本技能仅用于流量分析的只读操作。如需修改配置，请手动使用华为云CDN控制台或hcloud CLI。"

Architecture

架构

CDN Traffic Anomaly Analysis
├── ShowChargeModes        (Query account billing mode)
├── ListDomains/v2         (List all CDN domains)
├── Domain Validation      (Verify target domain exists)
├── TimestampCalculation   (scripts/cdn_timestamp.py)
│   ├── Current window     (default 7 days, UTC+8 midnight)
│   └── Baseline windows   (3 × 30-day windows, non-overlapping)
├── QueryMetrics           (Based on billing mode)
│   ├── bw_95 → ShowBandwidthCalc
│   │   ├── Current: 1 call (7-day single aggregate)
│   │   └── Baseline: 3 calls (30-day aggregates each)
│   └── flux/bw → ShowDomainStats/v2 (stat_type=flux or bw)
│       └── Combined: 1 call (97 days → 90d baseline + 7d current)
└── ThresholdJudgment      (Dual-threshold: absolute + baseline-relative)
    ├── ⚠️ Anomalous: exceeds absolute threshold
    ├── 👀 Watch: exceeds baseline × multiplier (sub-threshold surge)
    └── ✅ Normal: neither threshold triggered
CDN Traffic Anomaly Analysis
├── ShowChargeModes        (查询账户计费模式)
├── ListDomains/v2         (列出所有CDN域名)
├── Domain Validation      (验证目标域名存在性)
├── TimestampCalculation   (scripts/cdn_timestamp.py)
│   ├── Current window     (默认7天，UTC+8午夜对齐)
│   └── Baseline windows   (3个30天窗口，无重叠)
├── QueryMetrics           (基于计费模式)
│   ├── bw_95 → ShowBandwidthCalc
│   │   ├── Current: 1次调用（7天聚合值）
│   │   └── Baseline: 3次调用（每次30天聚合值）
│   └── flux/bw → ShowDomainStats/v2 (stat_type=flux或bw)
│       └── 合并调用：1次（97天 → 90天基准 + 7天当前）
└── ThresholdJudgment      (双阈值：绝对 + 基准相对值)
    ├── ⚠️ 异常：超出绝对阈值
    ├── 👀 关注：超出基准 × 系数（阈值内突增）
    └── ✅ 正常：未触发任一阈值

API Call Budget

API调用预算

Billing ModeAPI CallsRate LimitEst. Duration
bw_956 (1 billing + 1 domain + 1 current + 3 baseline)2/s (ShowBandwidthCalc)~3s
flux / bw3 (1 billing + 1 domain + 1 combined 97d query)15/s (ShowDomainStats)<1s
计费模式API调用次数速率限制预估耗时
bw_956次（1次计费查询 + 1次域名查询 + 1次当前数据 + 3次基准数据）2次/秒（ShowBandwidthCalc）~3秒
flux / bw3次（1次计费查询 + 1次域名查询 + 1次97天合并查询）15次/秒（ShowDomainStats）<1秒

KooCLI Command Format Standard

KooCLI命令格式规范

All hcloud CDN commands follow this standard format:
bash
hcloud CDN <Operation> --cli-region=cn-north-4 [--parameter=value ...]
Format Rules:
  • Service name: 
    CDN
    (uppercase)
  • Operation name: PascalCase (e.g., 
    ShowChargeModes
    , 
    ListDomains
    , 
    ShowBandwidthCalc
    )
  • Region parameter: 
    --cli-region=cn-north-4
    (required, always use cn-north-4 for CDN)
  • Parameter format: 
    --key=value
    (equals sign, no space)
  • Indexed parameters: 
    --key.1=value1
    (for array parameters)
Examples:
bash
undefined
所有hcloud CDN命令遵循以下标准格式：
bash
hcloud CDN <Operation> --cli-region=cn-north-4 [--parameter=value ...]
格式规则：
  • 服务名称：
    CDN
    （大写）
  • 操作名称：PascalCase格式（例如：
    ShowChargeModes
    , 
    ListDomains
    , 
    ShowBandwidthCalc
    ）
  • 地域参数：
    --cli-region=cn-north-4
    （必填，CDN始终使用cn-north-4）
  • 参数格式：
    --key=value
    （等号连接，无空格）
  • 索引参数：
    --key.1=value1
    （针对数组类型参数）
示例：
bash
undefined

Correct

正确格式

hcloud CDN ShowChargeModes --cli-region=cn-north-4 --product_type=base hcloud CDN ListDomains/v2 --cli-region=cn-north-4 --page_size=100
hcloud CDN ShowChargeModes --cli-region=cn-north-4 --product_type=base hcloud CDN ListDomains/v2 --cli-region=cn-north-4 --page_size=100

Incorrect (space instead of equals sign)

错误格式（使用空格而非等号）

hcloud CDN ShowChargeModes --cli-region cn-north-4
undefined
hcloud CDN ShowChargeModes --cli-region cn-north-4
undefined

Prerequisites

前置条件

Prerequisite check: Huawei Cloud CLI (hcloud / KooCLI) >= 3.2.0 required Run 
hcloud version
to verify version >= 3.2.0. If not installed or version is too low, see references/cli-installation-guide.md for installation guide.
bash
hcloud version
Prerequisite check: Python >= 3.8 required (for timestamp calculation) Run 
python --version
to verify version >= 3.8.
bash
python --version
Prerequisite check: hcloud credentials configured
Before performing CDN operations, you must verify hcloud credentials are configured:
bash
hcloud configure list
If no valid credentials exist, stop and guide the user to configure credentials.
⚠️ hcloud parameter format requirements
hcloud (KooCLI) all parameters must use the 
--param=value
format (connected with equals sign); space-separated format is not supported.
✅ Correct: 
hcloud CDN ShowChargeModes --cli-region=cn-north-4
❌ Incorrect: 
hcloud CDN ShowChargeModes --cli-region cn-north-4
⚠️ CDN API region requirements
CDN APIs support multiple regions. It is recommended to use 
cn-north-4
, but the APIs are not limited to this region only. Query results are region-independent (CDN is a global service). Recommended: Always use 
cn-north-4
.
前置检查：需要华为云CLI (hcloud / KooCLI) >= 3.2.0 运行 
hcloud version
验证版本是否≥3.2.0。若未安装或版本过低，请查看 references/cli-installation-guide.md 获取安装指南。
bash
hcloud version
前置检查：需要Python >= 3.8（用于时间戳计算） 运行 
python --version
验证版本是否≥3.8。
bash
python --version
前置检查：已配置hcloud凭证
在执行CDN操作前，必须验证hcloud凭证已配置：
bash
hcloud configure list
如果没有有效凭证，请停止操作并引导用户配置凭证。
⚠️ hcloud参数格式要求
hcloud (KooCLI) 所有参数必须使用 
--param=value
格式（等号连接）；不支持空格分隔格式。
✅ 正确：
hcloud CDN ShowChargeModes --cli-region=cn-north-4
❌ 错误：
hcloud CDN ShowChargeModes --cli-region cn-north-4
⚠️ CDN API地域要求
CDN API支持多个地域。建议使用
cn-north-4
，但API并不局限于该地域。 查询结果与地域无关（CDN是全局服务）。 推荐：始终使用
cn-north-4
。

Authentication

身份认证

Prerequisite check: Huawei Cloud credentials required
Security rules (must be followed):
  • Prohibited from reading, echoing, or printing AK/SK values
  • Prohibited from asking the user to input AK/SK directly in the conversation
  • Prohibited from using 
    hcloud configure set
    to pass plaintext credential values
  • Prohibited from accepting AK/SK directly provided by the user in the conversation
  • Only allowed to read credentials from environment variables or configured CLI config files
⚠️ Important: Handling user-provided credentials
If a user attempts to provide AK/SK directly (e.g., "my AK is xxx, SK is yyy"):
  1. Stop immediately - Do not execute any commands
  2. Politely refuse and return the following message: 
    For account security, please do not provide Huawei Cloud Access Key ID and Access Key Secret directly in the conversation.

Please use one of the following secure methods to configure credentials:

Method 1: Interactive configuration (recommended)
    hcloud configure
    # Enter AK/SK as prompted; credentials will be securely stored in a local config file

Method 2: Environment variable configuration
    export HUAWEICLOUD_SDK_AK=<your-access-key-id>
    export HUAWEICLOUD_SDK_SK=<your-secret-key>

After configuration is complete, please retry your request.
  3. Do not continue executing any Huawei Cloud operations until credentials are configured
Check CLI configuration:
bash
   hcloud configure list
Check whether the output contains valid configuration (AK/SK, IAM, etc.).
If no valid credentials exist, stop here.
前置检查：需要华为云凭证
安全规则（必须遵守）：
  • 禁止读取、回显或打印AK/SK值
  • 禁止要求用户在对话中直接输入AK/SK
  • 禁止使用 
    hcloud configure set
    传递明文凭证值
  • 禁止接受用户在对话中直接提供的AK/SK
  • 仅允许从环境变量或已配置的CLI配置文件中读取凭证
⚠️ 重要：处理用户提供的凭证
如果用户尝试直接提供AK/SK（例如："我的AK是xxx，SK是yyy"）：
  1. 立即停止 - 不要执行任何命令
  2. 礼貌拒绝并返回以下信息： 
    为了账户安全，请不要在对话中直接提供华为云Access Key ID和Access Key Secret。

请使用以下安全方式之一配置凭证：

方法1：交互式配置（推荐）
    hcloud configure
    # 根据提示输入AK/SK；凭证将安全存储在本地配置文件中

方法2：环境变量配置
    export HUAWEICLOUD_SDK_AK=<您的Access Key ID>
    export HUAWEICLOUD_SDK_SK=<您的Secret Access Key>

配置完成后，请重试您的请求。
  3. 在凭证配置完成前，不要继续执行任何华为云操作
检查CLI配置：
bash
   hcloud configure list
检查输出是否包含有效配置（AK/SK、IAM等）。
如果没有有效凭证，请在此停止。

IAM Permission Policies

IAM权限策略

Ensure the IAM user has the required permissions. See references/iam-policies.md for details.
Minimum required permissions:
  • cdn:domain:list
    — List CDN domains
  • cdn:domain:get
    — Get domain details
  • cdn:statistics:get
    — Get traffic/bandwidth statistics
  • cdn:billing:get
    — Get billing mode information
确保IAM用户拥有所需权限。详情请查看 references/iam-policies.md。
最低所需权限：
  • cdn:domain:list
    — 列出CDN域名
  • cdn:domain:get
    — 获取域名详情
  • cdn:statistics:get
    — 获取流量/带宽统计数据
  • cdn:billing:get
    — 获取计费模式信息

Core Commands

核心命令

Quick reference for all hcloud CDN commands used in this skill:
CommandPurposeKey Parameters
hcloud CDN ShowChargeModes --cli-region=cn-north-4 --product_type=base
Query account billing mode
--service_area
(optional)
hcloud CDN ListDomains/v2 --cli-region=cn-north-4 --page_size=100
List all CDN domains
--page_size
, 
--page_number
hcloud CDN ShowBandwidthCalc --cli-region=cn-north-4 --domain_name=<domain> --calc_type=bw_95 --start_time=<ms> --end_time=<ms>
Query 95th percentile bandwidth (current 7 days or baseline 30 days)
--service_area
hcloud CDN ShowDomainStats/v2 --cli-region=cn-north-4 --domain_name=<domain> --stat_type=flux --interval=86400 --start_time=<ms> --end_time=<ms> --action=detail
Query daily traffic statistics (combined 97d query for flux/bw paths)
--stat_type
, 
--interval
, 
--service_area
Notes:
  • All commands require 
    --cli-region=cn-north-4
  • Timestamps must be in milliseconds (e.g., 
    1785081600000
    )
  • Use 
    scripts/cdn_timestamp.py
    to calculate timestamps
  • Use 
    scripts/cdn_timestamp.py --baseline
    for 3×30-day baseline windows
  • ShowBandwidthCalc: max 31-day range, single aggregate value (no per-day breakdown), rate limit 2 calls/s
  • ShowDomainStats/v2: supports ≥365-day range, one data point per day at interval=86400, rate limit 15 calls/s
本技能所用所有hcloud CDN命令快速参考：
命令用途关键参数
hcloud CDN ShowChargeModes --cli-region=cn-north-4 --product_type=base
查询账户计费模式
--service_area
（可选）
hcloud CDN ListDomains/v2 --cli-region=cn-north-4 --page_size=100
列出所有CDN域名
--page_size
, 
--page_number
hcloud CDN ShowBandwidthCalc --cli-region=cn-north-4 --domain_name=<domain> --calc_type=bw_95 --start_time=<ms> --end_time=<ms>
查询95峰值带宽（当前7天或基准30天）
--service_area
hcloud CDN ShowDomainStats/v2 --cli-region=cn-north-4 --domain_name=<domain> --stat_type=flux --interval=86400 --start_time=<ms> --end_time=<ms> --action=detail
查询每日流量统计数据（flux/bw路径使用97天合并查询）
--stat_type
, 
--interval
, 
--service_area
注意事项：
  • 所有命令均需携带
    --cli-region=cn-north-4
  • 时间戳必须为毫秒格式（例如：
    1785081600000
    ）
  • 使用
    scripts/cdn_timestamp.py
    计算时间戳
  • 使用
    scripts/cdn_timestamp.py --baseline
    生成3个30天基准窗口
  • ShowBandwidthCalc：最大时间范围31天，仅返回单个聚合值（无每日细分），速率限制2次/秒
  • ShowDomainStats/v2：支持≥365天范围，interval=86400时每天一个数据点，速率限制15次/秒

Parameter Confirmation

参数确认

Before executing the analysis, confirm the following parameters with the user:
ParameterRequiredDescriptionDefaultExample
domain_name
YesTarget CDN domain to analyzeNone
example.com
--days
NoNumber of days for current window analysis
7
14
--cli-region
YesHuawei Cloud region
cn-north-4
cn-north-4
User Confirmation Checklist:
  • Target domain name provided or selected from domain list
  • Analysis time range confirmed (default: past 7 days for current window)
  • User understands this is a read-only analysis operation
  • User understands the baseline comparison spans past 3 months
执行分析前，请与用户确认以下参数：
参数是否必填描述默认值示例
domain_name
是要分析的目标CDN域名无
example.com
--days
否当前窗口分析的天数
7
14
--cli-region
是华为云地域
cn-north-4
cn-north-4
用户确认清单：
  • 已提供目标域名或从域名列表中选择
  • 已确认分析时间范围（默认：当前窗口为过去7天）
  • 用户知晓这是只读分析操作
  • 用户知晓基准对比覆盖过去3个月

Core Workflows

核心工作流程

Step 1: Query Account Billing Mode

步骤1：查询账户计费模式

Query billing mode via hcloud CLI to determine which metric to analyze.
📄 Detailed steps → references/task-show-charge-modes.md
通过hcloud CLI查询计费模式，确定要分析的指标。
📄 详细步骤 → references/task-show-charge-modes.md

Step 2: List All CDN Domains

步骤2：列出所有CDN域名

Get all online CDN domains under the current account.
If the user did not provide a domain, or the provided domain is not in the list, you must list all available domains for the user to choose from.
📄 Detailed steps → references/task-list-domains.md
获取当前账户下所有在线的CDN域名。
如果用户未提供域名，或提供的域名不在列表中，必须列出所有可用域名供用户选择。
📄 详细步骤 → references/task-list-domains.md

Step 3: Domain Validation

步骤3：域名验证

Verify the user-provided domain exists in the domain list.
📄 Detailed steps → references/task-domain-validation.md
验证用户提供的域名是否存在于域名列表中。
📄 详细步骤 → references/task-domain-validation.md

Step 4: Timestamp Calculation

步骤4：时间戳计算

Calculate time range for the current window (default 7 days) and 3 baseline windows (30 days each, non-overlapping), aligned to UTC+8 midnight.
📄 Detailed steps → references/task-timestamp-calculation.md
计算当前窗口（默认7天）和3个基准窗口（各30天，无重叠）的时间范围，对齐UTC+8午夜。
📄 详细步骤 → references/task-timestamp-calculation.md

Step 5: Query Current Window Metrics

步骤5：查询当前窗口指标

Query the corresponding metric for the current window (7 days) based on billing mode.
📄 Detailed steps → references/task-query-metrics.md
根据计费模式查询当前窗口（7天）的对应指标。
📄 详细步骤 → references/task-query-metrics.md

Step 6: Query Baseline Metrics

步骤6：查询基准指标

Query the corresponding metric for the baseline window (past 3 months) based on billing mode.
  • bw_95: 3 separate calls to 
    ShowBandwidthCalc
    , each covering one non-overlapping 30-day window (API max range is 31 days). Sleep 0.6s between calls to respect the 2 calls/s rate limit.
  • flux / bw: The same 
    ShowDomainStats/v2
    call from Step 5 covers both current and baseline windows (97 days total). Split the first 90 daily values as baseline, last 7 as current window.
📄 Detailed steps → references/task-query-metrics.md
根据计费模式查询基准窗口（过去3个月）的对应指标。
  • bw_95：分3次调用
    ShowBandwidthCalc
    ，每次覆盖一个无重叠的30天窗口（API最大范围为31天）。调用间隔休眠0.6秒以遵守2次/秒的速率限制。
  • flux / bw：步骤5中使用的
    ShowDomainStats/v2
    调用已覆盖当前和基准窗口（共97天）。将前90天的每日数据作为基准，最后7天作为当前窗口。
📄 详细步骤 → references/task-query-metrics.md

Step 7: Threshold Judgment

步骤7：阈值判断

Apply dual-threshold logic: absolute thresholds (hard limits) + relative baseline comparison (surge detection). Generate a three-tier analysis report.
📄 Detailed steps → references/task-threshold-judgment.md
应用双阈值逻辑：绝对阈值（硬限制）+ 相对基准对比（突增检测）。生成三级分析报告。
📄 详细步骤 → references/task-threshold-judgment.md

Threshold Rules Summary

阈值规则总结

Billing ModeMetricAbsolute ThresholdRelative Baseline
bw_95
7-day P95 bandwidth (bit/s)≥ 8 Gbps → ⚠️ Anomalouscurrent > baseline_max × 1.5 → 👀 Watch
flux
/ 
combine_flux
Daily traffic (Byte)Any day > 5 TB → ⚠️ AnomalousAny day > baseline_P95 × 1.5 → 👀 Watch
bw
/ 
bw_peak
Daily peak bandwidth (bit/s)Any day ≥ 3 Gbps → ⚠️ AnomalousAny day > baseline_P95 × 1.5 → 👀 Watch
Three-tier conclusion:
  • ⚠️ Anomalous — Absolute threshold exceeded; strong signal of traffic theft
  • 👀 Watch — Does not exceed absolute threshold, but exceeds baseline × 1.5; potential relative surge worth investigating
  • ✅ Normal — Falls within both absolute and relative thresholds
No-data domains (
result: {}
or 
value: 0
) are always treated as Normal.
计费模式指标绝对阈值相对基准
bw_95
7天P95带宽（bit/s）≥ 8 Gbps → ⚠️ 异常当前值 > 基准最大值 × 1.5 → 👀 关注
flux
/ 
combine_flux
每日流量（Byte）任意一天 > 5 TB → ⚠️ 异常任意一天 > 基准P95值 × 1.5 → 👀 关注
bw
/ 
bw_peak
每日峰值带宽（bit/s）任意一天 ≥ 3 Gbps → ⚠️ 异常任意一天 > 基准P95值 × 1.5 → 👀 关注
三级结论：
  • ⚠️ 异常 — 超出绝对阈值；强烈提示存在流量盗刷
  • 👀 关注 — 未超出绝对阈值，但超出基准×1.5；存在潜在相对突增，值得排查
  • ✅ 正常 — 同时符合绝对阈值和相对阈值要求
无数据的域名（
result: {}
或
value: 0
）始终判定为正常。

References

参考文档

DocumentDescription
task-show-charge-modes.mdStep 1: Query billing mode
task-list-domains.mdStep 2: List all domains
task-domain-validation.mdStep 3: Domain validation
task-timestamp-calculation.mdStep 4: Timestamp calculation
task-query-metrics.mdStep 5-6: Query current + baseline metrics
task-threshold-judgment.mdStep 7: Dual-threshold judgment + report
dataflow-diagram.mdMermaid data flow diagram
related-apis.mdAPI and CLI command reference
iam-policies.mdIAM permission policies
verification-method.mdOutput format and verification
cli-installation-guide.mdCLI installation guide
troubleshooting.mdTroubleshooting and best practices
acceptance-criteria.mdAcceptance criteria checklist
文档描述
task-show-charge-modes.md步骤1：查询计费模式
task-list-domains.md步骤2：列出所有域名
task-domain-validation.md步骤3：域名验证
task-timestamp-calculation.md步骤4：时间戳计算
task-query-metrics.md步骤5-6：查询当前+基准指标
task-threshold-judgment.md步骤7：双阈值判断+报告
dataflow-diagram.mdMermaid数据流图
related-apis.mdAPI和CLI命令参考
iam-policies.mdIAM权限策略
verification-method.md输出格式与验证
cli-installation-guide.mdCLI安装指南
troubleshooting.md故障排查与最佳实践
acceptance-criteria.md验收标准清单