If CTS is enabled and the resource ID of the physical host where the ECS resides is obtained. if you need to determine the user who created an ECS, you can go to the Audit Service console and filter the event sources ECS", in the list of listed ECS events, look for the () event, and find the corresponding resource ID events, expand Event Details. Fill in the blank: creat e server