Ignores the compliance evaluation results of one or more non-compliant resources that are evaluated based on a rule in an account group.
Operation description
After you ignore a resource that is evaluated as incompliant by using a rule, the resource is still evaluated by using the rule, but the compliance result is Ignored.
This example shows how to ignore the lb-hp3a3b4ztyfm2plgm****
incompliant resource that is evaluated by using the cr-7e72626622af0051***
rule in the 120886317861****
member account of the ca-5b6c626622af008f****
account group. The ID of the region where the resource resides is cn-beijing
, and the type of the resource is ACS::SLB::LoadBalancer
.
Debugging
Authorization information
The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action
policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:
- Operation: the value that you can use in the Action element to specify the operation on a resource.
- Access level: the access level of each operation. The levels are read, write, and list.
- Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level,
All Resources
is used in the Resource type column of the operation.
- Condition Key: the condition key that is defined by the cloud service.
- Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
Operation | Access level | Resource type | Condition key | Associated operation |
---|---|---|---|---|
config:IgnoreAggregateEvaluationResults | Write |
|
| none |
Request parameters
Parameter | Type | Required | Description | Example |
---|---|---|---|---|
ConfigRuleId | string | Yes | The ID of the rule. For more information about how to obtain the ID of a rule, see ListAggregateConfigRules . | cr-7e72626622af0051**** |
Resources | object [] | Yes | The resources to be ignored. | |
ResourceAccountId | long | Yes | The ID of the Alibaba Cloud account to which the resources belong. Note
You must specify the ID of the current management account or a member account in the account group of the management account.
| 120886317861**** |
ResourceType | string | Yes | The type of the resource. For more information about how to query the type of a resource, see ListAggregateDiscoveredResources . | ACS::SLB::LoadBalancer |
Region | string | Yes | The ID of the region in which the resource resides. For more information about how to obtain the ID of a region, see ListAggregateDiscoveredResources . | cn-beijing |
ResourceId | string | Yes | The ID of the resource. For more information about how to query the ID of a resource, see ListAggregateDiscoveredResources . | lb-hp3a3b4ztyfm2plgm**** |
AggregatorId | string | Yes | The ID of the account group. For more information about how to obtain the ID of an account group, see ListAggregators . | ca-5b6c626622af008f**** |
Reason | string | No | The reason why you ignore the resource. | |
IgnoreDate | string | No | The date from which the system automatically re-evaluates the ignored incompliant resources. Note
If you leave this parameter empty, the system does not automatically re-evaluate the ignored incompliant resources. You must manually re-evaluate the ignored incompliant resources.
| 2022-06-01 |
For more information about common request parameters, see Common parameters.
Response parameters
Examples
Sample success responses
JSON
format
{
"RequestId": "0132CBF2-0B0B-59F2-9E84-07B38267BC32"
}
Error codes
HTTP status code | Error code | Error message | Description |
---|---|---|---|
400 | NoPermission | You are not authorized to perform this operation. | You are not authorized to perform this operation. |
400 | Invalid.AggregatorId.Value | The specified AggregatorId is invalid. | The specified aggregator ID does not exist or you are not authorized to use the aggregator. |
503 | ServiceUnavailable | The request has failed due to a temporary failure of the server. | The request has failed due to a temporary failure of the server. |
For a list of error codes, visit the Service error codes.
Change history
Change time | Summary of changes | Operation |
---|