All Products
Search
Document Center

Cloud Firewall:DescribeVpcFirewallList

Last Updated:Sep 02, 2024

Queries the details about virtual private cloud (VPC) firewalls by page. Each VPC firewall protects traffic between two VPCs that are connected by using an Express Connect circuit.

Operation description

You can call the DescribeVpcFirewallList operation to query the details about VPC firewalls by page. Each VPC firewall protects traffic between two VPCs that are connected by using an Express Connect circuit.

Limits

You can call this operation up to 10 times per second per account. If the number of calls per second exceeds the limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limit when you call this operation.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
yundun-cloudfirewall:DescribeVpcFirewallListget
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
LangstringNo

The language of the content within the request and response. Valid values:

  • zh: Chinese (default)
  • en: English
zh
RegionNostringNo

The region ID of the VPC.

Note For more information about the regions, see Supported regions.
cn-hangzhou
VpcIdstringNo

The ID of the VPC.

vpc-8vbwbo90rq0anm6t****
FirewallSwitchStatusstringNo

The status of the VPC firewall. Valid values:

  • opened: The VPC firewall is enabled.
  • closed: The VPC firewall is disabled.
  • notconfigured: The VPC firewall is not configured.
  • configured: The VPC firewall is configured.
Note If you do not specify this parameter, VPC firewalls in all states are queried.
opened
VpcFirewallIdstringNo

The instance ID of the VPC firewall.

vfw-m5e7dbc4y****
VpcFirewallNamestringNo

The instance name of the VPC firewall.

Test firewall
CurrentPagestringNo

The number of the page to return.

Pages start from page 1. Default value: 1.

1
PageSizestringNo

The number of entries to return on each page.

Default value: 10. Maximum value: 50.

10
MemberUidstringNo

The UID of the member that is managed by your Alibaba Cloud account.

258039427902****
ConnectSubTypestringNo

The sub-type of the connection. Valid values:

  • vpc2vpc: Express Connect connection
  • vpcpeer: peer connection
vpcpeer
PeerUidstringNo

The UID of the Alibaba Cloud account to which the peer VPC belongs.

258039427902****

Response parameters

ParameterTypeDescriptionExample
object

The VPC firewalls.

TotalCountinteger

The total number of VPC firewalls.

10
RequestIdstring

The ID of the request.

850A84D6-0DE4-4797-A1E8-00090125k8g2
VpcFirewallsarray<object>

The information about the VPC firewalls.

object

The information about the VPC firewall.

ConnectTypestring

The connection type of the VPC firewall. The value is fixed as expressconnect, which indicates an Express Connect connection.

expressconnect
VpcFirewallIdstring

The instance ID of the VPC firewall.

vfw-m5e7dbc4y****
RegionStatusstring

Indicates whether you can create a VPC firewall in a specified region. Valid values:

  • enable: yes
  • disable: no
enable
Bandwidthinteger

The bandwidth of the Express Connect circuit. Unit: Mbit/s.

2
VpcFirewallNamestring

The instance name of the VPC firewall.

Test firewall
FirewallSwitchStatusstring

The status of the VPC firewall. Valid values:

  • opened: The VPC firewall is enabled.
  • closed: The VPC firewall is disabled.
  • notconfigured: The VPC firewall is not configured.
opened
LocalVpcobject

The details about the local VPC.

VpcNamestring

The name of the local VPC.

Test instance
VpcIdstring

The ID of the local VPC.

vpc-8vbwbo90rq0anm6t****
AuthorizationStatusstring

Indicates whether Cloud Firewall is authorized to access the local VPC. The value is fixed as authorized, which indicates that Cloud Firewall is authorized to access the local VPC.

authorized
OwnerIdlong

The UID of the Alibaba Cloud account to which the local VPC belongs.

158039427902****
RegionNostring

The region ID of the local VPC.

cn-hangzhou
VpcCidrTableListarray<object>

An array that consists of the CIDR blocks of the local VPC.

object

The CIDR block of the local VPC.

RouteTableIdstring

The ID of the route table for the local VPC.

vtb-1234
RouteEntryListarray<object>

An array that consists of the route entries of the local VPC.

object

The route entry of the local VPC.

NextHopInstanceIdstring

The instance ID of the next hop for the local VPC.

vrt-m5eb5me6c3l5sezae****
DestinationCidrstring

The destination CIDR block of the local VPC.

192.168.XX.XX/24
PeerVpcobject

The details about the peer VPC.

VpcNamestring

The name of the peer VPC.

Test VPC 2
VpcIdstring

The ID of the peer VPC.

vpc-8vbwbo90rq0anm6t****
AuthorizationStatusstring

Indicates whether Cloud Firewall is authorized to access the peer VPC. The value is fixed as authorized, which indicates that Cloud Firewall is authorized to access the peer VPC.

authorized
OwnerIdlong

The UID of the Alibaba Cloud account to which the peer VPC belongs.

158039427902****
RegionNostring

The region ID of the peer VPC.

cn-hangzhou
VpcCidrTableListarray<object>

An array that consists of the CIDR blocks of the peer VPC.

object

The CIDR block of the peer VPC.

RouteTableIdstring

The ID of the route table for the peer VPC.

vtb-1256
RouteEntryListarray<object>

An array that consists of the route entries of the peer VPC.

object

The route entry of the peer VPC.

NextHopInstanceIdstring

The instance ID of the next hop for the peer VPC.

vrt-m5eb5me6c3l5sezae****
DestinationCidrstring

The destination CIDR block of the peer VPC.

192.168.XX.XX/24
IpsConfigobject

The intrusion prevention system (IPS) configurations.

BasicRulesinteger

Indicates whether basic protection is enabled. Valid values:

  • 1: yes
  • 0: no
1
EnableAllPatchinteger

Indicates whether virtual patching is enabled. Valid values:

  • 1: yes
  • 0: no
1
RunModeinteger

The mode of the IPS. Valid values:

  • 1: block mode
  • 0: monitor mode
0
RuleClassinteger

The level of the rule group for the IPS. Valid values:

  • 1: loose
  • 2: medium
  • 3: strict
1
MemberUidstring

The UID of the member that is managed by your Alibaba Cloud account.

258039427902****
ResultCodestring

The result code of the operation that creates the VPC firewall. Valid values:

  • Unauthorized: Cloud Firewall is not authorized to access a VPC for which the VPC firewall is created, and the VPC firewall cannot be created.
  • RegionDisable: VPC Firewall is not supported in the region of a VPC for which the VPC firewall is created, and the VPC firewall cannot be created.
  • Empty string: You can create a VPC firewall for the network instance.
Unauthorized
ConnectSubTypestring

The sub-type of the connection. Valid values:

  • vpc2vpc: Express Connect connection
  • vpcpeer: peer connection
vpcpeer

Examples

Sample success responses

JSONformat

{
  "TotalCount": 10,
  "RequestId": "850A84D6-0DE4-4797-A1E8-00090125k8g2",
  "VpcFirewalls": [
    {
      "ConnectType": "expressconnect",
      "VpcFirewallId": "vfw-m5e7dbc4y****",
      "RegionStatus": "enable",
      "Bandwidth": 2,
      "VpcFirewallName": "Test firewall\n",
      "FirewallSwitchStatus": "opened",
      "LocalVpc": {
        "VpcName": "Test instance\n",
        "VpcId": "vpc-8vbwbo90rq0anm6t****",
        "AuthorizationStatus": "authorized",
        "OwnerId": 0,
        "RegionNo": "cn-hangzhou",
        "VpcCidrTableList": [
          {
            "RouteTableId": "vtb-1234",
            "RouteEntryList": [
              {
                "NextHopInstanceId": "vrt-m5eb5me6c3l5sezae****",
                "DestinationCidr": "192.168.XX.XX/24"
              }
            ]
          }
        ]
      },
      "PeerVpc": {
        "VpcName": "Test VPC 2\n",
        "VpcId": "vpc-8vbwbo90rq0anm6t****",
        "AuthorizationStatus": "authorized",
        "OwnerId": 0,
        "RegionNo": "cn-hangzhou",
        "VpcCidrTableList": [
          {
            "RouteTableId": "vtb-1256",
            "RouteEntryList": [
              {
                "NextHopInstanceId": "vrt-m5eb5me6c3l5sezae****",
                "DestinationCidr": "192.168.XX.XX/24"
              }
            ]
          }
        ]
      },
      "IpsConfig": {
        "BasicRules": 1,
        "EnableAllPatch": 1,
        "RunMode": 0,
        "RuleClass": 1
      },
      "MemberUid": "258039427902****",
      "ResultCode": "Unauthorized",
      "ConnectSubType": "vpcpeer"
    }
  ]
}

Error codes

HTTP status codeError codeError messageDescription
400ErrorDBSelectErrorA database select error occurred.The error message returned because an internal error has occurred in querying the database.
400ErrorPageNoEither page number or page size is invalid.Either page number or page size is invalid.
400ErrorUnmarshalJSONAn error occurred while parsing JSON.An error occurred while decoding JSON.
400ErrorAliUidAliuid invalid.The aliuid is invalid.
400ErrorFirewallStatusFirewall status error, please try again later.The status of the firewall is invalid. Try again later.

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-08-15The Error code has changed. The response structure of the API has changedView Change Details