This topic describes the API behavior when an Elastic Compute Service (ECS) instance is locked for security reasons.
API behavior
If you call the DescribeInstances operation to query information about an ECS instance and the OperationLocks parameter in the response contains LockReason: security, the instance is locked for security reasons.
Note If a disk on the instance is in the
In_use state, the behavior of API operations that are related to the disk varies based on the return value of the OperationLocks parameter. If the disk is in another state, the return value of the OperationLocks parameter can be ignored. | Operation | Behavior |
|---|---|
| AllocatePublicIpAddress | Affected and returns an error |
| AttachDisk | Affected and returns an error |
| AuthorizeSecurityGroup | Unaffected |
| CreateDisk | Unaffected |
| CreateImage | Unaffected |
| CreateInstance | Affected and returns an error |
| CreateSecurityGroup | Unaffected |
| CreateSnapshot | Affected and returns an error only when the disk that is attached to the instance is in the In_use state. |
| DeleteDisk | Unaffected |
| DeleteImage | Unaffected |
| DeleteInstance | Unaffected |
| DeleteSecurityGroup | Unaffected |
| DeleteSnapshot | Unaffected |
| DescribeAutoSnapshotPolicy | Unaffected |
| DescribeDisks | Unaffected |
| DescribeImages | Unaffected |
| DescribeInstances | Unaffected |
| DescribeInstanceStatus | Unaffected |
| DescribeInstanceTypes | Unaffected |
| DescribeInstanceMonitorData | Unaffected |
| DescribeRegions | Unaffected |
| DescribeSecurityGroupAttribute | Unaffected |
| DescribeSecurityGroups | Unaffected |
| DescribeSnapshotAttribute | Unaffected |
| DescribeSnapshots | Unaffected |
| DescribeZones | Unaffected |
| DetachDisk | Affected and returns an error |
| JoinSecurityGroup | Affected and returns an error |
| LeaveSecurityGroup | Affected and returns an error |
| ModifyAutoSnapshotPolicy | Unaffected |
| ModifyDiskAttribute | Unaffected |
| ModifyInstanceAttribute | Affected and returns an error |
| RebootInstance | Affected and returns an error |
| ReInitDisk |
|
| ReplaceSystemDisk | Unaffected |
| ResetDisk | Affected and returns an error |
| RevokeSecurityGroup | Unaffected |
| StartInstance | Affected and returns an error |
| StopInstance | Affected and returns an error |