Modifies the configuration items of the configuration assessment feature.
Debugging
Authorization information
The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action
policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:
- Operation: the value that you can use in the Action element to specify the operation on a resource.
- Access level: the access level of each operation. The levels are read, write, and list.
- Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level,
All Resources
is used in the Resource type column of the operation.
- Condition Key: the condition key that is defined by the cloud service.
- Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
Operation | Access level | Resource type | Condition key | Associated operation |
---|---|---|---|---|
yundun-sas:ChangeCheckConfig | update |
|
| none |
Request parameters
Parameter | Type | Required | Description | Example |
---|---|---|---|---|
RegionId | string | No | The region ID of the bastion host to query. Note
For more information about the mapping between region IDs and region names, see Regions and zones.
| cn-hangzhou |
CycleDays | array | No | The days in a week on which a check is performed. | |
integer | No | The day in a week on which a check is performed. Valid values: 1 to 7. | 3 | |
StartTime | integer | No | The start time of the check. The value specifies a point in time in a day. | 0 |
EndTime | integer | No | The end time of the check. The value specifies a point in time in a day. The time period that is specified by the start time and end time must be one of the following time periods:
| 6 |
StandardIds | array | No | An array that consists of the information about the check item. | |
long | No | The ID of the check item. Valid values:
| 2 | |
ConfigRequirementIds | object | No | The requirement IDs that you want to specify for the check policy. Note
You can call the ListCheckResult operation to obtain the requirement ID. If the ConfigStandardIds parameter is configured, this parameter does not take effect.
| |
AddIds | array | No | The requirement IDs that you want to add to the policy. | |
long | No | The requirement ID that you want to add to the policy. | 6 | |
RemoveIds | array | No | The requirement IDs that you want to remove from the policy. | |
long | No | The requirement ID that you want to remove from the policy. | 5 | |
ConfigStandardIds | object | No | The standard IDs that you want to specify for the check policy. Note
You can call the ListCheckResult operation to obtain the standard ID.
| |
AddIds | array | No | The standard IDs that you want to add to the policy. | |
long | No | The standard ID that you want to add to the policy. | 2 | |
RemoveIds | array | No | The standard IDs that you want to remove from the policy. | |
long | No | The standard ID that you want to remove from the policy. | 5 | |
EnableAutoCheck | boolean | No | Specifies whether to enable the automatic periodical check feature. Valid values:
| true |
EnableAddCheck | boolean | No | Specifies whether to check the new check items in the selected requirement item. Valid values:
| false |
AddedCheck | array<object> | No | The list of check items that you want to add to the policy. Note
If the ConfigStandardIds or ConfigRequirementIds parameter is configured, this parameter does not take effect.
| |
object | No | |||
CheckId | long | No | The ID of the check item. Note
You can call the ListCheckResult operation to obtain the ID of the check item.
| 5 |
SectionId | long | No | The section ID of the check item. | 69 |
RemovedCheck | array<object> | No | The list of the check items that you want to remove from the policy. Note
If the ConfigStandardIds or ConfigRequirementIds parameter is configured, this parameter does not take effect.
| |
object | No | |||
CheckId | long | No | The ID of the check item. Note
You can call the ListCheckResult operation to obtain the ID of the check item.
| 19 |
SectionId | long | No | The section ID of the check item. | 69 |
Vendors | array | No | The service provider (SP) of the cloud asset. | |
string | No | The service provider (SP) of the cloud asset. Valid values:
| ALIYUN | |
Configure | string | No | The configuration of the check item. Valid values:
| all |
Response parameters
Examples
Sample success responses
JSON
format
{
"RequestId": "6EBB8614-746D-555D-AB69-C801AEC7DCE0"
}
Error codes
HTTP status code | Error code | Error message | Description |
---|---|---|---|
403 | NoPermission | caller has no permission | You are not authorized to do this operation. |
500 | ServerError | ServerError | - |
For a list of error codes, visit the Service error codes.
Change history
Change time | Summary of changes | Operation |
---|---|---|
2024-09-25 | The Error code has changed | View Change Details |
2024-08-07 | The request parameters of the API has changed | View Change Details |
2023-10-26 | The request parameters of the API has changed | View Change Details |
2023-07-28 | The request parameters of the API has changed | View Change Details |
2023-07-17 | The request parameters of the API has changed | View Change Details |
2023-06-20 | The request parameters of the API has changed | View Change Details |
2023-01-11 | API Description Update. The request parameters of the API has changed | View Change Details |