All Products
Search

This Product

    Security Center:ChangeSecurityScoreRule

    Document Center

    Security Center:ChangeSecurityScoreRule

    Last Updated:Nov 25, 2024

    Modifies the details of the deduction modules of the security score feature, including custom settings.

    Debugging

    You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

    Authorization information

    The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

    • Operation: the value that you can use in the Action element to specify the operation on a resource.
    • Access level: the access level of each operation. The levels are read, write, and list.
    • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
      • The required resource types are displayed in bold characters.
      • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
    • Condition Key: the condition key that is defined by the cloud service.
    • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
    OperationAccess levelResource typeCondition keyAssociated operation
    yundun-sas:ChangeSecurityScoreRuleupdate
    *All Resources
    *
      none
    		none

    Request parameters

    ParameterTypeRequiredDescriptionExample
    SecurityScoreRuleListarray<object>No

    The list of deduction modules that are supported by the security score feature.

    objectNo
    RuleTypestringNo

    The deduction module that is supported by the security score feature. Valid values:

    • SS_REINFORCE: issue in key feature configuration
    • SS_ALARM: unhandled alert
    • SS_VUL: unfixed vulnerability
    • SS_HC: baseline risk
    • SS_CLOUD_HC: Cloud platform configuration check item problem.
    • SS_AK: risk of AccessKey pair leaks
    		SS_ALARM
    ScoreintegerNo

    The deduction threshold of the deduction module.

    Note Valid values: 0 to 100. The sum of the deduction thresholds for all deduction modules must be equal to 100.
    		5
    SecurityScoreItemListarray<object>No

    The deduction items of the deduction module.

    objectNo
    SubRuleTypestringNo

    The deduction item of the deduction module. The following list describes the deduction modules and their deduction items:

    • SS_REINFORCE: issue in key feature configuration

      • XPRESS_INSTALL: Security Center is not authorized.
      • REINFORCE_SUSPICIOUS: The anti-virus feature is disabled.
      • RANSOMWARE: The anti-ransomware policy is disabled.
      • WEB_LOCK: The web tamper proofing feature is disabled.
      • VIRUS_SCHEDULE_SCAN: The periodic virus scan policy is disabled.
      • IMAGE_REPO_SCAN: The container image scan range is not configured.
      • IMAGE_SCAN_TASK: The feature of one-click scan of container images for security risks is not performed.

    • SS_ALARM: unhandled alert

      • ALARM_SERIOUS: An unhandled high-risk alert event is detected.
      • ALARM_SUSPICIOUS: An unhandled medium-risk alarm event is detected.
      • ALARM_REMIND: An unhandled low-risk alarm event is detected.

    • SS_VUL: unfixed vulnerability

      • CMS_UNFIX: An unfixed Web-CMS vulnerability is detected.
      • WIN_UNFIX: An unfixed Windows host vulnerability is detected.
      • CVE_UNFIX: An unfixed Linux host vulnerability is detected.
      • ERM_UNFIX: An unfixed emergency vulnerability is detected.
      • ERM_UNCHECK: An undetected emergency vulnerability exists.

    • SS_HC: baseline risks

      • WEAK_EXPLOIT: Weak passwords are exposed to the Internet.
      • WEAK_PASSWORD: Weak passwords exist.
      • HC_EXPLOIT: The data source may be hacked.
      • HC_OTHER_WARNING: Security configuration risks exist.

    • SS_CLOUD_HC: Cloud platform configuration check item problem.

      • CSPM_CIEM_NOT_PASS: A CIEM check item failed the check.
      • CSPM_RISK_NOT_PASS: A security risk check item failed the check.
      • CSPM_COMPLIANCE_NOT_PASS: A compliance check item failed the check.

    • SS_AK: risk of AccessKey pair leaks

    		ALARM_SERIOUS
    ScoreThresholdintegerNo

    The threshold for the deduction item.

    Note Valid values: 0 to the deduction threshold of the deduction module.
    		10
    ScoreintegerNo

    The penalty point of the deduction item.

    		5
    ResetSecurityScoreRulebooleanNo

    Specifies whether to reset to the system default rule. Valid values:

    • true: yes
    • false: no
    		false

    Response parameters

    ParameterTypeDescriptionExample
    object
    RequestIdstring

    The request ID.

    		23AD0BD2-8771-5647-819E-6BA51E21****

    Examples

    Sample success responses

    JSONformat

    {
  "RequestId": "23AD0BD2-8771-5647-819E-6BA51E21****"
}

    Error codes

    HTTP status codeError codeError messageDescription
    403NoPermissioncaller has no permissionYou are not authorized to do this operation.
    500ServerErrorServerError-

    For a list of error codes, visit the Service error codes.

    Change history

    Change timeSummary of changesOperation
    No change history