update APIs 20260712

1 files changed, 437 insertions, 2 deletions

diff --git a/data/en_us/sasrasp/2024-07-27/api-docs.php b/data/en_us/sasrasp/2024-07-27/api-docs.php
index 19d0733..d3c07f3 100644
--- a/data/en_us/sasrasp/2024-07-27/api-docs.php
+++ b/data/en_us/sasrasp/2024-07-27/api-docs.php
@@ -1,4 +1,439 @@
 <?php return [
-    'code' => 500,
-    'message' => 'server error',
+    'version' => '1.0',
+    'info' => ['style' => 'RPC', 'product' => 'SasRasp', 'version' => '2024-07-27'],
+    'directories' => ['DescribeAttackProtectionCount', 'DescribeAttacks'],
+    'components' => [
+        'schemas' => [],
+    ],
+    'apis' => [
+        'DescribeAttackProtectionCount' => [
+            'summary' => 'Queries the attack prevention counters.',
+            'methods' => ['get', 'post'],
+            'schemes' => ['https'],
+            'security' => [
+                [
+                    'AK' => [],
+                ],
+            ],
+            'operationType' => 'read',
+            'deprecated' => false,
+            'systemTags' => [
+                'operationType' => 'get',
+                'riskType' => 'none',
+                'chargeType' => 'free',
+                'abilityTreeNodes' => ['FEATUREsas30M8TS'],
+                'autoTest' => true,
+                'tenantRelevance' => 'tenant',
+            ],
+            'parameters' => [
+                [
+                    'name' => 'StartTimestamp',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The start time, in milliseconds (UNIX timestamp).', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1739289981765', 'title' => ''],
+                ],
+                [
+                    'name' => 'EndTimestamp',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The end time, in milliseconds (UNIX timestamp).', 'type' => 'integer', 'format' => 'int32', 'required' => true, 'example' => '1767456000000', 'title' => ''],
+                ],
+                [
+                    'name' => 'AgentType',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The type of agent to query.', 'type' => 'string', 'required' => false, 'example' => 'sas', 'title' => ''],
+                ],
+            ],
+            'responses' => [
+                200 => [
+                    'schema' => [
+                        'title' => '',
+                        'description' => 'Schema of Response',
+                        'type' => 'object',
+                        'properties' => [
+                            'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '400E8C8C-ADD3-5F25-9038-BDC057841D20'],
+                            'TotalRequestCount' => ['description' => 'The total number of requests.', 'type' => 'integer', 'format' => 'int64', 'example' => '61134279', 'title' => ''],
+                            'BlockHighCount' => ['description' => 'The number of blocked high-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                            'BlockMediumCount' => ['description' => 'The number of blocked medium-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                            'BlockLowCount' => ['description' => 'The number of blocked low-risk alerts.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                            'MonitorHighCount' => ['description' => 'The number of monitored high-risk events.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                            'MonitorMediumCount' => ['description' => 'The number of monitored medium-risk events.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                            'MonitorLowCount' => ['description' => 'The number of monitored low-risk events.', 'type' => 'integer', 'format' => 'int64', 'example' => '0', 'title' => ''],
+                        ],
+                        'example' => '',
+                    ],
+                ],
+            ],
+            'staticInfo' => ['returnType' => 'synchronous'],
+            'responseDemo' => '[{"errorExample":"","example":"{\\n  \\"RequestId\\": \\"400E8C8C-ADD3-5F25-9038-BDC057841D20\\",\\n  \\"TotalRequestCount\\": 61134279,\\n  \\"BlockHighCount\\": 0,\\n  \\"BlockMediumCount\\": 0,\\n  \\"BlockLowCount\\": 0,\\n  \\"MonitorHighCount\\": 0,\\n  \\"MonitorMediumCount\\": 0,\\n  \\"MonitorLowCount\\": 0\\n}","type":"json"}]',
+            'title' => 'Query attack prevention counters',
+            'changeSet' => [],
+            'ramActions' => [
+                [
+                    'operationType' => 'get',
+                    'ramAction' => [
+                        'action' => 'yundun-sas:DescribeAttackProtectionCount',
+                        'authLevel' => 'operate',
+                        'actionConditions' => [],
+                        'resources' => [
+                            ['validationType' => 'always', 'product' => 'SasRasp', 'resourceType' => 'All Resource', 'arn' => '*'],
+                        ],
+                    ],
+                ],
+            ],
+        ],
+        'DescribeAttacks' => [
+            'methods' => ['post', 'get'],
+            'schemes' => ['https'],
+            'security' => [
+                [
+                    'AK' => [],
+                ],
+            ],
+            'operationType' => 'read',
+            'systemTags' => [
+                'operationType' => 'get',
+                'riskType' => 'none',
+                'chargeType' => 'free',
+                'abilityTreeNodes' => ['FEATUREsas30M8TS'],
+            ],
+            'parameters' => [
+                [
+                    'name' => 'Lang',
+                    'in' => 'formData',
+                    'schema' => ['description' => 'The language type for the request and response messages. Valid values:'."\n"
+                        .'- **zh**: Chinese.'."\n"
+                        .'- **en**: English.', 'type' => 'string', 'required' => false, 'example' => 'zh', 'title' => ''],
+                ],
+                [
+                    'name' => 'Region',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The region. Only cn-hangzhou is supported.', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou', 'title' => ''],
+                ],
+                [
+                    'name' => 'AgentType',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The type of agent to query. Only sas is supported.', 'type' => 'string', 'required' => false, 'example' => 'sas', 'title' => ''],
+                ],
+                [
+                    'name' => 'ApplicationId',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The application ID.'."\n"
+                        .'> You can call [DescribeSasApplications](~~DescribeSasApplications~~) to obtain this parameter.', 'type' => 'string', 'required' => false, 'example' => '67e283ee866f097cf07d****', 'title' => ''],
+                ],
+                [
+                    'name' => 'StartTimestamp',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The start time. This value is a timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1727281449756', 'title' => ''],
+                ],
+                [
+                    'name' => 'EndTimestamp',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The end time. This value is a timestamp in milliseconds.', 'type' => 'integer', 'format' => 'int64', 'required' => true, 'example' => '1737216000000', 'title' => ''],
+                ],
+                [
+                    'name' => 'PageNumber',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The page number. Default value: 1.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '4', 'title' => ''],
+                ],
+                [
+                    'name' => 'PageSize',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The number of entries per page. Default value: 10.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '10', 'title' => ''],
+                ],
+                [
+                    'name' => 'UnionId',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The union ID (employee ID) of the creator.', 'type' => 'string', 'required' => false, 'example' => '2d14556b77cf1bf7c696e010aaa*****', 'title' => ''],
+                ],
+                [
+                    'name' => 'AttackUrl',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The request URL.', 'type' => 'string', 'required' => false, 'example' => 'http://aliyun.com', 'title' => ''],
+                ],
+                [
+                    'name' => 'AttackType',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The attack type. Valid values:'."\n"
+                        .'- file_read: arbitrary file read.'."\n"
+                        .'- sql: SQL injection.'."\n"
+                        .'- xxe: XXE.'."\n"
+                        .'- ssrf: malicious outbound connection.'."\n"
+                        .'- rce: command execution.'."\n"
+                        .'- file: malicious file read/write.'."\n"
+                        .'- thread_inject: thread injection.'."\n"
+                        .'- file_upload: malicious file upload.'."\n"
+                        .'- file_list: directory traversal.'."\n"
+                        .'- memory_shell: In-memory webshell injection.'."\n"
+                        .'- jni: JNI injection.'."\n"
+                        .'- dns: malicious DNS query.'."\n"
+                        .'- reflect: malicious reflection invocation.'."\n"
+                        .'- file_delete: arbitrary file deletion.'."\n"
+                        .'- jndi: JNDI injection.'."\n"
+                        .'- read_object: deserialization attack.'."\n"
+                        .'- dangerous_protocol: dangerous protocol usage.'."\n"
+                        .'- attach: malicious attach.'."\n"
+                        .'- expression: expression injection.'."\n"
+                        .'- engine: engine injection.'."\n"
+                        .'- beans: malicious beans binding.'."\n"
+                        .'- classloader: malicious class loading.'."\n"
+                        .'- jstl: JSTL arbitrary file inclusion.'."\n"
+                        .'- callable: callback function execution.'."\n"
+                        .'- unserialize: deserialization.'."\n"
+                        .'- include: malicious file inclusion.'."\n"
+                        .'- eval: arbitrary code execution.', 'type' => 'string', 'required' => false, 'example' => 'sql', 'title' => ''],
+                ],
+                [
+                    'name' => 'HandlerType',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The handling method. Valid values:'."\n"
+                        .'- monitor: monitoring.'."\n"
+                        .'- block: blocking.', 'type' => 'string', 'required' => false, 'example' => 'block', 'title' => ''],
+                ],
+                [
+                    'name' => 'Severity',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The attack severity level. Valid values:'."\n"
+                        .'- low: low-risk.'."\n"
+                        .'- medium: medium-risk.'."\n"
+                        .'- high: high-risk.', 'type' => 'string', 'required' => false, 'example' => 'high', 'title' => ''],
+                ],
+                [
+                    'name' => 'Hostname',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The hostname.', 'type' => 'string', 'required' => false, 'example' => 'lshm-sec-waf-new-38', 'title' => ''],
+                ],
+                [
+                    'name' => 'Ip',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The IP address in the alert event.', 'type' => 'string', 'required' => false, 'example' => '127.0.0.1', 'title' => ''],
+                ],
+                [
+                    'name' => 'AttackHostId',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The ID of the attack host.', 'type' => 'string', 'required' => false, 'example' => '127.0.0.1', 'title' => ''],
+                ],
+                [
+                    'name' => 'RaspType',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The application language. Valid values:'."\n"
+                        .'- java: Java.'."\n"
+                        .'- php: PHP.', 'type' => 'string', 'required' => false, 'example' => 'java', 'title' => ''],
+                ],
+                [
+                    'name' => 'Pid',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The process ID.', 'type' => 'string', 'required' => false, 'example' => '10359', 'title' => ''],
+                ],
+                [
+                    'name' => 'Remote',
+                    'in' => 'query',
+                    'schema' => ['description' => 'The attacker IP address.', 'type' => 'string', 'required' => false, 'example' => '127.0.0.1', 'title' => ''],
+                ],
+                [
+                    'name' => 'HandleStatus',
+                    'in' => 'query',
+                    'schema' => ['title' => '', 'description' => 'The handling status. Valid values:'."\n"
+                        ."\n"
+                        .'- 0: Not handled.'."\n"
+                        .'- 1: Handled.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'],
+                ],
+            ],
+            'responses' => [
+                200 => [
+                    'schema' => [
+                        'type' => 'object',
+                        'properties' => [
+                            'TotalCount' => ['description' => 'The total number of entries.', 'type' => 'integer', 'format' => 'int64', 'example' => '289', 'title' => ''],
+                            'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4E7772EA-1AD0-5583-BA55-A4E7B65F****', 'title' => ''],
+                            'Attacks' => [
+                                'description' => 'The list of attack data.',
+                                'type' => 'array',
+                                'items' => [
+                                    'description' => 'The attack data.',
+                                    'type' => 'object',
+                                    'properties' => [
+                                        'MinTimestamp' => ['description' => 'The timestamp of the latest message currently stored in the topic.', 'type' => 'integer', 'format' => 'int64', 'example' => '1727281449756', 'title' => ''],
+                                        'PayloadLength' => ['description' => 'The minimum packet length.', 'type' => 'integer', 'format' => 'int64', 'example' => '100', 'title' => ''],
+                                        'Message' => ['description' => 'The attack message.', 'type' => 'string', 'example' => '通过危险堆栈读取敏感文件', 'title' => ''],
+                                        'Os' => ['description' => 'The operating system type of the server.', 'type' => 'string', 'example' => 'linux', 'title' => ''],
+                                        'AppDir' => ['description' => 'The application directory.', 'type' => 'string', 'example' => '/app', 'title' => ''],
+                                        'Headers' => ['description' => 'The header names.', 'type' => 'string', 'example' => '{\'X-Total-Count\': 1}', 'title' => ''],
+                                        'Stacktrace' => [
+                                            'description' => 'The stack trace list.',
+                                            'type' => 'array',
+                                            'items' => ['description' => 'The stack trace.', 'type' => 'string', 'example' => 'null', 'title' => ''],
+                                            'title' => '',
+                                            'example' => '',
+                                        ],
+                                        'OsVersion' => ['description' => 'The device model name.', 'type' => 'string', 'example' => 'aliyun_V3_5.1', 'title' => ''],
+                                        'Ip' => ['description' => 'The IP address information.', 'type' => 'string', 'example' => '47.92.92.85', 'title' => ''],
+                                        'RaspVersion' => ['description' => 'The RASP version.', 'type' => 'string', 'example' => 'php', 'title' => ''],
+                                        'UnionId' => ['description' => 'unionId。', 'type' => 'string', 'example' => '23yaet4dg6ek3s7aj', 'title' => ''],
+                                        'Remote' => ['description' => 'The attacker IP address.', 'type' => 'string', 'example' => '192.168.1.1', 'title' => ''],
+                                        'MiddlewareInstanceId' => ['description' => 'The middleware instance ID.', 'type' => 'string', 'example' => 'null', 'title' => ''],
+                                        'Time' => ['description' => 'The latest occurrence time, in seconds.', 'type' => 'string', 'example' => '1724033134746', 'title' => ''],
+                                        'RuleResult' => ['description' => 'The defense status.', 'type' => 'string', 'example' => '2', 'title' => ''],
+                                        'Count' => ['description' => 'The total number of entries.', 'type' => 'integer', 'format' => 'int64', 'example' => '1', 'title' => ''],
+                                        'MaxTimestamp' => ['description' => 'The timestamp of the earliest message currently stored in the topic.', 'type' => 'integer', 'format' => 'int64', 'example' => '1727281449756', 'title' => ''],
+                                        'Timestamp' => ['description' => 'The timestamp.', 'type' => 'integer', 'format' => 'int64', 'example' => '1712284140', 'title' => ''],
+                                        'Url' => ['description' => 'The request URL.', 'type' => 'string', 'example' => 'https://other-general-huadong1.oss-cn-hangzhou.aliyuncs.com/uploadWidget/TaxiInvoice_01.jpeg', 'title' => ''],
+                                        'AppName' => ['description' => 'The application name.', 'type' => 'string', 'example' => 'zhxy', 'title' => ''],
+                                        'Result' => ['description' => 'The subject alternative name of the certificate.', 'type' => 'string', 'example' => '[{\'TagKey\': \'acs:rm:rgId\', \'TagValue\': \'rg-aek25bwhtt22cjq\'}]', 'title' => ''],
+                                        'Jdk' => ['description' => 'The JDK version.', 'type' => 'string', 'example' => '1.8.0_342', 'title' => ''],
+                                        'Language' => ['description' => 'The language.', 'type' => 'string', 'example' => 'cn', 'title' => ''],
+                                        'Confidence' => ['description' => 'The confidence level.', 'type' => 'string', 'example' => 'high', 'title' => ''],
+                                        'LanguageVersion' => ['description' => 'The application language version.', 'type' => 'string', 'example' => '1.0', 'title' => ''],
+                                        'Hostname' => ['description' => 'The hostname.', 'type' => 'string', 'example' => 'hostnames', 'title' => ''],
+                                        'Severity' => ['description' => 'The attack severity level. Valid values:'."\n"
+                                            .'- low: low-risk.'."\n"
+                                            .'- medium: medium-risk.'."\n"
+                                            .'- high: high-risk.', 'type' => 'string', 'example' => 'low', 'title' => ''],
+                                        'Data' => ['description' => 'The returned data.', 'type' => 'string', 'example' => '{\'All\': 12, \'Online\': 9}', 'title' => ''],
+                                        'Pid' => ['description' => 'The process ID.', 'type' => 'string', 'example' => '29719', 'title' => ''],
+                                        'Method' => ['description' => 'The request method.', 'type' => 'string', 'example' => 'POST', 'title' => ''],
+                                        'HostId' => ['description' => 'The host ID.', 'type' => 'string', 'example' => '100.116.60.78', 'title' => ''],
+                                        'Avd' => ['description' => 'The virtual device.', 'type' => 'string', 'example' => 'null', 'title' => ''],
+                                        'InputParamItemList' => [
+                                            'description' => 'The list of input parameter items.',
+                                            'type' => 'array',
+                                            'items' => [
+                                                'description' => 'The input parameter item.',
+                                                'type' => 'object',
+                                                'properties' => [
+                                                    'Value' => ['description' => 'The value.', 'type' => 'string', 'example' => '10.101.9.189', 'title' => ''],
+                                                    'ProcessedKey' => ['description' => 'The processed key.', 'type' => 'string', 'example' => '4E7772EA-1AD0-5583-BA55-A4****', 'title' => ''],
+                                                    'RawKey' => ['description' => 'The raw key.', 'type' => 'string', 'example' => '4E7772EA-1AD0-5583-BA55-A4****', 'title' => ''],
+                                                ],
+                                                'title' => '',
+                                                'example' => '',
+                                            ],
+                                            'title' => '',
+                                            'example' => '',
+                                        ],
+                                        'Type' => ['description' => 'The attack type.', 'type' => 'string', 'example' => 'exact', 'title' => ''],
+                                        'AppId' => ['description' => 'The application ID.', 'type' => 'string', 'example' => '661dece60bb1', 'title' => ''],
+                                        'Content' => ['description' => 'The detection content.', 'type' => 'string', 'example' => '{\'Exist\': \'false\'}', 'title' => ''],
+                                        'InstallType' => ['description' => 'The installation method. Valid values:'."\n"
+                                            ."\n"
+                                            .'- 1: Static installation.'."\n"
+                                            .'- 2: Dynamic installation.'."\n"
+                                            .'- 3: ACK installation.', 'type' => 'integer', 'format' => 'int64', 'example' => '1', 'title' => ''],
+                                        'Param' => ['description' => 'The database information.', 'type' => 'string', 'example' => 'PUBLIC_CLOUD', 'title' => ''],
+                                        'OsArch' => ['description' => 'The system architecture.', 'type' => 'string', 'example' => 'linux', 'title' => ''],
+                                        'Region' => ['description' => 'The geographic information.', 'type' => 'string', 'example' => 'cn-shanghai', 'title' => ''],
+                                        'Payload' => ['description' => 'The response body.', 'type' => 'string', 'example' => '245256', 'title' => ''],
+                                        'ContentLength' => ['description' => 'The content length.', 'type' => 'integer', 'format' => 'int64', 'example' => '1024', 'title' => ''],
+                                        'Cmdline' => ['description' => 'The process command line.', 'type' => 'string', 'example' => 'jar', 'title' => ''],
+                                        'HandleStatus' => ['title' => '', 'description' => 'The alert handling status.', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
+                                        'HandleTimestamp' => ['title' => '', 'description' => 'The alert handling time.', 'type' => 'integer', 'format' => 'int64', 'example' => '1758607200'],
+                                        'LlmAsset' => ['type' => 'boolean', 'description' => '', 'title' => '', 'example' => ''],
+                                    ],
+                                    'title' => '',
+                                    'example' => '',
+                                ],
+                                'title' => '',
+                                'example' => '',
+                            ],
+                        ],
+                        'description' => '',
+                        'title' => '',
+                        'example' => '',
+                    ],
+                ],
+            ],
+            'gatewayOptions' => [
+                'gatewayProtocols' => [],
+            ],
+            'title' => 'View attack information',
+            'summary' => 'Queries the details of attack alerts on the attack alert page.',
+            'changeSet' => [
+                ['createdAt' => '2026-03-02T09:30:12.000Z', 'description' => 'Response parameters changed'],
+                ['createdAt' => '2026-01-08T09:51:38.000Z', 'description' => 'Request parameters changed'],
+                ['createdAt' => '2025-11-25T04:48:37.000Z', 'description' => 'Response parameters changed'],
+                ['createdAt' => '2025-07-18T01:53:59.000Z', 'description' => 'Response parameters changed'],
+                ['createdAt' => '2025-05-29T06:10:46.000Z', 'description' => 'Request parameters changed'],
+            ],
+            'ramActions' => [
+                [
+                    'operationType' => 'get',
+                    'ramAction' => [
+                        'action' => 'yundun-sas:DescribeAttacks',
+                        'authLevel' => 'operate',
+                        'actionConditions' => [],
+                        'resources' => [
+                            ['validationType' => 'always', 'product' => 'SasRasp', 'resourceType' => 'All Resource', 'arn' => '*'],
+                        ],
+                    ],
+                ],
+            ],
+            'responseDemo' => '[{"errorExample":"","example":"{\\n  \\"TotalCount\\": 289,\\n  \\"RequestId\\": \\"4E7772EA-1AD0-5583-BA55-A4E7B65F****\\",\\n  \\"Attacks\\": [\\n    {\\n      \\"MinTimestamp\\": 1727281449756,\\n      \\"PayloadLength\\": 100,\\n      \\"Message\\": \\"通过危险堆栈读取敏感文件\\",\\n      \\"Os\\": \\"linux\\",\\n      \\"AppDir\\": \\"/app\\",\\n      \\"Headers\\": \\"{\'X-Total-Count\': 1}\\",\\n      \\"Stacktrace\\": [\\n        \\"null\\"\\n      ],\\n      \\"OsVersion\\": \\"aliyun_V3_5.1\\",\\n      \\"Ip\\": \\"47.92.92.85\\",\\n      \\"RaspVersion\\": \\"php\\",\\n      \\"UnionId\\": \\"23yaet4dg6ek3s7aj\\",\\n      \\"Remote\\": \\"192.168.1.1\\",\\n      \\"MiddlewareInstanceId\\": \\"null\\",\\n      \\"Time\\": \\"1724033134746\\",\\n      \\"RuleResult\\": \\"2\\",\\n      \\"Count\\": 1,\\n      \\"MaxTimestamp\\": 1727281449756,\\n      \\"Timestamp\\": 1712284140,\\n      \\"Url\\": \\"https://other-general-huadong1.oss-cn-hangzhou.aliyuncs.com/uploadWidget/TaxiInvoice_01.jpeg\\",\\n      \\"AppName\\": \\"zhxy\\",\\n      \\"Result\\": \\"[{\'TagKey\': \'acs:rm:rgId\', \'TagValue\': \'rg-aek25bwhtt22cjq\'}]\\",\\n      \\"Jdk\\": \\"1.8.0_342\\",\\n      \\"Language\\": \\"cn\\",\\n      \\"Confidence\\": \\"high\\",\\n      \\"LanguageVersion\\": \\"1.0\\",\\n      \\"Hostname\\": \\"hostnames\\",\\n      \\"Severity\\": \\"low\\",\\n      \\"Data\\": \\"{\'All\': 12, \'Online\': 9}\\",\\n      \\"Pid\\": \\"29719\\",\\n      \\"Method\\": \\"POST\\",\\n      \\"HostId\\": \\"100.116.60.78\\",\\n      \\"Avd\\": \\"null\\",\\n      \\"InputParamItemList\\": [\\n        {\\n          \\"Value\\": \\"10.101.9.189\\",\\n          \\"ProcessedKey\\": \\"4E7772EA-1AD0-5583-BA55-A4****\\",\\n          \\"RawKey\\": \\"4E7772EA-1AD0-5583-BA55-A4****\\"\\n        }\\n      ],\\n      \\"Type\\": \\"exact\\",\\n      \\"AppId\\": \\"661dece60bb1\\",\\n      \\"Content\\": \\"{\'Exist\': \'false\'}\\",\\n      \\"InstallType\\": 1,\\n      \\"Param\\": \\"PUBLIC_CLOUD\\",\\n      \\"OsArch\\": \\"linux\\",\\n      \\"Region\\": \\"cn-shanghai\\",\\n      \\"Payload\\": \\"245256\\",\\n      \\"ContentLength\\": 1024,\\n      \\"Cmdline\\": \\"jar\\",\\n      \\"HandleStatus\\": 0,\\n      \\"HandleTimestamp\\": 1758607200,\\n      \\"LlmAsset\\": false\\n    }\\n  ]\\n}","type":"json"}]',
+        ],
+    ],
+    'endpoints' => [
+        ['regionId' => 'ap-southeast-1', 'regionName' => 'Singapore', 'areaId' => 'asiaPacific', 'areaName' => 'Asia Pacific', 'public' => 'sasrasp.ap-southeast-1.aliyuncs.com', 'endpoint' => 'sasrasp.ap-southeast-1.aliyuncs.com', 'vpc' => ''],
+        ['regionId' => 'cn-hangzhou', 'regionName' => 'China (Hangzhou)', 'areaId' => 'asiaPacific', 'areaName' => 'Asia Pacific', 'public' => 'sasrasp.cn-hangzhou.aliyuncs.com', 'endpoint' => 'sasrasp.cn-hangzhou.aliyuncs.com', 'vpc' => ''],
+    ],
+    'errorCodes' => [
+        ['code' => 'Rasp.App.DeleteFail', 'message' => 'The attach records are not empty, or has active instances.', 'http_code' => 403, 'description' => 'Failed to delete application group'],
+        ['code' => 'Rasp.App.NameDuplicate', 'message' => 'The application name is duplicate.', 'http_code' => 403, 'description' => 'Duplicate application name'],
+        ['code' => 'Rasp.App.NotExist', 'message' => 'The specified application does not exist.', 'http_code' => 403, 'description' => 'Application group does not exist'],
+    ],
+    'changeSet' => [
+        [
+            'apis' => [
+                ['description' => 'Response parameters changed', 'api' => 'DescribeAttacks'],
+            ],
+            'createdAt' => '2026-03-02T09:30:29.000Z',
+            'description' => '',
+        ],
+        [
+            'apis' => [
+                ['description' => 'Request parameters changed', 'api' => 'DescribeAttacks'],
+            ],
+            'createdAt' => '2026-01-08T09:51:53.000Z',
+            'description' => '',
+        ],
+        [
+            'apis' => [
+                ['description' => 'Response parameters changed', 'api' => 'DescribeAttacks'],
+            ],
+            'createdAt' => '2025-11-25T04:48:52.000Z',
+            'description' => '',
+        ],
+    ],
+    'ram' => [
+        'productCode' => 'SasRasp',
+        'productName' => 'Security Center',
+        'ramCodes' => ['yundun-sas'],
+        'ramLevel' => 'OPERATION',
+        'ramConditions' => [],
+        'ramActions' => [
+            [
+                'apiName' => 'DescribeAttacks',
+                'description' => '',
+                'operationType' => 'get',
+                'ramAction' => [
+                    'action' => 'yundun-sas:DescribeAttacks',
+                    'authLevel' => 'operate',
+                    'actionConditions' => [],
+                    'resources' => [
+                        ['validationType' => 'always', 'product' => 'SasRasp', 'resourceType' => 'All Resource', 'arn' => '*'],
+                    ],
+                ],
+            ],
+            [
+                'apiName' => 'DescribeAttackProtectionCount',
+                'description' => '',
+                'operationType' => 'get',
+                'ramAction' => [
+                    'action' => 'yundun-sas:DescribeAttackProtectionCount',
+                    'authLevel' => 'operate',
+                    'actionConditions' => [],
+                    'resources' => [
+                        ['validationType' => 'always', 'product' => 'SasRasp', 'resourceType' => 'All Resource', 'arn' => '*'],
+                    ],
+                ],
+            ],
+        ],
+        'resourceTypes' => [],
+    ],
 ];