diff options
| author | Zhineng Li <im@zhineng.li> | 2026-07-12 17:11:17 +0800 |
|---|---|---|
| committer | Zhineng Li <im@zhineng.li> | 2026-07-12 17:11:17 +0800 |
| commit | 1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634 (patch) | |
| tree | 5f0857666365b7e40cdaa3733ebe1f3ba9e13c67 /data/zh_cn/riskmanagement | |
| parent | 7347bac4ab7e136157fc94777e6cf87ef9e08599 (diff) | |
| download | afterglow-metadata-full-1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634.tar.gz afterglow-metadata-full-1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634.zip | |
update APIs 20260712
Diffstat (limited to 'data/zh_cn/riskmanagement')
| -rw-r--r-- | data/zh_cn/riskmanagement/2026-04-24/api-docs.php | 2677 |
1 files changed, 2677 insertions, 0 deletions
diff --git a/data/zh_cn/riskmanagement/2026-04-24/api-docs.php b/data/zh_cn/riskmanagement/2026-04-24/api-docs.php new file mode 100644 index 0000000..40ec8bf --- /dev/null +++ b/data/zh_cn/riskmanagement/2026-04-24/api-docs.php @@ -0,0 +1,2677 @@ +<?php return [ + 'version' => '1.0', + 'info' => ['style' => 'RPC', 'product' => 'RiskManagement', 'version' => '2026-04-24'], + 'directories' => [ + [ + 'children' => [ + [ + 'children' => ['GetAlertRecordAnalysisResult'], + 'type' => 'directory', + 'title' => '查看详情', + 'id' => 454733, + ], + [ + 'children' => [ + [ + 'children' => ['CreateServiceLinkedRole', 'StartDisposalToolService', 'GetDisposalToolStatus'], + 'type' => 'directory', + 'title' => '授权', + 'id' => 454735, + ], + [ + 'children' => ['CreateVirusScanOnceTask', 'ListVirusScanMachineEvent'], + 'type' => 'directory', + 'title' => '病毒扫描', + 'id' => 454736, + ], + [ + 'children' => ['GetAliYunSafeCenterResult', 'OpenTrialPackage', 'GetValidDeductInstances', 'InitSasModuleRule', 'DescribeCloudCenterInstances', 'DescribeSuspEvents', 'UpdatePostPaidBindRel', 'CreateSasTrial', 'DescribeServiceLinkedRoleStatus', 'GetCanTrySas', 'BindAuthToMachine'], + 'type' => 'directory', + 'title' => '查杀', + 'id' => 454737, + ], + ], + 'type' => 'directory', + 'title' => '处置告警', + 'id' => 454734, + ], + ], + 'type' => 'directory', + 'title' => '云资源安全管控事件', + 'id' => 454732, + ], + [ + 'children' => [ + [ + 'children' => ['QuerySecurityCheckReport'], + 'type' => 'directory', + 'title' => '简报', + 'id' => 454739, + ], + ], + 'type' => 'directory', + 'title' => '安全体检', + 'id' => 454738, + ], + ], + 'components' => [ + 'schemas' => [], + ], + 'apis' => [ + 'BindAuthToMachine' => [ + 'summary' => 'sas-绑定授权到机器', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '智能接入网关实例所属的地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shenzhen'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求', + 'type' => 'object', + 'properties' => [ + 'AuthVersion' => ['description' => '资产的授权版本。取值：'."\n" + ."\n" + .'- **6**：防病毒版'."\n" + .'- **5**：高级版'."\n" + .'- **3**：企业版'."\n" + .'- **7**：旗舰版'."\n" + .'- **10**：增值服务版', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'], + 'AutoBind' => ['description' => '开启自动绑定。取值：'."\n" + ."\n" + .'- **0**：关闭'."\n" + .'- **1**：开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + 'Bind' => [ + 'description' => '绑定的 UUID 集合。'."\n" + ."\n" + .'> Bind 和 UnBind 不能同时为空。'."\n" + .'子级条数 <= 1000', + 'type' => 'array', + 'items' => ['description' => '绑定的 UUID。'."\n" + ."\n" + .'> 您可以调用 DescribeCloudCenterInstances 接口获取此参数。', 'type' => 'string', 'required' => false, 'example' => 'bdd3162a-fe5f-4ee3-afda-3134c7b12f29'], + 'required' => false, + ], + 'BindAll' => ['description' => '是否全量绑定。默认**false**，取值：'."\n" + ."\n" + .'- **true**：是'."\n" + .'- **false**：否', 'type' => 'boolean', 'required' => false, 'example' => 'true'], + 'Criteria' => ['description' => '设置搜索资产的条件。该参数 JSON 格式，输入参数时注意大小写。'."\n" + .'>支持使用资产的实例 ID、实例名称、所属 VPC ID、地域、公网 IP 地址等条件搜索资产。您可以调用 DescribeCriteria 接口查询支持的搜索条件。', 'type' => 'string', 'required' => false, 'example' => '[{\\"name\\":\\"clientStatus\\",\\"value\\":\\"online\\"},{\\"name\\":\\"authVersion\\",\\"value\\":\\"1\\"}]'], + 'IsPreBind' => ['description' => '是否预绑定操作。取值：'."\n" + ."\n" + .'- **0**：否'."\n" + .'- **1**：是'."\n" + ."\n\n" + .'> 开启预绑定后，会在完成购买后自动为指定服务器绑定对应版本的授权数。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + 'LogicalExp' => ['description' => '设置多个搜索条件间生效的逻辑关系。取值：'."\n" + ."\n" + .'- **OR**：表示多个搜索条件之间是**或**的关系。'."\n" + .'- **AND**：表示多个搜索条件之间是**与**的关系。', 'type' => 'string', 'required' => false, 'example' => 'AND'], + 'NtmVersion' => ['description' => '预绑定关联的订单版本。取值：'."\n" + ."\n" + .'- **level7**：防病毒版'."\n" + .'- **level3**：高级版'."\n" + .'- **level2**：企业版'."\n" + .'- **level8**：旗舰版'."\n" + .'- **level10**：仅采购增值服务', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => 'level2'], + 'UnBind' => [ + 'description' => '解绑的UUID集合。'."\n" + .'> **Bind**和**UnBind**不能同时为空。', + 'type' => 'array', + 'items' => ['description' => '解绑的UUID集合。'."\n" + .'> **Bind**和**UnBind**不能同时为空。', 'type' => 'string', 'required' => false, 'example' => 'b37a0c00-b479-4d59-aaef-1cdc1f71930f'], + 'required' => false, + ], + 'PreBindOrderId' => ['description' => '预绑定关联的订单编号。'."\n" + .'> 注意 该字段类型为 Long，在序列化/反序列化的过程中可能导致精度丢失，请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '263076506250432'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => 'BEE90F8C-EDC2-5394-953B-D07A121612B5'], + 'Code' => ['description' => '调用失败时，返回的错误码。更多信息，请参见错误码。', 'type' => 'string', 'example' => 'OK'], + 'Message' => ['description' => 'message', 'type' => 'string', 'example' => 'Successful'], + 'Success' => ['description' => '表示是否调用成功。true：调用成功。 false：调用失败。', 'type' => 'boolean', 'example' => 'True'], + 'Data' => [ + 'description' => '调用成功时，返回的数据。详情请参见以下参数。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'BindCount' => ['description' => '成功绑定服务器数。', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'InsufficientCoreCount' => ['description' => '授权核数授权数不足的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'], + 'InsufficientEcsCount' => ['description' => '授权服务器授权数不足的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'RequestId' => ['description' => '云安全中心请求Id', 'type' => 'string', 'example' => 'F799C1E4-D4C6-5964-A6D1-4BA9CCF105F2'], + 'ResultCode' => ['description' => '绑定结果状态码。取值：'."\n" + ."\n" + .'0：成功'."\n" + .'1：参数错误'."\n" + .'2：缺少服务器授权数'."\n" + .'3：缺少服务器授权核数', 'type' => 'integer', 'format' => 'int32', 'example' => '2'], + 'UnBindCount' => ['description' => '成功解绑服务器数。', 'type' => 'integer', 'format' => 'int32', 'example' => '4'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-绑定授权到机器', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BEE90F8C-EDC2-5394-953B-D07A121612B5\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"BindCount\\": 5,\\n \\"InsufficientCoreCount\\": 2,\\n \\"InsufficientEcsCount\\": 1,\\n \\"RequestId\\": \\"F799C1E4-D4C6-5964-A6D1-4BA9CCF105F2\\",\\n \\"ResultCode\\": 2,\\n \\"UnBindCount\\": 4\\n }\\n }\\n}","type":"json"}]', + ], + 'CreateSasTrial' => [ + 'summary' => 'sas-初始化云安全中心模块规则', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '访问控制实例所属的地域ID。您可以通过调用DescribeRegions接口获取地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shenzhen'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求', + 'type' => 'object', + 'properties' => [ + 'FromEcs' => ['description' => '是否来自ECS控制台，取值：'."\n" + .'- **true**：是'."\n" + .'- **false**：否', 'type' => 'boolean', 'required' => false, 'example' => 'true'], + 'Lang' => ['description' => '请求和接收消息的语言类型。取值：'."\n" + ."\n" + .'- **zh**（默认）：中文。'."\n" + ."\n" + .'- **en**：英文。', 'type' => 'string', 'required' => false, 'example' => 'en'], + 'RequestForm' => [ + 'description' => '申请试用理由。', + 'type' => 'object', + 'properties' => [ + 'TryReason' => ['description' => '申请试用理由。', 'type' => 'string', 'required' => false, 'example' => 'for poc'], + ], + 'required' => false, + ], + 'TryType' => ['description' => '试用类型，取值：'."\n" + .'- **0**：禁止试用'."\n" + .'- **1**：首次试用'."\n" + .'- **2**：二次试用'."\n" + ."\n\n" + .'> 调用[GetCanTrySas](~~2623574~~)接口获取此参数，不为0时才可开启试用。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + 'TryVersion' => ['description' => '试用版本。取值：'."\n" + .'- **3**：企业版'."\n" + .'- **7**：旗舰版'."\n" + ."\n" + .'>调用[GetCanTrySas](~~2623574~~)接口获取该参数。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => '6B57D35D-9DAC-5393-AE39-07697E37C2E7'], + 'Code' => ['description' => '内部错误码。', 'type' => 'string', 'example' => 'SUCCESS'], + 'Message' => ['description' => '返回消息。', 'type' => 'string', 'example' => 'OK'], + 'Success' => ['description' => '请求成功与否标识。', 'type' => 'boolean', 'example' => 'True'], + 'Data' => [ + 'description' => '任务创建结果', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心请求id', 'type' => 'string', 'example' => 'F7C74264-DF12-56D5-869B-C4B11DD88BA2'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-开启云安全中心试用', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6B57D35D-9DAC-5393-AE39-07697E37C2E7\\",\\n \\"Code\\": \\"SUCCESS\\",\\n \\"Message\\": \\"OK\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"F7C74264-DF12-56D5-869B-C4B11DD88BA2\\"\\n }\\n }\\n}","type":"json"}]', + ], + 'CreateServiceLinkedRole' => [ + 'summary' => 'sas-创建服务关联角色', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagement11C0AL'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '智能接入网关实例地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求', + 'type' => 'object', + 'properties' => [ + 'ServiceLinkedRole' => ['description' => '关联角色。默认**AliyunServiceRoleForSas**。取值：'."\n" + ."\n" + .'- **AliyunServiceRoleForSas**：用于云安全中心(sas)的服务关联角色，云安全中心(sas)使用此角色来访问您在其他云产品中的资源。'."\n" + .'- **AliyunServiceRoleForSasCspm**：用于云安全中心-CSPM(sas-cspm)的服务关联角色，sas-cspm使用此角色来访问您在其他云产品中的资源。', 'type' => 'string', 'required' => false, 'example' => 'AliyunServiceRoleForWebsiteBuildPublish'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => '1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6'], + 'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '查询结果。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体内容经过Base 64算法加密后的字符串。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => 'E00516EB-A56A-5381-ACFE-E618DBC3D0EA'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-创建服务关联角色并授权云安全中心访问云资源', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"E00516EB-A56A-5381-ACFE-E618DBC3D0EA\\"\\n }\\n }\\n}","type":"json"}]', + ], + 'CreateVirusScanOnceTask' => [ + 'summary' => '创建全盘扫描任务', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'create', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['title' => '地域id', 'description' => '地域id', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'], + ], + [ + 'name' => 'Ip', + 'in' => 'query', + 'schema' => ['title' => '公网ip', 'description' => '公网ip', 'type' => 'string', 'required' => false, 'example' => '12.3*.22.11'], + ], + [ + 'name' => 'InstanceId', + 'in' => 'query', + 'schema' => ['title' => '实例id', 'description' => '实例id', 'type' => 'string', 'required' => false, 'example' => 'rm-0iw73ro05vcwn6ntq'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '739705BB-B0EF-554B-B3A8-383F4F93E067'], + 'Code' => ['description' => '调用失败时，返回的错误码。更多信息，请参见错误码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + ."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '返回数据。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '请求ID。', 'type' => 'string', 'example' => '1D345A09-5ABD-593C-9C26-5C2B28632CD6'], + 'Uuid' => ['title' => '服务器id', 'description' => '服务器id', 'type' => 'string', 'example' => '9ef1a02e1de695cb7f9fea2c6c145853eklEsP2JP0Z'], + 'BusinessType' => ['title' => '资产选择业务类型。取值：'."\n" + ."\n" + .'VIRUS_SCAN_CYCLE_CONFIG：病毒查杀配置'."\n" + .'VIRUS_SCAN_ONCE_TASK：病毒查杀一次性扫描'."\n" + .'AGENTLESS_MALICIOUS_WHITE_LIST_[ID]：无代理检测告警加白规则'."\n" + .'AGENTLESS_VUL_WHITE_LIST_[ID]：无代理检测漏洞加白规则'."\n" + .'FILE_PROTECT_RULE_SWITCH_TYPE_[ID]：核心文件保护', 'description' => '资产选择业务类型。取值：'."\n" + ."\n" + .'- **VIRUS_SCAN_CYCLE_CONFIG**：病毒查杀配置'."\n" + .'- **VIRUS_SCAN_ONCE_TASK**：病毒查杀一次性扫描', 'type' => 'string', 'example' => 'VIRUS_SCAN_CYCLE_CONFIG'], + 'Platform' => ['title' => '目标资产操作系统。取值：'."\n" + ."\n" + .'all：所有操作系统'."\n" + .'windows：windows 操作系统'."\n" + .'linux：linux 操作系统'."\n" + .'说明 该值为空时，默认根据 BusinessType 值进行匹配。'."\n" + .'VIRUS_SCAN_CYCLE_CONFIG：该值为 all'."\n" + .'VIRUS_SCAN_ONCE_TASK：该值为 all'."\n" + .'AGENTLESS_MALICIOUS_WHITE_LIST_[ID]：该值为 all'."\n" + .'AGENTLESS_VUL_WHITE_LIST_[ID]：该值为 all'."\n" + .'FILE_PROTECT_RULE_SWITCH_TYPE_[ID]：该值为 linux', 'description' => '目标资产操作系统。取值：'."\n" + ."\n" + .'- **windows**：windows 操作系统'."\n" + .'- **linux**：linux 操作系统', 'type' => 'string', 'example' => 'windows'], + 'SelectionKey' => ['title' => '本次资产选择的唯一标识，可用于查询、修改此次资产选择对应的资产。', 'description' => '本次资产选择的唯一标识，可用于查询、修改此次资产选择对应的资产。', 'type' => 'integer', 'format' => 'int32', 'example' => '87af4d19-38fc-408d-9549-2bf7b6c2a4b9'], + 'TargetType' => ['title' => '目标资产类型。取值：'."\n" + ."\n" + .'all_instance：全部服务器'."\n" + .'instance：按服务器选择'."\n" + .'group：按分组选择'."\n" + .'vpc：按 VPC 选择', 'description' => '目标资产类型。取值：'."\n" + ."\n" + .'- **all_instance**：全部服务器'."\n" + .'- **instance**：按服务器选择'."\n" + .'- **group**：按分组选择'."\n" + .'- **vpc**：按 VPC 选择', 'type' => 'string', 'example' => 'all_instance'], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter', 'errorMessage' => 'Specified parameter is not valid.', 'description' => ''], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '创建全盘扫描任务', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"739705BB-B0EF-554B-B3A8-383F4F93E067\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"1D345A09-5ABD-593C-9C26-5C2B28632CD6\\",\\n \\"Uuid\\": \\"9ef1a02e1de695cb7f9fea2c6c145853eklEsP2JP0Z\\",\\n \\"BusinessType\\": \\"VIRUS_SCAN_CYCLE_CONFIG\\",\\n \\"Platform\\": \\"windows\\",\\n \\"SelectionKey\\": 0,\\n \\"TargetType\\": \\"all_instance\\"\\n }\\n}","type":"json"}]', + ], + 'DescribeCloudCenterInstances' => [ + 'summary' => 'sas-查询云安全中心实例列表', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '要查询的实例所在地域的 ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-beijing'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求', + 'type' => 'object', + 'properties' => [ + 'Criteria' => ['description' => '设置搜索资产的条件。该参数 JSON 格式，输入参数时注意大小写。'."\n" + .'>支持使用资产的实例 ID、实例名称、所属 VPC ID、地域、公网 IP 地址等条件搜索资产。您可以调用 DescribeCriteria 接口查询支持的搜索条件。', 'type' => 'string', 'required' => false, 'example' => '{\\"contactIds\\":[\\"job-658854766790086656\\",\\"job-658854801112113152\\"]}'], + 'CurrentPage' => ['description' => '当前页码。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + 'Flags' => ['description' => '资产厂商。多个资产厂商之间使用半角逗号（,）分隔。取值：'."\n" + ."\n" + .'- **0**：阿里云资产'."\n" + .'- **1**：云外资产'."\n" + .'- **2**：IDC资产'."\n" + .'- **3**、**4**、**5**、**7**、**14**、**16**：其它云资产'."\n" + .'- **8**：轻量级资产'."\n" + .'- **9**：SAE'."\n" + .'- **10**：PAI', 'type' => 'string', 'required' => false, 'example' => '0,10,13'], + 'Importance' => ['description' => '设置资产重要性。取值：'."\n" + .'- **2**：重要资产'."\n" + .'- **1**：一般资产'."\n" + .'- **0**：测试资产', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '2'], + 'Lang' => ['description' => '返回值语言，取值：'."\n" + .'- zh：中文'."\n" + .'- en：英文'."\n" + ."\n" + .'默认：en', 'type' => 'string', 'required' => false, 'example' => 'zh'], + 'LogicalExp' => ['description' => '设置多个搜索条件间生效的逻辑关系。取值：'."\n" + .'- **OR**：表示多个条件间为**或**的关系。'."\n" + .'- **AND**：表示多个条件间为**与**的关系。', 'type' => 'string', 'required' => false, 'example' => 'AND'], + 'MachineTypes' => ['description' => '要查询的资产的类型。取值：'."\n" + ."\n" + .'- **ecs**：服务器'."\n" + .'- **cloud_product**：云产品'."\n" + .'- **eci**：弹性容器实例'."\n" + .'- **rund**：RunD 容器实例'."\n" + .'- **runc**：RunC 容器实例', 'type' => 'string', 'required' => false, 'example' => 'ecs'], + 'NextToken' => ['description' => '用于获取下一页结果的分页令牌。若无更多结果，则不返回此字段。', 'type' => 'string', 'required' => false, 'example' => 'AAAAAZak7VOTMl2OSt/xmc4J6gbg4Z5eXuWnrvKgOsGARL76TVbKERXHXKNFurqjtfDdRw=='], + 'NoGroupTrace' => ['description' => '默认分组**未分组**是否要做国际化处理。默认**false**，取值：'."\n" + ."\n" + .'- **true**：不做国际化处理。即返回参数GroupTrace的取值为云安全中心的默认分组**未分组**时，**未分组**仍然显示为**未分组**。'."\n" + .'- **false**：需要国际化处理。即返回参数GroupTrace的取值为云安全中心的默认分组**未分组**时，**未分组**显示为**default**。'."\n", 'type' => 'boolean', 'required' => false, 'example' => 'true'], + 'PageSize' => ['description' => '设置分页查询时，每页显示的资产的数量。默认值为 20，表示每页显示 20 条资产信息。', 'type' => 'string', 'required' => false, 'example' => '99'], + 'ResourceDirectoryAccountId' => ['description' => '资源目录成员账号ID。'."\n" + .'>调用[DescribeMonitorAccounts](~~DescribeMonitorAccounts~~)接口可以获取该参数。', 'type' => 'string', 'required' => false, 'example' => '1587359978118481'], + 'UseNextToken' => ['description' => '是否使用NextToken方式拉取漏洞列表数据。如果使用此参数TotalCount不再返回。取值：'."\n" + ."\n" + .'- **true**：使用NextToken方式。'."\n" + .'- **false**：不使用NextToken方式。', 'type' => 'boolean', 'required' => false, 'example' => 'true'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => '1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6'], + 'Code' => ['description' => '接口调用状态', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '错误信息。', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '请求是否成功。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '实例详情列表。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体内容经过Base 64算法加密后的字符串。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => '20EBDE7B-AA36-5D60-9DCA-151C48EDB9F8'], + 'Instances' => [ + 'description' => '资产详细信息列表。', + 'type' => 'array', + 'items' => [ + 'description' => '资产详细信息。', + 'type' => 'object', + 'properties' => [ + 'AlarmStatus' => ['description' => '镜像是否存在安全告警。取值：'."\n" + .'- **YES**：存在安全告警'."\n" + .'- **NO**：不存在安全告警', 'type' => 'string', 'example' => 'NO'], + 'AppId' => ['description' => '应用ID'."\n" + ."\n" + .'>该数据仅当 Vendor 为 9 时可存在。', 'type' => 'string', 'example' => 'FC2U0JVHWS49S2OT'], + 'AppName' => ['description' => '应用名称'."\n" + .'>该数据仅当 Vendor 为 9 时可存在。', 'type' => 'string', 'example' => 'guokent'], + 'AssetType' => ['description' => '资产的类型。取值：'."\n" + ."\n" + .'- **0**：云服务器'."\n" + .'- **1**：负载均衡'."\n" + .'- **2**：NAT 网关'."\n" + .'- **3**：RDS 数据库'."\n" + .'- **4**：MongoDb 数据库'."\n" + .'- **5**：REDIS 数据库'."\n" + .'- **6**：容器镜像'."\n" + .'- **7**：容器', 'type' => 'string', 'example' => '1'], + 'AssetTypeName' => ['description' => '资产的类型名称。', 'type' => 'string', 'example' => 'xxxxxx'], + 'AuthModifyTime' => ['description' => '资产的授权绑定时间戳。单位：毫秒。'."\n" + ."\n" + .'> 请注意，该值为 Long 类型，在某些语言中可能存在精度丢失的风险，请小心使用。', 'type' => 'integer', 'format' => 'int64', 'example' => '1627974044000'], + 'AuthVersion' => ['description' => '资产的授权版本。取值：'."\n" + ."\n" + .'- **1**：免费版（未授权）'."\n" + .'- **6**：防病毒版'."\n" + .'- **5**：高级版'."\n" + .'- **3**：企业版'."\n" + .'- **7**：旗舰版', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'AuthVersionName' => ['description' => '资产的授权版本（具体名称）。取值：'."\n" + ."\n" + .'- 免费版'."\n" + .'- 防病毒版'."\n" + .'- 高级版'."\n" + .'- 企业版'."\n" + .'- 旗舰版', 'type' => 'string', 'example' => '免费版'], + 'Bind' => ['description' => '资产是否已绑定授权。取值：'."\n" + ."\n" + .'- **true**：已绑定授权'."\n" + .'- **false**：未绑定授权', 'type' => 'boolean', 'example' => 'true'], + 'BindFileProtectType' => ['description' => '是否绑定防篡改授权。取值：'."\n" + ."\n" + .'- **block**：是'."\n" + .'- **none**：否', 'type' => 'string', 'example' => 'none'], + 'ClientStatus' => ['description' => '实例的客户端在线状态。取值：'."\n" + ."\n" + .'- **online**：在线，表示资产的 Agent 客户端状态为开启。'."\n" + .'- **offline**：离线，表示资产的 Agent 客户端状态为关闭。'."\n" + .'- **pause**：暂停，表示资产的 Agent 客户端状态为暂停保护。', 'type' => 'string', 'example' => 'online'], + 'ClientSubStatus' => ['description' => '实例的客户端子状态。取值：'."\n" + ."\n" + .'- **online**：在线，表示资产的Agent客户端状态为**开启**。'."\n" + .'- **offline**：离线，表示资产的Agent客户端状态为**关闭**。'."\n" + .'- **pause**：暂停，表示资产的Agent客户端状态为**暂停保护**。'."\n" + .'- **uninstalled**：未安装，表示资产的Agent客户端状态为**未安装**。'."\n" + .'- **stopped**：服务器关机，表示资产的Agent客户端状态**服务器关机**。', 'type' => 'string', 'example' => 'online'], + 'ClusterId' => ['description' => '资源组所在的集群ID。', 'type' => 'string', 'example' => 'cb703cb0ba6bd40d4a6d8de5bff050fb9'], + 'ClusterName' => ['description' => '集群名称', 'type' => 'string', 'example' => 'auto-cn-heyuan'], + 'Cores' => ['description' => '资产的 CPU 核数。', 'type' => 'integer', 'format' => 'int32', 'example' => '9'], + 'CpuInfo' => ['description' => '资产的CPU信息。', 'type' => 'string', 'example' => 'Intel(R) Xeon(R) Platinum 8269CY CPU @ 2.50GHz'], + 'CreatedTime' => ['description' => '集群创建的时间戳，单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1607365213000'], + 'ExposedStatus' => ['description' => '资产暴露状态。取值：'."\n" + ."\n" + .'- **0**： 未暴露'."\n" + .'- **1**： 已暴露', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + 'Flag' => ['description' => '资产厂商。多个资产厂商之间使用半角逗号（,）分隔。取值：'."\n" + ."\n" + .'- **0**：阿里云资产'."\n" + .'- **1**：云外资产'."\n" + .'- **2**：IDC 资产'."\n" + .'- **3、4、5、7、14、16**：其它云资产'."\n" + .'- **8**：轻量级资产'."\n" + .'- **9**：SAE'."\n" + .'- **10**：PAI', 'type' => 'integer', 'format' => 'int32', 'example' => '0,1,2'], + 'FlagName' => ['description' => '资产厂商。取值：'."\n" + .'- **ALIYUN**'."\n" + .'- **OUT**'."\n" + .'- **IDC**'."\n" + .'- **Tencent**'."\n" + .'- **HUAWEICLOUD**'."\n" + .'- **Azure**'."\n" + .'- **AWS**'."\n" + .'- **ASK**'."\n" + .'- **TRIPARTITE**'."\n" + .'- **SAE**'."\n" + .'- **PAI**'."\n" + .'- **google**'."\n" + .'- **VOLCENGINE**', 'type' => 'string', 'example' => 'ALIYUN'], + 'GroupId' => ['description' => '实例所属分组 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '86d30f8b0e124aadb7ef3197f9dbd1f5'], + 'GroupTrace' => ['description' => '资产所在的分组的名称。', 'type' => 'string', 'example' => 'default'], + 'HasContainer' => ['description' => '是否含有容器。取值：'."\n" + ."\n" + .'- **YES**：有。'."\n" + .'- **NO**：无。', 'type' => 'string', 'example' => 'YES'], + 'HcStatus' => ['description' => '实例是否检测出了基线风险项。取值：'."\n" + .'- **YES**：检测出了基线风险项'."\n" + .'- **NO**：未检测出基线风险项', 'type' => 'string', 'example' => 'YES'], + 'HealthCheckCount' => ['description' => '实例中存在的基线风险数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'Importance' => ['description' => '设置资产重要性。取值：'."\n" + .'- **2**：重要资产'."\n" + .'- **1**：一般资产'."\n" + .'- **0**：测试资产', 'type' => 'integer', 'format' => 'int32', 'example' => '2'], + 'InstanceId' => ['description' => '实例id', 'type' => 'string', 'example' => 'ls-cn-tl32rf**008'], + 'InstanceName' => ['description' => '实例名称。', 'type' => 'string', 'example' => 'ra-supabase-22u1iv3hr**5v9'], + 'InternetIp' => ['description' => '关联实例的公网IP。', 'type' => 'string', 'example' => '47.1**.52.125'], + 'IntranetIp' => ['description' => '当前服务器的私网IP地址。'."\n", 'type' => 'string', 'example' => '172.16.1**.245'], + 'Ip' => ['description' => '管控IP', 'type' => 'string', 'example' => '114.55.*4.*6'], + 'IpListString' => ['description' => '系统的IP列表。', 'type' => 'string', 'example' => '172.31.XX.XX,172.171.XX.XX'], + 'Kernel' => ['description' => '内核版本信息。', 'type' => 'string', 'example' => '3.10.0-1127.19.1.el7.x86_64'], + 'LastLoginTimestamp' => ['description' => '客户端最后上线的时间戳。单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1637592907000'], + 'MacListString' => ['description' => '系统的Mac地址。', 'type' => 'string', 'example' => '00:13:3e:31:13:39,02:12:67:b8:**:**'], + 'Mem' => ['description' => '内存总量，单位为MB。', 'type' => 'string', 'example' => '1024'], + 'Namespace' => ['description' => '命名空间。', 'type' => 'string', 'example' => 'slsshpcorlsmetrics'], + 'Os' => ['description' => '实例的操作系统。取值：'."\n" + ."\n" + .'- **linux**：linux'."\n" + ."\n" + .'- **windows**：windows', 'type' => 'string', 'example' => 'linux'], + 'OsName' => ['description' => '实例的内核版本。', 'type' => 'string', 'example' => 'AliOS7U2-x86-64'], + 'PodCount' => ['description' => '容器组个数。', 'type' => 'integer', 'format' => 'int32', 'example' => '8'], + 'PostPaidFlag' => ['description' => '当前资产绑定的防护版本计费方式。取值：'."\n" + .'- **0**：包年包月'."\n" + .'- **1**：按量付费', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'Region' => ['description' => '实例所属地域 ID。', 'type' => 'string', 'example' => 'cn-hangzhouxxxx'], + 'RegionId' => ['description' => '资产所在的地域的 ID。', 'type' => 'string', 'example' => 'cn-zhangjiakou'], + 'RegionName' => ['description' => '地域名称。', 'type' => 'string', 'example' => 'cn-shanghai'], + 'RiskCount' => ['description' => '资产存在的风险项统计。JSON 格式，包含以下字段：'."\n" + ."\n" + .'- **account**：异地登录和爆破成功的账号数量'."\n" + .'- **appNum**：扫描器漏洞数量'."\n" + .'- **asapVulCount**：高危漏洞总数量'."\n" + .'- **baselineHigh**：高危基线风险数量'."\n" + .'- **baselineLow**：低危基线风险数量'."\n" + .'- **baselineMedium**：中危基线风险数量'."\n" + .'- **baselineNum**： 云产品配置风险总数量'."\n" + .'- **cmsNum**： WEB-CMS 漏洞数量'."\n" + .'- **containerAsap**： 容器高危漏洞数量'."\n" + .'- **containerLater**：容器中危漏洞数量'."\n" + .'- **containerNntf**： 容器低危漏洞数量'."\n" + .'- **containerRemind**：容器提醒告警数量'."\n" + .'- **containerSerious**：容器紧急告警数量'."\n" + .'- **containerSuspicious**：容器可疑告警数量'."\n" + .'- **cveNum**：Linux 漏洞数量'."\n" + .'- **emgNum**：应急漏洞数量'."\n" + .'- **health**：未处理的基线告警数量'."\n" + .'- **imageBaselineHigh**：镜像高危基线风险数量'."\n" + .'- **imageBaselineLow**：镜像低危基线风险数量'."\n" + .'- **imageBaselineMedium**：镜像中危基线风险数量'."\n" + .'- **imageBaselineNum**：镜像基线风险总数量'."\n" + .'- **imageMaliciousFileRemind**：镜像提醒恶意文件数量'."\n" + .'- **imageMaliciousFileSerious**：镜像紧急恶意文件数量'."\n" + .'- **imageMaliciousFileSuspicious**：镜像可疑恶意文件数量'."\n" + .'- **imageVulAsap**：镜像高危漏洞数量'."\n" + .'- **imageVulLater**：镜像中危漏洞数量'."\n" + .'- **imageVulNntf**：镜像低危漏洞数量'."\n" + .'- **laterVulCount**：中危漏洞数量'."\n" + .'- **newSuspicious**：告警数量'."\n" + .'- **nntfVulCount**：低危漏洞数量'."\n" + .'- **remindNum**：提醒告警数量'."\n" + .'- **scaNum**：软件成分分析漏洞数量'."\n" + .'- **seriousNum**：紧急告警数量'."\n" + .'- **suspNum**：可疑告警数量'."\n" + .'- **suspicious**：告警总数量'."\n" + .'- **sysNum**：Windows 漏洞数量'."\n" + .'- **trojan**：木马数量'."\n" + .'- **uuid**：资产 UUID'."\n" + .'- **vul**：漏洞数量'."\n" + .'- **weakPWNum**：弱口令数量', 'type' => 'string', 'example' => '{'."\n" + .' "account": 0,'."\n" + .' "appNum": 0,'."\n" + .' "asapVulCount": 0,'."\n" + .' "baselineHigh": 0,'."\n" + .' "baselineLow": 0,'."\n" + .' "baselineMedium": 0,'."\n" + .' "baselineNum": 0,'."\n" + .' "cmsNum": 0,'."\n" + .' "containerAsap": 0,'."\n" + .' "containerLater": 0,'."\n" + .' "containerNntf": 0,'."\n" + .' "containerRemind": 0,'."\n" + .' "containerSerious": 0,'."\n" + .' "containerSuspicious": 0,'."\n" + .' "cveNum": 0,'."\n" + .' "emgNum": 0,'."\n" + .' "health": 0,'."\n" + .' "imageBaselineHigh": 0,'."\n" + .' "imageBaselineLow": 0,'."\n" + .' "imageBaselineMedium": 0,'."\n" + .' "imageBaselineNum": 0,'."\n" + .' "imageMaliciousFileRemind": 0,'."\n" + .' "imageMaliciousFileSerious": 0,'."\n" + .' "imageMaliciousFileSuspicious": 0,'."\n" + .' "imageVulAsap": 0,'."\n" + .' "imageVulLater": 0,'."\n" + .' "imageVulNntf": 0,'."\n" + .' "laterVulCount": 0,'."\n" + .' "newSuspicious": 0,'."\n" + .' "nntfVulCount": 0,'."\n" + .' "remindNum": 0,'."\n" + .' "scaNum": 0,'."\n" + .' "seriousNum": 0,'."\n" + .' "suspNum": 0,'."\n" + .' "suspicious": 0,'."\n" + .' "sysNum": 0,'."\n" + .' "trojan": 0,'."\n" + .' "uuid": "inet-37316411-37fe-4b72-b245-346a2721****",'."\n" + .' "vul": 0,'."\n" + .' "weakPWNum": 0'."\n" + .'}'], + 'RiskStatus' => ['description' => '是否存在风险 。取值：'."\n" + ."\n" + .'- **NO**：无风险'."\n" + .'- **YES**：有风险', 'type' => 'string', 'example' => 'NO'], + 'SafeEventCount' => ['description' => '资产存在的安全告警数量。', 'type' => 'string', 'example' => '5'], + 'ServiceId' => ['description' => '服务 ID，仅实例为 Serverless 实例，且归属于 PAI 平台时有值。', 'type' => 'string', 'example' => 'dsw-76jlywunsif09bp15p'], + 'Status' => ['description' => '实例的运行状态。取值：'."\n" + ."\n" + .'- **Running**：运行中。'."\n" + .'- **notRunning**：已关机。', 'type' => 'string', 'example' => 'Running'], + 'Tag' => ['description' => '资产实例的标签名称。', 'type' => 'string', 'example' => 'pre_20250714_idpt_adjust'], + 'TagId' => ['description' => '资产的标签 ID。', 'type' => 'string', 'example' => 'd8586ab8be4549e3815995858d277763'], + 'TagResources' => ['description' => '灵骏节点自定义标签，当机器是灵骏机器时才会返回值。', 'type' => 'string', 'example' => 'app:test,type:lingjun'], + 'Uuid' => ['description' => '终端设备UUID。', 'type' => 'string', 'example' => '1f0459ee-ed49-6484-8958-4f10f61e6362'], + 'Vendor' => ['description' => '资产厂商。取值：'."\n" + ."\n" + .'- **0**：阿里云资产'."\n" + .'- **1**：云外资产'."\n" + .'- **2**：IDC资产'."\n" + .'- **3**、**4**、**5**、**7**、**14**、**16**：其它云资产'."\n" + .'- **8**：轻量级资产'."\n" + .'- **9**：SAE'."\n" + .'- **10**：PAI', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + 'VendorName' => ['description' => '资产的服务商名称。'."\n" + ."\n" + .'- 取值：'."\n" + .'- '."\n" + .'- **ALIYUN**：阿里云'."\n" + .'- **OUT**：云外资产'."\n" + .'- **IDC**：IDC'."\n" + .'- **TENCENT**：其它云'."\n" + .'- **HUAWEICLOUD**：其它云'."\n" + .'- **Microsoft**：其它云'."\n" + .'- **AWS**：其它云'."\n" + .'- **TRIPARTITE**：轻量级服务器'."\n" + .'- **SAE**：SAE'."\n" + .'- **PAI**：PAI'."\n" + .'- **VOLCENGINE**：其它云'."\n" + .'- **google**：其它云', 'type' => 'string', 'example' => 'IDC'], + 'VendorUid' => ['description' => '多云实例的账号ID。', 'type' => 'string', 'example' => '123'], + 'VendorUserName' => ['description' => '多云实例的账号名称。', 'type' => 'string', 'example' => 'VendorUserName'], + 'VpcInstanceId' => ['description' => '实例所属 VPC 的 ID。', 'type' => 'string', 'example' => 'vpc-2zek7v0z4r6lbp02xckei'], + 'VulCount' => ['description' => '实例上存在的漏洞数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'], + 'VulStatus' => ['description' => '实例是否存在漏洞。取值：'."\n" + .'- **YES**：存在漏洞。'."\n" + .'- **NO**：不存在漏洞。', 'type' => 'string', 'example' => 'YES'], + ], + ], + ], + 'PageInfo' => [ + 'description' => '驱动数量。', + 'type' => 'object', + 'properties' => [ + 'Count' => ['description' => '总数。', 'type' => 'integer', 'format' => 'int32', 'example' => '7'], + 'CurrentPage' => ['description' => '分页查询时，每页最大行数。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'NextToken' => ['description' => '使用 NextToken 方式下返回的 NextToken 值。', 'type' => 'string', 'example' => 'm1NGAAAAAABzLzIwMjQwMg=='], + 'PageSize' => ['description' => '每页返回记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + 'TotalCount' => ['description' => '总记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + ], + ], + 'Success' => ['description' => '是否调用成功：true：调用成功。 false：调用失败。', 'type' => 'boolean', 'example' => 'True'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-查询资产信息', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"20EBDE7B-AA36-5D60-9DCA-151C48EDB9F8\\",\\n \\"Instances\\": [\\n {\\n \\"AlarmStatus\\": \\"NO\\",\\n \\"AppId\\": \\"FC2U0JVHWS49S2OT\\",\\n \\"AppName\\": \\"guokent\\",\\n \\"AssetType\\": \\"1\\",\\n \\"AssetTypeName\\": \\"xxxxxx\\",\\n \\"AuthModifyTime\\": 1627974044000,\\n \\"AuthVersion\\": 5,\\n \\"AuthVersionName\\": \\"免费版\\",\\n \\"Bind\\": true,\\n \\"BindFileProtectType\\": \\"none\\",\\n \\"ClientStatus\\": \\"online\\",\\n \\"ClientSubStatus\\": \\"online\\",\\n \\"ClusterId\\": \\"cb703cb0ba6bd40d4a6d8de5bff050fb9\\",\\n \\"ClusterName\\": \\"auto-cn-heyuan\\",\\n \\"Cores\\": 9,\\n \\"CpuInfo\\": \\"Intel(R) Xeon(R) Platinum 8269CY CPU @ 2.50GHz\\",\\n \\"CreatedTime\\": 1607365213000,\\n \\"ExposedStatus\\": 0,\\n \\"Flag\\": 0,\\n \\"FlagName\\": \\"ALIYUN\\",\\n \\"GroupId\\": 0,\\n \\"GroupTrace\\": \\"default\\",\\n \\"HasContainer\\": \\"YES\\",\\n \\"HcStatus\\": \\"YES\\",\\n \\"HealthCheckCount\\": 1,\\n \\"Importance\\": 2,\\n \\"InstanceId\\": \\"ls-cn-tl32rf**008\\",\\n \\"InstanceName\\": \\"ra-supabase-22u1iv3hr**5v9\\",\\n \\"InternetIp\\": \\"47.1**.52.125\\",\\n \\"IntranetIp\\": \\"172.16.1**.245\\",\\n \\"Ip\\": \\"114.55.*4.*6\\",\\n \\"IpListString\\": \\"172.31.XX.XX,172.171.XX.XX\\",\\n \\"Kernel\\": \\"3.10.0-1127.19.1.el7.x86_64\\",\\n \\"LastLoginTimestamp\\": 1637592907000,\\n \\"MacListString\\": \\"00:13:3e:31:13:39,02:12:67:b8:**:**\\",\\n \\"Mem\\": \\"1024\\",\\n \\"Namespace\\": \\"slsshpcorlsmetrics\\",\\n \\"Os\\": \\"linux\\",\\n \\"OsName\\": \\"AliOS7U2-x86-64\\",\\n \\"PodCount\\": 8,\\n \\"PostPaidFlag\\": 1,\\n \\"Region\\": \\"cn-hangzhouxxxx\\",\\n \\"RegionId\\": \\"cn-zhangjiakou\\",\\n \\"RegionName\\": \\"cn-shanghai\\",\\n \\"RiskCount\\": \\"{\\\\n \\\\\\"account\\\\\\": 0,\\\\n \\\\\\"appNum\\\\\\": 0,\\\\n \\\\\\"asapVulCount\\\\\\": 0,\\\\n \\\\\\"baselineHigh\\\\\\": 0,\\\\n \\\\\\"baselineLow\\\\\\": 0,\\\\n \\\\\\"baselineMedium\\\\\\": 0,\\\\n \\\\\\"baselineNum\\\\\\": 0,\\\\n \\\\\\"cmsNum\\\\\\": 0,\\\\n \\\\\\"containerAsap\\\\\\": 0,\\\\n \\\\\\"containerLater\\\\\\": 0,\\\\n \\\\\\"containerNntf\\\\\\": 0,\\\\n \\\\\\"containerRemind\\\\\\": 0,\\\\n \\\\\\"containerSerious\\\\\\": 0,\\\\n \\\\\\"containerSuspicious\\\\\\": 0,\\\\n \\\\\\"cveNum\\\\\\": 0,\\\\n \\\\\\"emgNum\\\\\\": 0,\\\\n \\\\\\"health\\\\\\": 0,\\\\n \\\\\\"imageBaselineHigh\\\\\\": 0,\\\\n \\\\\\"imageBaselineLow\\\\\\": 0,\\\\n \\\\\\"imageBaselineMedium\\\\\\": 0,\\\\n \\\\\\"imageBaselineNum\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileRemind\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileSerious\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileSuspicious\\\\\\": 0,\\\\n \\\\\\"imageVulAsap\\\\\\": 0,\\\\n \\\\\\"imageVulLater\\\\\\": 0,\\\\n \\\\\\"imageVulNntf\\\\\\": 0,\\\\n \\\\\\"laterVulCount\\\\\\": 0,\\\\n \\\\\\"newSuspicious\\\\\\": 0,\\\\n \\\\\\"nntfVulCount\\\\\\": 0,\\\\n \\\\\\"remindNum\\\\\\": 0,\\\\n \\\\\\"scaNum\\\\\\": 0,\\\\n \\\\\\"seriousNum\\\\\\": 0,\\\\n \\\\\\"suspNum\\\\\\": 0,\\\\n \\\\\\"suspicious\\\\\\": 0,\\\\n \\\\\\"sysNum\\\\\\": 0,\\\\n \\\\\\"trojan\\\\\\": 0,\\\\n \\\\\\"uuid\\\\\\": \\\\\\"inet-37316411-37fe-4b72-b245-346a2721****\\\\\\",\\\\n \\\\\\"vul\\\\\\": 0,\\\\n \\\\\\"weakPWNum\\\\\\": 0\\\\n}\\",\\n \\"RiskStatus\\": \\"NO\\",\\n \\"SafeEventCount\\": \\"5\\",\\n \\"ServiceId\\": \\"dsw-76jlywunsif09bp15p\\",\\n \\"Status\\": \\"Running\\",\\n \\"Tag\\": \\"pre_20250714_idpt_adjust\\",\\n \\"TagId\\": \\"d8586ab8be4549e3815995858d277763\\",\\n \\"TagResources\\": \\"app:test,type:lingjun\\",\\n \\"Uuid\\": \\"1f0459ee-ed49-6484-8958-4f10f61e6362\\",\\n \\"Vendor\\": 0,\\n \\"VendorName\\": \\"IDC\\",\\n \\"VendorUid\\": \\"123\\",\\n \\"VendorUserName\\": \\"VendorUserName\\",\\n \\"VpcInstanceId\\": \\"vpc-2zek7v0z4r6lbp02xckei\\",\\n \\"VulCount\\": 2,\\n \\"VulStatus\\": \\"YES\\"\\n }\\n ],\\n \\"PageInfo\\": {\\n \\"Count\\": 7,\\n \\"CurrentPage\\": 1,\\n \\"NextToken\\": \\"m1NGAAAAAABzLzIwMjQwMg==\\",\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 0\\n },\\n \\"Success\\": true\\n }\\n }\\n}","type":"json"}]', + ], + 'DescribeServiceLinkedRoleStatus' => [ + 'summary' => 'sas-查询服务关联角色状态', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '要查询的实例所在地域的 ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求', + 'type' => 'object', + 'properties' => [ + 'ServiceLinkedRole' => ['description' => '关联角色。默认**AliyunServiceRoleForSas**。取值：'."\n" + ."\n" + .'- **AliyunServiceRoleForSas**：用于云安全中心(sas)的服务关联角色，云安全中心(sas)使用此角色来访问您在其他云产品中的资源。'."\n" + .'- **AliyunServiceRoleForSasCspm**：用于云安全中心-CSPM(sas-cspm)的服务关联角色，sas-cspm使用此角色来访问您在其他云产品中的资源。', 'type' => 'string', 'required' => false, 'example' => 'AliyunServiceRoleForSas'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID，是由阿里云为该请求生成的唯一标识符，可用于排查和定位问题。', 'type' => 'string', 'example' => 'EF972A16-95FB-5EF2-9CED-208A74DEF040'], + 'Code' => ['description' => '接口调用状态', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '消息。', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + ."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '查询结果。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => '7F14E3C8-A6AA-5D3C-B7E0-ABA2AC171EFC'], + 'RoleStatus' => [ + 'description' => '服务关联角色的状态', + 'type' => 'object', + 'properties' => [ + 'Status' => ['description' => '服务关联角色的状态。取值：'."\n" + ."\n" + .'- **true**：已创建'."\n" + .'- **false**：未创建', 'type' => 'boolean', 'example' => 'true'], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-查询您是否已创建云安全中心服务关联角色', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EF972A16-95FB-5EF2-9CED-208A74DEF040\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"7F14E3C8-A6AA-5D3C-B7E0-ABA2AC171EFC\\",\\n \\"RoleStatus\\": {\\n \\"Status\\": true\\n }\\n }\\n }\\n}","type":"json"}]', + ], + 'DescribeSuspEvents' => [ + 'summary' => 'sas-查询安全告警事件', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求参数', + 'type' => 'object', + 'properties' => [ + 'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识ID。'."\n" + ."\n" + .'> 如果查询单个告警事件的异常事件信息，需要提供告警事件的唯一标识 ID，该 ID 可调用 DescribeSuspEvents 接口获取。', 'type' => 'string', 'required' => false, 'example' => '6838133766c37077d0515b0b557e6510'], + 'AssetsTypeList' => [ + 'description' => '资产类型集合。', + 'type' => 'array', + 'items' => ['description' => '资产类型。'."\n" + ."\n" + .'- **ECS**：云服务器'."\n" + .'- **CONTAINER**：容器'."\n" + .'- **K8S**：K8s 集群', 'type' => 'string', 'required' => false, 'example' => 'K8S'], + 'required' => false, + ], + 'ClusterId' => ['description' => '集群ID。', 'type' => 'string', 'required' => false, 'example' => 'xxljob-02f023138826b'], + 'ContainerFieldName' => ['description' => '容器检索项。取值：'."\n" + ."\n" + .'- **instanceId**：实例ID'."\n" + .'- **appName**：应用名'."\n" + .'- **clusterId**：集群ID'."\n" + .'- **regionId**：地域'."\n" + .'- **nodeName**：节点名'."\n" + .'- **namespace**：命名空间'."\n" + .'- **clusterName**：集群名称'."\n" + .'- **image**：镜像名称'."\n" + .'- **imageRepoName**：镜像的仓库名称'."\n" + .'- **imageRepoNamespace**：镜像的仓库命名空间'."\n" + .'- **imageRepoTag**：镜像的标签'."\n" + .'- **imageDigest**：镜像摘要', 'type' => 'string', 'required' => false, 'example' => 'instanceId'], + 'ContainerFieldValue' => ['description' => '容器检索项对应值。', 'type' => 'string', 'required' => false, 'example' => 'ca9b91db58356b41af2932e8048310ab7daa415701fa62d823cf4f0406d5ce02'], + 'CurrentPage' => ['description' => '当前页。', 'type' => 'string', 'required' => false, 'example' => '1'], + 'Dealed' => ['description' => '告警事件状态。'."\n" + .'- N：待处理告警'."\n" + .'- Y：已处理告警', 'type' => 'string', 'required' => false, 'example' => 'Y'], + 'DetectSource' => ['description' => '发现来源（无效字段）', 'type' => 'string', 'required' => false, 'example' => '-'], + 'EventNames' => ['description' => '告警事件的子类型。多个类型之间使用半角逗号（,）隔开。'."\n", 'type' => 'string', 'required' => false, 'example' => 'WEBSHELL'], + 'From' => ['description' => '请求来源标识，固定为**sas**。', 'type' => 'string', 'required' => false, 'example' => 'sas'], + 'GroupId' => ['description' => '标签分组ID。'."\n" + ."\n" + .'> 该字段类型为 Long，在序列化/反序列化的过程中可能导致精度丢失，请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '18768'], + 'Id' => ['description' => '记录告警事件的唯一标识 ID。'."\n" + ."\n" + .'> 该字段类型为 Long，在序列化/反序列化的过程中可能导致精度丢失，请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '3165'], + 'Lang' => ['description' => '接收消息的语言类型。取值：'."\n" + ."\n" + .'- **zh**（默认）：中文'."\n" + .'- **en**：英文', 'type' => 'string', 'required' => false, 'example' => 'zh'], + 'Levels' => ['description' => '告警事件的危险等级，多个严重等级用逗号分隔（严重等级递减）。'."\n" + .'- serious：紧急'."\n" + .'- suspicious：可疑'."\n" + .'- remind：提醒', 'type' => 'string', 'required' => false, 'example' => 'serious'], + 'MultiAccountActionType' => ['description' => '多账号查询类型。默认值为**0**。取值：'."\n" + .'- **0**：查询当前账号数据'."\n" + .'- **1**：查询所有账号数据', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'], + 'Name' => ['description' => '受该告警事件影响的资产的名称。', 'type' => 'string', 'required' => false, 'example' => 'ecs-xxx'], + 'OperateErrorCodeList' => [ + 'description' => '告警事件处理结果码集合。', + 'type' => 'array', + 'items' => ['description' => '告警事件处理结果码。', 'type' => 'string', 'required' => false, 'example' => 'accurate_defense_mark_miss_filehash.success'], + 'required' => false, + ], + 'OperateTimeEnd' => ['description' => '处理时间结束时间戳。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'], + 'OperateTimeStart' => ['description' => '处理时间开始时间戳。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'], + 'PageSize' => ['description' => '分页查询时，每页数据显示的最大条数。', 'type' => 'string', 'required' => false, 'example' => '1'], + 'ParentEventTypes' => ['description' => '要查询的告警事件的告警类型。取值：'."\n" + ."\n" + .'- **进程异常行为**'."\n" + .'- **网站后门**'."\n" + .'- **异常登录**'."\n" + .'- **异常事件**'."\n" + .'- **敏感文件篡改**'."\n" + .'- **恶意进程（云查杀）**'."\n" + .'- **异常网络连接**'."\n" + .'- **异常账号**'."\n" + .'- **应用入侵事件**'."\n" + .'- **云产品威胁检测**'."\n" + .'- **精准防御**'."\n" + .'- **应用白名单**'."\n" + .'- **持久化后门**'."\n" + .'- **Web 应用威胁检测**'."\n" + .'- **恶意脚本**'."\n" + .'- **威胁情报**'."\n" + .'- **恶意网络行为**'."\n" + .'- **容器集群异常**'."\n" + .'- **网站后门（本地查杀）**'."\n" + .'- **漏洞利用**'."\n" + .'- **恶意进程（本地查杀）**'."\n" + .'- **可信异常**'."\n" + .'- **其他**', 'type' => 'string', 'required' => false, 'example' => '恶意脚本'], + 'Remark' => ['description' => '要查询的告警名称或资产的信息。'."\n" + ."\n" + .'> 支持模糊查询。资产信息包含资产名称、公网 IP、内网 IP。', 'type' => 'string', 'required' => false, 'example' => '192.168.XX.XX'], + 'ResourceDirectoryAccountId' => ['description' => '资源目录成员账号主账号ID。'."\n" + .'>调用[DescribeMonitorAccounts](~~DescribeMonitorAccounts~~)接口可以获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '5815612291408486'], + 'SortColumn' => ['description' => '自定义排序字段，默认**operateTime**，取值：'."\n" + ."\n" + .'- **lastTime**：最新发生时间。'."\n" + .'- **operateTime**：处理时间。'."\n" + ."\n" + .'> 该字段作用于**Dealed**为Y。', 'type' => 'string', 'required' => false, 'example' => 'lastTime'], + 'SortType' => ['description' => '按照证书到期时间排序的方式。'."\n" + ."\n" + .'- **desc**：倒序'."\n" + .'- **asc**：正序', 'type' => 'string', 'required' => false, 'example' => 'asc'], + 'Source' => ['description' => '告警来源。', 'type' => 'string', 'required' => false, 'example' => 'default'], + 'SourceAliUids' => [ + 'description' => '产生告警的阿里云账号ID列表。', + 'type' => 'array', + 'items' => ['description' => '产生告警的阿里云账号ID。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1192843048227488'], + 'required' => false, + ], + 'SourceIp' => ['description' => '访问源的IP地址。', 'type' => 'string', 'required' => false, 'example' => '2409:8a55:3827:cb50:5ad9:d5ff:fe87:f48c'], + 'StrictMode' => ['description' => '是否属于严格模式告警标识。'."\n" + .'- N：否'."\n" + .'- Y：是', 'type' => 'string', 'required' => false, 'example' => 'N'], + 'SupportOperateCodeList' => [ + 'description' => '告警支持的操作类型列表。', + 'type' => 'array', + 'items' => ['description' => '告警支持的操作类型：'."\n" + ."\n" + .'- **AI.false_positive**：疑似误报'."\n" + .'- **AI.real_attack**：真实攻击'."\n" + .'- **AI.Insufficient_information_to_evaluate**：无法研判', 'type' => 'string', 'required' => false, 'example' => 'AI.false_positive'], + 'required' => false, + ], + 'TacticId' => ['description' => 'ATT&CK 的战术 ID。', 'type' => 'string', 'required' => false, 'example' => 'TA0003'], + 'TargetType' => ['description' => '容器检索目标类型。取值：'."\n" + .'- **containerId**：容器ID'."\n" + .'- **uuid**：服务器UUID'."\n" + .'- **imageUuid**：镜像UUID', 'type' => 'string', 'required' => false, 'example' => 'containerId'], + 'TimeEnd' => ['description' => '最新发生时间结束时间。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'], + 'TimeStart' => ['description' => '最新发生时间起始时间。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'], + 'UniqueInfo' => ['description' => '安全告警的唯一 key。', 'type' => 'string', 'required' => false, 'example' => 'f82680d9fdcb74a520fa385b7e9105b7'], + 'Uuids' => ['description' => '要查询告警的服务器的UUID，多个UUID使用半角逗号（,）分隔。', 'type' => 'string', 'required' => false, 'example' => 'inet-eae09bb8-32b1-413b-a8ff-23932e043209'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '本次请求的 ID。', 'type' => 'string', 'example' => '67BD8435-6624-5484-A75D-170231B51615'], + 'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '返回信息。当请求成功时，返回成功信息；当请求失败时，返回失败原因。', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '操作是否成功。取值：true：成功。false：失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => 'Meta返回信息。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心的请求Id。', 'type' => 'string', 'example' => 'AD2345D1-A498-58AF-97C0-88940AF87CB7'], + 'Count' => ['description' => '任务数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'CurrentPage' => ['description' => '当前页号。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'PageSize' => ['description' => '每页返回记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'SuspEvents' => [ + 'description' => '告警事件信息。', + 'type' => 'array', + 'items' => [ + 'description' => '告警事件信息。', + 'type' => 'object', + 'properties' => [ + 'Advanced' => ['description' => '是否离线分析的告警。', 'type' => 'boolean', 'example' => 'true'], + 'AlarmEventName' => ['description' => '告警事件名称。', 'type' => 'string', 'example' => '反弹shell_拦截'], + 'AlarmEventNameDisplay' => ['description' => '告警名称。', 'type' => 'string', 'example' => 'Login with unusual location'], + 'AlarmEventType' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'Unusual Logon'], + 'AlarmEventTypeDisplay' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'Unusual Logon'], + 'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识ID。', 'type' => 'string', 'example' => '8df914418f****'], + 'AppName' => ['description' => '告警事件所属应用的名称。', 'type' => 'string', 'example' => 'dfield-cloud-service-prod'], + 'AutoBreaking' => ['description' => '是否自动防御。', 'type' => 'boolean', 'example' => 'true'], + 'CanBeDealOnLine' => ['description' => '是否支持在线处理告警事件，例如隔离。取值包括：'."\n" + ."\n" + .'- **true**：支持在线处理'."\n" + .'- **false**：不支持在线处理', 'type' => 'boolean', 'example' => 'true'], + 'CanCancelFault' => ['description' => '能否取消标记为误报。取值：'."\n" + ."\n" + .'- **true**：可以取消'."\n" + .'- **false**：不能取消', 'type' => 'boolean', 'example' => 'true'], + 'ContainHwMode' => ['description' => '是否为服务器开启了重保护模式。取值：'."\n" + .'- **true**：已开启。'."\n" + .'- **false**：未开启。', 'type' => 'boolean', 'example' => 'false'], + 'ContainerId' => ['description' => '容器id。', 'type' => 'string', 'example' => '95878ef8779fae3dd82126812edd910402fc550a72f9bce87e56a4435d018384'], + 'ContainerImageId' => ['description' => '容器镜像ID。', 'type' => 'string', 'example' => 'sha256:2e5a3b0ae5f452b3cb458789a9a7542ef40035a84318469a8528c5e444db1****'], + 'ContainerImageName' => ['description' => '容器镜像名称。', 'type' => 'string', 'example' => 'centos7_apache:v1.0.1'], + 'DataSource' => ['description' => '数据来源（可忽略）。', 'type' => 'string', 'example' => 'URL'], + 'Desc' => ['description' => '告警事件的影响概况描述。', 'type' => 'string', 'example' => 'webshell'], + 'Details' => [ + 'description' => '告警事件详情。', + 'type' => 'array', + 'items' => [ + 'description' => '告警事件详情。', + 'type' => 'object', + 'properties' => [ + 'NameDisplay' => ['description' => '告警事件显示名称。', 'type' => 'string', 'example' => 'login with unusual location'], + 'Type' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'text'], + 'Value' => ['description' => '告警事件发生路径。', 'type' => 'string', 'example' => '/etc/crontab'], + 'ValueDisplay' => ['description' => '告警事件发生路径。', 'type' => 'string', 'example' => '/etc/crontab'], + ], + ], + ], + 'DetectSource' => ['description' => '发现来源（无效字段）', 'type' => 'string', 'example' => '-'], + 'DisplaySandboxResult' => ['description' => '支持云沙箱检出。取值包括：'."\n" + ."\n" + .'- **true**：支持。'."\n" + .'- **false**：不支持。', 'type' => 'boolean', 'example' => 'true'], + 'EventNotes' => [ + 'description' => '告警事件的备注信息。', + 'type' => 'array', + 'items' => [ + 'description' => '告警事件的备注信息。', + 'type' => 'object', + 'properties' => [ + 'Note' => ['description' => '备注信息。', 'type' => 'string', 'example' => 'test'], + 'NoteId' => ['description' => '备注记录ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '2859481'], + 'NoteTime' => ['description' => '事件记录时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], + ], + ], + ], + 'EventStatus' => ['description' => '告警事件的状态。取值包括：'."\n" + ."\n" + .'- **1**：PENDING（待处理）'."\n" + .'- **2**：IGNORE（已忽略）'."\n" + .'- **4**：HANDLED（已确认）'."\n" + .'- **8**：FAULT（已标记误报）'."\n" + .'- **16**：DEALING（处理中）'."\n" + .'- **32**：DONE（处理完毕）'."\n" + .'- **64**：EXPIRE（已经过期）'."\n" + .'- **604**：SYSTEM_FAULT（系统标记为误报）', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'EventSubType' => ['description' => '告警事件子类型。', 'type' => 'string', 'example' => 'login_common_location'], + 'HasTraceInfo' => ['description' => '告警事件是否有溯源信息。取值：'."\n" + ."\n" + .'- **true**：有溯源'."\n" + .'- **false**：无溯源', 'type' => 'boolean', 'example' => 'true'], + 'Id' => ['description' => '告警事件的唯一标识 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '3178'], + 'ImageUuid' => ['description' => '镜像的唯一标识。', 'type' => 'string', 'example' => 'ccdab289-9765-47ef-af50-ba6be09aacd6'], + 'InstanceId' => ['description' => '受告警事件影响的资产实例的 ID。', 'type' => 'string', 'example' => 'i-9dp6dwsxdl9z5u1e2f****'], + 'InstanceName' => ['description' => '实例名称', 'type' => 'string', 'example' => 'nginx'], + 'InternetIp' => ['description' => '关联实例的公网IP。'."\n", 'type' => 'string', 'example' => '8.137.3*.6'], + 'IntranetIp' => ['description' => '实例的私网IP。', 'type' => 'string', 'example' => '10.36.*6.149'], + 'K8sClusterId' => ['description' => 'K8s集群ID。', 'type' => 'string', 'example' => 'ce3c41ed427794a7bb3d9da4554fc8039'], + 'K8sClusterName' => ['description' => 'K8s集群名称。', 'type' => 'string', 'example' => 'testName'], + 'K8sNamespace' => ['description' => 'K8s命名空间。', 'type' => 'string', 'example' => 'default'], + 'K8sNodeId' => ['description' => 'K8s节点ID。', 'type' => 'string', 'example' => 'i-bp14a1ay8e0aa9t0****'], + 'K8sNodeName' => ['description' => 'K8s节点名称。', 'type' => 'string', 'example' => 'N/A'], + 'K8sPodName' => ['description' => 'K8sPod名称。', 'type' => 'string', 'example' => 'myapp-pod'], + 'LargeModel' => ['description' => '是否支持大模型分析标签。取值包括：'."\n" + ."\n" + .'- **true**：支持。'."\n" + .'- **false**：不支持。', 'type' => 'boolean', 'example' => 'true'], + 'LastTime' => ['description' => '告警事件最近发生时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], + 'LastTimeStamp' => ['description' => '最后一次发生的时间戳，单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'], + 'Level' => ['description' => '告警事件的危险等级。取值包括：'."\n" + ."\n" + .'- **serious**：紧急'."\n" + .'- **suspicious**：可疑'."\n" + .'- **remind**：提醒', 'type' => 'string', 'example' => 'remind'], + 'MaliciousRuleStatus' => ['description' => '恶意行为防御规则状态。取值包括：'."\n" + .'- **open**：开启'."\n" + .'- **close**：关闭', 'type' => 'string', 'example' => 'open'], + 'MarkList' => [ + 'description' => '告警事件标签集合。', + 'type' => 'array', + 'items' => ['description' => '告警事件标签。', 'type' => 'string', 'example' => 'mark'], + ], + 'MarkMisRules' => ['description' => '高级加白规则。', 'type' => 'string', 'example' => '<strong>1.</strong>  path  contain  232  '], + 'Name' => ['description' => '告警事件的完整名称。', 'type' => 'string', 'example' => 'Unusual Logon-Login with unusual location'], + 'OccurrenceTime' => ['description' => '告警事件首次发生的时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'], + 'OccurrenceTimeStamp' => ['description' => '首次发生的时间戳，单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'], + 'OperateErrorCode' => ['description' => '告警事件操作的错误码。', 'type' => 'string', 'example' => 'kill_and_quara.Success'], + 'OperateMsg' => ['description' => '告警事件操作的备注信息。', 'type' => 'string', 'example' => 'success'], + 'OperateTime' => ['description' => '告警事件操作的时间戳，单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'], + 'SaleVersion' => ['description' => '需要的售卖版本：'."\n" + ."\n" + .'- 0：基础版本'."\n" + .'- 1：企业版本', 'type' => 'string', 'example' => '1'], + 'SecurityEventIds' => ['description' => '告警事件关联的告警事件的 ID。', 'type' => 'string', 'example' => '628978308'], + 'SourceAliUid' => ['description' => '产生告警的阿里云账号ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '124075**67406'], + 'Stages' => ['description' => '攻击阶段。', 'type' => 'string', 'example' => '"["authority_maintenance"]"'], + 'SupportOperateCode' => ['description' => '告警支持的操作类型：'."\n" + .'- **AI.false_positive**：疑似误报'."\n" + .'- **AI.real_attack**：真实攻击'."\n" + .'- **AI.Insufficient_information_to_evaluate**：无法研判', 'type' => 'string', 'example' => 'AI.false_positive'], + 'TacticItems' => [ + 'description' => '攻击阶段展示名。', + 'type' => 'array', + 'items' => [ + 'description' => '攻击阶段展示名。', + 'type' => 'object', + 'properties' => [ + 'TacticDisplayName' => ['description' => 'ATT&CK的战术名称。', 'type' => 'string', 'example' => 'Malicious scripts-Malicious script code execution'], + 'TacticId' => ['description' => 'ATT&CK攻击阶段信息。', 'type' => 'string', 'example' => 'TA0042'], + ], + ], + ], + 'UniqueInfo' => ['description' => '安全告警的唯一 key。', 'type' => 'string', 'example' => '1dfbdf56c5343b63c4854d08ec20e067'], + 'Uuid' => ['description' => '关联实例的唯一标识。', 'type' => 'string', 'example' => '9A75F21D3993C0A2B094A4AB132890B2'], + 'ClusterId' => ['description' => '集群 ID。', 'type' => 'string', 'example' => 'c8c87dae64c9947269091f36cfa9adc87'], + ], + ], + ], + 'TotalCount' => ['description' => '记录总数', 'type' => 'integer', 'format' => 'int32', 'example' => '72'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-查询安全告警事件', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"67BD8435-6624-5484-A75D-170231B51615\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"AD2345D1-A498-58AF-97C0-88940AF87CB7\\",\\n \\"Count\\": 1,\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 1,\\n \\"SuspEvents\\": [\\n {\\n \\"Advanced\\": true,\\n \\"AlarmEventName\\": \\"反弹shell_拦截\\",\\n \\"AlarmEventNameDisplay\\": \\"Login with unusual location\\",\\n \\"AlarmEventType\\": \\"Unusual Logon\\",\\n \\"AlarmEventTypeDisplay\\": \\"Unusual Logon\\",\\n \\"AlarmUniqueInfo\\": \\"8df914418f****\\",\\n \\"AppName\\": \\"dfield-cloud-service-prod\\",\\n \\"AutoBreaking\\": true,\\n \\"CanBeDealOnLine\\": true,\\n \\"CanCancelFault\\": true,\\n \\"ContainHwMode\\": false,\\n \\"ContainerId\\": \\"95878ef8779fae3dd82126812edd910402fc550a72f9bce87e56a4435d018384\\",\\n \\"ContainerImageId\\": \\"sha256:2e5a3b0ae5f452b3cb458789a9a7542ef40035a84318469a8528c5e444db1****\\",\\n \\"ContainerImageName\\": \\"centos7_apache:v1.0.1\\",\\n \\"DataSource\\": \\"URL\\",\\n \\"Desc\\": \\"webshell\\",\\n \\"Details\\": [\\n {\\n \\"NameDisplay\\": \\"login with unusual location\\",\\n \\"Type\\": \\"text\\",\\n \\"Value\\": \\"/etc/crontab\\",\\n \\"ValueDisplay\\": \\"/etc/crontab\\"\\n }\\n ],\\n \\"DetectSource\\": \\"-\\",\\n \\"DisplaySandboxResult\\": true,\\n \\"EventNotes\\": [\\n {\\n \\"Note\\": \\"test\\",\\n \\"NoteId\\": 2859481,\\n \\"NoteTime\\": \\"2018-09-26 01:51:01\\"\\n }\\n ],\\n \\"EventStatus\\": 1,\\n \\"EventSubType\\": \\"login_common_location\\",\\n \\"HasTraceInfo\\": true,\\n \\"Id\\": 3178,\\n \\"ImageUuid\\": \\"ccdab289-9765-47ef-af50-ba6be09aacd6\\",\\n \\"InstanceId\\": \\"i-9dp6dwsxdl9z5u1e2f****\\",\\n \\"InstanceName\\": \\"nginx\\",\\n \\"InternetIp\\": \\"8.137.3*.6\\",\\n \\"IntranetIp\\": \\"10.36.*6.149\\",\\n \\"K8sClusterId\\": \\"ce3c41ed427794a7bb3d9da4554fc8039\\",\\n \\"K8sClusterName\\": \\"testName\\",\\n \\"K8sNamespace\\": \\"default\\",\\n \\"K8sNodeId\\": \\"i-bp14a1ay8e0aa9t0****\\",\\n \\"K8sNodeName\\": \\"N/A\\",\\n \\"K8sPodName\\": \\"myapp-pod\\",\\n \\"LargeModel\\": true,\\n \\"LastTime\\": \\"2018-09-26 01:51:01\\",\\n \\"LastTimeStamp\\": 1631699497000,\\n \\"Level\\": \\"remind\\",\\n \\"MaliciousRuleStatus\\": \\"open\\",\\n \\"MarkList\\": [\\n \\"mark\\"\\n ],\\n \\"MarkMisRules\\": \\"<strong>1.</strong>  path  contain  232  \\",\\n \\"Name\\": \\"Unusual Logon-Login with unusual location\\",\\n \\"OccurrenceTime\\": \\"2018-09-26 01:51:01\\",\\n \\"OccurrenceTimeStamp\\": 1631699497000,\\n \\"OperateErrorCode\\": \\"kill_and_quara.Success\\",\\n \\"OperateMsg\\": \\"success\\",\\n \\"OperateTime\\": 1631699497000,\\n \\"SaleVersion\\": \\"1\\",\\n \\"SecurityEventIds\\": \\"628978308\\",\\n \\"SourceAliUid\\": 0,\\n \\"Stages\\": \\"\\\\\\"[\\\\\\"authority_maintenance\\\\\\"]\\\\\\"\\",\\n \\"SupportOperateCode\\": \\"AI.false_positive\\",\\n \\"TacticItems\\": [\\n {\\n \\"TacticDisplayName\\": \\"Malicious scripts-Malicious script code execution\\",\\n \\"TacticId\\": \\"TA0042\\"\\n }\\n ],\\n \\"UniqueInfo\\": \\"1dfbdf56c5343b63c4854d08ec20e067\\",\\n \\"Uuid\\": \\"9A75F21D3993C0A2B094A4AB132890B2\\",\\n \\"ClusterId\\": \\"c8c87dae64c9947269091f36cfa9adc87\\"\\n }\\n ],\\n \\"TotalCount\\": 72\\n }\\n }\\n}","type":"json"}]', + ], + 'GetAlertRecordAnalysisResult' => [ + 'summary' => '获取告警记录分析结果', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + [ + 'APP' => [], + ], + [ + 'PrivateKey' => [], + ], + [ + 'BearerToken' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementA481E8'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'Uuid', + 'in' => 'query', + 'schema' => ['description' => '资产唯一标识。（已过时）', 'type' => 'string', 'required' => false, 'example' => 'ebde6d4e3e4aba728962eec43a69196e9J7tt7H47Pc'], + ], + [ + 'name' => 'UniqueInfo', + 'in' => 'query', + 'schema' => ['description' => '告警事件的唯一标识ID。（已过时）', 'type' => 'string', 'required' => false, 'example' => 'fc312aa0c32ba8a6147db6221fb1c1ee'], + ], + [ + 'name' => 'AlarmUniqueInfo', + 'in' => 'query', + 'schema' => ['description' => '告警事件的唯一标识。（已过时）', 'type' => 'string', 'required' => false, 'example' => '9b57f0fcf98181df8d8487d1cc91cb8d'], + ], + [ + 'name' => 'AliyunLang', + 'in' => 'query', + 'schema' => ['description' => '语言环境。'."\n" + ."\n" + .'- 中文(默认)：**zh**'."\n" + .'- 英文： **en**', 'type' => 'string', 'required' => false, 'example' => 'zh'], + ], + [ + 'name' => 'UniqueTagList', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '溯源请求数组。', + 'type' => 'array', + 'items' => [ + 'description' => '溯源请求。', + 'type' => 'object', + 'properties' => [ + 'Uuid' => ['description' => '资产唯一标识。', 'type' => 'string', 'required' => false, 'example' => '3309e55fcb1ed8d4bc6af098e62e0353RNabnQSO1bx'], + 'UniqueInfo' => ['title' => '', 'description' => '告警事件的唯一标识 。', 'type' => 'string', 'required' => false, 'example' => 'fc312aa0c32ba8a6147db6221fb1c1ee'], + 'AlarmUniqueInfo' => ['title' => '唯一标识', 'description' => '告警事件的唯一标识 ID。', 'type' => 'string', 'required' => false, 'example' => '10a19b654e73ff079ede61ce3f4465e0'], + 'ChooseLike' => ['title' => '是否点赞', 'description' => '是否点赞。'."\n" + ."\n" + .'- **true**：已点赞'."\n" + .'- **false**：未点赞', 'type' => 'boolean', 'required' => false, 'example' => 'false'], + 'Ip' => ['title' => '公网ip', 'description' => '公网ip', 'type' => 'string', 'required' => false, 'example' => 'pc-bp19up785757dz800'], + 'MachineInstanceId' => ['title' => '实例id', 'description' => '实例id', 'type' => 'string', 'required' => false, 'example' => 'i-rj9c7d4bli38***tuym'], + 'Type' => ['title' => '漏洞类型', 'description' => '漏洞类型', 'type' => 'string', 'required' => false, 'example' => 'BusinessLicense'], + 'QueryTime' => ['title' => '首次告警时间', 'description' => '查询溯源时间', 'type' => 'string', 'required' => false, 'example' => '2025-06-27 00:00:00'], + ], + 'required' => false, + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '99D93ED4-D462-5FC5-8518-9BC1C49C7B6C'], + 'Code' => ['description' => '调用失败时，返回的错误码。更多信息，请参见错误码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '错误说明', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + ."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '返回数据。', + 'type' => 'object', + 'properties' => [ + 'UniqueTagList' => [ + 'description' => '溯源结果列表。', + 'type' => 'array', + 'items' => [ + 'description' => '溯源结果。', + 'type' => 'object', + 'properties' => [ + 'Uuid' => ['description' => '服务器的UUID。', 'type' => 'string', 'example' => 'bb3051ca-c0dd-4da2-91be-ea5c80926132'], + 'UniqueInfo' => ['description' => '告警事件的唯一标识ID。', 'type' => 'string', 'example' => '390317ce81d28bbbd83c05a90b39cd6c'], + 'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识。', 'type' => 'string', 'example' => '179deb12f25baac9b1e2909c419bcb1f'], + 'AnalysisResult' => ['description' => '溯源结果文本。', 'type' => 'string', 'example' => 'exception_alert'], + 'ChooseLike' => ['description' => '是否点赞。'."\n" + ."\n" + .'- **true**：已点赞'."\n" + .'- **false**：未点赞', 'type' => 'boolean', 'example' => 'true'], + 'AnalysisCode' => ['description' => '溯源结果code。', 'type' => 'string', 'example' => 'test_code'], + 'MachineInstanceId' => ['description' => '服务器实例ID。', 'type' => 'string', 'example' => 'i-adadasd-a**'], + 'Ip' => ['description' => 'IP地址。', 'type' => 'string', 'example' => '110.22.*8.111'], + 'Type' => ['description' => '异常事件详情信息展示的方式。'."\n" + ."\n" + .'取值包括：'."\n" + ."\n" + .'- **text**：文本方式'."\n" + .'- **html**：富文本的方式', 'type' => 'string', 'example' => 'auto_breaking'], + 'AliUid' => ['description' => '用户的16位AliUid。', 'type' => 'string', 'example' => '1248751055158884'], + ], + ], + ], + 'AnalysisCode' => ['description' => '溯源结果 code。（已过时）', 'type' => 'string', 'example' => '-'], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '获取告警溯源结果', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"99D93ED4-D462-5FC5-8518-9BC1C49C7B6C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"UniqueTagList\\": [\\n {\\n \\"Uuid\\": \\"bb3051ca-c0dd-4da2-91be-ea5c80926132\\",\\n \\"UniqueInfo\\": \\"390317ce81d28bbbd83c05a90b39cd6c\\",\\n \\"AlarmUniqueInfo\\": \\"179deb12f25baac9b1e2909c419bcb1f\\",\\n \\"AnalysisResult\\": \\"exception_alert\\",\\n \\"ChooseLike\\": true,\\n \\"AnalysisCode\\": \\"test_code\\",\\n \\"MachineInstanceId\\": \\"i-adadasd-a**\\",\\n \\"Ip\\": \\"110.22.*8.111\\",\\n \\"Type\\": \\"auto_breaking\\",\\n \\"AliUid\\": \\"1248751055158884\\"\\n }\\n ],\\n \\"AnalysisCode\\": \\"-\\"\\n }\\n}","type":"json"}]', + ], + 'GetAliYunSafeCenterResult' => [ + 'summary' => '调用云安全中心部分接口', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + [ + 'APP' => [], + ], + [ + 'PrivateKey' => [], + ], + [ + 'BearerToken' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'InterfaceCode', + 'in' => 'query', + 'schema' => ['description' => '公开的接口code。'."\n" + ."\n" + .'- **GetAssetDetailByUuid**：获取Agent状态，请求参数 - GetAssetDetailByUuidRequest。'."\n" + ."\n" + .'- **DescribeSimilarSecurityEvents**：获取相同的告警事件实例id列表，请求参数 - DescribeSimilarSecurityEventsRequest。'."\n" + ."\n" + .'- **CreateSimilarSecurityEventsQueryTask**：创建任务查询相同规则或告警类型触发的告警事件，请求参数 - CreateSimilarSecurityEventsQueryTaskRequest。'."\n" + ."\n" + .'- **DescribeSecurityEventOperationStatus**：查询与将要处理的告警事件为相同 IP 规则或相同告警类型的告警事件的列表是否为空， 请求参数 - DescribeSecurityEventOperationStatusRequest。'."\n" + ."\n" + .'- **HandleSimilarSecurityEvents**：批量处理基于相同IP规则或类型的告警事件，请求参数 - HandleSimilarSecurityEventsRequest。'."\n" + .'HandleSecurityEvents：处理安全告警事件，请求参数 - HandleSecurityEventsRequest。'."\n" + ."\n" + .'- **DescribeInstancesFullStatus**：查询ecs服务器运行状态，请求参数 - DescribeInstancesFullStatusRequest。'."\n" + ."\n" + .'- **ListInstances**：查询swas服务器运行状态， 请求蚕食 - ListInstancesRequest'."\n" + ."\n" + .'。'."\n" + .'> 接口名对应各自的请求参数。', 'type' => 'string', 'required' => true, 'example' => 'ListInstanceStatus'], + ], + [ + 'name' => 'DescribeInstancesFullStatusRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '查询ecs服务器运行状态。', + 'type' => 'object', + 'properties' => [ + 'RegionId' => ['description' => '地域id。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + 'InstanceId' => [ + 'description' => '实例ID列表。', + 'type' => 'array', + 'items' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'i-bp67acfmxazb4p****'], + 'required' => false, + ], + ], + 'required' => false, + ], + ], + [ + 'name' => 'ListInstancesRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '查询swas服务器运行状态。', + 'type' => 'object', + 'properties' => [ + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-wulanchabu'], + 'InstanceIds' => ['description' => '轻量应用服务器的实例 ID。取值可以由多个实例 ID 组成一个 JSON 数组，最多支持 100 个 ID，ID 之间用半角逗号（,）隔开。', 'type' => 'string', 'required' => false, 'example' => '["2ad1ae67295445f598017499dc****", "2ad1ae67295445f598017123dc****"]'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'GetAssetDetailByUuidRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '查询云安全中心Agent状态请求参数。', + 'type' => 'object', + 'properties' => [ + 'Uuid' => ['description' => '要查询的资产的 UUID。', 'type' => 'string', 'required' => false, 'example' => '9A75F21D3993C0A2B094A4AB132890B2'], + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shanghai'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'DescribeSimilarSecurityEventsRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '查询云安全中心相同的告警事件。', + 'type' => 'object', + 'properties' => [ + 'TaskId' => ['description' => '查询任务的 ID。您可以调用 CreateSimilarSecurityEventsQueryTask 接口获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1689135'], + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'CreateSimilarSecurityEventsQueryTaskRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '创建任务查询相同规则或告警类型触发的告警事件。', + 'type' => 'object', + 'properties' => [ + 'SecurityEventId' => ['description' => '安全告警事件的ID。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '629755508'], + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'], + 'SimilarEventScenarioCode' => ['description' => '相同类型或命中规则的告警事件的code值。', 'type' => 'string', 'required' => false, 'example' => 'default'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'DescribeSecurityEventOperationStatusRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '查询与将要处理的告警事件为相同IP规则或相同告警类型的告警事件的列表是否为空。', + 'type' => 'object', + 'properties' => [ + 'TaskId' => ['description' => '处理安全告警事件的任务的 ID。'."\n" + ."\n" + .'> TaskId、SecurityEventIds 这两个参数二选一，必选要设置一个接口才能调用成功。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '0BC3B4E600002A9F000048BCDCE7E710'], + 'SecurityEventIds' => [ + 'description' => '安全告警事件的 ID 列表。'."\n" + ."\n" + .'> TaskId、SecurityEventIds.N 这两个参数二选一，必选要设置一个接口才能调用成功。', + 'type' => 'array', + 'items' => ['description' => '安全告警事件的 ID 。'."\n" + ."\n" + .'> TaskId、SecurityEventIds.N 这两个参数二选一，必选要设置一个接口才能调用成功。', 'type' => 'string', 'required' => false, 'example' => '581719531'], + 'required' => false, + ], + 'RegionId' => ['description' => '地域ID。例如cn-hangzhou。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'HandleSimilarSecurityEventsRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '批量处理基于相同IP规则或类型的告警事件。', + 'type' => 'object', + 'properties' => [ + 'SourceIp' => ['description' => '访问源的IP地址。', 'type' => 'string', 'required' => false, 'example' => '220.2*3.155.93'], + 'TaskId' => ['description' => '批量处理所有相同类型告警事件的任务的 ID。'."\n" + ."\n" + .'> 调用 CreateSimilarSecurityEventsQueryTask 接口可以获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '12221'], + 'OperationCode' => ['description' => '批量处理同类告警事件的操作类型。'."\n" + ."\n" + .'> 调用 DescribeSecurityEventOperations 接口可以获取该参数。', 'type' => 'string', 'required' => false, 'example' => 'offline_handled'], + 'OperationParams' => ['description' => '告警事件处理方式子操作的配置。该值为JSON格式。'."\n" + ."\n" + .'> **OperationCode**值为**kill\\_and\\_quara**、**block\\_ip**、**virus\\_quara**此参数必填外，**OperationCode**为其他值的情况下，该参数值可为空。'."\n" + ."\n" + .'> **OperationCode**为**block_ip**时包含以下字段：'."\n" + .'> - **expireTime**：锁定截至时间。单位：毫秒'."\n" + .'>'."\n" + .'> **OperationCode**为**kill\\_and\\_quara**时包含以下字段：'."\n" + .'> - **subOperation**：查杀方式。取值如下'."\n" + .'> - **killAndQuaraFileByMd5andPath**：结束进程并隔离文件'."\n" + .'> - **killByMd5andPath**：结束该运行进程'."\n" + .'>'."\n" + .'> **OperationCode**为**virus\\_quara**时包含以下字段：'."\n" + .'> - **subOperation**：查杀方式。取值如下'."\n" + .'> - **quaraFileByMd5andPath**：隔离该进程的源文件', 'type' => 'string', 'required' => false, 'example' => '{\\"expireTime\\":1767687685917}'], + 'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'cfw_elasticity_public_cn-g4t3nkh3i00b'], + 'Ip' => ['description' => '实例IP。', 'type' => 'string', 'required' => false, 'example' => '203.10*.44.71'], + 'AlertType' => ['description' => '告警类型。', 'type' => 'string', 'required' => false, 'example' => 'default'], + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-beijing'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'HandleSecurityEventsRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '处理安全告警事件。', + 'type' => 'object', + 'properties' => [ + 'OperationCode' => ['title' => 'block_ip：阻断'."\n" + .'advance_mark_mis_info：加白名单'."\n" + .'ignore：忽略'."\n" + .'manual_handled：我已手工处理'."\n" + .'kill_process：结束进程'."\n" + .'cleanup：深度查杀'."\n" + .'kill_and_quara：病毒查杀'."\n" + .'disable_malicious_defense：关闭恶意行为防御'."\n" + .'client_problem_check：问题排查'."\n" + .'quara：隔离', 'description' => '告警事件的处理方式。取值：'."\n" + ."\n" + .'- **block_ip**：阻断'."\n" + .'- **advance\\_mark\\_mis_info**：加白名单'."\n" + .'- **ignore**：忽略'."\n" + .'- **manual_handled**：我已手工处理'."\n" + .'- **kill_process**：结束进程'."\n" + .'- **cleanup**：深度查杀'."\n" + .'- **kill\\_and_quara**：病毒查杀'."\n" + .'- **disable\\_malicious_defense**：关闭恶意行为防御'."\n" + .'- **client\\_problem_check**：问题排查'."\n" + .'- **quara**：隔离', 'type' => 'string', 'required' => false, 'example' => 'block_ip'], + 'OperationParams' => ['title' => '告警事件处理方式子操作的配置。'."\n" + ."\n" + .'当 OperationCode 取值 kill_and_quara，需要填写参数类型"subOperation":${code} 可填 code 参数：'."\n" + ."\n" + .'隔离文件：quaraFileByMd5andPath'."\n" + .'通过进程 id 路径等查杀进程隔离文件：killAndQuaraFileByPidAndMd5andPath'."\n" + .'只查杀进程：killByMd5andPath'."\n" + .'查杀进程并隔离文件：killAndQuaraFileByMd5andPath'."\n" + .'通过进程 id 和路径等查杀容器的进程：killProcessByPidandPathandCmdline'."\n" + .'通过文件 md5 和路径查杀容器的进程：killContainerProcessByMd5AndPath'."\n" + .'当 OperationCode 取值 block_ip，参数：'."\n" + ."\n" + .'过期时间：expireTime:${timestamp}'."\n" + .'说明 除了 OperationCode 值为kill_and_quara和block_ip此参数必填外，OperationCode 为其他值的情况下，该参数值可为空。${timestamp}表示封禁此 IP 的截止日期时间戳。'."\n" + .'示例值:'."\n" + .'{\\"expireTime\\":1719588943551,\\"subOperation\\":\\"killAndQuaraFileByMd5andPath\\"}', 'description' => '告警事件处理方式子操作的配置。'."\n" + ."\n" + .'当OperationCode取值 kill_and_quara，需要填写参数类型"subOperation":${code}'."\n" + .'可填code参数：'."\n" + .'- 隔离文件：quaraFileByMd5andPath'."\n" + .'- 通过进程id路径等查杀进程隔离文件：killAndQuaraFileByPidAndMd5andPath'."\n" + .'- 只查杀进程：killByMd5andPath'."\n" + .'- 查杀进程并隔离文件：killAndQuaraFileByMd5andPath'."\n" + .'- 通过进程id和路径等查杀容器的进程：killProcessByPidandPathandCmdline'."\n" + .'- 通过文件md5和路径查杀容器的进程：killContainerProcessByMd5AndPath'."\n" + ."\n" + .'当OperationCode取值 block_ip，参数：'."\n" + .'- 过期时间：expireTime:${timestamp}'."\n" + .'> 除了OperationCode值为`kill_and_quara`和`block_ip`此参数必填外，OperationCode为其他值的情况下，该参数值可为空。${timestamp}表示封禁此IP的截止日期时间戳。', 'type' => 'string', 'required' => false, 'example' => '{\\"expireTime\\":1719588943551,\\"subOperation\\":\\"killAndQuaraFileByMd5andPath\\"}'], + 'MarkMissParam' => ['title' => 'field：加白字段。'."\n" + .'operate：加白方式，取值：'."\n" + .'notContains：不包含。'."\n" + .'contains：包含。'."\n" + .'regex：正则匹配。'."\n" + .'strEqual：等于。'."\n" + .'strNotEqual：不等于。'."\n" + .'fieldValue：匹配值。'."\n" + .'uuid：该加白规则作用范围，取值：'."\n" + .'part：仅对当前资产。'."\n" + .'ALL：对所有资产。'."\n" + .'说明 调用DescribeSecurityEventOperations 接口获取 field 加白字段。'."\n" + .'示例值:'."\n" + .'[{"uuid":"part","field":"gmtModified","operate":"contains","fieldValue":"asd"},{"uuid":"part","field":"loginUser","operate":"contains","fieldValue":"vff"}]', 'description' => '设置加白名单的规则。该字段为 JSON 格式，包含字段如下：'."\n" + ."\n" + .'- **field**：加白字段。'."\n" + .'- **operate**：加白方式，取值：'."\n" + .' - **notContains**：不包含。'."\n" + .' - **contains**：包含。'."\n" + .' - **regex**：正则匹配。'."\n" + .' - **strEqual**：等于。'."\n" + .' - **strNotEqual**：不等于。'."\n" + .'- **fieldValue**：匹配值。'."\n" + .'- **uuid**：该加白规则作用范围，取值：'."\n" + .' - **part**：仅对当前资产。'."\n" + .' - **ALL**：对所有资产。'."\n" + ."\n" + .'> 调用DescribeSecurityEventOperations 接口获取 field 加白字段。', 'type' => 'string', 'required' => false, 'example' => '[{"uuid":"part","field":"gmtModified","operate":"contains","fieldValue":"asd"},{"uuid":"part","field":"loginUser","operate":"contains","fieldValue":"vff"}]'], + 'MarkBatch' => ['title' => 'true：是'."\n" + .'false：否', 'description' => '否是批量加白。'."\n" + ."\n" + .'- **true**：是'."\n" + .'- **false**：否', 'type' => 'string', 'required' => false, 'example' => 'true'], + 'SecurityEventIds' => [ + 'title' => '要处理的安全告警事件的 ID 集合。'."\n" + ."\n" + .'示例值:'."\n" + .'["909361"]'."\n" + .'子级条数 <= 100', + 'description' => '要处理的安全告警事件的 ID 集合。'."\n" + ."\n" + .'示例值:'."\n" + .'["909361"]'."\n" + .'子级条数 <= 100', + 'type' => 'array', + 'items' => ['description' => '告警事件关联的告警事件的 ID。', 'type' => 'string', 'required' => false, 'example' => '909361'], + 'required' => false, + ], + 'Remark' => ['description' => '备注', 'type' => 'string', 'required' => false, 'example' => '11'], + 'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'api-shared-vpc-002'], + 'Ip' => ['description' => '用户IP。', 'type' => 'string', 'required' => false, 'example' => '123.56.127.180'], + 'AlertType' => ['description' => '告警规则类型。', 'type' => 'string', 'required' => false, 'example' => 'default'], + 'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + 'FilePath' => ['description' => '敏感文件路径。', 'type' => 'string', 'required' => false, 'example' => 'flyfish-lfp-wy.release'], + 'FileMd5' => ['description' => '文件MD5值。', 'type' => 'string', 'required' => false, 'example' => 'fbbb90731fbb6df57c933173182d01a5'], + ], + 'required' => false, + ], + ], + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '地域Id。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => 'Id of the request', 'type' => 'string', 'example' => '3C107939-59BD-5EB9-B250-39559C830A85'], + 'Code' => ['description' => '状态码。'."\n" + ."\n" + .'> 200：表示成功。 其它（500、400等）：表示错误码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '提示信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '候选值:True/False，代表了是否当前API调用本身是成功的。不代表后续 业务操作的成功。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '返回数据', + 'type' => 'object', + 'properties' => [ + 'EcsInstanceStatus' => ['description' => 'ecs服务器运行状态。'."\n" + ."\n" + .'- **true**：运行中'."\n" + .'- **false**：未运行', 'type' => 'boolean', 'example' => 'true'], + 'SwasInstanceStatus' => ['description' => 'swas服务器运行状态。'."\n" + ."\n" + .'- **true**：运行中'."\n" + .'- **false**：未运行', 'type' => 'boolean', 'example' => 'true'], + 'AgentStatus' => ['description' => '云安全中心Agent状态。'."\n" + ."\n" + .'- **true**：已启用'."\n" + .'- **false**：未启用', 'type' => 'boolean', 'example' => 'true'], + 'InstanceIds' => [ + 'description' => '云安全中心相同的告警事件的实例Id列表。', + 'type' => 'array', + 'items' => ['description' => '云安全中心相同的告警事件的实例 Id。', 'type' => 'integer', 'format' => 'int64', 'example' => 'ecd-b14xfwq0ibbdkarvi'], + ], + 'TaskId' => ['description' => '创建任务查询相同规则或告警类型触发的告警事件任务ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '12313123'], + 'TaskStatus' => ['description' => '查询与将要处理的告警事件为相同 IP 规则或相同告警类型的告警事件的列表是否为空。'."\n" + ."\n" + .'- **true**：为空'."\n" + .'- **false**：不为空', 'type' => 'boolean', 'example' => 'true'], + 'RequestId' => ['description' => '请求Id。', 'type' => 'string', 'example' => '8169D779-3391-541F-936B-11F4EC09AD0D'], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '获取云安全中心等公开接口结果', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3C107939-59BD-5EB9-B250-39559C830A85\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"EcsInstanceStatus\\": true,\\n \\"SwasInstanceStatus\\": true,\\n \\"AgentStatus\\": true,\\n \\"InstanceIds\\": [\\n 0\\n ],\\n \\"TaskId\\": 12313123,\\n \\"TaskStatus\\": true,\\n \\"RequestId\\": \\"8169D779-3391-541F-936B-11F4EC09AD0D\\"\\n }\\n}","type":"json"}]', + ], + 'GetCanTrySas' => [ + 'summary' => 'sas-获取能否试用', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求参数。', + 'type' => 'object', + 'properties' => [ + 'FromEcs' => ['description' => '是否来自ECS控制台，取值：'."\n" + .'- **true**：是'."\n" + .'- **false**：否', 'type' => 'boolean', 'required' => false, 'example' => 'true'], + 'Lang' => ['description' => '设置请求和接收消息的语言类型。默认值 zh。取值：'."\n" + ."\n" + .'- **zh**：中文'."\n" + .'- **en**：英文', 'type' => 'string', 'required' => false, 'example' => 'zh'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '6B48613E-86DE-5411-BDBE-429C80B45F3F'], + 'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '同Code参数值', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '代表当前API调用是否成功的，不代表后续业务操作的成功。'."\n" + ."\n" + .'- **true**：成功'."\n" + .'- **false**：失败', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '录像计划详细信息。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => 'Id of the request', 'type' => 'string', 'example' => '0EBD97B8-65AD-52C8-94D5-A0F81E7D70D0'], + 'Data' => [ + 'description' => '管控域名', + 'type' => 'object', + 'properties' => [ + 'CanTry' => ['description' => '是否有资格试用。取值：'."\n" + .'- **1**：有资格'."\n" + .'- **0**：没有资格', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'CanTryVersions' => [ + 'description' => '允许试用的版本列表。', + 'type' => 'array', + 'items' => ['description' => '允许试用的版本列表，取值：'."\n" + .'- **3**：企业版'."\n" + .'- **7**：旗舰版', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + ], + 'TryType' => ['description' => '试用类型，取值：'."\n" + .'- **0**：禁止试用'."\n" + .'- **1**：首次试用'."\n" + .'- **2**：二次试用', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-查询是否有云安全中心试用权限', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6B48613E-86DE-5411-BDBE-429C80B45F3F\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"0EBD97B8-65AD-52C8-94D5-A0F81E7D70D0\\",\\n \\"Data\\": {\\n \\"CanTry\\": 1,\\n \\"CanTryVersions\\": [\\n 3\\n ],\\n \\"TryType\\": 1\\n }\\n }\\n }\\n}","type":"json"}]', + ], + 'GetDisposalToolStatus' => [ + 'summary' => '获取一键处置赋权状态', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'none', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'AuthType', + 'in' => 'query', + 'schema' => ['description' => '授权类型。'."\n" + ."\n" + .'- **DisposalTool**：一键处置授权类型', 'type' => 'string', 'required' => false, 'example' => 'DisposalTool'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '6D462855-7835-5F91-835E-A62E44EC01CC'], + 'Code' => ['description' => '状态码。返回200代表成功。', 'type' => 'string', 'example' => 'Success'], + 'Message' => ['description' => '提示信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + ."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '返回数据。', + 'type' => 'object', + 'properties' => [ + 'Status' => ['description' => '授权状态。'."\n" + ."\n" + .'- **true**：已授权'."\n" + .'- **false**：未授权', 'type' => 'boolean', 'example' => 'true'], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '获取一键处置赋权状态', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6D462855-7835-5F91-835E-A62E44EC01CC\\",\\n \\"Code\\": \\"Success\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Status\\": true\\n }\\n}","type":"json"}]', + ], + 'GetValidDeductInstances' => [ + 'summary' => 'sas-获取有效抵扣实例', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '地域ID', 'type' => 'string', 'required' => false, 'example' => 'cn-fuzhou'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求参数。', + 'type' => 'object', + 'properties' => [ + 'InstanceId' => ['description' => '资源包实例 ID，可通过QueryResourcePackageInstances查询。', 'type' => 'string', 'required' => false, 'example' => 'sas_cspm_dp_cn-***80001'], + 'Modules' => ['description' => '资源包名称 code，取值：'."\n" + ."\n" + .'- 漏洞资源包：**sas_vul_dp_cn**'."\n" + .'- CSPM 资源包：**sas_cspm_dp_cn**'."\n" + .'- 防病毒版资源包：**sas_viruspackage_dp_cn**', 'type' => 'string', 'required' => false, 'example' => 'sas_vul_dp_cn'], + 'Status' => ['description' => '资源包状态，默认为有效(valid)，不支持修改。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => 'Available'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2FBDD713-00A5-5C98-B661-3FD31A349B6E'], + 'Code' => ['description' => '返回码。返回200代表成功。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '返回信息。', 'type' => 'string', 'example' => 'Successful'], + 'Success' => ['description' => '代表了是否当前API调用本身是成功的。不代表后续 业务操作的成功。'."\n" + ."\n" + .'- **true**：成功'."\n" + .'- **false**：失败', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '返回数据列表。', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => 'A6FB9AC3-4431-538F-BA8A-2A13AEA208A4'], + 'Data' => [ + 'description' => '数据体。', + 'type' => 'object', + 'properties' => [ + 'CanTry' => ['description' => '是否有资格试用。取值：'."\n" + .'- **true**：有资格'."\n" + .'- **false**：没有资格', 'type' => 'boolean', 'example' => 'true'], + 'DeductPackageList' => [ + 'description' => '资源包用量详情。', + 'type' => 'array', + 'items' => [ + 'description' => '资源包用量详情。', + 'type' => 'object', + 'properties' => [ + 'CurrentPeriodUsed' => ['description' => '当前计量周期消耗授权数。', 'type' => 'integer', 'format' => 'int64', 'example' => '10'], + 'EndTime' => ['description' => '结束时间。', 'type' => 'integer', 'format' => 'int64', 'example' => '1737734400000'], + 'InitCapacity' => ['description' => '资源包总量。', 'type' => 'number', 'format' => 'double', 'example' => '1000'], + 'InstanceId' => ['description' => '资源包实例 ID。', 'type' => 'string', 'example' => 'apigateway-hz-96f6659a1490'], + 'Module' => ['description' => '模块 Code。取值：'."\n" + ."\n" + .'- **POST_HOST**：主机和容器防护'."\n" + .'- **CSPM**：云产品配置检查'."\n" + .'- **VUL**：漏洞扫描', 'type' => 'string', 'example' => 'POST_HOST'], + 'PeriodCapacity' => ['description' => '截止上一账单周期已消耗授权数。', 'type' => 'number', 'format' => 'double', 'example' => '1'], + 'StartTime' => ['description' => '开始时间戳（毫秒）。', 'type' => 'integer', 'format' => 'int64', 'example' => '1737734400000'], + 'Status' => ['description' => '资源包状态。取值：'."\n" + ."\n" + .'- **valid**：有效'."\n" + .'- **invalid**：失效', 'type' => 'string', 'example' => 'CREATE_FAILED'], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-获取有效的资源包实例', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2FBDD713-00A5-5C98-B661-3FD31A349B6E\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"A6FB9AC3-4431-538F-BA8A-2A13AEA208A4\\",\\n \\"Data\\": {\\n \\"CanTry\\": true,\\n \\"DeductPackageList\\": [\\n {\\n \\"CurrentPeriodUsed\\": 10,\\n \\"EndTime\\": 1737734400000,\\n \\"InitCapacity\\": 1000,\\n \\"InstanceId\\": \\"apigateway-hz-96f6659a1490\\",\\n \\"Module\\": \\"POST_HOST\\",\\n \\"PeriodCapacity\\": 1,\\n \\"StartTime\\": 1737734400000,\\n \\"Status\\": \\"CREATE_FAILED\\"\\n }\\n ]\\n }\\n }\\n }\\n}","type":"json"}]', + ], + 'InitSasModuleRule' => [ + 'summary' => 'sas-初始化云安全中心模块规则', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '访问控制实例所属地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'], + ], + [ + 'name' => 'IsTrial', + 'in' => 'query', + 'schema' => ['description' => '是否试用', 'type' => 'boolean', 'required' => false, 'example' => 'false'], + ], + [ + 'name' => 'Instances', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '实例列表', + 'type' => 'array', + 'items' => [ + 'description' => '实例列表', + 'type' => 'object', + 'properties' => [ + 'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'i-gw85zjrhsg2sgex7ovfx'], + 'Uuid' => ['description' => '实例的UUID。', 'type' => 'string', 'required' => false, 'example' => '168d374e-f449-4d0b-9556-14f233fa7171'], + 'Cores' => ['description' => '资产的CPU核数。', 'type' => 'string', 'required' => false, 'example' => '4'], + 'RegionId' => ['description' => '云手机地域。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + ], + 'required' => false, + ], + 'required' => false, + ], + ], + [ + 'name' => 'AutoBind', + 'in' => 'query', + 'schema' => ['description' => '开启自动绑定。取值：'."\n" + ."\n" + .'- **0**：关闭'."\n" + .'- **1**：开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2E130B0F-9E69-52FA-84FC-187FE1BA9489'], + 'Code' => ['description' => '调用失败时，返回的错误码。更多信息，请参见错误码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '同Code参数值', 'type' => 'string', 'example' => 'Successful'], + 'Success' => ['description' => '是否调用成功。true：调用成功。false：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '审批结果', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心请求 ID。', 'type' => 'string', 'example' => '14492571-0707-5130-85B4-4DDABB6BDF76'], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-模块规则初始化', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2E130B0F-9E69-52FA-84FC-187FE1BA9489\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"14492571-0707-5130-85B4-4DDABB6BDF76\\"\\n }\\n}","type":"json"}]', + ], + 'ListVirusScanMachineEvent' => [ + 'summary' => '查询全盘扫描结果', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['title' => '地域id', 'description' => '地域id', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'], + ], + [ + 'name' => 'CurrentPage', + 'in' => 'query', + 'schema' => ['title' => '当前页。默认值：1', 'description' => '当前页。默认值：1', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + ], + [ + 'name' => 'PageSize', + 'in' => 'query', + 'schema' => ['title' => '每页数量。默认值：10', 'description' => '每页数量。默认值：10', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '30'], + ], + [ + 'name' => 'OperateTaskId', + 'in' => 'query', + 'schema' => ['title' => '执行处置操作生成的任务 ID。', 'description' => '执行处置操作生成的任务 ID。'."\n" + ."\n" + .'> 您可以调用 OperateVirusEvents 接口处置告警来生成该参数。', 'type' => 'string', 'required' => false, 'example' => '28486737'], + ], + [ + 'name' => 'Lang', + 'in' => 'query', + 'schema' => ['title' => '设置请求和接收消息的语言类型，默认为 zh。取值：'."\n" + ."\n" + .'zh：中文'."\n" + .'en：英文', 'description' => '设置请求和接收消息的语言类型，默认为 zh。取值：'."\n" + ."\n" + .'- **zh**：中文'."\n" + .'- **en**：英文', 'type' => 'string', 'required' => false, 'example' => 'en'], + ], + [ + 'name' => 'Uuid', + 'in' => 'query', + 'schema' => ['title' => '服务器id', 'description' => '服务器id', 'type' => 'string', 'required' => false, 'example' => 'hdm_5349d5323c649e91a41784e9e1733e1e'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => 'F0AD8096-E7A2-573D-ACF0-7CE9050CDE38'], + 'Code' => ['description' => 'code', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：true：调用成功。 false：调用失败。', 'type' => 'boolean', 'example' => 'True'], + 'Data' => [ + 'description' => '返回数据。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '请求 ID。', 'type' => 'string', 'example' => '1E222AB5-5C2B-50AD-8A96-E704AF80F2A0'], + 'VirusScanMachineEventList' => [ + 'title' => '查询病毒扫描具体机器扫描出的病毒告警', + 'description' => '查询病毒扫描具体机器扫描出的病毒告警', + 'type' => 'object', + 'properties' => [ + 'Data' => [ + 'title' => '告警事件的详情。', + 'description' => '告警事件的详情。', + 'type' => 'array', + 'items' => [ + 'description' => '接口调用成功时，返回的数据。', + 'type' => 'object', + 'properties' => [ + 'EventId' => ['title' => '告警事件的 ID。', 'description' => '告警事件的 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '123-2CcoavZnCXrJKqk2KQKxp9WGwup'], + 'EventName' => ['title' => '告警事件名称（子类型）。', 'description' => '告警事件名称（子类型）。', 'type' => 'string', 'example' => '恶意脚本代码执行'], + 'InstanceName' => ['title' => '实例名称。', 'description' => '实例名称。', 'type' => 'string', 'example' => 'i-wz92q7m5hsbgfhdss***'], + 'InternetIp' => ['title' => '公网 IP。', 'description' => '公网 IP。', 'type' => 'string', 'example' => '47.57.*1.65'], + 'IntranetIp' => ['title' => '私网 IP。', 'description' => '私网 IP。', 'type' => 'string', 'example' => '47.57.*1.65'], + 'LastTimeStamp' => ['title' => '最后一次发生的时间戳，单位为毫秒。', 'description' => '最后一次发生的时间戳，单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1682046733628'], + 'Level' => ['title' => '告警事件的危险等级。取值：'."\n" + ."\n" + .'serious：紧急。'."\n" + .'suspicious：可疑。'."\n" + .'remind：提醒。', 'description' => '告警事件的危险等级。取值：'."\n" + ."\n" + .'- **serious**：紧急。'."\n" + .'- **suspicious**：可疑。'."\n" + .'- **remind**：提醒。', 'type' => 'string', 'example' => 'remind'], + 'Details' => [ + 'title' => '异常事件的详情。', + 'description' => '异常事件的详情。', + 'type' => 'array', + 'items' => [ + 'description' => 'GSLB是否开启。', + 'type' => 'object', + 'properties' => [ + 'InfoType' => ['title' => 'valueDisplay 的展示类型。 取值：'."\n" + ."\n" + .'download_url: 下载链接。', 'description' => 'valueDisplay 的展示类型。 取值：'."\n" + ."\n" + .'- **download_url**: 下载链接。', 'type' => 'string', 'example' => 'download_url'], + 'NameDisplay' => ['title' => '告警事件显示名称。', 'description' => '告警事件显示名称。', 'type' => 'string', 'example' => 'Trojan Path'], + 'Type' => ['title' => '异常事件详情信息展示的方式。'."\n" + ."\n" + .'取值包括：'."\n" + ."\n" + .'text：文本方式'."\n" + .'html：富文本的方式', 'description' => '异常事件详情信息展示的方式。'."\n" + ."\n" + .'取值包括：'."\n" + ."\n" + .'- **text**：文本方式'."\n" + .'- **html**：富文本的方式', 'type' => 'string', 'example' => 'text'], + 'ValueDisplay' => ['title' => '异常事件的其他属性信息。 例如：异常登录告警的登录时间或登录地点、告警的木马文件路径或木马类型等。', 'description' => '异常事件的其他属性信息。 例如：异常登录告警的登录时间或登录地点、告警的木马文件路径或木马类型等。', 'type' => 'string', 'example' => 'getopt'], + ], + ], + ], + ], + ], + ], + 'PageInfo' => [ + 'title' => '分页信息。', + 'description' => '分页信息。', + 'type' => 'object', + 'properties' => [ + 'CurrentPage' => ['title' => '分页查询时，当前页的页码。', 'description' => '分页查询时，当前页的页码。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'PageSize' => ['title' => '分页查询时，显示的每页数据的最大条数。', 'description' => '分页查询时，显示的每页数据的最大条数。', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + 'TotalCount' => ['title' => '查询到的告警事件的总条数。', 'description' => '查询到的告警事件的总条数。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + ], + ], + ], + ], + 'VirusScanLatestTaskStatistic' => [ + 'title' => '获取最新的病毒扫描的扫描信息', + 'description' => '获取最新的病毒扫描的扫描信息', + 'type' => 'object', + 'properties' => [ + 'CompleteMachine' => ['title' => '完成扫描的机器数量。', 'description' => '完成扫描的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'], + 'MachineName' => ['title' => '服务器机器名称。', 'description' => '服务器机器名称。', 'type' => 'string', 'example' => 'testMahine1'], + 'Progress' => ['title' => '扫描任务进度的百分比。', 'description' => '扫描任务进度的百分比。', 'type' => 'string', 'example' => '92'], + 'RiskLevel' => ['title' => '扫描出的告警的最高风险等级。取值：'."\n" + ."\n" + .'high：高危。'."\n" + .'medium：中危。'."\n" + .'low：低危。', 'description' => '扫描出的告警的最高风险等级。取值：'."\n" + ."\n" + .'- **high**：高危。'."\n" + .'- **medium**：中危。'."\n" + .'- **low**：低危。', 'type' => 'string', 'example' => 'medium'], + 'SafeMachine' => ['description' => '未扫描出具有风险的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'ScanMachine' => ['description' => '此次病毒扫描机器的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'ScanPath' => [ + 'title' => '用户自定义类型时，指定的需要扫描的文件路径。', + 'description' => '用户自定义类型时，指定的需要扫描的文件路径。', + 'type' => 'array', + 'items' => ['description' => '文件路径。', 'type' => 'string', 'example' => '/www/wwwroot/www.wlws.cc/docs/tables/brand_info.php'], + ], + 'ScanTime' => ['title' => '扫描的时间戳，单位：毫秒。', 'description' => '扫描的时间戳，单位：毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1681145862000'], + 'ScanType' => ['title' => '此次病毒扫描的扫描类型。取值：'."\n" + ."\n" + .'system：系统自动扫描。'."\n" + .'user：用户自定义扫描。', 'description' => '此次病毒扫描的扫描类型。取值：'."\n" + ."\n" + .'- **system**：系统自动扫描。'."\n" + .'- **user**：用户自定义扫描。', 'type' => 'string', 'example' => 'system'], + 'Status' => ['title' => '扫描任务的状态。'."\n" + ."\n" + .'主任务取值：'."\n" + ."\n" + .'0：任务待开始。'."\n" + .'10：扫描进行中。'."\n" + .'100：扫描完成。'."\n" + .'子任务取值：'."\n" + ."\n" + .'0：扫描待开始。'."\n" + .'20：检测脚本下发。'."\n" + .'50：扫描在机器上执行。'."\n" + .'100：扫描结束。', 'description' => '扫描任务的状态。'."\n" + ."\n" + .'**主任务取值**：'."\n" + ."\n" + .'- **0**：任务待开始。'."\n" + .'- **10**：扫描进行中。'."\n" + .'- **100**：扫描完成。'."\n" + ."\n" + .'**子任务取值**：'."\n" + .'-'."\n" + .'- **0**：扫描待开始。'."\n" + .'- **20**：检测脚本下发。'."\n" + .'- **50**：扫描在机器上执行。'."\n" + .'- **100**：扫描结束。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + 'SuspiciousCount' => ['title' => '扫描出来的安全告警的数量。', 'description' => '扫描出来的安全告警的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'], + 'SuspiciousMachine' => ['title' => '扫描出来有风险的机器数量。', 'description' => '扫描出来有风险的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'TaskId' => ['title' => '扫描任务的 ID。', 'description' => '扫描任务的 ID。', 'type' => 'string', 'example' => 't-0mqu9dhpi365dp5iyf'], + 'UnCompleteMachine' => ['title' => '未扫描结束和扫描失败的机器数量。', 'description' => '未扫描结束和扫描失败的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas - 查询全盘扫描结果', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"F0AD8096-E7A2-573D-ACF0-7CE9050CDE38\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"1E222AB5-5C2B-50AD-8A96-E704AF80F2A0\\",\\n \\"VirusScanMachineEventList\\": {\\n \\"Data\\": [\\n {\\n \\"EventId\\": 0,\\n \\"EventName\\": \\"恶意脚本代码执行\\",\\n \\"InstanceName\\": \\"i-wz92q7m5hsbgfhdss***\\",\\n \\"InternetIp\\": \\"47.57.*1.65\\",\\n \\"IntranetIp\\": \\"47.57.*1.65\\",\\n \\"LastTimeStamp\\": 1682046733628,\\n \\"Level\\": \\"remind\\",\\n \\"Details\\": [\\n {\\n \\"InfoType\\": \\"download_url\\",\\n \\"NameDisplay\\": \\"Trojan Path\\",\\n \\"Type\\": \\"text\\",\\n \\"ValueDisplay\\": \\"getopt\\"\\n }\\n ]\\n }\\n ],\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 0\\n }\\n },\\n \\"VirusScanLatestTaskStatistic\\": {\\n \\"CompleteMachine\\": 2,\\n \\"MachineName\\": \\"testMahine1\\",\\n \\"Progress\\": \\"92\\",\\n \\"RiskLevel\\": \\"medium\\",\\n \\"SafeMachine\\": 1,\\n \\"ScanMachine\\": 1,\\n \\"ScanPath\\": [\\n \\"/www/wwwroot/www.wlws.cc/docs/tables/brand_info.php\\"\\n ],\\n \\"ScanTime\\": 1681145862000,\\n \\"ScanType\\": \\"system\\",\\n \\"Status\\": 0,\\n \\"SuspiciousCount\\": 0,\\n \\"SuspiciousMachine\\": 1,\\n \\"TaskId\\": \\"t-0mqu9dhpi365dp5iyf\\",\\n \\"UnCompleteMachine\\": 1\\n }\\n }\\n}","type":"json"}]', + ], + 'OpenTrialPackage' => [ + 'summary' => 'sas-开启试用套餐', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '地域id。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'], + ], + [ + 'name' => 'AutoCloseSwitch', + 'in' => 'query', + 'schema' => ['description' => '试用套餐到期自动关闭开关。'."\n" + ."\n" + .'- **1** 表示开启'."\n" + .'- **0** 表示关闭，默认为开启。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '855FCC89-0B13-5FC0-AAD2-120878081C1C'], + 'Code' => ['description' => 'HTTP状态码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '请求返回信息。', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否成功', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '操作结果', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => '5F4B631D-0358-5B7B-8B84-FB924138ED91'], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-触发试用包开通流程', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"855FCC89-0B13-5FC0-AAD2-120878081C1C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"5F4B631D-0358-5B7B-8B84-FB924138ED91\\"\\n }\\n}","type":"json"}]', + ], + 'QuerySecurityCheckReport' => [ + 'summary' => '查询安全体检简报', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'tenant'], + 'parameters' => [], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2FBDD713-00A5-5C98-B661-3FD31A349B6E'], + 'Code' => ['description' => '状态码。'."\n" + ."\n" + .'> 200：表示成功。 其它（500、400等）：表示错误码。', 'type' => 'string', 'example' => '200'], + 'Success' => ['description' => '是否调用成功：true：调用成功。 false：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Message' => ['description' => '描述', 'type' => 'string', 'example' => 'successful'], + 'Data' => [ + 'description' => '查询结果。', + 'type' => 'object', + 'properties' => [ + 'SecurityStatus' => ['description' => '安全体检结果状态。'."\n" + ."\n" + .'- **0**: 无风险'."\n" + .'- **1**: 存在风险 '."\n" + .'- **2**: 存在待优化项', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'RiskEventNumber' => ['description' => '风险事件数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'SasCheckNumber' => ['description' => '云服务器待处理数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'ConfigCheckNumber' => ['description' => '配置审计待处理数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'ContactCheckNumber' => ['description' => '安全联系人待处理数量，', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'CloudSecurityGuide' => ['description' => '云上指南订阅情况.'."\n" + ."\n" + .'- **0**: 未订阅 '."\n" + .'- **1**: 已订阅', 'type' => 'integer', 'format' => 'int32', 'example' => '1'], + 'SuggestionText' => ['description' => '建议文本。', 'type' => 'string', 'example' => 'exist risk event。'], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter', 'errorMessage' => 'Specified parameter is not valid.', 'description' => ''], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '查询安全体检简报', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2FBDD713-00A5-5C98-B661-3FD31A349B6E\\",\\n \\"Code\\": \\"200\\",\\n \\"Success\\": true,\\n \\"Message\\": \\"successful\\",\\n \\"Data\\": {\\n \\"SecurityStatus\\": 1,\\n \\"RiskEventNumber\\": 3,\\n \\"SasCheckNumber\\": 1,\\n \\"ConfigCheckNumber\\": 3,\\n \\"ContactCheckNumber\\": 3,\\n \\"CloudSecurityGuide\\": 1,\\n \\"SuggestionText\\": \\"exist risk event。\\"\\n }\\n}","type":"json"}]', + ], + 'StartDisposalToolService' => [ + 'summary' => '开启处置工具授权', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'none', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'publicInformation', + ], + 'parameters' => [ + [ + 'name' => 'AuthType', + 'in' => 'query', + 'schema' => ['description' => '授权类型。'."\n" + ."\n" + .'- **DisposalTool**：一键处置授权类型', 'type' => 'string', 'required' => false, 'example' => 'DisposalTool'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => '返回参数。', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '1E0869D6-A5A0-52A6-A924-14070806976C'], + 'Code' => ['description' => '状态码。返回 200 代表成功。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'], + 'Success' => ['description' => '是否调用成功：'."\n" + ."\n" + .'- **true**：调用成功。 '."\n" + .'- **false**：调用失败。', 'type' => 'boolean', 'example' => 'true'], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => '开启处置工具授权', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1E0869D6-A5A0-52A6-A924-14070806976C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true\\n}","type":"json"}]', + ], + 'UpdatePostPaidBindRel' => [ + 'summary' => 'sas-更新后付费绑定关系', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'get', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'], + 'tenantRelevance' => 'tenant', + ], + 'parameters' => [ + [ + 'name' => 'RegionId', + 'in' => 'query', + 'schema' => ['description' => '实例的地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-huhehaote'], + ], + [ + 'name' => 'SdkRequest', + 'in' => 'query', + 'style' => 'json', + 'schema' => [ + 'description' => '云安全中心SDK请求参数。', + 'type' => 'object', + 'properties' => [ + 'AutoBind' => ['description' => '开启新增资产自动绑定。取值：'."\n" + ."\n" + .'- **0**：关闭'."\n" + .'- **1**：开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'], + 'AutoBindVersion' => ['description' => '新增资产时自动绑定的版本，取值：'."\n" + .'- **1**：免费版 '."\n" + .'- **3**：企业版'."\n" + .'- **5**：高级版'."\n" + .'- **6**：防病毒版 '."\n" + .'- **7**：旗舰版', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'], + 'BindAction' => [ + 'description' => '执行绑定的动作参数列表。', + 'type' => 'array', + 'items' => [ + 'description' => '执行绑定的动作参数。', + 'type' => 'object', + 'properties' => [ + 'BindAll' => ['description' => '是否全量绑定。默认**false**，取值：'."\n" + ."\n" + .'- **true**：是'."\n" + .'- **false**：否', 'type' => 'boolean', 'required' => false, 'example' => 'true'], + 'UuidList' => [ + 'description' => '指定服务器 UUID 列表。'."\n" + .'> 子级条数 <= 1000 子级条数 >= 0', + 'type' => 'array', + 'items' => ['description' => '指定服务器 UUID。', 'type' => 'string', 'required' => false, 'example' => '6ec42694-fe78-43b1-95e8-8e98a917d99f'], + 'required' => false, + ], + 'Version' => ['description' => '需要绑定的云安全中心防护版本。 取值：'."\n" + ."\n" + .'- **1**：免费版'."\n" + .'- **3**：企业版'."\n" + .'- **5**：高级版'."\n" + .'- **6**：防病毒版'."\n" + .'- **7**：旗舰版', 'type' => 'string', 'required' => false, 'example' => '1'], + ], + 'required' => false, + ], + 'required' => false, + ], + 'UpdateIfNecessary' => ['description' => '是否强制升级版本。', 'type' => 'boolean', 'required' => false, 'example' => 'false'], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => 'Id of the request', 'type' => 'string', 'example' => '6E20BFD0-AA91-594F-B5A7-32CED4777DA0'], + 'Code' => ['description' => '调用失败时，返回的错误码。更多信息，请参见错误码。', 'type' => 'string', 'example' => '200'], + 'Message' => ['description' => '信息', 'type' => 'string', 'example' => 'operation success.'], + 'Success' => ['description' => '是否调用成功：true：调用成功。 false：调用失败。', 'type' => 'boolean', 'example' => 'true'], + 'Data' => [ + 'description' => '数据', + 'type' => 'object', + 'properties' => [ + 'Body' => [ + 'description' => '消息体', + 'type' => 'object', + 'properties' => [ + 'BindCount' => ['description' => '成功绑定服务器数。', 'type' => 'integer', 'format' => 'int64', 'example' => '1'], + 'RequestId' => ['description' => 'Id of the request', 'type' => 'string', 'example' => '62A7DCE2-7D9C-511B-919E-0F46A9D19AE6'], + 'ResultCode' => ['description' => '结果码', 'type' => 'integer', 'format' => 'int32', 'example' => 'OK'], + ], + ], + ], + ], + ], + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'sas-变更按量付费服务防护版本', + 'changeSet' => [], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6E20BFD0-AA91-594F-B5A7-32CED4777DA0\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"operation success.\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"BindCount\\": 1,\\n \\"RequestId\\": \\"62A7DCE2-7D9C-511B-919E-0F46A9D19AE6\\",\\n \\"ResultCode\\": 0\\n }\\n }\\n}","type":"json"}]', + ], + ], + 'endpoints' => [], + 'errorCodes' => [], + 'changeSet' => [], +]; |