diff options
Diffstat (limited to 'data/zh_cn/accessanalyzer/2024-02-01/api-docs.php')
| -rw-r--r-- | data/zh_cn/accessanalyzer/2024-02-01/api-docs.php | 2671 |
1 files changed, 2671 insertions, 0 deletions
diff --git a/data/zh_cn/accessanalyzer/2024-02-01/api-docs.php b/data/zh_cn/accessanalyzer/2024-02-01/api-docs.php new file mode 100644 index 0000000..a572114 --- /dev/null +++ b/data/zh_cn/accessanalyzer/2024-02-01/api-docs.php @@ -0,0 +1,2671 @@ +<?php return [ + 'version' => '1.0', + 'info' => ['style' => 'RPC', 'product' => 'AccessAnalyzer', 'version' => '2024-02-01'], + 'directories' => ['ApplyArchiveRule', 'CreateAnalyzer', 'CreateArchiveRule', 'DeleteAnalyzer', 'DeleteArchiveRule', 'GenerateFindingRecommendation', 'GetAnalyzedResource', 'GetAnalyzer', 'GetArchiveRule', 'GetFinding', 'GetFindingRecommendation', 'GetFindingsStatistics', 'ListAnalyzedResources', 'ListAnalyzers', 'ListArchiveRules', 'ListFindings', 'StartResourceScan', 'UpdateArchiveRule', 'UpdateFindings', 'ValidatePolicy'], + 'components' => [ + 'schemas' => [], + ], + 'apis' => [ + 'ApplyArchiveRule' => [ + 'summary' => '将符合归档规则的 Finding 结果执行归档操作。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'RuleName', + 'in' => 'query', + 'schema' => ['description' => '归档规则名称', 'type' => 'string', 'required' => true, 'example' => 'rule1'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer1'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => '29DC0726-CDA5-5D68-9723-5F3A044CB8ED'], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"29DC0726-CDA5-5D68-9723-5F3A044CB8ED\\"\\n}","type":"json"}]', + 'title' => '应用归档规则', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ApplyArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'CreateAnalyzer' => [ + 'summary' => '创建一个新的Analyzer对账号或资源目录进行过度授权或外部访问分析。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['title' => '资源名称', 'description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer', 'maxLength' => 255, 'minLength' => 1, 'pattern' => '^[0-9a-zA-Z_-]+$'], + ], + [ + 'name' => 'Type', + 'in' => 'formData', + 'schema' => [ + 'description' => 'Analyzer类型，合法值：ExternalAccess（外部访问）、OverPrivileged（过度授权）', + 'type' => 'string', + 'required' => false, + 'example' => 'ExternalAccess', + 'default' => 'ExternalAccess', + 'enum' => ['ExternalAccess', 'OverPrivileged'], + ], + ], + [ + 'name' => 'Scope', + 'in' => 'formData', + 'schema' => [ + 'description' => 'Analyzer扫描范围，合法值：Account（账号）、ResourceDirectory（资源目录）', + 'type' => 'string', + 'required' => false, + 'example' => 'Account', + 'default' => 'Account', + 'enum' => ['Account', 'ResourceDirectory'], + ], + ], + [ + 'name' => 'Configuration', + 'in' => 'formData', + 'style' => 'flat', + 'schema' => [ + 'description' => 'Analyzer 实例的配置信息', + 'type' => 'object', + 'properties' => [ + 'OverPrivilegedConfiguration' => [ + 'description' => 'OverPrivileged 类型的配置信息', + 'type' => 'object', + 'properties' => [ + 'UnusedAccessAge' => ['description' => '闲置访问周期，默认90天，支持1到365天。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'maximum' => '365', 'minimum' => '1', 'example' => '90'], + ], + 'required' => false, + ], + ], + 'required' => false, + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'AnalyzerArn' => ['title' => '若创建接口为异步实现，则需返回明确的JobId。', 'description' => 'Analyzer的ARN'."\n", 'type' => 'string', 'example' => 'acs:accessanalyzer:cn-hangzhou:123456789012:analyzer/my-analyzer'], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => 'D1936189-2F04-56BE-868F-C06A0417E9EB'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'IdempotentParameterMismatch', 'errorMessage' => 'The request uses the same client token as a previous, but non-identical request. Do not reuse a client token with different requests, unless the requests are identical.', 'description' => ''], + ['errorCode' => 'EntityAlreadyExist.%s', 'errorMessage' => 'The %s already exists.', 'description' => '%s已存在'], + ['errorCode' => 'ExceedLimit.%s', 'errorMessage' => 'The maximum number of %s is exceeded.', 'description' => '数量超过上限'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AnalyzerArn\\": \\"acs:accessanalyzer:cn-hangzhou:123456789012:analyzer/my-analyzer\\",\\n \\"RequestId\\": \\"D1936189-2F04-56BE-868F-C06A0417E9EB\\"\\n}","type":"json"}]', + 'title' => '创建Analyzer', + 'changeSet' => [], + ], + 'CreateArchiveRule' => [ + 'summary' => '为分析器创建一个新的归档规则，以便自动归档符合条件的Findings。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'Filter', + 'in' => 'formData', + 'style' => 'flat', + 'schema' => [ + 'description' => '过滤条件列表', + 'type' => 'array', + 'items' => [ + 'description' => '过滤条件', + 'type' => 'object', + 'properties' => [ + 'Key' => [ + 'description' => 'Filter用于筛选的key', + 'type' => 'string', + 'required' => true, + 'enumValueTitles' => [], + 'example' => 'FindingType', + ], + 'MatchType' => [ + 'description' => '匹配类型', + 'type' => 'string', + 'required' => true, + 'enumValueTitles' => ['Equals' => 'Equals', 'Exists' => 'Exists', 'Contains' => 'Contains', 'NotEquals' => 'NotEquals'], + 'example' => 'Contains', + ], + 'Values' => [ + 'description' => '匹配值列表，每个 Filter 的 Values 最多 20 个。当 MatchType 为 Exists 时不需要提供。', + 'type' => 'array', + 'items' => ['description' => '匹配值', 'type' => 'string', 'required' => false, 'example' => 'key=FindingType, match=Equals, values=[\'OverPrivileged'."\n" + .'Role\'] '], + 'required' => false, + ], + ], + 'required' => true, + ], + 'required' => true, + ], + ], + [ + 'name' => 'RuleName', + 'in' => 'formData', + 'schema' => ['description' => '归档规则名称', 'type' => 'string', 'required' => true, 'example' => 'rule1'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer1'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求 ID', 'type' => 'string', 'example' => '330471C2-F8D7-5EAA-9AED-AC3D79C209AC'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'EntityAlreadyExist.%s', 'errorMessage' => 'The %s already exists.', 'description' => '%s已存在'], + ['errorCode' => 'ExceedLimit.%s', 'errorMessage' => 'The maximum number of %s is exceeded.', 'description' => '数量超过上限'], + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"330471C2-F8D7-5EAA-9AED-AC3D79C209AC\\"\\n}","type":"json"}]', + 'title' => '创建归档规则', + 'description' => '注意：Filter字段中Key不支持传入Status作为过滤条件，每个Analyzer下最多可以创建100条ArchiveRule。', + 'changeSet' => [], + ], + 'DeleteAnalyzer' => [ + 'summary' => '用于删除指定名称的Analyzer。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['title' => '实例 ID。', 'description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'testAnalyzer'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'D1936189-2F04-56BE-868F-C06A0417E9EB'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'IdempotentParameterMismatch', 'errorMessage' => 'The request uses the same client token as a previous, but non-identical request. Do not reuse a client token with different requests, unless the requests are identical.', 'description' => ''], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"D1936189-2F04-56BE-868F-C06A0417E9EB\\"\\n}","type":"json"}]', + 'title' => '删除Analyzer', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'accessanalyzer:DeleteAnalyzer', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'DeleteArchiveRule' => [ + 'summary' => '用于删除指定Analyzer下的归档规则。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'RuleName', + 'in' => 'formData', + 'schema' => ['description' => '归档规则名称', 'type' => 'string', 'required' => true, 'example' => 'rule1'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyser1'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'A0D8EF11-AB34-5CD6-B7B0-2F1A0DB9C123'], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A0D8EF11-AB34-5CD6-B7B0-2F1A0DB9C123\\"\\n}","type":"json"}]', + 'title' => '删除归档规则', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'accessanalyzer:DeleteArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + ], + ], + 'GenerateFindingRecommendation' => [ + 'summary' => '根据指定的Analyzer和Finding生成治理建议。', + 'path' => '', + 'methods' => ['get', 'post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + [ + 'name' => 'FindingId', + 'in' => 'query', + 'schema' => ['description' => 'Finding的Id'."\n", 'type' => 'string', 'required' => true, 'example' => 'fd0c7370-3cae-4c80-a01d-6a05dfb707e4'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => '6C1967B2-82F1-5C18-99AF-D887720EEA28'], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6C1967B2-82F1-5C18-99AF-D887720EEA28\\"\\n}","type":"json"}]', + 'title' => '生成Finding推荐', + 'changeSet' => [], + ], + 'GetAnalyzedResource' => [ + 'summary' => '查询指定资源在Analyzer中的分析详情。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'ResourceArn', + 'in' => 'query', + 'schema' => ['description' => '资源ARN'."\n", 'type' => 'string', 'required' => true, 'example' => 'acs:ram::1944809621972557:role/testrole'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => 'E50DF194-4173-5ECF-A2C1-EB2BF7C54868'], + 'Resource' => [ + 'description' => '被分析资源的详情'."\n", + 'type' => 'object', + 'properties' => [ + 'Actions' => [ + 'description' => '外部主体被允许对该资源执行的操作列表。仅当资源存在外部访问 Finding 时返回', + 'type' => 'array', + 'items' => ['description' => '对该资源执行的 RAM 权限动作', 'type' => 'string', 'example' => 'oss:GetBucket'], + ], + 'AnalyzedTime' => ['description' => '资源最近一次被分析的时间', 'type' => 'string', 'example' => '2026-05-19T08:02:36Z'], + 'CreatedTime' => ['description' => '资源对应Finding创建的时间'."\n", 'type' => 'string', 'example' => '2026-05-18T14:04:55Z'], + 'UpdatedTime' => ['description' => '资源对应Finding更新的时间'."\n", 'type' => 'string', 'example' => '2026-05-19T08:02:36Z'], + 'Error' => ['description' => '如果分析报错，则为报错的原因'."\n", 'type' => 'string', 'example' => 'ACCESS_DENIED'], + 'IsPublic' => ['description' => '是否允许所有外部访问', 'type' => 'boolean', 'example' => 'true'], + 'ResourceArn' => ['description' => '资源Arn'."\n", 'type' => 'string', 'example' => 'acs:ram::1944809621972557:role/testrole'], + 'ResourceType' => ['description' => '资源类型'."\n", 'type' => 'string', 'example' => 'ACS::RAM::Role'], + 'ResourceOwnerAccount' => ['description' => '资源所属的账号 ID', 'type' => 'string', 'example' => '1944809621972557'], + 'SourceTypes' => [ + 'description' => '暴露的途径，当资源类型是OSS Bucket时有值'."\n", + 'type' => 'array', + 'items' => ['description' => '暴露的途径', 'type' => 'string', 'example' => 'BUCKET_ACL'], + ], + 'Status' => ['description' => '从分析的资源生成的Finding的当前状态', 'type' => 'string', 'example' => 'Active'], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E50DF194-4173-5ECF-A2C1-EB2BF7C54868\\",\\n \\"Resource\\": {\\n \\"Actions\\": [\\n \\"oss:GetBucket\\"\\n ],\\n \\"AnalyzedTime\\": \\"2026-05-19T08:02:36Z\\",\\n \\"CreatedTime\\": \\"2026-05-18T14:04:55Z\\",\\n \\"UpdatedTime\\": \\"2026-05-19T08:02:36Z\\",\\n \\"Error\\": \\"ACCESS_DENIED\\",\\n \\"IsPublic\\": true,\\n \\"ResourceArn\\": \\"acs:ram::1944809621972557:role/testrole\\",\\n \\"ResourceType\\": \\"ACS::RAM::Role\\",\\n \\"ResourceOwnerAccount\\": \\"1944809621972557\\",\\n \\"SourceTypes\\": [\\n \\"BUCKET_ACL\\"\\n ],\\n \\"Status\\": \\"Active\\"\\n }\\n}","type":"json"}]', + 'title' => '获取被分析资源详情', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetAnalyzedResource', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'GetAnalyzer' => [ + 'summary' => '查询指定名称的Analyzer详细信息。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['title' => '实例 ID。', 'description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer1'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'Analyzer' => [ + 'description' => '分析器信息', + 'type' => 'object', + 'properties' => [ + 'Arn' => ['description' => '分析器的ARN', 'type' => 'string', 'example' => 'acs:accessanalyzer:cn-hangzhou:123456789012:analyzer/analyser1'], + 'Name' => ['description' => '分析器名称', 'type' => 'string', 'example' => 'analyzer1'], + 'Status' => ['description' => '分析器的状态，有效值：Active（运行中），Creating（创建中），Failed（失败），Disabled（不可用）', 'type' => 'string', 'example' => 'Active'], + 'AnalyzerError' => [ + 'description' => '分析器错误信息', + 'type' => 'object', + 'properties' => [ + 'Message' => ['description' => '错误信息', 'type' => 'string', 'example' => 'Access denied'], + 'Code' => [ + 'description' => '错误码', + 'type' => 'string', + 'enumValueTitles' => ['RESOURCE_DIRECTORY_DELETED' => '资源目录被删除', 'DELEGATED_ADMINISTRATOR_DEREGISTERED' => '委派管理员身份被移除'], + 'example' => 'DELEGATED_ADMINISTRATOR_DEREGISTERED', + ], + ], + ], + 'Type' => ['description' => 'Analyzer的类型，有效值：ExternalAccess（外部访问）、OverPrivileged（过度授权）', 'type' => 'string', 'example' => 'ExternalAccess'], + 'Scope' => ['description' => 'Analyzer的扫描范围，有效值：Account（账号）、ResourceDirectory（资源目录）', 'type' => 'string', 'example' => 'Account'], + 'CreatedTime' => ['description' => '创建时间'."\n", 'type' => 'string', 'example' => '2026-05-18T08:07:24Z'], + 'LastAnalyzedResource' => [ + 'description' => '最近一个被Analyzer分析的资源'."\n", + 'type' => 'object', + 'properties' => [ + 'ResourceArn' => ['description' => '最近一个被Analyzer分析的资源Arn', 'type' => 'string', 'example' => 'acs:ram::1944809621972557:role/testrole'], + 'AnalyzedTime' => ['description' => '最后一次运行分析的时间'."\n", 'type' => 'string', 'example' => '2026-05-18T08:07:24Z'], + ], + ], + 'Configuration' => [ + 'description' => 'Analyzer 实例的配置信息', + 'type' => 'object', + 'properties' => [ + 'OverPrivilegedConfiguration' => [ + 'description' => 'OverPrivileged 类型的配置信息', + 'type' => 'object', + 'properties' => [ + 'UnusedAccessAge' => ['description' => '计算闲置访问的时间周期', 'type' => 'integer', 'format' => 'int32', 'example' => '90'], + ], + ], + ], + ], + ], + ], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => '29DC0726-CDA5-5D68-9723-5F3A044CB8ED'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'MissingParameter.%s', 'errorMessage' => 'The specified parameter %s is missing.', 'description' => '参数%s为必填参数。'."\n"], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Analyzer\\": {\\n \\"Arn\\": \\"acs:accessanalyzer:cn-hangzhou:123456789012:analyzer/analyser1\\",\\n \\"Name\\": \\"analyzer1\\",\\n \\"Status\\": \\"Active\\",\\n \\"AnalyzerError\\": {\\n \\"Message\\": \\"Access denied\\",\\n \\"Code\\": \\"DELEGATED_ADMINISTRATOR_DEREGISTERED\\"\\n },\\n \\"Type\\": \\"ExternalAccess\\",\\n \\"Scope\\": \\"Account\\",\\n \\"CreatedTime\\": \\"2026-05-18T08:07:24Z\\",\\n \\"LastAnalyzedResource\\": {\\n \\"ResourceArn\\": \\"acs:ram::1944809621972557:role/testrole\\",\\n \\"AnalyzedTime\\": \\"2026-05-18T08:07:24Z\\"\\n },\\n \\"Configuration\\": {\\n \\"OverPrivilegedConfiguration\\": {\\n \\"UnusedAccessAge\\": 90\\n }\\n }\\n },\\n \\"RequestId\\": \\"29DC0726-CDA5-5D68-9723-5F3A044CB8ED\\"\\n}","type":"json"}]', + 'title' => '获取Analyzer详情', + 'changeSet' => [], + ], + 'GetArchiveRule' => [ + 'summary' => '查询指定分析器下的归档规则详情。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'RuleName', + 'in' => 'query', + 'schema' => ['description' => '归档规则名称', 'type' => 'string', 'required' => true, 'example' => 'rule-example'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer-example'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => '请求ID'."\n", 'type' => 'string', 'example' => 'B04F3228-49E3-5777-8DC6-91B83A9485D3'], + 'ArchiveRule' => [ + 'description' => '归档规则', + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '归档规则的创建时间', 'type' => 'string', 'example' => '2026-05-18T07:56:59Z'], + 'Filter' => [ + 'description' => '过滤条件列表', + 'type' => 'array', + 'items' => [ + 'description' => '过滤条件', + 'type' => 'object', + 'properties' => [ + 'Key' => ['description' => 'Filter 用于筛选的 key', 'type' => 'string', 'example' => 'Finding Type'], + 'Values' => [ + 'description' => '匹配值列表，每个Fiter的 Values 最多20个。当MatchType 为 Exists 时不需要提供。', + 'type' => 'array', + 'items' => ['description' => '匹配值', 'type' => 'string', 'example' => 'key=FindingType, match=Equals, values=[\'OverPrivileged'."\n" + .'Role\'l'], + ], + 'MatchType' => [ + 'description' => '匹配类型', + 'type' => 'string', + 'enumValueTitles' => ['Equals' => 'Equals', 'Exists' => 'Exists', 'Contains' => 'Contains', 'NotEquals' => 'NotEquals'], + 'example' => 'Contains', + ], + ], + ], + ], + 'UpdatedTime' => ['description' => '归档规则的更新时间', 'type' => 'string', 'example' => '2026-05-18T07:56:59Z'], + 'RuleName' => ['description' => '归档规则名称', 'type' => 'string', 'example' => 'rule-example'], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B04F3228-49E3-5777-8DC6-91B83A9485D3\\",\\n \\"ArchiveRule\\": {\\n \\"CreatedTime\\": \\"2026-05-18T07:56:59Z\\",\\n \\"Filter\\": [\\n {\\n \\"Key\\": \\"Finding Type\\",\\n \\"Values\\": [\\n \\"key=FindingType, match=Equals, values=[\'OverPrivileged\\\\nRole\'l\\"\\n ],\\n \\"MatchType\\": \\"Contains\\"\\n }\\n ],\\n \\"UpdatedTime\\": \\"2026-05-18T07:56:59Z\\",\\n \\"RuleName\\": \\"rule-example\\"\\n }\\n}","type":"json"}]', + 'title' => '获取归档规则', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + ], + ], + 'GetFinding' => [ + 'summary' => '查询指定Finding的详细信息。', + 'methods' => ['get', 'post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => [ + 'operationType' => 'none', + 'riskType' => 'none', + 'chargeType' => 'free', + 'abilityTreeNodes' => ['FEATUREramD6AKXW'], + ], + 'parameters' => [ + [ + 'name' => 'FindingId', + 'in' => 'query', + 'schema' => ['description' => 'Finding的Id', 'type' => 'string', 'required' => true, 'example' => 'da167948-446e-4df8-b8cb-159a3930f148'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => 'Finding所属分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer-example'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'Finding' => [ + 'description' => 'Finding 信息', + 'type' => 'object', + 'properties' => [ + 'AnalyzedTime' => ['description' => '最近一次资源被分析的时间', 'type' => 'string', 'example' => '2026-05-18T10:35:36Z'], + 'CreatedTime' => ['description' => '资源对应Finding创建的时间', 'type' => 'string', 'example' => '2026-05-18T10:35:36Z'], + 'Error' => ['description' => '分析过程中的错误信息，无错误时为 null', 'type' => 'string', 'example' => 'ACCESS_DENIED'], + 'FindingDetail' => [ + 'description' => 'Finding详情', + 'type' => 'object', + 'properties' => [ + 'ExternalAccessDetail' => [ + 'description' => '外部访问分析类型详情', + 'type' => 'object', + 'properties' => [ + 'Action' => [ + 'description' => '外部主体被允许执行的操作列表', + 'type' => 'array', + 'items' => ['description' => '操作', 'type' => 'string', 'example' => 'oss:GetBucket'], + ], + 'Condition' => [ + 'description' => '外部主体被允许执行操作的限制条件键值对', + 'type' => 'object', + 'additionalProperties' => ['type' => 'string', 'description' => '条件键值对', 'example' => '"acs:SourceIp": "127.0.0.1/24"'], + ], + 'IsPublic' => ['description' => '资源是否公开可访问', 'type' => 'boolean', 'example' => 'true'], + 'Principal' => [ + 'description' => '被授权的外部主体信息', + 'type' => 'object', + 'additionalProperties' => ['type' => 'string', 'description' => '被授权的主体信息', 'example' => '"RAM": "*"'], + ], + 'Sources' => [ + 'description' => '允许外部访问的共享来源详情列表', + 'type' => 'array', + 'items' => [ + 'description' => '外部访问的来源详情', + 'type' => 'object', + 'properties' => [ + 'Detail' => [ + 'description' => '外部访问的来源详情', + 'type' => 'object', + 'properties' => [ + 'AccessPointDetail' => [ + 'description' => 'OSS 接入点详情', + 'type' => 'object', + 'properties' => [ + 'AccessPointArn' => ['description' => 'OSS 接入点的 ARN（Type 为 ACCESS_POINT 时填充）', 'type' => 'string', 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:accesspoint/my-ap'], + ], + ], + 'AclDetail' => ['description' => 'ACL 类型（Type 为 BUCKET_ACL 时填充）', 'type' => 'string', 'example' => 'PUBLIC_READ'], + ], + ], + 'Type' => [ + 'description' => '外部访问来源类型', + 'type' => 'string', + 'enumValueTitles' => ['BUCKET_ACL' => 'BUCKET_ACL', 'POLICY' => 'POLICY', 'ACCESS_POINT' => 'ACCESS_POINT'], + 'example' => 'BUCKET_ACL', + ], + ], + ], + ], + ], + ], + 'InactiveRoleDetail' => [ + 'description' => '不活跃的角色类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情', + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间', 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID', 'type' => 'string', 'example' => '28877424550******'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间', 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表', + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'InactiveUserDetail' => [ + 'description' => '不活跃的用户类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间'."\n", 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表'."\n", + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'OverPrivilegedRoleDetail' => [ + 'description' => '过度授权角色类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间', 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表', + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'OverPrivilegedUserDetail' => [ + 'description' => '过度授权用户类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间'."\n", 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表'."\n", + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'PrivilegeEscalationRoleDetail' => [ + 'description' => '特权角色类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间'."\n", 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表'."\n", + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'PrivilegeEscalationUserDetail' => [ + 'description' => '特权用户类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情', + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间'."\n", 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表', + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'SuperRoleDetail' => [ + 'description' => '超级管理员角色类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550****'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间', 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表', + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + 'SuperUserDetail' => [ + 'description' => '超级管理员用户类型详情', + 'type' => 'object', + 'properties' => [ + 'IdentityDetail' => [ + 'description' => '身份详情'."\n", + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['description' => '身份（RAM 用户/角色）创建时间'."\n", 'type' => 'string', 'example' => '2023-06-01T10:00:00Z'], + 'Id' => ['description' => '身份的唯一标识 ID'."\n", 'type' => 'string', 'example' => '28877424550******'], + 'LastActiveTime' => ['description' => '身份最后一次活跃时间'."\n", 'type' => 'string', 'example' => '2024-01-20T15:30:00Z'], + ], + ], + 'ServiceDetails' => [ + 'description' => 'RAM 身份可访问的服务的详情信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份可访问的服务的详情信息', + 'type' => 'object', + 'properties' => [ + 'ActionDetails' => [ + 'description' => '服务下 RAM 身份可访问操作的详细信息列表', + 'type' => 'array', + 'items' => [ + 'description' => 'RAM 身份对该服务下操作的访问信息', + 'type' => 'object', + 'properties' => [ + 'ActionName' => ['description' => '云服务的操作信息', 'type' => 'string', 'example' => 'oss:GetObject'], + 'IsPrivilege' => ['description' => '该操作是否是特权操作', 'type' => 'boolean', 'example' => 'true'], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该操作的日期和时间', 'type' => 'string', 'example' => '2024-01-10T09:00:00Z'], + ], + ], + ], + 'ActionSummary' => [ + 'description' => 'RAM 身份在该服务下可访问的操作以及访问过的操作的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份在该服务下访问过的操作数量', 'type' => 'integer', 'format' => 'int32', 'example' => '5'], + 'Granted' => ['description' => 'RAM 身份在该服务下可访问的操作', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + ], + 'LastAccessedTime' => ['description' => 'RAM 身份最近一次尝试访问该服务的日期和时间', 'type' => 'string', 'example' => '2024-01-15T12:00:00Z'], + 'RAMCode' => ['description' => '云服务的 RAM Code', 'type' => 'string', 'example' => 'ram'], + 'ServiceCodes' => [ + 'description' => '关联的云服务代码列表'."\n", + 'type' => 'array', + 'items' => ['description' => '关联的云服务代码', 'type' => 'string', 'example' => 'oss'], + ], + ], + ], + ], + 'ServiceSummary' => [ + 'description' => 'RAM 身份可访问的服务以及访问过的服务的数量', + 'type' => 'object', + 'properties' => [ + 'Accessed' => ['description' => '在计算周期内，RAM 身份访问过的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '3'], + 'Granted' => ['description' => 'RAM 身份可访问的云服务数量', 'type' => 'integer', 'format' => 'int32', 'example' => '10'], + ], + ], + ], + ], + ], + ], + 'FindingType' => [ + 'description' => 'Finding的类型', + 'type' => 'string', + 'enumValueTitles' => ['InactiveRole' => 'InactiveRole', 'PrivilegeEscalationUser' => 'PrivilegeEscalationUser', 'InactiveUser' => 'InactiveUser', 'OverPrivilegedRole' => 'OverPrivilegedRole', 'ExternalAccess' => 'ExternalAccess', 'OverPrivilegedUser' => 'OverPrivilegedUser', 'SuperRole' => 'SuperRole', 'SuperUser' => 'SuperUser', 'PrivilegeEscalationRole' => 'PrivilegeEscalationRole'], + 'example' => 'PrivilegeEscalationUser', + ], + 'Id' => ['description' => 'Finding Id', 'type' => 'string', 'example' => 'da167948-446e-4df8-b8cb-159a3930f148'], + 'ResourceArn' => ['description' => '资源Arn', 'type' => 'string', 'example' => 'acs:ram::1234567890123:user/user-example'], + 'ResourceOwnerAccount' => ['description' => 'Finding 分析的资源的保有者账号 ID', 'type' => 'string', 'example' => '1234567890123'], + 'ResourceType' => ['description' => '资源类型，格式为阿里云资源的统一标识定义', 'type' => 'string', 'example' => 'ACS::RAM::User'], + 'Status' => [ + 'description' => 'Finding的状态', + 'type' => 'string', + 'enumValueTitles' => ['Active' => 'Active', 'Resolved' => 'Resolved', 'Archived' => 'Archived'], + 'example' => 'Active', + ], + 'UpdatedTime' => ['description' => '资源对应Finding更新的时间', 'type' => 'string', 'example' => '2026-05-19T02:25:51Z'], + ], + ], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'DF8CE4A2-E2E8-57B5-B675-2E30416E9385'], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Finding\\": {\\n \\"AnalyzedTime\\": \\"2026-05-18T10:35:36Z\\",\\n \\"CreatedTime\\": \\"2026-05-18T10:35:36Z\\",\\n \\"Error\\": \\"ACCESS_DENIED\\",\\n \\"FindingDetail\\": {\\n \\"ExternalAccessDetail\\": {\\n \\"Action\\": [\\n \\"oss:GetBucket\\"\\n ],\\n \\"Condition\\": {\\n \\"key\\": \\"\\\\\\"acs:SourceIp\\\\\\": \\\\\\"127.0.0.1/24\\\\\\"\\"\\n },\\n \\"IsPublic\\": true,\\n \\"Principal\\": {\\n \\"key\\": \\"\\\\\\"RAM\\\\\\": \\\\\\"*\\\\\\"\\"\\n },\\n \\"Sources\\": [\\n {\\n \\"Detail\\": {\\n \\"AccessPointDetail\\": {\\n \\"AccessPointArn\\": \\"acs:oss:oss-cn-hangzhou:1234567890:accesspoint/my-ap\\"\\n },\\n \\"AclDetail\\": \\"PUBLIC_READ\\"\\n },\\n \\"Type\\": \\"BUCKET_ACL\\"\\n }\\n ]\\n },\\n \\"InactiveRoleDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550******\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"InactiveUserDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"OverPrivilegedRoleDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"OverPrivilegedUserDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"PrivilegeEscalationRoleDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"PrivilegeEscalationUserDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"SuperRoleDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550****\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n },\\n \\"SuperUserDetail\\": {\\n \\"IdentityDetail\\": {\\n \\"CreatedTime\\": \\"2023-06-01T10:00:00Z\\",\\n \\"Id\\": \\"28877424550******\\",\\n \\"LastActiveTime\\": \\"2024-01-20T15:30:00Z\\"\\n },\\n \\"ServiceDetails\\": [\\n {\\n \\"ActionDetails\\": [\\n {\\n \\"ActionName\\": \\"oss:GetObject\\",\\n \\"IsPrivilege\\": true,\\n \\"LastAccessedTime\\": \\"2024-01-10T09:00:00Z\\"\\n }\\n ],\\n \\"ActionSummary\\": {\\n \\"Accessed\\": 5,\\n \\"Granted\\": 20\\n },\\n \\"LastAccessedTime\\": \\"2024-01-15T12:00:00Z\\",\\n \\"RAMCode\\": \\"ram\\",\\n \\"ServiceCodes\\": [\\n \\"oss\\"\\n ]\\n }\\n ],\\n \\"ServiceSummary\\": {\\n \\"Accessed\\": 3,\\n \\"Granted\\": 10\\n }\\n }\\n },\\n \\"FindingType\\": \\"PrivilegeEscalationUser\\",\\n \\"Id\\": \\"da167948-446e-4df8-b8cb-159a3930f148\\",\\n \\"ResourceArn\\": \\"acs:ram::1234567890123:user/user-example\\",\\n \\"ResourceOwnerAccount\\": \\"1234567890123\\",\\n \\"ResourceType\\": \\"ACS::RAM::User\\",\\n \\"Status\\": \\"Active\\",\\n \\"UpdatedTime\\": \\"2026-05-19T02:25:51Z\\"\\n },\\n \\"RequestId\\": \\"DF8CE4A2-E2E8-57B5-B675-2E30416E9385\\"\\n}","type":"json"}]', + 'title' => '获取Finding详情', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetFinding', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'GetFindingRecommendation' => [ + 'summary' => '查询为指定Finding生成的治理建议方案。', + 'path' => '', + 'methods' => ['get', 'post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'analyzer-example'], + ], + [ + 'name' => 'FindingId', + 'in' => 'query', + 'schema' => ['description' => 'Finding 的 ID', 'type' => 'string', 'required' => true, 'example' => 'fffdab46-bf80-4d2e-a9c5-cbcfa091f44a'], + ], + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'schema' => ['description' => '单次请求返回的最大治理建议数', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '20'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'schema' => ['description' => '分页标记，用于获取下一页的数据。如果为空，则表示是第一页。'."\n", 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'CompletedTime' => ['description' => '建议方案完成时间', 'type' => 'string', 'example' => '2024-03-01T10:00:05Z16Z'], + 'Error' => [ + 'description' => '建议方案错误信息'."\n", + 'type' => 'object', + 'properties' => [ + 'Code' => ['description' => '错误的 Code'."\n", 'type' => 'string', 'example' => 'InternalError'], + 'Message' => ['description' => '错误的 Message'."\n", 'type' => 'string', 'example' => 'The request processing has failed due to some unknown error.'], + ], + ], + 'RecommendationType' => ['description' => '处理建议的类型', 'type' => 'string', 'example' => 'OverPrivilegedRecommendation'], + 'RecommendedSteps' => [ + 'description' => '推荐步骤列表'."\n", + 'type' => 'array', + 'items' => [ + 'description' => '推荐步骤', + 'type' => 'object', + 'properties' => [ + 'OverPrivilegedRecommendedStep' => [ + 'description' => '闲置权限推荐步骤详情', + 'type' => 'object', + 'properties' => [ + 'PolicyArn' => ['description' => '当前已附加的策略 ARN', 'type' => 'string', 'example' => 'acs:ram::system:policy/AliyunOSSFullAccess'], + 'PolicyUpdateTime' => ['description' => 'Policy 的最近修改时间'."\n", 'type' => 'string', 'example' => '2022-01-01T00:00:00Z'], + 'RecommendedAction' => ['description' => '建议的动作，当前有效值为：DETACH_POLICY、ATTACH_POLICY', 'type' => 'string', 'example' => 'DETACH_POLICY'], + 'PolicyAttachedScopes' => [ + 'description' => '当前策略的授权范围列表', + 'type' => 'array', + 'items' => ['description' => '当前策略的授权范围', 'type' => 'string', 'example' => '1234567890'], + ], + 'RecommendedPolicyArn' => ['description' => '建议授予的权限策略 ARN', 'type' => 'string', 'example' => 'acs:ram::1234567890:policy/RecommendedPolicy'], + 'RecommendedPolicyAttachedScopes' => [ + 'description' => '推荐新策略的授权范围列表', + 'type' => 'array', + 'items' => ['description' => '推荐新策略的授权范围', 'type' => 'string', 'example' => '1234567890'], + ], + ], + ], + ], + ], + ], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求 ID'."\n", 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + 'ResourceArn' => ['description' => 'Finding 中分析的资源的 Arn'."\n", 'type' => 'string', 'example' => 'acs:ram::1234567890:user/testuser'], + 'StartedTime' => ['description' => '建议方案生成时间'."\n", 'type' => 'string', 'example' => '2024-03-01T10:00:00Z'], + 'Status' => ['description' => '推荐的治理建议当前状态', 'type' => 'string', 'example' => 'SUCCEEDED'], + 'NextToken' => ['description' => '分页标记，当还有更多步骤未返回时会返回此值，用于下一次请求', 'type' => 'string', 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"CompletedTime\\": \\"2024-03-01T10:00:05Z16Z\\",\\n \\"Error\\": {\\n \\"Code\\": \\"InternalError\\",\\n \\"Message\\": \\"The request processing has failed due to some unknown error.\\"\\n },\\n \\"RecommendationType\\": \\"OverPrivilegedRecommendation\\",\\n \\"RecommendedSteps\\": [\\n {\\n \\"OverPrivilegedRecommendedStep\\": {\\n \\"PolicyArn\\": \\"acs:ram::system:policy/AliyunOSSFullAccess\\",\\n \\"PolicyUpdateTime\\": \\"2022-01-01T00:00:00Z\\",\\n \\"RecommendedAction\\": \\"DETACH_POLICY\\",\\n \\"PolicyAttachedScopes\\": [\\n \\"1234567890\\"\\n ],\\n \\"RecommendedPolicyArn\\": \\"acs:ram::1234567890:policy/RecommendedPolicy\\",\\n \\"RecommendedPolicyAttachedScopes\\": [\\n \\"1234567890\\"\\n ]\\n }\\n }\\n ],\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\",\\n \\"ResourceArn\\": \\"acs:ram::1234567890:user/testuser\\",\\n \\"StartedTime\\": \\"2024-03-01T10:00:00Z\\",\\n \\"Status\\": \\"SUCCEEDED\\",\\n \\"NextToken\\": \\"eyJpbmRleCI6IjIifQ==\\"\\n}","type":"json"}]', + 'title' => '获取Finding治理建议', + 'changeSet' => [], + ], + 'GetFindingsStatistics' => [ + 'summary' => '获取指定Analyzer的分析结果统计信息。', + 'path' => '', + 'methods' => ['get', 'post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => 'Analyzer名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'FindingsStatistics' => [ + 'description' => 'Findings 统计详情', + 'type' => 'object', + 'properties' => [ + 'ExternalAccessFindingsStatistics' => [ + 'description' => 'ExternalAccess 类型分析器的分析结果统计信息', + 'type' => 'object', + 'properties' => [ + 'ResourceTypeStatistics' => [ + 'description' => '每种资源类型的分析结果统计信息', + 'type' => 'object', + 'additionalProperties' => [ + 'type' => 'object', + 'properties' => [ + 'TotalActiveCrossAccount' => ['type' => 'integer', 'format' => 'int64', 'description' => '该资源类型下存在外部访问的待处理的分析结果数量', 'example' => '10'], + 'TotalActivePublic' => ['type' => 'integer', 'format' => 'int64', 'description' => '该资源类型下存在公开访问的待处理的分析结果数量', 'example' => '5'], + ], + 'description' => '每种资源类型的分析结果统计信息', + ], + ], + 'TotalActiveFindings' => ['description' => '待处理的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '100'], + 'TotalArchivedFindings' => ['description' => '已归档的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '50'], + 'TotalResolvedFindings' => ['description' => '已解决的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '400'], + ], + ], + 'OverPrivilegedFindingsStatistics' => [ + 'description' => 'OverPrivileged 类型分析器的分析结果统计信息'."\n", + 'type' => 'object', + 'properties' => [ + 'OverPrivilegedTypeStatistics' => [ + 'description' => '过度授权的分析结果类型及其数量统计列表', + 'type' => 'array', + 'items' => [ + 'description' => '过度授权的分析结果类型及其数量统计', + 'type' => 'object', + 'properties' => [ + 'OverPrivilegedType' => [ + 'description' => '过度授权的分析结果类型', + 'type' => 'string', + 'enumValueTitles' => ['InactiveRole' => 'InactiveRole', 'PrivilegeEscalationUser' => 'PrivilegeEscalationUser', 'InactiveUser' => 'InactiveUser', 'OverPrivilegedRole' => 'OverPrivilegedRole', 'OverPrivilegedUser' => 'OverPrivilegedUser', 'SuperRole' => 'SuperRole', 'SuperUser' => 'SuperUser', 'PrivilegeEscalationRole' => 'PrivilegeEscalationRole'], + 'example' => 'SuperUser', + ], + 'ActiveFindingsCount' => ['description' => '该类型下待处理的分析结果的数量'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '10'], + ], + ], + ], + 'TopAccounts' => [ + 'description' => '待处理的分析结果总量最多的 Top10 的云账号信息，仅当 Scope 是 RD 范围时返回。Scope 是 Account 范围时，返回空。'."\n", + 'type' => 'array', + 'items' => [ + 'description' => 'Top10 的云账号信息', + 'type' => 'object', + 'properties' => [ + 'AccountId' => ['description' => '云账号 ID'."\n", 'type' => 'string', 'example' => '123456789012345'], + 'ActiveFindingsCount' => ['description' => '该账号下待处理的分析结果的数量'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '30'], + 'Details' => [ + 'description' => '每种分析结果类型下待处理的分析结果数量'."\n", + 'type' => 'object', + 'additionalProperties' => ['type' => 'integer', 'format' => 'int64', 'example' => '"SuperUser": 10,'."\n" + .'"SuperRole": 3', 'description' => '每种分析结果类型下待处理的分析结果数量'], + ], + ], + ], + ], + 'TotalActiveFindings' => ['description' => '待处理的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '100'], + 'TotalArchivedFindings' => ['description' => '已归档的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '50'], + 'TotalResolvedFindings' => ['description' => '已解决的分析结果总数'."\n", 'type' => 'integer', 'format' => 'int64', 'example' => '400'], + ], + ], + ], + ], + 'LastUpdatedTime' => ['description' => '统计数据的最后更新时间', 'type' => 'string', 'example' => '2024-03-01T10:00:00Z'], + 'RequestId' => ['description' => '请求 ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"FindingsStatistics\\": {\\n \\"ExternalAccessFindingsStatistics\\": {\\n \\"ResourceTypeStatistics\\": {\\n \\"key\\": {\\n \\"TotalActiveCrossAccount\\": 10,\\n \\"TotalActivePublic\\": 5\\n }\\n },\\n \\"TotalActiveFindings\\": 100,\\n \\"TotalArchivedFindings\\": 50,\\n \\"TotalResolvedFindings\\": 400\\n },\\n \\"OverPrivilegedFindingsStatistics\\": {\\n \\"OverPrivilegedTypeStatistics\\": [\\n {\\n \\"OverPrivilegedType\\": \\"SuperUser\\",\\n \\"ActiveFindingsCount\\": 10\\n }\\n ],\\n \\"TopAccounts\\": [\\n {\\n \\"AccountId\\": \\"123456789012345\\",\\n \\"ActiveFindingsCount\\": 30,\\n \\"Details\\": {\\n \\"key\\": 0\\n }\\n }\\n ],\\n \\"TotalActiveFindings\\": 100,\\n \\"TotalArchivedFindings\\": 50,\\n \\"TotalResolvedFindings\\": 400\\n }\\n },\\n \\"LastUpdatedTime\\": \\"2024-03-01T10:00:00Z\\",\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\"\\n}","type":"json"}]', + 'title' => '获取分析结果统计信息', + 'changeSet' => [], + ], + 'ListAnalyzedResources' => [ + 'summary' => '列出被分析的资源。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'schema' => ['description' => '单次请求返回的最大资源数量', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '10', 'default' => '10'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'schema' => ['description' => '分页标记，首次请求不填，后续请求使用上一次返回的 NextToken 值', 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + [ + 'name' => 'ResourceType', + 'in' => 'query', + 'schema' => ['description' => '分析器支持的资源类型，可基于资源类型进行过滤', 'type' => 'string', 'required' => false, 'example' => 'ACS::OSS::Bucket'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + 'AnalyzedResources' => [ + 'description' => '已分析资源的列表', + 'type' => 'array', + 'items' => [ + 'description' => '已分析资源', + 'type' => 'object', + 'properties' => [ + 'ResourceArn' => ['description' => '资源Arn'."\n", 'type' => 'string', 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:my-bucket'], + 'ResourceType' => ['description' => '资源类型'."\n", 'type' => 'string', 'example' => 'ACS::OSS::Bucket'], + 'ResourceOwnerAccount' => ['description' => '资源所属的账号 ID', 'type' => 'string', 'example' => '1234567890'], + ], + ], + ], + 'NextToken' => ['description' => '翻页Token'."\n", 'type' => 'string', 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'NotSupport.ResourceType', 'errorMessage' => 'The specified ResourceType is not supported.', 'description' => '当前资源类型不支持。'."\n"], + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\",\\n \\"AnalyzedResources\\": [\\n {\\n \\"ResourceArn\\": \\"acs:oss:oss-cn-hangzhou:1234567890:my-bucket\\",\\n \\"ResourceType\\": \\"ACS::OSS::Bucket\\",\\n \\"ResourceOwnerAccount\\": \\"1234567890\\"\\n }\\n ],\\n \\"NextToken\\": \\"eyJpbmRleCI6IjIifQ==\\"\\n}","type":"json"}]', + 'title' => '列出分析的资源', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListAnalyzedResources', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'ListAnalyzers' => [ + 'summary' => '列出所有Analyzer列表，支持通过筛选条件过滤结果。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'schema' => ['title' => '返回结果的最大个数。', 'description' => '单次请求返回的最大分析器数量', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'maximum' => '50', 'minimum' => '0', 'example' => '10', 'default' => '50'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'schema' => ['title' => '当总结果个数大于MaxResults时，用于翻页的token。', 'description' => '分页Token'."\n", 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + [ + 'name' => 'Type', + 'in' => 'query', + 'schema' => [ + 'description' => '按分析器类型过滤', + 'type' => 'string', + 'required' => false, + 'example' => 'ExternalAccess', + 'enum' => ['ExternalAccess', 'OverPrivileged'], + ], + ], + [ + 'name' => 'Scope', + 'in' => 'query', + 'schema' => [ + 'description' => '按分析器扫描范围过滤', + 'type' => 'string', + 'required' => false, + 'example' => 'Account', + 'enum' => ['Account', 'ResourceDirectory'], + ], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + 'NextToken' => ['title' => '当总结果个数大于MaxResults时，用于翻页的token。', 'description' => '分页 Token', 'type' => 'integer', 'format' => 'int32', 'example' => 'eyJpbmRleCI6IjIifQ=='], + 'Analyzers' => [ + 'title' => '数组，返回示例目录。', + 'description' => '分析器摘要信息列表', + 'type' => 'array', + 'items' => [ + 'title' => 'AnalyzerItemType', + 'description' => '分析器摘要信息', + 'type' => 'object', + 'properties' => [ + 'Arn' => ['description' => 'Analyzer的ARN', 'type' => 'string', 'example' => 'acs:accessanalyzer:cn-hangzhou:1234567890:Analyzer/MyAnalyzer'], + 'Name' => ['description' => 'Analyzer的名称', 'type' => 'string', 'example' => 'MyAnalyzer'], + 'Status' => [ + 'description' => '分析器的当前状态', + 'type' => 'string', + 'enumValueTitles' => ['Creating' => 'Creating', 'Active' => 'Active', 'Failed' => 'Failed'], + 'example' => 'Active', + ], + 'AnalyzerError' => [ + 'description' => 'analyzer错误信息', + 'type' => 'object', + 'properties' => [ + 'Message' => ['description' => '错误Message', 'type' => 'string', 'example' => 'The resource directory is not enabled.'], + 'Code' => [ + 'description' => '错误Code', + 'type' => 'string', + 'enumValueTitles' => ['RESOURCE_DIRECTORY_DELETED' => 'RESOURCE_DIRECTORY_DELETED', 'DELEGATED_ADMINISTRATOR_DEREGISTERED' => 'DELEGATED_ADMINISTRATOR_DEREGISTERED'], + 'example' => 'RESOURCE_DIRECTORY_DELETED', + ], + ], + ], + 'Type' => [ + 'description' => 'Analyzer的类型', + 'type' => 'string', + 'enumValueTitles' => ['ExternalAccess' => 'ExternalAccess', 'OverPrivileged' => 'OverPrivileged'], + 'example' => 'ExternalAccess', + ], + 'Scope' => [ + 'description' => 'Analyzer的扫描范围', + 'type' => 'string', + 'enumValueTitles' => ['Account' => 'Account', 'ResourceDirectory' => 'ResourceDirectory'], + 'example' => 'ResourceDirectory', + ], + 'CreatedTime' => ['description' => '创建时间', 'type' => 'string', 'example' => '2024-02-01T08:00:00Z'], + 'LastAnalyzedResource' => [ + 'description' => '最近一个被Analyzer分析的资源'."\n", + 'type' => 'object', + 'properties' => [ + 'ResourceArn' => ['description' => '最近一个被Analyzer分析的资源Arn', 'type' => 'string', 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:my-bucket'], + 'AnalyzedTime' => ['description' => '最后一次运行分析的时间'."\n", 'type' => 'string', 'example' => '2024-03-01T10:00:00Z'], + ], + ], + ], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'MissingParameter.%s', 'errorMessage' => 'The specified parameter %s is missing.', 'description' => '参数%s为必填参数。'."\n"], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\",\\n \\"NextToken\\": 0,\\n \\"Analyzers\\": [\\n {\\n \\"Arn\\": \\"acs:accessanalyzer:cn-hangzhou:1234567890:Analyzer/MyAnalyzer\\",\\n \\"Name\\": \\"MyAnalyzer\\",\\n \\"Status\\": \\"Active\\",\\n \\"AnalyzerError\\": {\\n \\"Message\\": \\"The resource directory is not enabled.\\",\\n \\"Code\\": \\"RESOURCE_DIRECTORY_DELETED\\"\\n },\\n \\"Type\\": \\"ExternalAccess\\",\\n \\"Scope\\": \\"ResourceDirectory\\",\\n \\"CreatedTime\\": \\"2024-02-01T08:00:00Z\\",\\n \\"LastAnalyzedResource\\": {\\n \\"ResourceArn\\": \\"acs:oss:oss-cn-hangzhou:1234567890:my-bucket\\",\\n \\"AnalyzedTime\\": \\"2024-03-01T10:00:00Z\\"\\n }\\n }\\n ]\\n}","type":"json"}]', + 'title' => '列出Analyzer', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'list', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListAnalyzers', + 'authLevel' => 'operate', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => '全部资源', 'arn' => '*'], + ], + ], + ], + ], + ], + 'ListArchiveRules' => [ + 'summary' => '查询指定分析器下的所有归档规则。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'schema' => ['description' => '单次请求返回的最大归档规则数量', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '10'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'schema' => ['description' => '分页标记，首次请求不填，后续请求使用上一次返回的 NextToken 值', 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'ArchiveRules' => [ + 'title' => '数组，返回示例目录。', + 'description' => '归档规则列表', + 'type' => 'array', + 'items' => [ + 'title' => 'ArchiveRuleItemType', + 'description' => '归档规则', + 'type' => 'object', + 'properties' => [ + 'CreatedTime' => ['title' => '资源组ID', 'description' => '归档规则创建时间', 'type' => 'string', 'example' => '2024-02-01T08:00:00Z'], + 'UpdatedTime' => ['title' => '资源一级ID', 'description' => '归档规则最后更新时间', 'type' => 'string', 'example' => '2024-03-01T10:00:00Z'], + 'RuleName' => ['title' => '创建时间', 'description' => '归档规则名称', 'type' => 'string', 'example' => 'ArchivePublicAccess'], + 'Filter' => [ + 'description' => '规则的过滤条件列表', + 'type' => 'array', + 'items' => [ + 'description' => '规则的过滤条件', + 'type' => 'object', + 'properties' => [ + 'Key' => ['description' => '过滤条件的字段名', 'type' => 'string', 'example' => 'ResourceType'], + 'Values' => [ + 'description' => '过滤条件的值列表', + 'type' => 'array', + 'items' => ['description' => '过滤条件的值', 'type' => 'string', 'example' => 'ACS::OSS::Bucket'], + ], + 'MatchType' => [ + 'description' => '匹配方式', + 'type' => 'string', + 'enumValueTitles' => ['Equals' => 'Equals', 'Exists' => 'Exists', 'Contains' => 'Contains', 'NotEquals' => 'NotEquals'], + 'example' => 'Equals', + ], + ], + ], + ], + ], + ], + ], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID'."\n", 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + 'NextToken' => ['description' => '分页标记', 'type' => 'string', 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + ], + ], + 'errorCodes' => [ + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"ArchiveRules\\": [\\n {\\n \\"CreatedTime\\": \\"2024-02-01T08:00:00Z\\",\\n \\"UpdatedTime\\": \\"2024-03-01T10:00:00Z\\",\\n \\"RuleName\\": \\"ArchivePublicAccess\\",\\n \\"Filter\\": [\\n {\\n \\"Key\\": \\"ResourceType\\",\\n \\"Values\\": [\\n \\"ACS::OSS::Bucket\\"\\n ],\\n \\"MatchType\\": \\"Equals\\"\\n }\\n ]\\n }\\n ],\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\",\\n \\"NextToken\\": \\"eyJpbmRleCI6IjIifQ==\\"\\n}","type":"json"}]', + 'title' => '列出归档规则', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'list', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListArchiveRules', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'ListFindings' => [ + 'summary' => '列出指定 Analyzer 下的所有 Finding，支持通过筛选条件过滤结果。', + 'methods' => ['get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'Filter', + 'in' => 'query', + 'style' => 'flat', + 'schema' => [ + 'description' => '过滤条件列表', + 'type' => 'array', + 'items' => [ + 'description' => '过滤条件', + 'type' => 'object', + 'properties' => [ + 'Key' => ['description' => '过滤条件的字段名', 'type' => 'string', 'required' => false, 'example' => 'ResourceType'], + 'Values' => [ + 'description' => '过滤条件的值列表', + 'type' => 'array', + 'items' => ['description' => '过滤条件的值', 'type' => 'string', 'required' => false, 'example' => 'ACS::OSS::Bucket'], + 'required' => false, + ], + 'MatchType' => [ + 'description' => '过滤条件的匹配方式', + 'type' => 'string', + 'required' => false, + 'enumValueTitles' => ['Equals' => 'Equals', 'Exists' => 'Exists', 'Contains' => 'Contains', 'NotEquals' => 'NotEquals'], + 'example' => 'Equals', + ], + ], + 'required' => false, + ], + 'required' => false, + ], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'schema' => ['description' => '单次请求返回的最大 Finding 数量，默认 100', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '10'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'schema' => ['description' => '分页标记，首次请求不填，后续请求使用上一次返回的 NextToken 值', 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + 'NextToken' => ['description' => '翻页Token', 'type' => 'string', 'example' => 'eyJpbmRleCI6IjIifQ=='], + 'Findings' => [ + 'description' => 'Finding 结果列表', + 'type' => 'array', + 'items' => [ + 'description' => 'Finding 信息', + 'type' => 'object', + 'properties' => [ + 'AnalyzedTime' => ['description' => '资源最后一次被分析的时间', 'type' => 'string', 'example' => '2024-02-15T08:30:00Z'], + 'CreatedTime' => ['description' => 'Finding 创建时间', 'type' => 'string', 'example' => '2024-02-10T06:00:00Z'], + 'UpdatedTime' => ['description' => 'Finding 最后更新时间', 'type' => 'string', 'example' => '2024-02-15T08:30:00Z'], + 'Error' => ['description' => '分析过程中的错误信息，无错误时为空', 'type' => 'string', 'example' => 'ACCESS_DENIED'], + 'FindingType' => [ + 'description' => 'Finding的类型', + 'type' => 'string', + 'enumValueTitles' => ['InactiveRole' => 'InactiveRole', 'PrivilegeEscalationUser' => 'PrivilegeEscalationUser', 'InactiveUser' => 'InactiveUser', 'OverPrivilegedRole' => 'OverPrivilegedRole', 'ExternalAccess' => 'ExternalAccess', 'OverPrivilegedUser' => 'OverPrivilegedUser', 'SuperRole' => 'SuperRole', 'SuperUser' => 'SuperUser', 'PrivilegeEscalationRole' => 'PrivilegeEscalationRole'], + 'example' => 'ExternalAccess', + ], + 'Id' => ['description' => 'Finding 的唯一标识符', 'type' => 'string', 'example' => '53218979-82fe-476d-bba5-09879ef24b66'], + 'ResourceArn' => ['description' => '被分析资源Arn', 'type' => 'string', 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:my-bucket'], + 'ResourceType' => ['description' => '被分析的资源类型', 'type' => 'string', 'example' => 'ACS::RAM::Role'], + 'ResourceOwnerAccount' => ['description' => '被分析资源的归属账号ID', 'type' => 'string', 'example' => '1234567890'], + 'Status' => [ + 'description' => 'Finding的状态', + 'type' => 'string', + 'enumValueTitles' => ['Active' => '活跃', 'Resolved' => '已解决', 'Archived' => '已归档'], + 'example' => 'Active', + ], + ], + ], + ], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'MissingParameter.%s', 'errorMessage' => 'The specified parameter %s is missing.', 'description' => '参数%s为必填参数。'."\n"], + ['errorCode' => 'NotSupport.ResourceType', 'errorMessage' => 'The specified ResourceType is not supported.', 'description' => '当前资源类型不支持。'."\n"], + ['errorCode' => 'ExceedLimit.%s', 'errorMessage' => 'The maximum number of %s is exceeded.', 'description' => '数量超过上限'], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\",\\n \\"NextToken\\": \\"eyJpbmRleCI6IjIifQ==\\",\\n \\"Findings\\": [\\n {\\n \\"AnalyzedTime\\": \\"2024-02-15T08:30:00Z\\",\\n \\"CreatedTime\\": \\"2024-02-10T06:00:00Z\\",\\n \\"UpdatedTime\\": \\"2024-02-15T08:30:00Z\\",\\n \\"Error\\": \\"ACCESS_DENIED\\",\\n \\"FindingType\\": \\"ExternalAccess\\",\\n \\"Id\\": \\"53218979-82fe-476d-bba5-09879ef24b66\\",\\n \\"ResourceArn\\": \\"acs:oss:oss-cn-hangzhou:1234567890:my-bucket\\",\\n \\"ResourceType\\": \\"ACS::RAM::Role\\",\\n \\"ResourceOwnerAccount\\": \\"1234567890\\",\\n \\"Status\\": \\"Active\\"\\n }\\n ]\\n}","type":"json"}]', + 'title' => '列出Findings', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListFindings', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'StartResourceScan' => [ + 'summary' => '对指定资源主动发起一次分析扫描。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'ResourceArn', + 'in' => 'query', + 'schema' => ['description' => '需要发起扫描的资源 ARN', 'type' => 'string', 'required' => true, 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:my-bucket'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'query', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'ServiceQuotaExceeded', 'errorMessage' => 'The API invocation limit has been exceeded.', 'description' => 'API调用次数超过限制。'."\n"], + ['errorCode' => 'NotSupport.ResourceType', 'errorMessage' => 'The specified ResourceType is not supported.', 'description' => '当前资源类型不支持。'."\n"], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\"\\n}","type":"json"}]', + 'title' => '开启资源扫描', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:StartResourceScan', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'UpdateArchiveRule' => [ + 'summary' => '更新已有的归档规则。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'Filter', + 'in' => 'formData', + 'style' => 'flat', + 'schema' => [ + 'description' => '过滤条件列表', + 'type' => 'array', + 'items' => [ + 'description' => '过滤条件。', + 'type' => 'object', + 'properties' => [ + 'Key' => ['description' => '过滤条件的字段名', 'type' => 'string', 'required' => true, 'example' => 'ResourceType'], + 'MatchType' => [ + 'description' => '过滤条件的匹配方式', + 'type' => 'string', + 'required' => true, + 'enumValueTitles' => ['Equals' => 'Equals', 'Exists' => 'Exists', 'Contains' => 'Contains', 'NotEquals' => 'NotEquals'], + 'example' => 'Equals', + ], + 'Values' => [ + 'description' => '过滤条件的值列表', + 'type' => 'array', + 'items' => ['description' => '过滤条件的值', 'type' => 'string', 'required' => false, 'example' => 'ACS::OSS::Bucket'], + 'required' => false, + ], + ], + 'required' => true, + ], + 'required' => true, + ], + ], + [ + 'name' => 'RuleName', + 'in' => 'formData', + 'schema' => ['description' => '要更新的归档规则名称', 'type' => 'string', 'required' => true, 'example' => 'ArchivePublicAccess'], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['description' => '归档规则所属的分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求 ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\"\\n}","type":"json"}]', + 'title' => '更新归档规则', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'update', + 'ramAction' => [ + 'action' => 'accessanalyzer:UpdateArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + ], + ], + 'UpdateFindings' => [ + 'summary' => '修改指定一个或多个 Finding 的状态，无法修改状态为已解决的 Finding。', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'none', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'FindingIds', + 'in' => 'formData', + 'style' => 'flat', + 'schema' => [ + 'description' => '要更新的 Finding ID 列表', + 'type' => 'array', + 'items' => ['description' => '要更新的 Finding ID', 'type' => 'string', 'required' => false, 'example' => "\n" + .'53218979-82fe-476d-bba5-09879ef24b66'], + 'required' => false, + ], + ], + [ + 'name' => 'AnalyzerName', + 'in' => 'formData', + 'schema' => ['description' => '分析器名称', 'type' => 'string', 'required' => true, 'example' => 'MyAnalyzer'], + ], + [ + 'name' => 'Status', + 'in' => 'formData', + 'schema' => [ + 'description' => '要更新到的目标状态', + 'type' => 'string', + 'required' => true, + 'example' => 'Archived', + 'enum' => ['Archived', 'Active'], + ], + ], + [ + 'name' => 'ResourceArn', + 'in' => 'formData', + 'schema' => ['description' => '按资源 ARN 批量更新该资源下所有 Finding 的状态', 'type' => 'string', 'required' => false, 'example' => 'acs:oss:oss-cn-hangzhou:1234567890:my-bucket'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'NotSupportedOperation.UpdateFindingToResolved', 'errorMessage' => 'The operation is not supported.', 'description' => '不支持更新Finding的状态为Resolved'], + ['errorCode' => 'NotSupportedOperation.UpdateResolvedFinding', 'errorMessage' => 'The operation is not supported.', 'description' => '不支持更新状态为Resovled的Finding'], + ['errorCode' => 'ValidationException', 'errorMessage' => '%s.', 'description' => '参数校验错误'], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\"\\n}","type":"json"}]', + 'title' => '更新Findings', + 'changeSet' => [], + 'ramActions' => [ + [ + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:UpdateFindings', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + ], + 'ValidatePolicy' => [ + 'summary' => '请求验证策略并返回分析结果列表。', + 'path' => '', + 'methods' => ['post'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], + 'parameters' => [ + [ + 'name' => 'PolicyDocument', + 'in' => 'formData', + 'schema' => ['description' => '要校验的权限策略内容，存在字符上限，为61440字符', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '{'."\n" + .' "Version": "1",'."\n" + .' "Statement": [{'."\n" + .' "Effect": "Allow",'."\n" + .' "Action": "ecs:*",'."\n" + .' "Resources": "*" '."\n" + .' }]'."\n" + .'}', 'maxLength' => 61440, 'minLength' => 1], + ], + [ + 'name' => 'PolicyType', + 'in' => 'formData', + 'schema' => [ + 'description' => '策略类型', + 'type' => 'string', + 'required' => true, + 'example' => 'IdentityBasedPolicy', + 'enum' => ['IdentityBasedPolicy', 'ResourceBasedPolicy'], + ], + ], + [ + 'name' => 'ValidatePolicyResourceType', + 'in' => 'formData', + 'schema' => [ + 'description' => '指定资源类型，仅当 PolicyType 为 ResourceBasedPolicy 时可指定，用于进行更精确的资源策略校验', + 'type' => 'string', + 'required' => false, + 'enumValueTitles' => ['ACS::RAM::Role' => 'ACS::RAM::Role', 'ACS::OSS::Bucket' => 'ACS::OSS::Bucket'], + 'example' => 'ACS::OSS::Bucket', + ], + ], + [ + 'name' => 'MaxResults', + 'in' => 'formData', + 'schema' => ['description' => '单次请求返回的最大校验结果数量', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'maximum' => '100', 'minimum' => '1', 'example' => '10', 'default' => '5'], + ], + [ + 'name' => 'NextToken', + 'in' => 'formData', + 'schema' => ['description' => '分页标记，首次请求不填，后续请求使用上一次返回的 NextToken 值', 'type' => 'string', 'required' => false, 'example' => 'eyJpbmRleCI6IjIifQ=='], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => 'Schema of Response', + 'description' => 'Schema of Response', + 'type' => 'object', + 'properties' => [ + 'Findings' => [ + 'description' => '策略校验发现的问题列表', + 'type' => 'array', + 'items' => [ + 'description' => '策略校验发现的问题', + 'type' => 'object', + 'properties' => [ + 'FindingType' => [ + 'description' => '分析结果类型', + 'type' => 'string', + 'enumValueTitles' => ['Suggestion' => 'Suggestion', 'Warning' => 'Warning', 'Error' => 'Error', 'SecurityWarning' => 'SecurityWarning'], + 'example' => 'Error', + ], + 'IssueCode' => ['description' => '问题的唯一编码，标识具体的校验规则', 'type' => 'string', 'example' => 'INVALID_EFFECT'], + 'Paths' => [ + 'description' => '问题在策略文档中的路径定位列表', + 'type' => 'array', + 'items' => ['description' => '问题在策略文档中的路径定位', 'type' => 'string', 'example' => '$.Statement[0].Effect'], + ], + ], + ], + ], + 'NextToken' => ['description' => '分页标记', 'type' => 'string', 'example' => 'eyJpbmRleCI6IjIifQ=='], + 'RequestId' => ['title' => 'Id of the request', 'description' => '请求 ID', 'type' => 'string', 'example' => 'A1B2C3D4-E5F6-7890-ABCD-EF1234567890'], + ], + ], + ], + ], + 'errorCodes' => [ + 400 => [ + ['errorCode' => 'InvalidParameter.%s', 'errorMessage' => 'The specified parameter %s is not valid.', 'description' => '无效参数%s'], + ['errorCode' => 'NotSupportedOperation.UpdateFindingToResolved', 'errorMessage' => 'The operation is not supported.', 'description' => '不支持更新Finding的状态为Resolved'], + ['errorCode' => 'NotSupportedOperation.UpdateResolvedFinding', 'errorMessage' => 'The operation is not supported.', 'description' => '不支持更新状态为Resovled的Finding'], + ['errorCode' => 'ValidationException', 'errorMessage' => '%s.', 'description' => '参数校验错误'], + ['errorCode' => 'MissingParameter.%s', 'errorMessage' => 'The specified parameter %s is missing.', 'description' => '参数%s为必填参数。'."\n"], + ], + 404 => [ + ['errorCode' => 'EntityNotExist.%s', 'errorMessage' => 'The %s does not exist.', 'description' => '%s不存在'], + ], + 500 => [ + ['errorCode' => 'InternalError', 'errorMessage' => 'The request processing has failed due to some unknown error.', 'description' => '内部服务错误。'], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Findings\\": [\\n {\\n \\"FindingType\\": \\"Error\\",\\n \\"IssueCode\\": \\"INVALID_EFFECT\\",\\n \\"Paths\\": [\\n \\"$.Statement[0].Effect\\"\\n ]\\n }\\n ],\\n \\"NextToken\\": \\"eyJpbmRleCI6IjIifQ==\\",\\n \\"RequestId\\": \\"A1B2C3D4-E5F6-7890-ABCD-EF1234567890\\"\\n}","type":"json"}]', + 'title' => '权限策略校验', + 'changeSet' => [], + 'ramActions' => [], + ], + ], + 'endpoints' => [], + 'errorCodes' => [ + ['code' => 'EntityAlreadyExist.%s', 'message' => 'The %s already exists.', 'http_code' => 400, 'description' => '%s已存在'], + ['code' => 'EntityNotExist.%s', 'message' => 'The %s does not exist.', 'http_code' => 404, 'description' => '%s不存在'], + ['code' => 'ExceedLimit.%s', 'message' => 'The maximum number of %s is exceeded.', 'http_code' => 400, 'description' => '数量超过上限'], + ['code' => 'InternalError', 'message' => 'The request processing has failed due to some unknown error.', 'http_code' => 500, 'description' => '内部服务错误。'], + ['code' => 'InvalidParameter.%s', 'message' => 'The specified parameter %s is not valid.', 'http_code' => 400, 'description' => '无效参数%s'], + ['code' => 'MissingParameter.%s', 'message' => 'The specified parameter %s is missing.', 'http_code' => 400, 'description' => '参数%s为必填参数。'."\n"], + ['code' => 'NotSupport.ResourceType', 'message' => 'The specified ResourceType is not supported.', 'http_code' => 400, 'description' => '当前资源类型不支持。'."\n"], + ['code' => 'NotSupportedOperation.UpdateFindingToResolved', 'message' => 'The operation is not supported.', 'http_code' => 400, 'description' => '不支持更新Finding的状态为Resolved'], + ['code' => 'NotSupportedOperation.UpdateResolvedFinding', 'message' => 'The operation is not supported.', 'http_code' => 400, 'description' => '不支持更新状态为Resovled的Finding'], + ['code' => 'ServiceQuotaExceeded', 'message' => 'The API invocation limit has been exceeded.', 'http_code' => 400, 'description' => 'API调用次数超过限制。'."\n"], + ['code' => 'ValidationException', 'message' => '%s.', 'http_code' => 400, 'description' => '参数校验错误'], + ], + 'changeSet' => [], + 'ram' => [ + 'productCode' => 'AccessAnalyzer', + 'productName' => '访问控制', + 'ramCodes' => ['accessanalyzer'], + 'ramLevel' => '资源级', + 'ramActions' => [ + [ + 'apiName' => 'DeleteAnalyzer', + 'description' => '删除Analyzer', + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'accessanalyzer:DeleteAnalyzer', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GetArchiveRule', + 'description' => '获取归档规则', + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + [ + 'apiName' => 'GetAnalyzedResource', + 'description' => '获取被分析资源详情', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetAnalyzedResource', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'CreateAnalyzer', + 'description' => '创建Analyzer', + 'operationType' => 'create', + 'ramAction' => [ + 'action' => 'accessanalyzer:CreateAnalyzer', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'UpdateArchiveRule', + 'description' => '更新归档规则', + 'operationType' => 'update', + 'ramAction' => [ + 'action' => 'accessanalyzer:UpdateArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + [ + 'apiName' => 'ApplyArchiveRule', + 'description' => '应用归档规则', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ApplyArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'ListAnalyzedResources', + 'description' => '列出分析的资源', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListAnalyzedResources', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GetFinding', + 'description' => '获取Finding详情', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetFinding', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GetFindingsStatistics', + 'description' => '获取分析结果统计信息', + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetFindingsStatistics', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GenerateFindingRecommendation', + 'description' => '生成Finding推荐', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GenerateFindingRecommendation', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'UpdateFindings', + 'description' => '更新Findings', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:UpdateFindings', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'DeleteArchiveRule', + 'description' => '删除归档规则', + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'accessanalyzer:DeleteArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + [ + 'apiName' => 'ListAnalyzers', + 'description' => '列出Analyzer', + 'operationType' => 'list', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListAnalyzers', + 'authLevel' => 'operate', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => '全部资源', 'arn' => '*'], + ], + ], + ], + [ + 'apiName' => 'ListArchiveRules', + 'description' => '列出归档规则', + 'operationType' => 'list', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListArchiveRules', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GetFindingRecommendation', + 'description' => '获取Finding治理建议', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetFindingRecommendation', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'CreateArchiveRule', + 'description' => '创建归档规则', + 'operationType' => 'create', + 'ramAction' => [ + 'action' => 'accessanalyzer:CreateArchiveRule', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ], + ], + ], + [ + 'apiName' => 'ListFindings', + 'description' => '列出Findings', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:ListFindings', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'GetAnalyzer', + 'description' => '获取Analyzer详情', + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'accessanalyzer:GetAnalyzer', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + [ + 'apiName' => 'StartResourceScan', + 'description' => '开启资源扫描', + 'operationType' => 'none', + 'ramAction' => [ + 'action' => 'accessanalyzer:StartResourceScan', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'AccessAnalyzer', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ], + ], + ], + ], + 'resourceTypes' => [ + ['validationType' => 'always', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}'], + ['validationType' => 'always', 'resourceType' => 'ArchiveRule', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:Analyzer/{#AnalyzerName}/ArchiveRule/{#RuleName}'], + ['validationType' => 'always', 'resourceType' => 'Analyzer', 'arn' => 'acs:accessanalyzer:{#regionId}:{#accountId}:*'], + ], + ], +]; |