'1.0',
'info' => ['style' => 'RPC', 'product' => 'RiskManagement', 'version' => '2026-04-24'],
'directories' => [
[
'children' => [
[
'children' => ['GetAlertRecordAnalysisResult'],
'type' => 'directory',
'title' => '查看详情',
'id' => 454733,
],
[
'children' => [
[
'children' => ['CreateServiceLinkedRole', 'StartDisposalToolService', 'GetDisposalToolStatus'],
'type' => 'directory',
'title' => '授权',
'id' => 454735,
],
[
'children' => ['CreateVirusScanOnceTask', 'ListVirusScanMachineEvent'],
'type' => 'directory',
'title' => '病毒扫描',
'id' => 454736,
],
[
'children' => ['GetAliYunSafeCenterResult', 'OpenTrialPackage', 'GetValidDeductInstances', 'InitSasModuleRule', 'DescribeCloudCenterInstances', 'DescribeSuspEvents', 'UpdatePostPaidBindRel', 'CreateSasTrial', 'DescribeServiceLinkedRoleStatus', 'GetCanTrySas', 'BindAuthToMachine'],
'type' => 'directory',
'title' => '查杀',
'id' => 454737,
],
],
'type' => 'directory',
'title' => '处置告警',
'id' => 454734,
],
],
'type' => 'directory',
'title' => '云资源安全管控事件',
'id' => 454732,
],
[
'children' => [
[
'children' => ['QuerySecurityCheckReport'],
'type' => 'directory',
'title' => '简报',
'id' => 454739,
],
],
'type' => 'directory',
'title' => '安全体检',
'id' => 454738,
],
],
'components' => [
'schemas' => [],
],
'apis' => [
'BindAuthToMachine' => [
'summary' => 'sas-绑定授权到机器',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '智能接入网关实例所属的地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shenzhen'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求',
'type' => 'object',
'properties' => [
'AuthVersion' => ['description' => '资产的授权版本。取值:'."\n"
."\n"
.'- **6**:防病毒版'."\n"
.'- **5**:高级版'."\n"
.'- **3**:企业版'."\n"
.'- **7**:旗舰版'."\n"
.'- **10**:增值服务版', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'],
'AutoBind' => ['description' => '开启自动绑定。取值:'."\n"
."\n"
.'- **0**:关闭'."\n"
.'- **1**:开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
'Bind' => [
'description' => '绑定的 UUID 集合。'."\n"
."\n"
.'> Bind 和 UnBind 不能同时为空。'."\n"
.'子级条数 <= 1000',
'type' => 'array',
'items' => ['description' => '绑定的 UUID。'."\n"
."\n"
.'> 您可以调用 DescribeCloudCenterInstances 接口获取此参数。', 'type' => 'string', 'required' => false, 'example' => 'bdd3162a-fe5f-4ee3-afda-3134c7b12f29'],
'required' => false,
],
'BindAll' => ['description' => '是否全量绑定。默认**false**,取值:'."\n"
."\n"
.'- **true**:是'."\n"
.'- **false**:否', 'type' => 'boolean', 'required' => false, 'example' => 'true'],
'Criteria' => ['description' => '设置搜索资产的条件。该参数 JSON 格式,输入参数时注意大小写。'."\n"
.'>支持使用资产的实例 ID、实例名称、所属 VPC ID、地域、公网 IP 地址等条件搜索资产。您可以调用 DescribeCriteria 接口查询支持的搜索条件。', 'type' => 'string', 'required' => false, 'example' => '[{\\"name\\":\\"clientStatus\\",\\"value\\":\\"online\\"},{\\"name\\":\\"authVersion\\",\\"value\\":\\"1\\"}]'],
'IsPreBind' => ['description' => '是否预绑定操作。取值:'."\n"
."\n"
.'- **0**:否'."\n"
.'- **1**:是'."\n"
."\n\n"
.'> 开启预绑定后,会在完成购买后自动为指定服务器绑定对应版本的授权数。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
'LogicalExp' => ['description' => '设置多个搜索条件间生效的逻辑关系。取值:'."\n"
."\n"
.'- **OR**:表示多个搜索条件之间是**或**的关系。'."\n"
.'- **AND**:表示多个搜索条件之间是**与**的关系。', 'type' => 'string', 'required' => false, 'example' => 'AND'],
'NtmVersion' => ['description' => '预绑定关联的订单版本。取值:'."\n"
."\n"
.'- **level7**:防病毒版'."\n"
.'- **level3**:高级版'."\n"
.'- **level2**:企业版'."\n"
.'- **level8**:旗舰版'."\n"
.'- **level10**:仅采购增值服务', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => 'level2'],
'UnBind' => [
'description' => '解绑的UUID集合。'."\n"
.'> **Bind**和**UnBind**不能同时为空。',
'type' => 'array',
'items' => ['description' => '解绑的UUID集合。'."\n"
.'> **Bind**和**UnBind**不能同时为空。', 'type' => 'string', 'required' => false, 'example' => 'b37a0c00-b479-4d59-aaef-1cdc1f71930f'],
'required' => false,
],
'PreBindOrderId' => ['description' => '预绑定关联的订单编号。'."\n"
.'> 注意 该字段类型为 Long,在序列化/反序列化的过程中可能导致精度丢失,请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '263076506250432'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => 'Schema of Response',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => 'BEE90F8C-EDC2-5394-953B-D07A121612B5'],
'Code' => ['description' => '调用失败时,返回的错误码。更多信息,请参见错误码。', 'type' => 'string', 'example' => 'OK'],
'Message' => ['description' => 'message', 'type' => 'string', 'example' => 'Successful'],
'Success' => ['description' => '表示是否调用成功。true:调用成功。 false:调用失败。', 'type' => 'boolean', 'example' => 'True'],
'Data' => [
'description' => '调用成功时,返回的数据。详情请参见以下参数。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'BindCount' => ['description' => '成功绑定服务器数。', 'type' => 'integer', 'format' => 'int32', 'example' => '5'],
'InsufficientCoreCount' => ['description' => '授权核数授权数不足的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'],
'InsufficientEcsCount' => ['description' => '授权服务器授权数不足的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'RequestId' => ['description' => '云安全中心请求Id', 'type' => 'string', 'example' => 'F799C1E4-D4C6-5964-A6D1-4BA9CCF105F2'],
'ResultCode' => ['description' => '绑定结果状态码。取值:'."\n"
."\n"
.'0:成功'."\n"
.'1:参数错误'."\n"
.'2:缺少服务器授权数'."\n"
.'3:缺少服务器授权核数', 'type' => 'integer', 'format' => 'int32', 'example' => '2'],
'UnBindCount' => ['description' => '成功解绑服务器数。', 'type' => 'integer', 'format' => 'int32', 'example' => '4'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-绑定授权到机器',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BEE90F8C-EDC2-5394-953B-D07A121612B5\\",\\n \\"Code\\": \\"OK\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"BindCount\\": 5,\\n \\"InsufficientCoreCount\\": 2,\\n \\"InsufficientEcsCount\\": 1,\\n \\"RequestId\\": \\"F799C1E4-D4C6-5964-A6D1-4BA9CCF105F2\\",\\n \\"ResultCode\\": 2,\\n \\"UnBindCount\\": 4\\n }\\n }\\n}","type":"json"}]',
],
'CreateSasTrial' => [
'summary' => 'sas-初始化云安全中心模块规则',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '访问控制实例所属的地域ID。您可以通过调用DescribeRegions接口获取地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shenzhen'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求',
'type' => 'object',
'properties' => [
'FromEcs' => ['description' => '是否来自ECS控制台,取值:'."\n"
.'- **true**:是'."\n"
.'- **false**:否', 'type' => 'boolean', 'required' => false, 'example' => 'true'],
'Lang' => ['description' => '请求和接收消息的语言类型。取值:'."\n"
."\n"
.'- **zh**(默认):中文。'."\n"
."\n"
.'- **en**:英文。', 'type' => 'string', 'required' => false, 'example' => 'en'],
'RequestForm' => [
'description' => '申请试用理由。',
'type' => 'object',
'properties' => [
'TryReason' => ['description' => '申请试用理由。', 'type' => 'string', 'required' => false, 'example' => 'for poc'],
],
'required' => false,
],
'TryType' => ['description' => '试用类型,取值:'."\n"
.'- **0**:禁止试用'."\n"
.'- **1**:首次试用'."\n"
.'- **2**:二次试用'."\n"
."\n\n"
.'> 调用[GetCanTrySas](~~2623574~~)接口获取此参数,不为0时才可开启试用。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
'TryVersion' => ['description' => '试用版本。取值:'."\n"
.'- **3**:企业版'."\n"
.'- **7**:旗舰版'."\n"
."\n"
.'>调用[GetCanTrySas](~~2623574~~)接口获取该参数。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => '6B57D35D-9DAC-5393-AE39-07697E37C2E7'],
'Code' => ['description' => '内部错误码。', 'type' => 'string', 'example' => 'SUCCESS'],
'Message' => ['description' => '返回消息。', 'type' => 'string', 'example' => 'OK'],
'Success' => ['description' => '请求成功与否标识。', 'type' => 'boolean', 'example' => 'True'],
'Data' => [
'description' => '任务创建结果',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心请求id', 'type' => 'string', 'example' => 'F7C74264-DF12-56D5-869B-C4B11DD88BA2'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-开启云安全中心试用',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6B57D35D-9DAC-5393-AE39-07697E37C2E7\\",\\n \\"Code\\": \\"SUCCESS\\",\\n \\"Message\\": \\"OK\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"F7C74264-DF12-56D5-869B-C4B11DD88BA2\\"\\n }\\n }\\n}","type":"json"}]',
],
'CreateServiceLinkedRole' => [
'summary' => 'sas-创建服务关联角色',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagement11C0AL'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '智能接入网关实例地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求',
'type' => 'object',
'properties' => [
'ServiceLinkedRole' => ['description' => '关联角色。默认**AliyunServiceRoleForSas**。取值:'."\n"
."\n"
.'- **AliyunServiceRoleForSas**:用于云安全中心(sas)的服务关联角色,云安全中心(sas)使用此角色来访问您在其他云产品中的资源。'."\n"
.'- **AliyunServiceRoleForSasCspm**:用于云安全中心-CSPM(sas-cspm)的服务关联角色,sas-cspm使用此角色来访问您在其他云产品中的资源。', 'type' => 'string', 'required' => false, 'example' => 'AliyunServiceRoleForWebsiteBuildPublish'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => '1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6'],
'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '查询结果。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体内容经过Base 64算法加密后的字符串。',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => 'E00516EB-A56A-5381-ACFE-E618DBC3D0EA'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-创建服务关联角色并授权云安全中心访问云资源',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"E00516EB-A56A-5381-ACFE-E618DBC3D0EA\\"\\n }\\n }\\n}","type":"json"}]',
],
'CreateVirusScanOnceTask' => [
'summary' => '创建全盘扫描任务',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'create',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['title' => '地域id', 'description' => '地域id', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'],
],
[
'name' => 'Ip',
'in' => 'query',
'schema' => ['title' => '公网ip', 'description' => '公网ip', 'type' => 'string', 'required' => false, 'example' => '12.3*.22.11'],
],
[
'name' => 'InstanceId',
'in' => 'query',
'schema' => ['title' => '实例id', 'description' => '实例id', 'type' => 'string', 'required' => false, 'example' => 'rm-0iw73ro05vcwn6ntq'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '739705BB-B0EF-554B-B3A8-383F4F93E067'],
'Code' => ['description' => '调用失败时,返回的错误码。更多信息,请参见错误码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '返回数据。',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '请求ID。', 'type' => 'string', 'example' => '1D345A09-5ABD-593C-9C26-5C2B28632CD6'],
'Uuid' => ['title' => '服务器id', 'description' => '服务器id', 'type' => 'string', 'example' => '9ef1a02e1de695cb7f9fea2c6c145853eklEsP2JP0Z'],
'BusinessType' => ['title' => '资产选择业务类型。取值:'."\n"
."\n"
.'VIRUS_SCAN_CYCLE_CONFIG:病毒查杀配置'."\n"
.'VIRUS_SCAN_ONCE_TASK:病毒查杀一次性扫描'."\n"
.'AGENTLESS_MALICIOUS_WHITE_LIST_[ID]:无代理检测告警加白规则'."\n"
.'AGENTLESS_VUL_WHITE_LIST_[ID]:无代理检测漏洞加白规则'."\n"
.'FILE_PROTECT_RULE_SWITCH_TYPE_[ID]:核心文件保护', 'description' => '资产选择业务类型。取值:'."\n"
."\n"
.'- **VIRUS_SCAN_CYCLE_CONFIG**:病毒查杀配置'."\n"
.'- **VIRUS_SCAN_ONCE_TASK**:病毒查杀一次性扫描', 'type' => 'string', 'example' => 'VIRUS_SCAN_CYCLE_CONFIG'],
'Platform' => ['title' => '目标资产操作系统。取值:'."\n"
."\n"
.'all:所有操作系统'."\n"
.'windows:windows 操作系统'."\n"
.'linux:linux 操作系统'."\n"
.'说明 该值为空时,默认根据 BusinessType 值进行匹配。'."\n"
.'VIRUS_SCAN_CYCLE_CONFIG:该值为 all'."\n"
.'VIRUS_SCAN_ONCE_TASK:该值为 all'."\n"
.'AGENTLESS_MALICIOUS_WHITE_LIST_[ID]:该值为 all'."\n"
.'AGENTLESS_VUL_WHITE_LIST_[ID]:该值为 all'."\n"
.'FILE_PROTECT_RULE_SWITCH_TYPE_[ID]:该值为 linux', 'description' => '目标资产操作系统。取值:'."\n"
."\n"
.'- **windows**:windows 操作系统'."\n"
.'- **linux**:linux 操作系统', 'type' => 'string', 'example' => 'windows'],
'SelectionKey' => ['title' => '本次资产选择的唯一标识,可用于查询、修改此次资产选择对应的资产。', 'description' => '本次资产选择的唯一标识,可用于查询、修改此次资产选择对应的资产。', 'type' => 'integer', 'format' => 'int32', 'example' => '87af4d19-38fc-408d-9549-2bf7b6c2a4b9'],
'TargetType' => ['title' => '目标资产类型。取值:'."\n"
."\n"
.'all_instance:全部服务器'."\n"
.'instance:按服务器选择'."\n"
.'group:按分组选择'."\n"
.'vpc:按 VPC 选择', 'description' => '目标资产类型。取值:'."\n"
."\n"
.'- **all_instance**:全部服务器'."\n"
.'- **instance**:按服务器选择'."\n"
.'- **group**:按分组选择'."\n"
.'- **vpc**:按 VPC 选择', 'type' => 'string', 'example' => 'all_instance'],
],
],
],
],
],
],
'errorCodes' => [
400 => [
['errorCode' => 'InvalidParameter', 'errorMessage' => 'Specified parameter is not valid.', 'description' => ''],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '创建全盘扫描任务',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"739705BB-B0EF-554B-B3A8-383F4F93E067\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"1D345A09-5ABD-593C-9C26-5C2B28632CD6\\",\\n \\"Uuid\\": \\"9ef1a02e1de695cb7f9fea2c6c145853eklEsP2JP0Z\\",\\n \\"BusinessType\\": \\"VIRUS_SCAN_CYCLE_CONFIG\\",\\n \\"Platform\\": \\"windows\\",\\n \\"SelectionKey\\": 0,\\n \\"TargetType\\": \\"all_instance\\"\\n }\\n}","type":"json"}]',
],
'DescribeCloudCenterInstances' => [
'summary' => 'sas-查询云安全中心实例列表',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '要查询的实例所在地域的 ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-beijing'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求',
'type' => 'object',
'properties' => [
'Criteria' => ['description' => '设置搜索资产的条件。该参数 JSON 格式,输入参数时注意大小写。'."\n"
.'>支持使用资产的实例 ID、实例名称、所属 VPC ID、地域、公网 IP 地址等条件搜索资产。您可以调用 DescribeCriteria 接口查询支持的搜索条件。', 'type' => 'string', 'required' => false, 'example' => '{\\"contactIds\\":[\\"job-658854766790086656\\",\\"job-658854801112113152\\"]}'],
'CurrentPage' => ['description' => '当前页码。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
'Flags' => ['description' => '资产厂商。多个资产厂商之间使用半角逗号(,)分隔。取值:'."\n"
."\n"
.'- **0**:阿里云资产'."\n"
.'- **1**:云外资产'."\n"
.'- **2**:IDC资产'."\n"
.'- **3**、**4**、**5**、**7**、**14**、**16**:其它云资产'."\n"
.'- **8**:轻量级资产'."\n"
.'- **9**:SAE'."\n"
.'- **10**:PAI', 'type' => 'string', 'required' => false, 'example' => '0,10,13'],
'Importance' => ['description' => '设置资产重要性。取值:'."\n"
.'- **2**:重要资产'."\n"
.'- **1**:一般资产'."\n"
.'- **0**:测试资产', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '2'],
'Lang' => ['description' => '返回值语言,取值:'."\n"
.'- zh:中文'."\n"
.'- en:英文'."\n"
."\n"
.'默认:en', 'type' => 'string', 'required' => false, 'example' => 'zh'],
'LogicalExp' => ['description' => '设置多个搜索条件间生效的逻辑关系。取值:'."\n"
.'- **OR**:表示多个条件间为**或**的关系。'."\n"
.'- **AND**:表示多个条件间为**与**的关系。', 'type' => 'string', 'required' => false, 'example' => 'AND'],
'MachineTypes' => ['description' => '要查询的资产的类型。取值:'."\n"
."\n"
.'- **ecs**:服务器'."\n"
.'- **cloud_product**:云产品'."\n"
.'- **eci**:弹性容器实例'."\n"
.'- **rund**:RunD 容器实例'."\n"
.'- **runc**:RunC 容器实例', 'type' => 'string', 'required' => false, 'example' => 'ecs'],
'NextToken' => ['description' => '用于获取下一页结果的分页令牌。若无更多结果,则不返回此字段。', 'type' => 'string', 'required' => false, 'example' => 'AAAAAZak7VOTMl2OSt/xmc4J6gbg4Z5eXuWnrvKgOsGARL76TVbKERXHXKNFurqjtfDdRw=='],
'NoGroupTrace' => ['description' => '默认分组**未分组**是否要做国际化处理。默认**false**,取值:'."\n"
."\n"
.'- **true**:不做国际化处理。即返回参数GroupTrace的取值为云安全中心的默认分组**未分组**时,**未分组**仍然显示为**未分组**。'."\n"
.'- **false**:需要国际化处理。即返回参数GroupTrace的取值为云安全中心的默认分组**未分组**时,**未分组**显示为**default**。'."\n", 'type' => 'boolean', 'required' => false, 'example' => 'true'],
'PageSize' => ['description' => '设置分页查询时,每页显示的资产的数量。默认值为 20,表示每页显示 20 条资产信息。', 'type' => 'string', 'required' => false, 'example' => '99'],
'ResourceDirectoryAccountId' => ['description' => '资源目录成员账号ID。'."\n"
.'>调用[DescribeMonitorAccounts](~~DescribeMonitorAccounts~~)接口可以获取该参数。', 'type' => 'string', 'required' => false, 'example' => '1587359978118481'],
'UseNextToken' => ['description' => '是否使用NextToken方式拉取漏洞列表数据。如果使用此参数TotalCount不再返回。取值:'."\n"
."\n"
.'- **true**:使用NextToken方式。'."\n"
.'- **false**:不使用NextToken方式。', 'type' => 'boolean', 'required' => false, 'example' => 'true'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => '1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6'],
'Code' => ['description' => '接口调用状态', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '错误信息。', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '请求是否成功。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '实例详情列表。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体内容经过Base 64算法加密后的字符串。',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => '20EBDE7B-AA36-5D60-9DCA-151C48EDB9F8'],
'Instances' => [
'description' => '资产详细信息列表。',
'type' => 'array',
'items' => [
'description' => '资产详细信息。',
'type' => 'object',
'properties' => [
'AlarmStatus' => ['description' => '镜像是否存在安全告警。取值:'."\n"
.'- **YES**:存在安全告警'."\n"
.'- **NO**:不存在安全告警', 'type' => 'string', 'example' => 'NO'],
'AppId' => ['description' => '应用ID'."\n"
."\n"
.'>该数据仅当 Vendor 为 9 时可存在。', 'type' => 'string', 'example' => 'FC2U0JVHWS49S2OT'],
'AppName' => ['description' => '应用名称'."\n"
.'>该数据仅当 Vendor 为 9 时可存在。', 'type' => 'string', 'example' => 'guokent'],
'AssetType' => ['description' => '资产的类型。取值:'."\n"
."\n"
.'- **0**:云服务器'."\n"
.'- **1**:负载均衡'."\n"
.'- **2**:NAT 网关'."\n"
.'- **3**:RDS 数据库'."\n"
.'- **4**:MongoDb 数据库'."\n"
.'- **5**:REDIS 数据库'."\n"
.'- **6**:容器镜像'."\n"
.'- **7**:容器', 'type' => 'string', 'example' => '1'],
'AssetTypeName' => ['description' => '资产的类型名称。', 'type' => 'string', 'example' => 'xxxxxx'],
'AuthModifyTime' => ['description' => '资产的授权绑定时间戳。单位:毫秒。'."\n"
."\n"
.'> 请注意,该值为 Long 类型,在某些语言中可能存在精度丢失的风险,请小心使用。', 'type' => 'integer', 'format' => 'int64', 'example' => '1627974044000'],
'AuthVersion' => ['description' => '资产的授权版本。取值:'."\n"
."\n"
.'- **1**:免费版(未授权)'."\n"
.'- **6**:防病毒版'."\n"
.'- **5**:高级版'."\n"
.'- **3**:企业版'."\n"
.'- **7**:旗舰版', 'type' => 'integer', 'format' => 'int32', 'example' => '5'],
'AuthVersionName' => ['description' => '资产的授权版本(具体名称)。取值:'."\n"
."\n"
.'- 免费版'."\n"
.'- 防病毒版'."\n"
.'- 高级版'."\n"
.'- 企业版'."\n"
.'- 旗舰版', 'type' => 'string', 'example' => '免费版'],
'Bind' => ['description' => '资产是否已绑定授权。取值:'."\n"
."\n"
.'- **true**:已绑定授权'."\n"
.'- **false**:未绑定授权', 'type' => 'boolean', 'example' => 'true'],
'BindFileProtectType' => ['description' => '是否绑定防篡改授权。取值:'."\n"
."\n"
.'- **block**:是'."\n"
.'- **none**:否', 'type' => 'string', 'example' => 'none'],
'ClientStatus' => ['description' => '实例的客户端在线状态。取值:'."\n"
."\n"
.'- **online**:在线,表示资产的 Agent 客户端状态为开启。'."\n"
.'- **offline**:离线,表示资产的 Agent 客户端状态为关闭。'."\n"
.'- **pause**:暂停,表示资产的 Agent 客户端状态为暂停保护。', 'type' => 'string', 'example' => 'online'],
'ClientSubStatus' => ['description' => '实例的客户端子状态。取值:'."\n"
."\n"
.'- **online**:在线,表示资产的Agent客户端状态为**开启**。'."\n"
.'- **offline**:离线,表示资产的Agent客户端状态为**关闭**。'."\n"
.'- **pause**:暂停,表示资产的Agent客户端状态为**暂停保护**。'."\n"
.'- **uninstalled**:未安装,表示资产的Agent客户端状态为**未安装**。'."\n"
.'- **stopped**:服务器关机,表示资产的Agent客户端状态**服务器关机**。', 'type' => 'string', 'example' => 'online'],
'ClusterId' => ['description' => '资源组所在的集群ID。', 'type' => 'string', 'example' => 'cb703cb0ba6bd40d4a6d8de5bff050fb9'],
'ClusterName' => ['description' => '集群名称', 'type' => 'string', 'example' => 'auto-cn-heyuan'],
'Cores' => ['description' => '资产的 CPU 核数。', 'type' => 'integer', 'format' => 'int32', 'example' => '9'],
'CpuInfo' => ['description' => '资产的CPU信息。', 'type' => 'string', 'example' => 'Intel(R) Xeon(R) Platinum 8269CY CPU @ 2.50GHz'],
'CreatedTime' => ['description' => '集群创建的时间戳,单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1607365213000'],
'ExposedStatus' => ['description' => '资产暴露状态。取值:'."\n"
."\n"
.'- **0**: 未暴露'."\n"
.'- **1**: 已暴露', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
'Flag' => ['description' => '资产厂商。多个资产厂商之间使用半角逗号(,)分隔。取值:'."\n"
."\n"
.'- **0**:阿里云资产'."\n"
.'- **1**:云外资产'."\n"
.'- **2**:IDC 资产'."\n"
.'- **3、4、5、7、14、16**:其它云资产'."\n"
.'- **8**:轻量级资产'."\n"
.'- **9**:SAE'."\n"
.'- **10**:PAI', 'type' => 'integer', 'format' => 'int32', 'example' => '0,1,2'],
'FlagName' => ['description' => '资产厂商。取值:'."\n"
.'- **ALIYUN**'."\n"
.'- **OUT**'."\n"
.'- **IDC**'."\n"
.'- **Tencent**'."\n"
.'- **HUAWEICLOUD**'."\n"
.'- **Azure**'."\n"
.'- **AWS**'."\n"
.'- **ASK**'."\n"
.'- **TRIPARTITE**'."\n"
.'- **SAE**'."\n"
.'- **PAI**'."\n"
.'- **google**'."\n"
.'- **VOLCENGINE**', 'type' => 'string', 'example' => 'ALIYUN'],
'GroupId' => ['description' => '实例所属分组 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '86d30f8b0e124aadb7ef3197f9dbd1f5'],
'GroupTrace' => ['description' => '资产所在的分组的名称。', 'type' => 'string', 'example' => 'default'],
'HasContainer' => ['description' => '是否含有容器。取值:'."\n"
."\n"
.'- **YES**:有。'."\n"
.'- **NO**:无。', 'type' => 'string', 'example' => 'YES'],
'HcStatus' => ['description' => '实例是否检测出了基线风险项。取值:'."\n"
.'- **YES**:检测出了基线风险项'."\n"
.'- **NO**:未检测出基线风险项', 'type' => 'string', 'example' => 'YES'],
'HealthCheckCount' => ['description' => '实例中存在的基线风险数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'Importance' => ['description' => '设置资产重要性。取值:'."\n"
.'- **2**:重要资产'."\n"
.'- **1**:一般资产'."\n"
.'- **0**:测试资产', 'type' => 'integer', 'format' => 'int32', 'example' => '2'],
'InstanceId' => ['description' => '实例id', 'type' => 'string', 'example' => 'ls-cn-tl32rf**008'],
'InstanceName' => ['description' => '实例名称。', 'type' => 'string', 'example' => 'ra-supabase-22u1iv3hr**5v9'],
'InternetIp' => ['description' => '关联实例的公网IP。', 'type' => 'string', 'example' => '47.1**.52.125'],
'IntranetIp' => ['description' => '当前服务器的私网IP地址。'."\n", 'type' => 'string', 'example' => '172.16.1**.245'],
'Ip' => ['description' => '管控IP', 'type' => 'string', 'example' => '114.55.*4.*6'],
'IpListString' => ['description' => '系统的IP列表。', 'type' => 'string', 'example' => '172.31.XX.XX,172.171.XX.XX'],
'Kernel' => ['description' => '内核版本信息。', 'type' => 'string', 'example' => '3.10.0-1127.19.1.el7.x86_64'],
'LastLoginTimestamp' => ['description' => '客户端最后上线的时间戳。单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1637592907000'],
'MacListString' => ['description' => '系统的Mac地址。', 'type' => 'string', 'example' => '00:13:3e:31:13:39,02:12:67:b8:**:**'],
'Mem' => ['description' => '内存总量,单位为MB。', 'type' => 'string', 'example' => '1024'],
'Namespace' => ['description' => '命名空间。', 'type' => 'string', 'example' => 'slsshpcorlsmetrics'],
'Os' => ['description' => '实例的操作系统。取值:'."\n"
."\n"
.'- **linux**:linux'."\n"
."\n"
.'- **windows**:windows', 'type' => 'string', 'example' => 'linux'],
'OsName' => ['description' => '实例的内核版本。', 'type' => 'string', 'example' => 'AliOS7U2-x86-64'],
'PodCount' => ['description' => '容器组个数。', 'type' => 'integer', 'format' => 'int32', 'example' => '8'],
'PostPaidFlag' => ['description' => '当前资产绑定的防护版本计费方式。取值:'."\n"
.'- **0**:包年包月'."\n"
.'- **1**:按量付费', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'Region' => ['description' => '实例所属地域 ID。', 'type' => 'string', 'example' => 'cn-hangzhouxxxx'],
'RegionId' => ['description' => '资产所在的地域的 ID。', 'type' => 'string', 'example' => 'cn-zhangjiakou'],
'RegionName' => ['description' => '地域名称。', 'type' => 'string', 'example' => 'cn-shanghai'],
'RiskCount' => ['description' => '资产存在的风险项统计。JSON 格式,包含以下字段:'."\n"
."\n"
.'- **account**:异地登录和爆破成功的账号数量'."\n"
.'- **appNum**:扫描器漏洞数量'."\n"
.'- **asapVulCount**:高危漏洞总数量'."\n"
.'- **baselineHigh**:高危基线风险数量'."\n"
.'- **baselineLow**:低危基线风险数量'."\n"
.'- **baselineMedium**:中危基线风险数量'."\n"
.'- **baselineNum**: 云产品配置风险总数量'."\n"
.'- **cmsNum**: WEB-CMS 漏洞数量'."\n"
.'- **containerAsap**: 容器高危漏洞数量'."\n"
.'- **containerLater**:容器中危漏洞数量'."\n"
.'- **containerNntf**: 容器低危漏洞数量'."\n"
.'- **containerRemind**:容器提醒告警数量'."\n"
.'- **containerSerious**:容器紧急告警数量'."\n"
.'- **containerSuspicious**:容器可疑告警数量'."\n"
.'- **cveNum**:Linux 漏洞数量'."\n"
.'- **emgNum**:应急漏洞数量'."\n"
.'- **health**:未处理的基线告警数量'."\n"
.'- **imageBaselineHigh**:镜像高危基线风险数量'."\n"
.'- **imageBaselineLow**:镜像低危基线风险数量'."\n"
.'- **imageBaselineMedium**:镜像中危基线风险数量'."\n"
.'- **imageBaselineNum**:镜像基线风险总数量'."\n"
.'- **imageMaliciousFileRemind**:镜像提醒恶意文件数量'."\n"
.'- **imageMaliciousFileSerious**:镜像紧急恶意文件数量'."\n"
.'- **imageMaliciousFileSuspicious**:镜像可疑恶意文件数量'."\n"
.'- **imageVulAsap**:镜像高危漏洞数量'."\n"
.'- **imageVulLater**:镜像中危漏洞数量'."\n"
.'- **imageVulNntf**:镜像低危漏洞数量'."\n"
.'- **laterVulCount**:中危漏洞数量'."\n"
.'- **newSuspicious**:告警数量'."\n"
.'- **nntfVulCount**:低危漏洞数量'."\n"
.'- **remindNum**:提醒告警数量'."\n"
.'- **scaNum**:软件成分分析漏洞数量'."\n"
.'- **seriousNum**:紧急告警数量'."\n"
.'- **suspNum**:可疑告警数量'."\n"
.'- **suspicious**:告警总数量'."\n"
.'- **sysNum**:Windows 漏洞数量'."\n"
.'- **trojan**:木马数量'."\n"
.'- **uuid**:资产 UUID'."\n"
.'- **vul**:漏洞数量'."\n"
.'- **weakPWNum**:弱口令数量', 'type' => 'string', 'example' => '{'."\n"
.' "account": 0,'."\n"
.' "appNum": 0,'."\n"
.' "asapVulCount": 0,'."\n"
.' "baselineHigh": 0,'."\n"
.' "baselineLow": 0,'."\n"
.' "baselineMedium": 0,'."\n"
.' "baselineNum": 0,'."\n"
.' "cmsNum": 0,'."\n"
.' "containerAsap": 0,'."\n"
.' "containerLater": 0,'."\n"
.' "containerNntf": 0,'."\n"
.' "containerRemind": 0,'."\n"
.' "containerSerious": 0,'."\n"
.' "containerSuspicious": 0,'."\n"
.' "cveNum": 0,'."\n"
.' "emgNum": 0,'."\n"
.' "health": 0,'."\n"
.' "imageBaselineHigh": 0,'."\n"
.' "imageBaselineLow": 0,'."\n"
.' "imageBaselineMedium": 0,'."\n"
.' "imageBaselineNum": 0,'."\n"
.' "imageMaliciousFileRemind": 0,'."\n"
.' "imageMaliciousFileSerious": 0,'."\n"
.' "imageMaliciousFileSuspicious": 0,'."\n"
.' "imageVulAsap": 0,'."\n"
.' "imageVulLater": 0,'."\n"
.' "imageVulNntf": 0,'."\n"
.' "laterVulCount": 0,'."\n"
.' "newSuspicious": 0,'."\n"
.' "nntfVulCount": 0,'."\n"
.' "remindNum": 0,'."\n"
.' "scaNum": 0,'."\n"
.' "seriousNum": 0,'."\n"
.' "suspNum": 0,'."\n"
.' "suspicious": 0,'."\n"
.' "sysNum": 0,'."\n"
.' "trojan": 0,'."\n"
.' "uuid": "inet-37316411-37fe-4b72-b245-346a2721****",'."\n"
.' "vul": 0,'."\n"
.' "weakPWNum": 0'."\n"
.'}'],
'RiskStatus' => ['description' => '是否存在风险 。取值:'."\n"
."\n"
.'- **NO**:无风险'."\n"
.'- **YES**:有风险', 'type' => 'string', 'example' => 'NO'],
'SafeEventCount' => ['description' => '资产存在的安全告警数量。', 'type' => 'string', 'example' => '5'],
'ServiceId' => ['description' => '服务 ID,仅实例为 Serverless 实例,且归属于 PAI 平台时有值。', 'type' => 'string', 'example' => 'dsw-76jlywunsif09bp15p'],
'Status' => ['description' => '实例的运行状态。取值:'."\n"
."\n"
.'- **Running**:运行中。'."\n"
.'- **notRunning**:已关机。', 'type' => 'string', 'example' => 'Running'],
'Tag' => ['description' => '资产实例的标签名称。', 'type' => 'string', 'example' => 'pre_20250714_idpt_adjust'],
'TagId' => ['description' => '资产的标签 ID。', 'type' => 'string', 'example' => 'd8586ab8be4549e3815995858d277763'],
'TagResources' => ['description' => '灵骏节点自定义标签,当机器是灵骏机器时才会返回值。', 'type' => 'string', 'example' => 'app:test,type:lingjun'],
'Uuid' => ['description' => '终端设备UUID。', 'type' => 'string', 'example' => '1f0459ee-ed49-6484-8958-4f10f61e6362'],
'Vendor' => ['description' => '资产厂商。取值:'."\n"
."\n"
.'- **0**:阿里云资产'."\n"
.'- **1**:云外资产'."\n"
.'- **2**:IDC资产'."\n"
.'- **3**、**4**、**5**、**7**、**14**、**16**:其它云资产'."\n"
.'- **8**:轻量级资产'."\n"
.'- **9**:SAE'."\n"
.'- **10**:PAI', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
'VendorName' => ['description' => '资产的服务商名称。'."\n"
."\n"
.'- 取值:'."\n"
.'- '."\n"
.'- **ALIYUN**:阿里云'."\n"
.'- **OUT**:云外资产'."\n"
.'- **IDC**:IDC'."\n"
.'- **TENCENT**:其它云'."\n"
.'- **HUAWEICLOUD**:其它云'."\n"
.'- **Microsoft**:其它云'."\n"
.'- **AWS**:其它云'."\n"
.'- **TRIPARTITE**:轻量级服务器'."\n"
.'- **SAE**:SAE'."\n"
.'- **PAI**:PAI'."\n"
.'- **VOLCENGINE**:其它云'."\n"
.'- **google**:其它云', 'type' => 'string', 'example' => 'IDC'],
'VendorUid' => ['description' => '多云实例的账号ID。', 'type' => 'string', 'example' => '123'],
'VendorUserName' => ['description' => '多云实例的账号名称。', 'type' => 'string', 'example' => 'VendorUserName'],
'VpcInstanceId' => ['description' => '实例所属 VPC 的 ID。', 'type' => 'string', 'example' => 'vpc-2zek7v0z4r6lbp02xckei'],
'VulCount' => ['description' => '实例上存在的漏洞数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'],
'VulStatus' => ['description' => '实例是否存在漏洞。取值:'."\n"
.'- **YES**:存在漏洞。'."\n"
.'- **NO**:不存在漏洞。', 'type' => 'string', 'example' => 'YES'],
],
],
],
'PageInfo' => [
'description' => '驱动数量。',
'type' => 'object',
'properties' => [
'Count' => ['description' => '总数。', 'type' => 'integer', 'format' => 'int32', 'example' => '7'],
'CurrentPage' => ['description' => '分页查询时,每页最大行数。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'NextToken' => ['description' => '使用 NextToken 方式下返回的 NextToken 值。', 'type' => 'string', 'example' => 'm1NGAAAAAABzLzIwMjQwMg=='],
'PageSize' => ['description' => '每页返回记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '10'],
'TotalCount' => ['description' => '总记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
],
],
'Success' => ['description' => '是否调用成功:true:调用成功。 false:调用失败。', 'type' => 'boolean', 'example' => 'True'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-查询资产信息',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1B4C9A14-94E6-5EEB-BF39-7DACCE9AC0D6\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"20EBDE7B-AA36-5D60-9DCA-151C48EDB9F8\\",\\n \\"Instances\\": [\\n {\\n \\"AlarmStatus\\": \\"NO\\",\\n \\"AppId\\": \\"FC2U0JVHWS49S2OT\\",\\n \\"AppName\\": \\"guokent\\",\\n \\"AssetType\\": \\"1\\",\\n \\"AssetTypeName\\": \\"xxxxxx\\",\\n \\"AuthModifyTime\\": 1627974044000,\\n \\"AuthVersion\\": 5,\\n \\"AuthVersionName\\": \\"免费版\\",\\n \\"Bind\\": true,\\n \\"BindFileProtectType\\": \\"none\\",\\n \\"ClientStatus\\": \\"online\\",\\n \\"ClientSubStatus\\": \\"online\\",\\n \\"ClusterId\\": \\"cb703cb0ba6bd40d4a6d8de5bff050fb9\\",\\n \\"ClusterName\\": \\"auto-cn-heyuan\\",\\n \\"Cores\\": 9,\\n \\"CpuInfo\\": \\"Intel(R) Xeon(R) Platinum 8269CY CPU @ 2.50GHz\\",\\n \\"CreatedTime\\": 1607365213000,\\n \\"ExposedStatus\\": 0,\\n \\"Flag\\": 0,\\n \\"FlagName\\": \\"ALIYUN\\",\\n \\"GroupId\\": 0,\\n \\"GroupTrace\\": \\"default\\",\\n \\"HasContainer\\": \\"YES\\",\\n \\"HcStatus\\": \\"YES\\",\\n \\"HealthCheckCount\\": 1,\\n \\"Importance\\": 2,\\n \\"InstanceId\\": \\"ls-cn-tl32rf**008\\",\\n \\"InstanceName\\": \\"ra-supabase-22u1iv3hr**5v9\\",\\n \\"InternetIp\\": \\"47.1**.52.125\\",\\n \\"IntranetIp\\": \\"172.16.1**.245\\",\\n \\"Ip\\": \\"114.55.*4.*6\\",\\n \\"IpListString\\": \\"172.31.XX.XX,172.171.XX.XX\\",\\n \\"Kernel\\": \\"3.10.0-1127.19.1.el7.x86_64\\",\\n \\"LastLoginTimestamp\\": 1637592907000,\\n \\"MacListString\\": \\"00:13:3e:31:13:39,02:12:67:b8:**:**\\",\\n \\"Mem\\": \\"1024\\",\\n \\"Namespace\\": \\"slsshpcorlsmetrics\\",\\n \\"Os\\": \\"linux\\",\\n \\"OsName\\": \\"AliOS7U2-x86-64\\",\\n \\"PodCount\\": 8,\\n \\"PostPaidFlag\\": 1,\\n \\"Region\\": \\"cn-hangzhouxxxx\\",\\n \\"RegionId\\": \\"cn-zhangjiakou\\",\\n \\"RegionName\\": \\"cn-shanghai\\",\\n \\"RiskCount\\": \\"{\\\\n \\\\\\"account\\\\\\": 0,\\\\n \\\\\\"appNum\\\\\\": 0,\\\\n \\\\\\"asapVulCount\\\\\\": 0,\\\\n \\\\\\"baselineHigh\\\\\\": 0,\\\\n \\\\\\"baselineLow\\\\\\": 0,\\\\n \\\\\\"baselineMedium\\\\\\": 0,\\\\n \\\\\\"baselineNum\\\\\\": 0,\\\\n \\\\\\"cmsNum\\\\\\": 0,\\\\n \\\\\\"containerAsap\\\\\\": 0,\\\\n \\\\\\"containerLater\\\\\\": 0,\\\\n \\\\\\"containerNntf\\\\\\": 0,\\\\n \\\\\\"containerRemind\\\\\\": 0,\\\\n \\\\\\"containerSerious\\\\\\": 0,\\\\n \\\\\\"containerSuspicious\\\\\\": 0,\\\\n \\\\\\"cveNum\\\\\\": 0,\\\\n \\\\\\"emgNum\\\\\\": 0,\\\\n \\\\\\"health\\\\\\": 0,\\\\n \\\\\\"imageBaselineHigh\\\\\\": 0,\\\\n \\\\\\"imageBaselineLow\\\\\\": 0,\\\\n \\\\\\"imageBaselineMedium\\\\\\": 0,\\\\n \\\\\\"imageBaselineNum\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileRemind\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileSerious\\\\\\": 0,\\\\n \\\\\\"imageMaliciousFileSuspicious\\\\\\": 0,\\\\n \\\\\\"imageVulAsap\\\\\\": 0,\\\\n \\\\\\"imageVulLater\\\\\\": 0,\\\\n \\\\\\"imageVulNntf\\\\\\": 0,\\\\n \\\\\\"laterVulCount\\\\\\": 0,\\\\n \\\\\\"newSuspicious\\\\\\": 0,\\\\n \\\\\\"nntfVulCount\\\\\\": 0,\\\\n \\\\\\"remindNum\\\\\\": 0,\\\\n \\\\\\"scaNum\\\\\\": 0,\\\\n \\\\\\"seriousNum\\\\\\": 0,\\\\n \\\\\\"suspNum\\\\\\": 0,\\\\n \\\\\\"suspicious\\\\\\": 0,\\\\n \\\\\\"sysNum\\\\\\": 0,\\\\n \\\\\\"trojan\\\\\\": 0,\\\\n \\\\\\"uuid\\\\\\": \\\\\\"inet-37316411-37fe-4b72-b245-346a2721****\\\\\\",\\\\n \\\\\\"vul\\\\\\": 0,\\\\n \\\\\\"weakPWNum\\\\\\": 0\\\\n}\\",\\n \\"RiskStatus\\": \\"NO\\",\\n \\"SafeEventCount\\": \\"5\\",\\n \\"ServiceId\\": \\"dsw-76jlywunsif09bp15p\\",\\n \\"Status\\": \\"Running\\",\\n \\"Tag\\": \\"pre_20250714_idpt_adjust\\",\\n \\"TagId\\": \\"d8586ab8be4549e3815995858d277763\\",\\n \\"TagResources\\": \\"app:test,type:lingjun\\",\\n \\"Uuid\\": \\"1f0459ee-ed49-6484-8958-4f10f61e6362\\",\\n \\"Vendor\\": 0,\\n \\"VendorName\\": \\"IDC\\",\\n \\"VendorUid\\": \\"123\\",\\n \\"VendorUserName\\": \\"VendorUserName\\",\\n \\"VpcInstanceId\\": \\"vpc-2zek7v0z4r6lbp02xckei\\",\\n \\"VulCount\\": 2,\\n \\"VulStatus\\": \\"YES\\"\\n }\\n ],\\n \\"PageInfo\\": {\\n \\"Count\\": 7,\\n \\"CurrentPage\\": 1,\\n \\"NextToken\\": \\"m1NGAAAAAABzLzIwMjQwMg==\\",\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 0\\n },\\n \\"Success\\": true\\n }\\n }\\n}","type":"json"}]',
],
'DescribeServiceLinkedRoleStatus' => [
'summary' => 'sas-查询服务关联角色状态',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '要查询的实例所在地域的 ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求',
'type' => 'object',
'properties' => [
'ServiceLinkedRole' => ['description' => '关联角色。默认**AliyunServiceRoleForSas**。取值:'."\n"
."\n"
.'- **AliyunServiceRoleForSas**:用于云安全中心(sas)的服务关联角色,云安全中心(sas)使用此角色来访问您在其他云产品中的资源。'."\n"
.'- **AliyunServiceRoleForSasCspm**:用于云安全中心-CSPM(sas-cspm)的服务关联角色,sas-cspm使用此角色来访问您在其他云产品中的资源。', 'type' => 'string', 'required' => false, 'example' => 'AliyunServiceRoleForSas'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次调用请求的 ID,是由阿里云为该请求生成的唯一标识符,可用于排查和定位问题。', 'type' => 'string', 'example' => 'EF972A16-95FB-5EF2-9CED-208A74DEF040'],
'Code' => ['description' => '接口调用状态', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '消息。', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '查询结果。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => '7F14E3C8-A6AA-5D3C-B7E0-ABA2AC171EFC'],
'RoleStatus' => [
'description' => '服务关联角色的状态',
'type' => 'object',
'properties' => [
'Status' => ['description' => '服务关联角色的状态。取值:'."\n"
."\n"
.'- **true**:已创建'."\n"
.'- **false**:未创建', 'type' => 'boolean', 'example' => 'true'],
],
],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-查询您是否已创建云安全中心服务关联角色',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EF972A16-95FB-5EF2-9CED-208A74DEF040\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"7F14E3C8-A6AA-5D3C-B7E0-ABA2AC171EFC\\",\\n \\"RoleStatus\\": {\\n \\"Status\\": true\\n }\\n }\\n }\\n}","type":"json"}]',
],
'DescribeSuspEvents' => [
'summary' => 'sas-查询安全告警事件',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求参数',
'type' => 'object',
'properties' => [
'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识ID。'."\n"
."\n"
.'> 如果查询单个告警事件的异常事件信息,需要提供告警事件的唯一标识 ID,该 ID 可调用 DescribeSuspEvents 接口获取。', 'type' => 'string', 'required' => false, 'example' => '6838133766c37077d0515b0b557e6510'],
'AssetsTypeList' => [
'description' => '资产类型集合。',
'type' => 'array',
'items' => ['description' => '资产类型。'."\n"
."\n"
.'- **ECS**:云服务器'."\n"
.'- **CONTAINER**:容器'."\n"
.'- **K8S**:K8s 集群', 'type' => 'string', 'required' => false, 'example' => 'K8S'],
'required' => false,
],
'ClusterId' => ['description' => '集群ID。', 'type' => 'string', 'required' => false, 'example' => 'xxljob-02f023138826b'],
'ContainerFieldName' => ['description' => '容器检索项。取值:'."\n"
."\n"
.'- **instanceId**:实例ID'."\n"
.'- **appName**:应用名'."\n"
.'- **clusterId**:集群ID'."\n"
.'- **regionId**:地域'."\n"
.'- **nodeName**:节点名'."\n"
.'- **namespace**:命名空间'."\n"
.'- **clusterName**:集群名称'."\n"
.'- **image**:镜像名称'."\n"
.'- **imageRepoName**:镜像的仓库名称'."\n"
.'- **imageRepoNamespace**:镜像的仓库命名空间'."\n"
.'- **imageRepoTag**:镜像的标签'."\n"
.'- **imageDigest**:镜像摘要', 'type' => 'string', 'required' => false, 'example' => 'instanceId'],
'ContainerFieldValue' => ['description' => '容器检索项对应值。', 'type' => 'string', 'required' => false, 'example' => 'ca9b91db58356b41af2932e8048310ab7daa415701fa62d823cf4f0406d5ce02'],
'CurrentPage' => ['description' => '当前页。', 'type' => 'string', 'required' => false, 'example' => '1'],
'Dealed' => ['description' => '告警事件状态。'."\n"
.'- N:待处理告警'."\n"
.'- Y:已处理告警', 'type' => 'string', 'required' => false, 'example' => 'Y'],
'DetectSource' => ['description' => '发现来源(无效字段)', 'type' => 'string', 'required' => false, 'example' => '-'],
'EventNames' => ['description' => '告警事件的子类型。多个类型之间使用半角逗号(,)隔开。'."\n", 'type' => 'string', 'required' => false, 'example' => 'WEBSHELL'],
'From' => ['description' => '请求来源标识,固定为**sas**。', 'type' => 'string', 'required' => false, 'example' => 'sas'],
'GroupId' => ['description' => '标签分组ID。'."\n"
."\n"
.'> 该字段类型为 Long,在序列化/反序列化的过程中可能导致精度丢失,请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '18768'],
'Id' => ['description' => '记录告警事件的唯一标识 ID。'."\n"
."\n"
.'> 该字段类型为 Long,在序列化/反序列化的过程中可能导致精度丢失,请注意数值不得大于 9007199254740991。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '3165'],
'Lang' => ['description' => '接收消息的语言类型。取值:'."\n"
."\n"
.'- **zh**(默认):中文'."\n"
.'- **en**:英文', 'type' => 'string', 'required' => false, 'example' => 'zh'],
'Levels' => ['description' => '告警事件的危险等级,多个严重等级用逗号分隔(严重等级递减)。'."\n"
.'- serious:紧急'."\n"
.'- suspicious:可疑'."\n"
.'- remind:提醒', 'type' => 'string', 'required' => false, 'example' => 'serious'],
'MultiAccountActionType' => ['description' => '多账号查询类型。默认值为**0**。取值:'."\n"
.'- **0**:查询当前账号数据'."\n"
.'- **1**:查询所有账号数据', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'],
'Name' => ['description' => '受该告警事件影响的资产的名称。', 'type' => 'string', 'required' => false, 'example' => 'ecs-xxx'],
'OperateErrorCodeList' => [
'description' => '告警事件处理结果码集合。',
'type' => 'array',
'items' => ['description' => '告警事件处理结果码。', 'type' => 'string', 'required' => false, 'example' => 'accurate_defense_mark_miss_filehash.success'],
'required' => false,
],
'OperateTimeEnd' => ['description' => '处理时间结束时间戳。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'],
'OperateTimeStart' => ['description' => '处理时间开始时间戳。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'],
'PageSize' => ['description' => '分页查询时,每页数据显示的最大条数。', 'type' => 'string', 'required' => false, 'example' => '1'],
'ParentEventTypes' => ['description' => '要查询的告警事件的告警类型。取值:'."\n"
."\n"
.'- **进程异常行为**'."\n"
.'- **网站后门**'."\n"
.'- **异常登录**'."\n"
.'- **异常事件**'."\n"
.'- **敏感文件篡改**'."\n"
.'- **恶意进程(云查杀)**'."\n"
.'- **异常网络连接**'."\n"
.'- **异常账号**'."\n"
.'- **应用入侵事件**'."\n"
.'- **云产品威胁检测**'."\n"
.'- **精准防御**'."\n"
.'- **应用白名单**'."\n"
.'- **持久化后门**'."\n"
.'- **Web 应用威胁检测**'."\n"
.'- **恶意脚本**'."\n"
.'- **威胁情报**'."\n"
.'- **恶意网络行为**'."\n"
.'- **容器集群异常**'."\n"
.'- **网站后门(本地查杀)**'."\n"
.'- **漏洞利用**'."\n"
.'- **恶意进程(本地查杀)**'."\n"
.'- **可信异常**'."\n"
.'- **其他**', 'type' => 'string', 'required' => false, 'example' => '恶意脚本'],
'Remark' => ['description' => '要查询的告警名称或资产的信息。'."\n"
."\n"
.'> 支持模糊查询。资产信息包含资产名称、公网 IP、内网 IP。', 'type' => 'string', 'required' => false, 'example' => '192.168.XX.XX'],
'ResourceDirectoryAccountId' => ['description' => '资源目录成员账号主账号ID。'."\n"
.'>调用[DescribeMonitorAccounts](~~DescribeMonitorAccounts~~)接口可以获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '5815612291408486'],
'SortColumn' => ['description' => '自定义排序字段,默认**operateTime**,取值:'."\n"
."\n"
.'- **lastTime**:最新发生时间。'."\n"
.'- **operateTime**:处理时间。'."\n"
."\n"
.'> 该字段作用于**Dealed**为Y。', 'type' => 'string', 'required' => false, 'example' => 'lastTime'],
'SortType' => ['description' => '按照证书到期时间排序的方式。'."\n"
."\n"
.'- **desc**:倒序'."\n"
.'- **asc**:正序', 'type' => 'string', 'required' => false, 'example' => 'asc'],
'Source' => ['description' => '告警来源。', 'type' => 'string', 'required' => false, 'example' => 'default'],
'SourceAliUids' => [
'description' => '产生告警的阿里云账号ID列表。',
'type' => 'array',
'items' => ['description' => '产生告警的阿里云账号ID。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1192843048227488'],
'required' => false,
],
'SourceIp' => ['description' => '访问源的IP地址。', 'type' => 'string', 'required' => false, 'example' => '2409:8a55:3827:cb50:5ad9:d5ff:fe87:f48c'],
'StrictMode' => ['description' => '是否属于严格模式告警标识。'."\n"
.'- N:否'."\n"
.'- Y:是', 'type' => 'string', 'required' => false, 'example' => 'N'],
'SupportOperateCodeList' => [
'description' => '告警支持的操作类型列表。',
'type' => 'array',
'items' => ['description' => '告警支持的操作类型:'."\n"
."\n"
.'- **AI.false_positive**:疑似误报'."\n"
.'- **AI.real_attack**:真实攻击'."\n"
.'- **AI.Insufficient_information_to_evaluate**:无法研判', 'type' => 'string', 'required' => false, 'example' => 'AI.false_positive'],
'required' => false,
],
'TacticId' => ['description' => 'ATT&CK 的战术 ID。', 'type' => 'string', 'required' => false, 'example' => 'TA0003'],
'TargetType' => ['description' => '容器检索目标类型。取值:'."\n"
.'- **containerId**:容器ID'."\n"
.'- **uuid**:服务器UUID'."\n"
.'- **imageUuid**:镜像UUID', 'type' => 'string', 'required' => false, 'example' => 'containerId'],
'TimeEnd' => ['description' => '最新发生时间结束时间。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'],
'TimeStart' => ['description' => '最新发生时间起始时间。', 'type' => 'string', 'required' => false, 'example' => '2022-07-06 13:50:38'],
'UniqueInfo' => ['description' => '安全告警的唯一 key。', 'type' => 'string', 'required' => false, 'example' => 'f82680d9fdcb74a520fa385b7e9105b7'],
'Uuids' => ['description' => '要查询告警的服务器的UUID,多个UUID使用半角逗号(,)分隔。', 'type' => 'string', 'required' => false, 'example' => 'inet-eae09bb8-32b1-413b-a8ff-23932e043209'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '本次请求的 ID。', 'type' => 'string', 'example' => '67BD8435-6624-5484-A75D-170231B51615'],
'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '返回信息。当请求成功时,返回成功信息;当请求失败时,返回失败原因。', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '操作是否成功。取值:true:成功。false:失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => 'Meta返回信息。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心的请求Id。', 'type' => 'string', 'example' => 'AD2345D1-A498-58AF-97C0-88940AF87CB7'],
'Count' => ['description' => '任务数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'CurrentPage' => ['description' => '当前页号。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'PageSize' => ['description' => '每页返回记录数。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'SuspEvents' => [
'description' => '告警事件信息。',
'type' => 'array',
'items' => [
'description' => '告警事件信息。',
'type' => 'object',
'properties' => [
'Advanced' => ['description' => '是否离线分析的告警。', 'type' => 'boolean', 'example' => 'true'],
'AlarmEventName' => ['description' => '告警事件名称。', 'type' => 'string', 'example' => '反弹shell_拦截'],
'AlarmEventNameDisplay' => ['description' => '告警名称。', 'type' => 'string', 'example' => 'Login with unusual location'],
'AlarmEventType' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'Unusual Logon'],
'AlarmEventTypeDisplay' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'Unusual Logon'],
'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识ID。', 'type' => 'string', 'example' => '8df914418f****'],
'AppName' => ['description' => '告警事件所属应用的名称。', 'type' => 'string', 'example' => 'dfield-cloud-service-prod'],
'AutoBreaking' => ['description' => '是否自动防御。', 'type' => 'boolean', 'example' => 'true'],
'CanBeDealOnLine' => ['description' => '是否支持在线处理告警事件,例如隔离。取值包括:'."\n"
."\n"
.'- **true**:支持在线处理'."\n"
.'- **false**:不支持在线处理', 'type' => 'boolean', 'example' => 'true'],
'CanCancelFault' => ['description' => '能否取消标记为误报。取值:'."\n"
."\n"
.'- **true**:可以取消'."\n"
.'- **false**:不能取消', 'type' => 'boolean', 'example' => 'true'],
'ContainHwMode' => ['description' => '是否为服务器开启了重保护模式。取值:'."\n"
.'- **true**:已开启。'."\n"
.'- **false**:未开启。', 'type' => 'boolean', 'example' => 'false'],
'ContainerId' => ['description' => '容器id。', 'type' => 'string', 'example' => '95878ef8779fae3dd82126812edd910402fc550a72f9bce87e56a4435d018384'],
'ContainerImageId' => ['description' => '容器镜像ID。', 'type' => 'string', 'example' => 'sha256:2e5a3b0ae5f452b3cb458789a9a7542ef40035a84318469a8528c5e444db1****'],
'ContainerImageName' => ['description' => '容器镜像名称。', 'type' => 'string', 'example' => 'centos7_apache:v1.0.1'],
'DataSource' => ['description' => '数据来源(可忽略)。', 'type' => 'string', 'example' => 'URL'],
'Desc' => ['description' => '告警事件的影响概况描述。', 'type' => 'string', 'example' => 'webshell'],
'Details' => [
'description' => '告警事件详情。',
'type' => 'array',
'items' => [
'description' => '告警事件详情。',
'type' => 'object',
'properties' => [
'NameDisplay' => ['description' => '告警事件显示名称。', 'type' => 'string', 'example' => 'login with unusual location'],
'Type' => ['description' => '告警事件类型。', 'type' => 'string', 'example' => 'text'],
'Value' => ['description' => '告警事件发生路径。', 'type' => 'string', 'example' => '/etc/crontab'],
'ValueDisplay' => ['description' => '告警事件发生路径。', 'type' => 'string', 'example' => '/etc/crontab'],
],
],
],
'DetectSource' => ['description' => '发现来源(无效字段)', 'type' => 'string', 'example' => '-'],
'DisplaySandboxResult' => ['description' => '支持云沙箱检出。取值包括:'."\n"
."\n"
.'- **true**:支持。'."\n"
.'- **false**:不支持。', 'type' => 'boolean', 'example' => 'true'],
'EventNotes' => [
'description' => '告警事件的备注信息。',
'type' => 'array',
'items' => [
'description' => '告警事件的备注信息。',
'type' => 'object',
'properties' => [
'Note' => ['description' => '备注信息。', 'type' => 'string', 'example' => 'test'],
'NoteId' => ['description' => '备注记录ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '2859481'],
'NoteTime' => ['description' => '事件记录时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'],
],
],
],
'EventStatus' => ['description' => '告警事件的状态。取值包括:'."\n"
."\n"
.'- **1**:PENDING(待处理)'."\n"
.'- **2**:IGNORE(已忽略)'."\n"
.'- **4**:HANDLED(已确认)'."\n"
.'- **8**:FAULT(已标记误报)'."\n"
.'- **16**:DEALING(处理中)'."\n"
.'- **32**:DONE(处理完毕)'."\n"
.'- **64**:EXPIRE(已经过期)'."\n"
.'- **604**:SYSTEM_FAULT(系统标记为误报)', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'EventSubType' => ['description' => '告警事件子类型。', 'type' => 'string', 'example' => 'login_common_location'],
'HasTraceInfo' => ['description' => '告警事件是否有溯源信息。取值:'."\n"
."\n"
.'- **true**:有溯源'."\n"
.'- **false**:无溯源', 'type' => 'boolean', 'example' => 'true'],
'Id' => ['description' => '告警事件的唯一标识 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '3178'],
'ImageUuid' => ['description' => '镜像的唯一标识。', 'type' => 'string', 'example' => 'ccdab289-9765-47ef-af50-ba6be09aacd6'],
'InstanceId' => ['description' => '受告警事件影响的资产实例的 ID。', 'type' => 'string', 'example' => 'i-9dp6dwsxdl9z5u1e2f****'],
'InstanceName' => ['description' => '实例名称', 'type' => 'string', 'example' => 'nginx'],
'InternetIp' => ['description' => '关联实例的公网IP。'."\n", 'type' => 'string', 'example' => '8.137.3*.6'],
'IntranetIp' => ['description' => '实例的私网IP。', 'type' => 'string', 'example' => '10.36.*6.149'],
'K8sClusterId' => ['description' => 'K8s集群ID。', 'type' => 'string', 'example' => 'ce3c41ed427794a7bb3d9da4554fc8039'],
'K8sClusterName' => ['description' => 'K8s集群名称。', 'type' => 'string', 'example' => 'testName'],
'K8sNamespace' => ['description' => 'K8s命名空间。', 'type' => 'string', 'example' => 'default'],
'K8sNodeId' => ['description' => 'K8s节点ID。', 'type' => 'string', 'example' => 'i-bp14a1ay8e0aa9t0****'],
'K8sNodeName' => ['description' => 'K8s节点名称。', 'type' => 'string', 'example' => 'N/A'],
'K8sPodName' => ['description' => 'K8sPod名称。', 'type' => 'string', 'example' => 'myapp-pod'],
'LargeModel' => ['description' => '是否支持大模型分析标签。取值包括:'."\n"
."\n"
.'- **true**:支持。'."\n"
.'- **false**:不支持。', 'type' => 'boolean', 'example' => 'true'],
'LastTime' => ['description' => '告警事件最近发生时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'],
'LastTimeStamp' => ['description' => '最后一次发生的时间戳,单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'],
'Level' => ['description' => '告警事件的危险等级。取值包括:'."\n"
."\n"
.'- **serious**:紧急'."\n"
.'- **suspicious**:可疑'."\n"
.'- **remind**:提醒', 'type' => 'string', 'example' => 'remind'],
'MaliciousRuleStatus' => ['description' => '恶意行为防御规则状态。取值包括:'."\n"
.'- **open**:开启'."\n"
.'- **close**:关闭', 'type' => 'string', 'example' => 'open'],
'MarkList' => [
'description' => '告警事件标签集合。',
'type' => 'array',
'items' => ['description' => '告警事件标签。', 'type' => 'string', 'example' => 'mark'],
],
'MarkMisRules' => ['description' => '高级加白规则。', 'type' => 'string', 'example' => '1.  path  contain  232  '],
'Name' => ['description' => '告警事件的完整名称。', 'type' => 'string', 'example' => 'Unusual Logon-Login with unusual location'],
'OccurrenceTime' => ['description' => '告警事件首次发生的时间。', 'type' => 'string', 'example' => '2018-09-26 01:51:01'],
'OccurrenceTimeStamp' => ['description' => '首次发生的时间戳,单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'],
'OperateErrorCode' => ['description' => '告警事件操作的错误码。', 'type' => 'string', 'example' => 'kill_and_quara.Success'],
'OperateMsg' => ['description' => '告警事件操作的备注信息。', 'type' => 'string', 'example' => 'success'],
'OperateTime' => ['description' => '告警事件操作的时间戳,单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1631699497000'],
'SaleVersion' => ['description' => '需要的售卖版本:'."\n"
."\n"
.'- 0:基础版本'."\n"
.'- 1:企业版本', 'type' => 'string', 'example' => '1'],
'SecurityEventIds' => ['description' => '告警事件关联的告警事件的 ID。', 'type' => 'string', 'example' => '628978308'],
'SourceAliUid' => ['description' => '产生告警的阿里云账号ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '124075**67406'],
'Stages' => ['description' => '攻击阶段。', 'type' => 'string', 'example' => '"["authority_maintenance"]"'],
'SupportOperateCode' => ['description' => '告警支持的操作类型:'."\n"
.'- **AI.false_positive**:疑似误报'."\n"
.'- **AI.real_attack**:真实攻击'."\n"
.'- **AI.Insufficient_information_to_evaluate**:无法研判', 'type' => 'string', 'example' => 'AI.false_positive'],
'TacticItems' => [
'description' => '攻击阶段展示名。',
'type' => 'array',
'items' => [
'description' => '攻击阶段展示名。',
'type' => 'object',
'properties' => [
'TacticDisplayName' => ['description' => 'ATT&CK的战术名称。', 'type' => 'string', 'example' => 'Malicious scripts-Malicious script code execution'],
'TacticId' => ['description' => 'ATT&CK攻击阶段信息。', 'type' => 'string', 'example' => 'TA0042'],
],
],
],
'UniqueInfo' => ['description' => '安全告警的唯一 key。', 'type' => 'string', 'example' => '1dfbdf56c5343b63c4854d08ec20e067'],
'Uuid' => ['description' => '关联实例的唯一标识。', 'type' => 'string', 'example' => '9A75F21D3993C0A2B094A4AB132890B2'],
'ClusterId' => ['description' => '集群 ID。', 'type' => 'string', 'example' => 'c8c87dae64c9947269091f36cfa9adc87'],
],
],
],
'TotalCount' => ['description' => '记录总数', 'type' => 'integer', 'format' => 'int32', 'example' => '72'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-查询安全告警事件',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"67BD8435-6624-5484-A75D-170231B51615\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"AD2345D1-A498-58AF-97C0-88940AF87CB7\\",\\n \\"Count\\": 1,\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 1,\\n \\"SuspEvents\\": [\\n {\\n \\"Advanced\\": true,\\n \\"AlarmEventName\\": \\"反弹shell_拦截\\",\\n \\"AlarmEventNameDisplay\\": \\"Login with unusual location\\",\\n \\"AlarmEventType\\": \\"Unusual Logon\\",\\n \\"AlarmEventTypeDisplay\\": \\"Unusual Logon\\",\\n \\"AlarmUniqueInfo\\": \\"8df914418f****\\",\\n \\"AppName\\": \\"dfield-cloud-service-prod\\",\\n \\"AutoBreaking\\": true,\\n \\"CanBeDealOnLine\\": true,\\n \\"CanCancelFault\\": true,\\n \\"ContainHwMode\\": false,\\n \\"ContainerId\\": \\"95878ef8779fae3dd82126812edd910402fc550a72f9bce87e56a4435d018384\\",\\n \\"ContainerImageId\\": \\"sha256:2e5a3b0ae5f452b3cb458789a9a7542ef40035a84318469a8528c5e444db1****\\",\\n \\"ContainerImageName\\": \\"centos7_apache:v1.0.1\\",\\n \\"DataSource\\": \\"URL\\",\\n \\"Desc\\": \\"webshell\\",\\n \\"Details\\": [\\n {\\n \\"NameDisplay\\": \\"login with unusual location\\",\\n \\"Type\\": \\"text\\",\\n \\"Value\\": \\"/etc/crontab\\",\\n \\"ValueDisplay\\": \\"/etc/crontab\\"\\n }\\n ],\\n \\"DetectSource\\": \\"-\\",\\n \\"DisplaySandboxResult\\": true,\\n \\"EventNotes\\": [\\n {\\n \\"Note\\": \\"test\\",\\n \\"NoteId\\": 2859481,\\n \\"NoteTime\\": \\"2018-09-26 01:51:01\\"\\n }\\n ],\\n \\"EventStatus\\": 1,\\n \\"EventSubType\\": \\"login_common_location\\",\\n \\"HasTraceInfo\\": true,\\n \\"Id\\": 3178,\\n \\"ImageUuid\\": \\"ccdab289-9765-47ef-af50-ba6be09aacd6\\",\\n \\"InstanceId\\": \\"i-9dp6dwsxdl9z5u1e2f****\\",\\n \\"InstanceName\\": \\"nginx\\",\\n \\"InternetIp\\": \\"8.137.3*.6\\",\\n \\"IntranetIp\\": \\"10.36.*6.149\\",\\n \\"K8sClusterId\\": \\"ce3c41ed427794a7bb3d9da4554fc8039\\",\\n \\"K8sClusterName\\": \\"testName\\",\\n \\"K8sNamespace\\": \\"default\\",\\n \\"K8sNodeId\\": \\"i-bp14a1ay8e0aa9t0****\\",\\n \\"K8sNodeName\\": \\"N/A\\",\\n \\"K8sPodName\\": \\"myapp-pod\\",\\n \\"LargeModel\\": true,\\n \\"LastTime\\": \\"2018-09-26 01:51:01\\",\\n \\"LastTimeStamp\\": 1631699497000,\\n \\"Level\\": \\"remind\\",\\n \\"MaliciousRuleStatus\\": \\"open\\",\\n \\"MarkList\\": [\\n \\"mark\\"\\n ],\\n \\"MarkMisRules\\": \\"1.  path  contain  232  \\",\\n \\"Name\\": \\"Unusual Logon-Login with unusual location\\",\\n \\"OccurrenceTime\\": \\"2018-09-26 01:51:01\\",\\n \\"OccurrenceTimeStamp\\": 1631699497000,\\n \\"OperateErrorCode\\": \\"kill_and_quara.Success\\",\\n \\"OperateMsg\\": \\"success\\",\\n \\"OperateTime\\": 1631699497000,\\n \\"SaleVersion\\": \\"1\\",\\n \\"SecurityEventIds\\": \\"628978308\\",\\n \\"SourceAliUid\\": 0,\\n \\"Stages\\": \\"\\\\\\"[\\\\\\"authority_maintenance\\\\\\"]\\\\\\"\\",\\n \\"SupportOperateCode\\": \\"AI.false_positive\\",\\n \\"TacticItems\\": [\\n {\\n \\"TacticDisplayName\\": \\"Malicious scripts-Malicious script code execution\\",\\n \\"TacticId\\": \\"TA0042\\"\\n }\\n ],\\n \\"UniqueInfo\\": \\"1dfbdf56c5343b63c4854d08ec20e067\\",\\n \\"Uuid\\": \\"9A75F21D3993C0A2B094A4AB132890B2\\",\\n \\"ClusterId\\": \\"c8c87dae64c9947269091f36cfa9adc87\\"\\n }\\n ],\\n \\"TotalCount\\": 72\\n }\\n }\\n}","type":"json"}]',
],
'GetAlertRecordAnalysisResult' => [
'summary' => '获取告警记录分析结果',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
[
'APP' => [],
],
[
'PrivateKey' => [],
],
[
'BearerToken' => [],
],
],
'operationType' => 'read',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementA481E8'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'Uuid',
'in' => 'query',
'schema' => ['description' => '资产唯一标识。(已过时)', 'type' => 'string', 'required' => false, 'example' => 'ebde6d4e3e4aba728962eec43a69196e9J7tt7H47Pc'],
],
[
'name' => 'UniqueInfo',
'in' => 'query',
'schema' => ['description' => '告警事件的唯一标识ID。(已过时)', 'type' => 'string', 'required' => false, 'example' => 'fc312aa0c32ba8a6147db6221fb1c1ee'],
],
[
'name' => 'AlarmUniqueInfo',
'in' => 'query',
'schema' => ['description' => '告警事件的唯一标识。(已过时)', 'type' => 'string', 'required' => false, 'example' => '9b57f0fcf98181df8d8487d1cc91cb8d'],
],
[
'name' => 'AliyunLang',
'in' => 'query',
'schema' => ['description' => '语言环境。'."\n"
."\n"
.'- 中文(默认):**zh**'."\n"
.'- 英文: **en**', 'type' => 'string', 'required' => false, 'example' => 'zh'],
],
[
'name' => 'UniqueTagList',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '溯源请求数组。',
'type' => 'array',
'items' => [
'description' => '溯源请求。',
'type' => 'object',
'properties' => [
'Uuid' => ['description' => '资产唯一标识。', 'type' => 'string', 'required' => false, 'example' => '3309e55fcb1ed8d4bc6af098e62e0353RNabnQSO1bx'],
'UniqueInfo' => ['title' => '', 'description' => '告警事件的唯一标识 。', 'type' => 'string', 'required' => false, 'example' => 'fc312aa0c32ba8a6147db6221fb1c1ee'],
'AlarmUniqueInfo' => ['title' => '唯一标识', 'description' => '告警事件的唯一标识 ID。', 'type' => 'string', 'required' => false, 'example' => '10a19b654e73ff079ede61ce3f4465e0'],
'ChooseLike' => ['title' => '是否点赞', 'description' => '是否点赞。'."\n"
."\n"
.'- **true**:已点赞'."\n"
.'- **false**:未点赞', 'type' => 'boolean', 'required' => false, 'example' => 'false'],
'Ip' => ['title' => '公网ip', 'description' => '公网ip', 'type' => 'string', 'required' => false, 'example' => 'pc-bp19up785757dz800'],
'MachineInstanceId' => ['title' => '实例id', 'description' => '实例id', 'type' => 'string', 'required' => false, 'example' => 'i-rj9c7d4bli38***tuym'],
'Type' => ['title' => '漏洞类型', 'description' => '漏洞类型', 'type' => 'string', 'required' => false, 'example' => 'BusinessLicense'],
'QueryTime' => ['title' => '首次告警时间', 'description' => '查询溯源时间', 'type' => 'string', 'required' => false, 'example' => '2025-06-27 00:00:00'],
],
'required' => false,
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '99D93ED4-D462-5FC5-8518-9BC1C49C7B6C'],
'Code' => ['description' => '调用失败时,返回的错误码。更多信息,请参见错误码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '错误说明', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '返回数据。',
'type' => 'object',
'properties' => [
'UniqueTagList' => [
'description' => '溯源结果列表。',
'type' => 'array',
'items' => [
'description' => '溯源结果。',
'type' => 'object',
'properties' => [
'Uuid' => ['description' => '服务器的UUID。', 'type' => 'string', 'example' => 'bb3051ca-c0dd-4da2-91be-ea5c80926132'],
'UniqueInfo' => ['description' => '告警事件的唯一标识ID。', 'type' => 'string', 'example' => '390317ce81d28bbbd83c05a90b39cd6c'],
'AlarmUniqueInfo' => ['description' => '告警事件的唯一标识。', 'type' => 'string', 'example' => '179deb12f25baac9b1e2909c419bcb1f'],
'AnalysisResult' => ['description' => '溯源结果文本。', 'type' => 'string', 'example' => 'exception_alert'],
'ChooseLike' => ['description' => '是否点赞。'."\n"
."\n"
.'- **true**:已点赞'."\n"
.'- **false**:未点赞', 'type' => 'boolean', 'example' => 'true'],
'AnalysisCode' => ['description' => '溯源结果code。', 'type' => 'string', 'example' => 'test_code'],
'MachineInstanceId' => ['description' => '服务器实例ID。', 'type' => 'string', 'example' => 'i-adadasd-a**'],
'Ip' => ['description' => 'IP地址。', 'type' => 'string', 'example' => '110.22.*8.111'],
'Type' => ['description' => '异常事件详情信息展示的方式。'."\n"
."\n"
.'取值包括:'."\n"
."\n"
.'- **text**:文本方式'."\n"
.'- **html**:富文本的方式', 'type' => 'string', 'example' => 'auto_breaking'],
'AliUid' => ['description' => '用户的16位AliUid。', 'type' => 'string', 'example' => '1248751055158884'],
],
],
],
'AnalysisCode' => ['description' => '溯源结果 code。(已过时)', 'type' => 'string', 'example' => '-'],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '获取告警溯源结果',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"99D93ED4-D462-5FC5-8518-9BC1C49C7B6C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"UniqueTagList\\": [\\n {\\n \\"Uuid\\": \\"bb3051ca-c0dd-4da2-91be-ea5c80926132\\",\\n \\"UniqueInfo\\": \\"390317ce81d28bbbd83c05a90b39cd6c\\",\\n \\"AlarmUniqueInfo\\": \\"179deb12f25baac9b1e2909c419bcb1f\\",\\n \\"AnalysisResult\\": \\"exception_alert\\",\\n \\"ChooseLike\\": true,\\n \\"AnalysisCode\\": \\"test_code\\",\\n \\"MachineInstanceId\\": \\"i-adadasd-a**\\",\\n \\"Ip\\": \\"110.22.*8.111\\",\\n \\"Type\\": \\"auto_breaking\\",\\n \\"AliUid\\": \\"1248751055158884\\"\\n }\\n ],\\n \\"AnalysisCode\\": \\"-\\"\\n }\\n}","type":"json"}]',
],
'GetAliYunSafeCenterResult' => [
'summary' => '调用云安全中心部分接口',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
[
'APP' => [],
],
[
'PrivateKey' => [],
],
[
'BearerToken' => [],
],
],
'operationType' => 'read',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'InterfaceCode',
'in' => 'query',
'schema' => ['description' => '公开的接口code。'."\n"
."\n"
.'- **GetAssetDetailByUuid**:获取Agent状态,请求参数 - GetAssetDetailByUuidRequest。'."\n"
."\n"
.'- **DescribeSimilarSecurityEvents**:获取相同的告警事件实例id列表,请求参数 - DescribeSimilarSecurityEventsRequest。'."\n"
."\n"
.'- **CreateSimilarSecurityEventsQueryTask**:创建任务查询相同规则或告警类型触发的告警事件,请求参数 - CreateSimilarSecurityEventsQueryTaskRequest。'."\n"
."\n"
.'- **DescribeSecurityEventOperationStatus**:查询与将要处理的告警事件为相同 IP 规则或相同告警类型的告警事件的列表是否为空, 请求参数 - DescribeSecurityEventOperationStatusRequest。'."\n"
."\n"
.'- **HandleSimilarSecurityEvents**:批量处理基于相同IP规则或类型的告警事件,请求参数 - HandleSimilarSecurityEventsRequest。'."\n"
.'HandleSecurityEvents:处理安全告警事件,请求参数 - HandleSecurityEventsRequest。'."\n"
."\n"
.'- **DescribeInstancesFullStatus**:查询ecs服务器运行状态,请求参数 - DescribeInstancesFullStatusRequest。'."\n"
."\n"
.'- **ListInstances**:查询swas服务器运行状态, 请求蚕食 - ListInstancesRequest'."\n"
."\n"
.'。'."\n"
.'> 接口名对应各自的请求参数。', 'type' => 'string', 'required' => true, 'example' => 'ListInstanceStatus'],
],
[
'name' => 'DescribeInstancesFullStatusRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '查询ecs服务器运行状态。',
'type' => 'object',
'properties' => [
'RegionId' => ['description' => '地域id。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
'InstanceId' => [
'description' => '实例ID列表。',
'type' => 'array',
'items' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'i-bp67acfmxazb4p****'],
'required' => false,
],
],
'required' => false,
],
],
[
'name' => 'ListInstancesRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '查询swas服务器运行状态。',
'type' => 'object',
'properties' => [
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-wulanchabu'],
'InstanceIds' => ['description' => '轻量应用服务器的实例 ID。取值可以由多个实例 ID 组成一个 JSON 数组,最多支持 100 个 ID,ID 之间用半角逗号(,)隔开。', 'type' => 'string', 'required' => false, 'example' => '["2ad1ae67295445f598017499dc****", "2ad1ae67295445f598017123dc****"]'],
],
'required' => false,
],
],
[
'name' => 'GetAssetDetailByUuidRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '查询云安全中心Agent状态请求参数。',
'type' => 'object',
'properties' => [
'Uuid' => ['description' => '要查询的资产的 UUID。', 'type' => 'string', 'required' => false, 'example' => '9A75F21D3993C0A2B094A4AB132890B2'],
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-shanghai'],
],
'required' => false,
],
],
[
'name' => 'DescribeSimilarSecurityEventsRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '查询云安全中心相同的告警事件。',
'type' => 'object',
'properties' => [
'TaskId' => ['description' => '查询任务的 ID。您可以调用 CreateSimilarSecurityEventsQueryTask 接口获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '1689135'],
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'],
],
'required' => false,
],
],
[
'name' => 'CreateSimilarSecurityEventsQueryTaskRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '创建任务查询相同规则或告警类型触发的告警事件。',
'type' => 'object',
'properties' => [
'SecurityEventId' => ['description' => '安全告警事件的ID。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '629755508'],
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'],
'SimilarEventScenarioCode' => ['description' => '相同类型或命中规则的告警事件的code值。', 'type' => 'string', 'required' => false, 'example' => 'default'],
],
'required' => false,
],
],
[
'name' => 'DescribeSecurityEventOperationStatusRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '查询与将要处理的告警事件为相同IP规则或相同告警类型的告警事件的列表是否为空。',
'type' => 'object',
'properties' => [
'TaskId' => ['description' => '处理安全告警事件的任务的 ID。'."\n"
."\n"
.'> TaskId、SecurityEventIds 这两个参数二选一,必选要设置一个接口才能调用成功。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '0BC3B4E600002A9F000048BCDCE7E710'],
'SecurityEventIds' => [
'description' => '安全告警事件的 ID 列表。'."\n"
."\n"
.'> TaskId、SecurityEventIds.N 这两个参数二选一,必选要设置一个接口才能调用成功。',
'type' => 'array',
'items' => ['description' => '安全告警事件的 ID 。'."\n"
."\n"
.'> TaskId、SecurityEventIds.N 这两个参数二选一,必选要设置一个接口才能调用成功。', 'type' => 'string', 'required' => false, 'example' => '581719531'],
'required' => false,
],
'RegionId' => ['description' => '地域ID。例如cn-hangzhou。', 'type' => 'string', 'required' => false, 'example' => 'cn-zhangjiakou'],
],
'required' => false,
],
],
[
'name' => 'HandleSimilarSecurityEventsRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '批量处理基于相同IP规则或类型的告警事件。',
'type' => 'object',
'properties' => [
'SourceIp' => ['description' => '访问源的IP地址。', 'type' => 'string', 'required' => false, 'example' => '220.2*3.155.93'],
'TaskId' => ['description' => '批量处理所有相同类型告警事件的任务的 ID。'."\n"
."\n"
.'> 调用 CreateSimilarSecurityEventsQueryTask 接口可以获取该参数。', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '12221'],
'OperationCode' => ['description' => '批量处理同类告警事件的操作类型。'."\n"
."\n"
.'> 调用 DescribeSecurityEventOperations 接口可以获取该参数。', 'type' => 'string', 'required' => false, 'example' => 'offline_handled'],
'OperationParams' => ['description' => '告警事件处理方式子操作的配置。该值为JSON格式。'."\n"
."\n"
.'> **OperationCode**值为**kill\\_and\\_quara**、**block\\_ip**、**virus\\_quara**此参数必填外,**OperationCode**为其他值的情况下,该参数值可为空。'."\n"
."\n"
.'> **OperationCode**为**block_ip**时包含以下字段:'."\n"
.'> - **expireTime**:锁定截至时间。单位:毫秒'."\n"
.'>'."\n"
.'> **OperationCode**为**kill\\_and\\_quara**时包含以下字段:'."\n"
.'> - **subOperation**:查杀方式。取值如下'."\n"
.'> - **killAndQuaraFileByMd5andPath**:结束进程并隔离文件'."\n"
.'> - **killByMd5andPath**:结束该运行进程'."\n"
.'>'."\n"
.'> **OperationCode**为**virus\\_quara**时包含以下字段:'."\n"
.'> - **subOperation**:查杀方式。取值如下'."\n"
.'> - **quaraFileByMd5andPath**:隔离该进程的源文件', 'type' => 'string', 'required' => false, 'example' => '{\\"expireTime\\":1767687685917}'],
'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'cfw_elasticity_public_cn-g4t3nkh3i00b'],
'Ip' => ['description' => '实例IP。', 'type' => 'string', 'required' => false, 'example' => '203.10*.44.71'],
'AlertType' => ['description' => '告警类型。', 'type' => 'string', 'required' => false, 'example' => 'default'],
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-beijing'],
],
'required' => false,
],
],
[
'name' => 'HandleSecurityEventsRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '处理安全告警事件。',
'type' => 'object',
'properties' => [
'OperationCode' => ['title' => 'block_ip:阻断'."\n"
.'advance_mark_mis_info:加白名单'."\n"
.'ignore:忽略'."\n"
.'manual_handled:我已手工处理'."\n"
.'kill_process:结束进程'."\n"
.'cleanup:深度查杀'."\n"
.'kill_and_quara:病毒查杀'."\n"
.'disable_malicious_defense:关闭恶意行为防御'."\n"
.'client_problem_check:问题排查'."\n"
.'quara:隔离', 'description' => '告警事件的处理方式。取值:'."\n"
."\n"
.'- **block_ip**:阻断'."\n"
.'- **advance\\_mark\\_mis_info**:加白名单'."\n"
.'- **ignore**:忽略'."\n"
.'- **manual_handled**:我已手工处理'."\n"
.'- **kill_process**:结束进程'."\n"
.'- **cleanup**:深度查杀'."\n"
.'- **kill\\_and_quara**:病毒查杀'."\n"
.'- **disable\\_malicious_defense**:关闭恶意行为防御'."\n"
.'- **client\\_problem_check**:问题排查'."\n"
.'- **quara**:隔离', 'type' => 'string', 'required' => false, 'example' => 'block_ip'],
'OperationParams' => ['title' => '告警事件处理方式子操作的配置。'."\n"
."\n"
.'当 OperationCode 取值 kill_and_quara,需要填写参数类型"subOperation":${code} 可填 code 参数:'."\n"
."\n"
.'隔离文件:quaraFileByMd5andPath'."\n"
.'通过进程 id 路径等查杀进程隔离文件:killAndQuaraFileByPidAndMd5andPath'."\n"
.'只查杀进程:killByMd5andPath'."\n"
.'查杀进程并隔离文件:killAndQuaraFileByMd5andPath'."\n"
.'通过进程 id 和路径等查杀容器的进程:killProcessByPidandPathandCmdline'."\n"
.'通过文件 md5 和路径查杀容器的进程:killContainerProcessByMd5AndPath'."\n"
.'当 OperationCode 取值 block_ip,参数:'."\n"
."\n"
.'过期时间:expireTime:${timestamp}'."\n"
.'说明 除了 OperationCode 值为kill_and_quara和block_ip此参数必填外,OperationCode 为其他值的情况下,该参数值可为空。${timestamp}表示封禁此 IP 的截止日期时间戳。'."\n"
.'示例值:'."\n"
.'{\\"expireTime\\":1719588943551,\\"subOperation\\":\\"killAndQuaraFileByMd5andPath\\"}', 'description' => '告警事件处理方式子操作的配置。'."\n"
."\n"
.'当OperationCode取值 kill_and_quara,需要填写参数类型"subOperation":${code}'."\n"
.'可填code参数:'."\n"
.'- 隔离文件:quaraFileByMd5andPath'."\n"
.'- 通过进程id路径等查杀进程隔离文件:killAndQuaraFileByPidAndMd5andPath'."\n"
.'- 只查杀进程:killByMd5andPath'."\n"
.'- 查杀进程并隔离文件:killAndQuaraFileByMd5andPath'."\n"
.'- 通过进程id和路径等查杀容器的进程:killProcessByPidandPathandCmdline'."\n"
.'- 通过文件md5和路径查杀容器的进程:killContainerProcessByMd5AndPath'."\n"
."\n"
.'当OperationCode取值 block_ip,参数:'."\n"
.'- 过期时间:expireTime:${timestamp}'."\n"
.'> 除了OperationCode值为`kill_and_quara`和`block_ip`此参数必填外,OperationCode为其他值的情况下,该参数值可为空。${timestamp}表示封禁此IP的截止日期时间戳。', 'type' => 'string', 'required' => false, 'example' => '{\\"expireTime\\":1719588943551,\\"subOperation\\":\\"killAndQuaraFileByMd5andPath\\"}'],
'MarkMissParam' => ['title' => 'field:加白字段。'."\n"
.'operate:加白方式,取值:'."\n"
.'notContains:不包含。'."\n"
.'contains:包含。'."\n"
.'regex:正则匹配。'."\n"
.'strEqual:等于。'."\n"
.'strNotEqual:不等于。'."\n"
.'fieldValue:匹配值。'."\n"
.'uuid:该加白规则作用范围,取值:'."\n"
.'part:仅对当前资产。'."\n"
.'ALL:对所有资产。'."\n"
.'说明 调用DescribeSecurityEventOperations 接口获取 field 加白字段。'."\n"
.'示例值:'."\n"
.'[{"uuid":"part","field":"gmtModified","operate":"contains","fieldValue":"asd"},{"uuid":"part","field":"loginUser","operate":"contains","fieldValue":"vff"}]', 'description' => '设置加白名单的规则。该字段为 JSON 格式,包含字段如下:'."\n"
."\n"
.'- **field**:加白字段。'."\n"
.'- **operate**:加白方式,取值:'."\n"
.' - **notContains**:不包含。'."\n"
.' - **contains**:包含。'."\n"
.' - **regex**:正则匹配。'."\n"
.' - **strEqual**:等于。'."\n"
.' - **strNotEqual**:不等于。'."\n"
.'- **fieldValue**:匹配值。'."\n"
.'- **uuid**:该加白规则作用范围,取值:'."\n"
.' - **part**:仅对当前资产。'."\n"
.' - **ALL**:对所有资产。'."\n"
."\n"
.'> 调用DescribeSecurityEventOperations 接口获取 field 加白字段。', 'type' => 'string', 'required' => false, 'example' => '[{"uuid":"part","field":"gmtModified","operate":"contains","fieldValue":"asd"},{"uuid":"part","field":"loginUser","operate":"contains","fieldValue":"vff"}]'],
'MarkBatch' => ['title' => 'true:是'."\n"
.'false:否', 'description' => '否是批量加白。'."\n"
."\n"
.'- **true**:是'."\n"
.'- **false**:否', 'type' => 'string', 'required' => false, 'example' => 'true'],
'SecurityEventIds' => [
'title' => '要处理的安全告警事件的 ID 集合。'."\n"
."\n"
.'示例值:'."\n"
.'["909361"]'."\n"
.'子级条数 <= 100',
'description' => '要处理的安全告警事件的 ID 集合。'."\n"
."\n"
.'示例值:'."\n"
.'["909361"]'."\n"
.'子级条数 <= 100',
'type' => 'array',
'items' => ['description' => '告警事件关联的告警事件的 ID。', 'type' => 'string', 'required' => false, 'example' => '909361'],
'required' => false,
],
'Remark' => ['description' => '备注', 'type' => 'string', 'required' => false, 'example' => '11'],
'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'api-shared-vpc-002'],
'Ip' => ['description' => '用户IP。', 'type' => 'string', 'required' => false, 'example' => '123.56.127.180'],
'AlertType' => ['description' => '告警规则类型。', 'type' => 'string', 'required' => false, 'example' => 'default'],
'RegionId' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
'FilePath' => ['description' => '敏感文件路径。', 'type' => 'string', 'required' => false, 'example' => 'flyfish-lfp-wy.release'],
'FileMd5' => ['description' => '文件MD5值。', 'type' => 'string', 'required' => false, 'example' => 'fbbb90731fbb6df57c933173182d01a5'],
],
'required' => false,
],
],
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '地域Id。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => 'Id of the request', 'type' => 'string', 'example' => '3C107939-59BD-5EB9-B250-39559C830A85'],
'Code' => ['description' => '状态码。'."\n"
."\n"
.'> 200:表示成功。 其它(500、400等):表示错误码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '提示信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '候选值:True/False,代表了是否当前API调用本身是成功的。不代表后续 业务操作的成功。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '返回数据',
'type' => 'object',
'properties' => [
'EcsInstanceStatus' => ['description' => 'ecs服务器运行状态。'."\n"
."\n"
.'- **true**:运行中'."\n"
.'- **false**:未运行', 'type' => 'boolean', 'example' => 'true'],
'SwasInstanceStatus' => ['description' => 'swas服务器运行状态。'."\n"
."\n"
.'- **true**:运行中'."\n"
.'- **false**:未运行', 'type' => 'boolean', 'example' => 'true'],
'AgentStatus' => ['description' => '云安全中心Agent状态。'."\n"
."\n"
.'- **true**:已启用'."\n"
.'- **false**:未启用', 'type' => 'boolean', 'example' => 'true'],
'InstanceIds' => [
'description' => '云安全中心相同的告警事件的实例Id列表。',
'type' => 'array',
'items' => ['description' => '云安全中心相同的告警事件的实例 Id。', 'type' => 'integer', 'format' => 'int64', 'example' => 'ecd-b14xfwq0ibbdkarvi'],
],
'TaskId' => ['description' => '创建任务查询相同规则或告警类型触发的告警事件任务ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '12313123'],
'TaskStatus' => ['description' => '查询与将要处理的告警事件为相同 IP 规则或相同告警类型的告警事件的列表是否为空。'."\n"
."\n"
.'- **true**:为空'."\n"
.'- **false**:不为空', 'type' => 'boolean', 'example' => 'true'],
'RequestId' => ['description' => '请求Id。', 'type' => 'string', 'example' => '8169D779-3391-541F-936B-11F4EC09AD0D'],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '获取云安全中心等公开接口结果',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3C107939-59BD-5EB9-B250-39559C830A85\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"EcsInstanceStatus\\": true,\\n \\"SwasInstanceStatus\\": true,\\n \\"AgentStatus\\": true,\\n \\"InstanceIds\\": [\\n 0\\n ],\\n \\"TaskId\\": 12313123,\\n \\"TaskStatus\\": true,\\n \\"RequestId\\": \\"8169D779-3391-541F-936B-11F4EC09AD0D\\"\\n }\\n}","type":"json"}]',
],
'GetCanTrySas' => [
'summary' => 'sas-获取能否试用',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求参数。',
'type' => 'object',
'properties' => [
'FromEcs' => ['description' => '是否来自ECS控制台,取值:'."\n"
.'- **true**:是'."\n"
.'- **false**:否', 'type' => 'boolean', 'required' => false, 'example' => 'true'],
'Lang' => ['description' => '设置请求和接收消息的语言类型。默认值 zh。取值:'."\n"
."\n"
.'- **zh**:中文'."\n"
.'- **en**:英文', 'type' => 'string', 'required' => false, 'example' => 'zh'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '6B48613E-86DE-5411-BDBE-429C80B45F3F'],
'Code' => ['description' => '状态码', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '同Code参数值', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '代表当前API调用是否成功的,不代表后续业务操作的成功。'."\n"
."\n"
.'- **true**:成功'."\n"
.'- **false**:失败', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '录像计划详细信息。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => 'Id of the request', 'type' => 'string', 'example' => '0EBD97B8-65AD-52C8-94D5-A0F81E7D70D0'],
'Data' => [
'description' => '管控域名',
'type' => 'object',
'properties' => [
'CanTry' => ['description' => '是否有资格试用。取值:'."\n"
.'- **1**:有资格'."\n"
.'- **0**:没有资格', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'CanTryVersions' => [
'description' => '允许试用的版本列表。',
'type' => 'array',
'items' => ['description' => '允许试用的版本列表,取值:'."\n"
.'- **3**:企业版'."\n"
.'- **7**:旗舰版', 'type' => 'integer', 'format' => 'int32', 'example' => '3'],
],
'TryType' => ['description' => '试用类型,取值:'."\n"
.'- **0**:禁止试用'."\n"
.'- **1**:首次试用'."\n"
.'- **2**:二次试用', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
],
],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-查询是否有云安全中心试用权限',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6B48613E-86DE-5411-BDBE-429C80B45F3F\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"0EBD97B8-65AD-52C8-94D5-A0F81E7D70D0\\",\\n \\"Data\\": {\\n \\"CanTry\\": 1,\\n \\"CanTryVersions\\": [\\n 3\\n ],\\n \\"TryType\\": 1\\n }\\n }\\n }\\n}","type":"json"}]',
],
'GetDisposalToolStatus' => [
'summary' => '获取一键处置赋权状态',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'none',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'AuthType',
'in' => 'query',
'schema' => ['description' => '授权类型。'."\n"
."\n"
.'- **DisposalTool**:一键处置授权类型', 'type' => 'string', 'required' => false, 'example' => 'DisposalTool'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '6D462855-7835-5F91-835E-A62E44EC01CC'],
'Code' => ['description' => '状态码。返回200代表成功。', 'type' => 'string', 'example' => 'Success'],
'Message' => ['description' => '提示信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '返回数据。',
'type' => 'object',
'properties' => [
'Status' => ['description' => '授权状态。'."\n"
."\n"
.'- **true**:已授权'."\n"
.'- **false**:未授权', 'type' => 'boolean', 'example' => 'true'],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '获取一键处置赋权状态',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6D462855-7835-5F91-835E-A62E44EC01CC\\",\\n \\"Code\\": \\"Success\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Status\\": true\\n }\\n}","type":"json"}]',
],
'GetValidDeductInstances' => [
'summary' => 'sas-获取有效抵扣实例',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '地域ID', 'type' => 'string', 'required' => false, 'example' => 'cn-fuzhou'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求参数。',
'type' => 'object',
'properties' => [
'InstanceId' => ['description' => '资源包实例 ID,可通过QueryResourcePackageInstances查询。', 'type' => 'string', 'required' => false, 'example' => 'sas_cspm_dp_cn-***80001'],
'Modules' => ['description' => '资源包名称 code,取值:'."\n"
."\n"
.'- 漏洞资源包:**sas_vul_dp_cn**'."\n"
.'- CSPM 资源包:**sas_cspm_dp_cn**'."\n"
.'- 防病毒版资源包:**sas_viruspackage_dp_cn**', 'type' => 'string', 'required' => false, 'example' => 'sas_vul_dp_cn'],
'Status' => ['description' => '资源包状态,默认为有效(valid),不支持修改。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => 'Available'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2FBDD713-00A5-5C98-B661-3FD31A349B6E'],
'Code' => ['description' => '返回码。返回200代表成功。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '返回信息。', 'type' => 'string', 'example' => 'Successful'],
'Success' => ['description' => '代表了是否当前API调用本身是成功的。不代表后续 业务操作的成功。'."\n"
."\n"
.'- **true**:成功'."\n"
.'- **false**:失败', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '返回数据列表。',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体。',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => 'A6FB9AC3-4431-538F-BA8A-2A13AEA208A4'],
'Data' => [
'description' => '数据体。',
'type' => 'object',
'properties' => [
'CanTry' => ['description' => '是否有资格试用。取值:'."\n"
.'- **true**:有资格'."\n"
.'- **false**:没有资格', 'type' => 'boolean', 'example' => 'true'],
'DeductPackageList' => [
'description' => '资源包用量详情。',
'type' => 'array',
'items' => [
'description' => '资源包用量详情。',
'type' => 'object',
'properties' => [
'CurrentPeriodUsed' => ['description' => '当前计量周期消耗授权数。', 'type' => 'integer', 'format' => 'int64', 'example' => '10'],
'EndTime' => ['description' => '结束时间。', 'type' => 'integer', 'format' => 'int64', 'example' => '1737734400000'],
'InitCapacity' => ['description' => '资源包总量。', 'type' => 'number', 'format' => 'double', 'example' => '1000'],
'InstanceId' => ['description' => '资源包实例 ID。', 'type' => 'string', 'example' => 'apigateway-hz-96f6659a1490'],
'Module' => ['description' => '模块 Code。取值:'."\n"
."\n"
.'- **POST_HOST**:主机和容器防护'."\n"
.'- **CSPM**:云产品配置检查'."\n"
.'- **VUL**:漏洞扫描', 'type' => 'string', 'example' => 'POST_HOST'],
'PeriodCapacity' => ['description' => '截止上一账单周期已消耗授权数。', 'type' => 'number', 'format' => 'double', 'example' => '1'],
'StartTime' => ['description' => '开始时间戳(毫秒)。', 'type' => 'integer', 'format' => 'int64', 'example' => '1737734400000'],
'Status' => ['description' => '资源包状态。取值:'."\n"
."\n"
.'- **valid**:有效'."\n"
.'- **invalid**:失效', 'type' => 'string', 'example' => 'CREATE_FAILED'],
],
],
],
],
],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-获取有效的资源包实例',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2FBDD713-00A5-5C98-B661-3FD31A349B6E\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"RequestId\\": \\"A6FB9AC3-4431-538F-BA8A-2A13AEA208A4\\",\\n \\"Data\\": {\\n \\"CanTry\\": true,\\n \\"DeductPackageList\\": [\\n {\\n \\"CurrentPeriodUsed\\": 10,\\n \\"EndTime\\": 1737734400000,\\n \\"InitCapacity\\": 1000,\\n \\"InstanceId\\": \\"apigateway-hz-96f6659a1490\\",\\n \\"Module\\": \\"POST_HOST\\",\\n \\"PeriodCapacity\\": 1,\\n \\"StartTime\\": 1737734400000,\\n \\"Status\\": \\"CREATE_FAILED\\"\\n }\\n ]\\n }\\n }\\n }\\n}","type":"json"}]',
],
'InitSasModuleRule' => [
'summary' => 'sas-初始化云安全中心模块规则',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '访问控制实例所属地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'],
],
[
'name' => 'IsTrial',
'in' => 'query',
'schema' => ['description' => '是否试用', 'type' => 'boolean', 'required' => false, 'example' => 'false'],
],
[
'name' => 'Instances',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '实例列表',
'type' => 'array',
'items' => [
'description' => '实例列表',
'type' => 'object',
'properties' => [
'InstanceId' => ['description' => '实例ID。', 'type' => 'string', 'required' => false, 'example' => 'i-gw85zjrhsg2sgex7ovfx'],
'Uuid' => ['description' => '实例的UUID。', 'type' => 'string', 'required' => false, 'example' => '168d374e-f449-4d0b-9556-14f233fa7171'],
'Cores' => ['description' => '资产的CPU核数。', 'type' => 'string', 'required' => false, 'example' => '4'],
'RegionId' => ['description' => '云手机地域。', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
],
'required' => false,
],
'required' => false,
],
],
[
'name' => 'AutoBind',
'in' => 'query',
'schema' => ['description' => '开启自动绑定。取值:'."\n"
."\n"
.'- **0**:关闭'."\n"
.'- **1**:开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2E130B0F-9E69-52FA-84FC-187FE1BA9489'],
'Code' => ['description' => '调用失败时,返回的错误码。更多信息,请参见错误码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '同Code参数值', 'type' => 'string', 'example' => 'Successful'],
'Success' => ['description' => '是否调用成功。true:调用成功。false:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '审批结果',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心请求 ID。', 'type' => 'string', 'example' => '14492571-0707-5130-85B4-4DDABB6BDF76'],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-模块规则初始化',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2E130B0F-9E69-52FA-84FC-187FE1BA9489\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"Successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"14492571-0707-5130-85B4-4DDABB6BDF76\\"\\n }\\n}","type":"json"}]',
],
'ListVirusScanMachineEvent' => [
'summary' => '查询全盘扫描结果',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['title' => '地域id', 'description' => '地域id', 'type' => 'string', 'required' => false, 'example' => 'cn-hangzhou'],
],
[
'name' => 'CurrentPage',
'in' => 'query',
'schema' => ['title' => '当前页。默认值:1', 'description' => '当前页。默认值:1', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
],
[
'name' => 'PageSize',
'in' => 'query',
'schema' => ['title' => '每页数量。默认值:10', 'description' => '每页数量。默认值:10', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '30'],
],
[
'name' => 'OperateTaskId',
'in' => 'query',
'schema' => ['title' => '执行处置操作生成的任务 ID。', 'description' => '执行处置操作生成的任务 ID。'."\n"
."\n"
.'> 您可以调用 OperateVirusEvents 接口处置告警来生成该参数。', 'type' => 'string', 'required' => false, 'example' => '28486737'],
],
[
'name' => 'Lang',
'in' => 'query',
'schema' => ['title' => '设置请求和接收消息的语言类型,默认为 zh。取值:'."\n"
."\n"
.'zh:中文'."\n"
.'en:英文', 'description' => '设置请求和接收消息的语言类型,默认为 zh。取值:'."\n"
."\n"
.'- **zh**:中文'."\n"
.'- **en**:英文', 'type' => 'string', 'required' => false, 'example' => 'en'],
],
[
'name' => 'Uuid',
'in' => 'query',
'schema' => ['title' => '服务器id', 'description' => '服务器id', 'type' => 'string', 'required' => false, 'example' => 'hdm_5349d5323c649e91a41784e9e1733e1e'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => 'F0AD8096-E7A2-573D-ACF0-7CE9050CDE38'],
'Code' => ['description' => 'code', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:true:调用成功。 false:调用失败。', 'type' => 'boolean', 'example' => 'True'],
'Data' => [
'description' => '返回数据。',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '请求 ID。', 'type' => 'string', 'example' => '1E222AB5-5C2B-50AD-8A96-E704AF80F2A0'],
'VirusScanMachineEventList' => [
'title' => '查询病毒扫描具体机器扫描出的病毒告警',
'description' => '查询病毒扫描具体机器扫描出的病毒告警',
'type' => 'object',
'properties' => [
'Data' => [
'title' => '告警事件的详情。',
'description' => '告警事件的详情。',
'type' => 'array',
'items' => [
'description' => '接口调用成功时,返回的数据。',
'type' => 'object',
'properties' => [
'EventId' => ['title' => '告警事件的 ID。', 'description' => '告警事件的 ID。', 'type' => 'integer', 'format' => 'int64', 'example' => '123-2CcoavZnCXrJKqk2KQKxp9WGwup'],
'EventName' => ['title' => '告警事件名称(子类型)。', 'description' => '告警事件名称(子类型)。', 'type' => 'string', 'example' => '恶意脚本代码执行'],
'InstanceName' => ['title' => '实例名称。', 'description' => '实例名称。', 'type' => 'string', 'example' => 'i-wz92q7m5hsbgfhdss***'],
'InternetIp' => ['title' => '公网 IP。', 'description' => '公网 IP。', 'type' => 'string', 'example' => '47.57.*1.65'],
'IntranetIp' => ['title' => '私网 IP。', 'description' => '私网 IP。', 'type' => 'string', 'example' => '47.57.*1.65'],
'LastTimeStamp' => ['title' => '最后一次发生的时间戳,单位为毫秒。', 'description' => '最后一次发生的时间戳,单位为毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1682046733628'],
'Level' => ['title' => '告警事件的危险等级。取值:'."\n"
."\n"
.'serious:紧急。'."\n"
.'suspicious:可疑。'."\n"
.'remind:提醒。', 'description' => '告警事件的危险等级。取值:'."\n"
."\n"
.'- **serious**:紧急。'."\n"
.'- **suspicious**:可疑。'."\n"
.'- **remind**:提醒。', 'type' => 'string', 'example' => 'remind'],
'Details' => [
'title' => '异常事件的详情。',
'description' => '异常事件的详情。',
'type' => 'array',
'items' => [
'description' => 'GSLB是否开启。',
'type' => 'object',
'properties' => [
'InfoType' => ['title' => 'valueDisplay 的展示类型。 取值:'."\n"
."\n"
.'download_url: 下载链接。', 'description' => 'valueDisplay 的展示类型。 取值:'."\n"
."\n"
.'- **download_url**: 下载链接。', 'type' => 'string', 'example' => 'download_url'],
'NameDisplay' => ['title' => '告警事件显示名称。', 'description' => '告警事件显示名称。', 'type' => 'string', 'example' => 'Trojan Path'],
'Type' => ['title' => '异常事件详情信息展示的方式。'."\n"
."\n"
.'取值包括:'."\n"
."\n"
.'text:文本方式'."\n"
.'html:富文本的方式', 'description' => '异常事件详情信息展示的方式。'."\n"
."\n"
.'取值包括:'."\n"
."\n"
.'- **text**:文本方式'."\n"
.'- **html**:富文本的方式', 'type' => 'string', 'example' => 'text'],
'ValueDisplay' => ['title' => '异常事件的其他属性信息。 例如:异常登录告警的登录时间或登录地点、告警的木马文件路径或木马类型等。', 'description' => '异常事件的其他属性信息。 例如:异常登录告警的登录时间或登录地点、告警的木马文件路径或木马类型等。', 'type' => 'string', 'example' => 'getopt'],
],
],
],
],
],
],
'PageInfo' => [
'title' => '分页信息。',
'description' => '分页信息。',
'type' => 'object',
'properties' => [
'CurrentPage' => ['title' => '分页查询时,当前页的页码。', 'description' => '分页查询时,当前页的页码。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'PageSize' => ['title' => '分页查询时,显示的每页数据的最大条数。', 'description' => '分页查询时,显示的每页数据的最大条数。', 'type' => 'integer', 'format' => 'int32', 'example' => '10'],
'TotalCount' => ['title' => '查询到的告警事件的总条数。', 'description' => '查询到的告警事件的总条数。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
],
],
],
],
'VirusScanLatestTaskStatistic' => [
'title' => '获取最新的病毒扫描的扫描信息',
'description' => '获取最新的病毒扫描的扫描信息',
'type' => 'object',
'properties' => [
'CompleteMachine' => ['title' => '完成扫描的机器数量。', 'description' => '完成扫描的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '2'],
'MachineName' => ['title' => '服务器机器名称。', 'description' => '服务器机器名称。', 'type' => 'string', 'example' => 'testMahine1'],
'Progress' => ['title' => '扫描任务进度的百分比。', 'description' => '扫描任务进度的百分比。', 'type' => 'string', 'example' => '92'],
'RiskLevel' => ['title' => '扫描出的告警的最高风险等级。取值:'."\n"
."\n"
.'high:高危。'."\n"
.'medium:中危。'."\n"
.'low:低危。', 'description' => '扫描出的告警的最高风险等级。取值:'."\n"
."\n"
.'- **high**:高危。'."\n"
.'- **medium**:中危。'."\n"
.'- **low**:低危。', 'type' => 'string', 'example' => 'medium'],
'SafeMachine' => ['description' => '未扫描出具有风险的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'ScanMachine' => ['description' => '此次病毒扫描机器的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'ScanPath' => [
'title' => '用户自定义类型时,指定的需要扫描的文件路径。',
'description' => '用户自定义类型时,指定的需要扫描的文件路径。',
'type' => 'array',
'items' => ['description' => '文件路径。', 'type' => 'string', 'example' => '/www/wwwroot/www.wlws.cc/docs/tables/brand_info.php'],
],
'ScanTime' => ['title' => '扫描的时间戳,单位:毫秒。', 'description' => '扫描的时间戳,单位:毫秒。', 'type' => 'integer', 'format' => 'int64', 'example' => '1681145862000'],
'ScanType' => ['title' => '此次病毒扫描的扫描类型。取值:'."\n"
."\n"
.'system:系统自动扫描。'."\n"
.'user:用户自定义扫描。', 'description' => '此次病毒扫描的扫描类型。取值:'."\n"
."\n"
.'- **system**:系统自动扫描。'."\n"
.'- **user**:用户自定义扫描。', 'type' => 'string', 'example' => 'system'],
'Status' => ['title' => '扫描任务的状态。'."\n"
."\n"
.'主任务取值:'."\n"
."\n"
.'0:任务待开始。'."\n"
.'10:扫描进行中。'."\n"
.'100:扫描完成。'."\n"
.'子任务取值:'."\n"
."\n"
.'0:扫描待开始。'."\n"
.'20:检测脚本下发。'."\n"
.'50:扫描在机器上执行。'."\n"
.'100:扫描结束。', 'description' => '扫描任务的状态。'."\n"
."\n"
.'**主任务取值**:'."\n"
."\n"
.'- **0**:任务待开始。'."\n"
.'- **10**:扫描进行中。'."\n"
.'- **100**:扫描完成。'."\n"
."\n"
.'**子任务取值**:'."\n"
.'-'."\n"
.'- **0**:扫描待开始。'."\n"
.'- **20**:检测脚本下发。'."\n"
.'- **50**:扫描在机器上执行。'."\n"
.'- **100**:扫描结束。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
'SuspiciousCount' => ['title' => '扫描出来的安全告警的数量。', 'description' => '扫描出来的安全告警的数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '0'],
'SuspiciousMachine' => ['title' => '扫描出来有风险的机器数量。', 'description' => '扫描出来有风险的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'TaskId' => ['title' => '扫描任务的 ID。', 'description' => '扫描任务的 ID。', 'type' => 'string', 'example' => 't-0mqu9dhpi365dp5iyf'],
'UnCompleteMachine' => ['title' => '未扫描结束和扫描失败的机器数量。', 'description' => '未扫描结束和扫描失败的机器数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas - 查询全盘扫描结果',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"F0AD8096-E7A2-573D-ACF0-7CE9050CDE38\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"1E222AB5-5C2B-50AD-8A96-E704AF80F2A0\\",\\n \\"VirusScanMachineEventList\\": {\\n \\"Data\\": [\\n {\\n \\"EventId\\": 0,\\n \\"EventName\\": \\"恶意脚本代码执行\\",\\n \\"InstanceName\\": \\"i-wz92q7m5hsbgfhdss***\\",\\n \\"InternetIp\\": \\"47.57.*1.65\\",\\n \\"IntranetIp\\": \\"47.57.*1.65\\",\\n \\"LastTimeStamp\\": 1682046733628,\\n \\"Level\\": \\"remind\\",\\n \\"Details\\": [\\n {\\n \\"InfoType\\": \\"download_url\\",\\n \\"NameDisplay\\": \\"Trojan Path\\",\\n \\"Type\\": \\"text\\",\\n \\"ValueDisplay\\": \\"getopt\\"\\n }\\n ]\\n }\\n ],\\n \\"PageInfo\\": {\\n \\"CurrentPage\\": 1,\\n \\"PageSize\\": 10,\\n \\"TotalCount\\": 0\\n }\\n },\\n \\"VirusScanLatestTaskStatistic\\": {\\n \\"CompleteMachine\\": 2,\\n \\"MachineName\\": \\"testMahine1\\",\\n \\"Progress\\": \\"92\\",\\n \\"RiskLevel\\": \\"medium\\",\\n \\"SafeMachine\\": 1,\\n \\"ScanMachine\\": 1,\\n \\"ScanPath\\": [\\n \\"/www/wwwroot/www.wlws.cc/docs/tables/brand_info.php\\"\\n ],\\n \\"ScanTime\\": 1681145862000,\\n \\"ScanType\\": \\"system\\",\\n \\"Status\\": 0,\\n \\"SuspiciousCount\\": 0,\\n \\"SuspiciousMachine\\": 1,\\n \\"TaskId\\": \\"t-0mqu9dhpi365dp5iyf\\",\\n \\"UnCompleteMachine\\": 1\\n }\\n }\\n}","type":"json"}]',
],
'OpenTrialPackage' => [
'summary' => 'sas-开启试用套餐',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '地域id。', 'type' => 'string', 'required' => false, 'example' => 'cn-guangzhou'],
],
[
'name' => 'AutoCloseSwitch',
'in' => 'query',
'schema' => ['description' => '试用套餐到期自动关闭开关。'."\n"
."\n"
.'- **1** 表示开启'."\n"
.'- **0** 表示关闭,默认为开启。', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '855FCC89-0B13-5FC0-AAD2-120878081C1C'],
'Code' => ['description' => 'HTTP状态码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '请求返回信息。', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否成功', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '操作结果',
'type' => 'object',
'properties' => [
'RequestId' => ['description' => '云安全中心请求Id。', 'type' => 'string', 'example' => '5F4B631D-0358-5B7B-8B84-FB924138ED91'],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-触发试用包开通流程',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"855FCC89-0B13-5FC0-AAD2-120878081C1C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"RequestId\\": \\"5F4B631D-0358-5B7B-8B84-FB924138ED91\\"\\n }\\n}","type":"json"}]',
],
'QuerySecurityCheckReport' => [
'summary' => '查询安全体检简报',
'methods' => ['post', 'get'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'read',
'deprecated' => false,
'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'tenant'],
'parameters' => [],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求Id。', 'type' => 'string', 'example' => '2FBDD713-00A5-5C98-B661-3FD31A349B6E'],
'Code' => ['description' => '状态码。'."\n"
."\n"
.'> 200:表示成功。 其它(500、400等):表示错误码。', 'type' => 'string', 'example' => '200'],
'Success' => ['description' => '是否调用成功:true:调用成功。 false:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Message' => ['description' => '描述', 'type' => 'string', 'example' => 'successful'],
'Data' => [
'description' => '查询结果。',
'type' => 'object',
'properties' => [
'SecurityStatus' => ['description' => '安全体检结果状态。'."\n"
."\n"
.'- **0**: 无风险'."\n"
.'- **1**: 存在风险 '."\n"
.'- **2**: 存在待优化项', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'RiskEventNumber' => ['description' => '风险事件数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '3'],
'SasCheckNumber' => ['description' => '云服务器待处理数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'ConfigCheckNumber' => ['description' => '配置审计待处理数量。', 'type' => 'integer', 'format' => 'int32', 'example' => '3'],
'ContactCheckNumber' => ['description' => '安全联系人待处理数量,', 'type' => 'integer', 'format' => 'int32', 'example' => '3'],
'CloudSecurityGuide' => ['description' => '云上指南订阅情况.'."\n"
."\n"
.'- **0**: 未订阅 '."\n"
.'- **1**: 已订阅', 'type' => 'integer', 'format' => 'int32', 'example' => '1'],
'SuggestionText' => ['description' => '建议文本。', 'type' => 'string', 'example' => 'exist risk event。'],
],
],
],
],
],
],
'errorCodes' => [
400 => [
['errorCode' => 'InvalidParameter', 'errorMessage' => 'Specified parameter is not valid.', 'description' => ''],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '查询安全体检简报',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2FBDD713-00A5-5C98-B661-3FD31A349B6E\\",\\n \\"Code\\": \\"200\\",\\n \\"Success\\": true,\\n \\"Message\\": \\"successful\\",\\n \\"Data\\": {\\n \\"SecurityStatus\\": 1,\\n \\"RiskEventNumber\\": 3,\\n \\"SasCheckNumber\\": 1,\\n \\"ConfigCheckNumber\\": 3,\\n \\"ContactCheckNumber\\": 3,\\n \\"CloudSecurityGuide\\": 1,\\n \\"SuggestionText\\": \\"exist risk event。\\"\\n }\\n}","type":"json"}]',
],
'StartDisposalToolService' => [
'summary' => '开启处置工具授权',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'none',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'publicInformation',
],
'parameters' => [
[
'name' => 'AuthType',
'in' => 'query',
'schema' => ['description' => '授权类型。'."\n"
."\n"
.'- **DisposalTool**:一键处置授权类型', 'type' => 'string', 'required' => false, 'example' => 'DisposalTool'],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => '返回参数。',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => '请求ID。', 'type' => 'string', 'example' => '1E0869D6-A5A0-52A6-A924-14070806976C'],
'Code' => ['description' => '状态码。返回 200 代表成功。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => 'message信息', 'type' => 'string', 'example' => 'successful'],
'Success' => ['description' => '是否调用成功:'."\n"
."\n"
.'- **true**:调用成功。 '."\n"
.'- **false**:调用失败。', 'type' => 'boolean', 'example' => 'true'],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => '开启处置工具授权',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"1E0869D6-A5A0-52A6-A924-14070806976C\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"successful\\",\\n \\"Success\\": true\\n}","type":"json"}]',
],
'UpdatePostPaidBindRel' => [
'summary' => 'sas-更新后付费绑定关系',
'methods' => ['post'],
'schemes' => ['https'],
'security' => [
[
'AK' => [],
],
],
'operationType' => 'write',
'deprecated' => false,
'systemTags' => [
'operationType' => 'get',
'riskType' => 'none',
'chargeType' => 'free',
'abilityTreeNodes' => ['FEATUREriskmanagementEV1QRW'],
'tenantRelevance' => 'tenant',
],
'parameters' => [
[
'name' => 'RegionId',
'in' => 'query',
'schema' => ['description' => '实例的地域ID。', 'type' => 'string', 'required' => false, 'example' => 'cn-huhehaote'],
],
[
'name' => 'SdkRequest',
'in' => 'query',
'style' => 'json',
'schema' => [
'description' => '云安全中心SDK请求参数。',
'type' => 'object',
'properties' => [
'AutoBind' => ['description' => '开启新增资产自动绑定。取值:'."\n"
."\n"
.'- **0**:关闭'."\n"
.'- **1**:开启', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1'],
'AutoBindVersion' => ['description' => '新增资产时自动绑定的版本,取值:'."\n"
.'- **1**:免费版 '."\n"
.'- **3**:企业版'."\n"
.'- **5**:高级版'."\n"
.'- **6**:防病毒版 '."\n"
.'- **7**:旗舰版', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3'],
'BindAction' => [
'description' => '执行绑定的动作参数列表。',
'type' => 'array',
'items' => [
'description' => '执行绑定的动作参数。',
'type' => 'object',
'properties' => [
'BindAll' => ['description' => '是否全量绑定。默认**false**,取值:'."\n"
."\n"
.'- **true**:是'."\n"
.'- **false**:否', 'type' => 'boolean', 'required' => false, 'example' => 'true'],
'UuidList' => [
'description' => '指定服务器 UUID 列表。'."\n"
.'> 子级条数 <= 1000 子级条数 >= 0',
'type' => 'array',
'items' => ['description' => '指定服务器 UUID。', 'type' => 'string', 'required' => false, 'example' => '6ec42694-fe78-43b1-95e8-8e98a917d99f'],
'required' => false,
],
'Version' => ['description' => '需要绑定的云安全中心防护版本。 取值:'."\n"
."\n"
.'- **1**:免费版'."\n"
.'- **3**:企业版'."\n"
.'- **5**:高级版'."\n"
.'- **6**:防病毒版'."\n"
.'- **7**:旗舰版', 'type' => 'string', 'required' => false, 'example' => '1'],
],
'required' => false,
],
'required' => false,
],
'UpdateIfNecessary' => ['description' => '是否强制升级版本。', 'type' => 'boolean', 'required' => false, 'example' => 'false'],
],
'required' => false,
],
],
],
'responses' => [
200 => [
'schema' => [
'title' => 'Schema of Response',
'description' => 'Schema of Response',
'type' => 'object',
'properties' => [
'RequestId' => ['title' => 'Id of the request', 'description' => 'Id of the request', 'type' => 'string', 'example' => '6E20BFD0-AA91-594F-B5A7-32CED4777DA0'],
'Code' => ['description' => '调用失败时,返回的错误码。更多信息,请参见错误码。', 'type' => 'string', 'example' => '200'],
'Message' => ['description' => '信息', 'type' => 'string', 'example' => 'operation success.'],
'Success' => ['description' => '是否调用成功:true:调用成功。 false:调用失败。', 'type' => 'boolean', 'example' => 'true'],
'Data' => [
'description' => '数据',
'type' => 'object',
'properties' => [
'Body' => [
'description' => '消息体',
'type' => 'object',
'properties' => [
'BindCount' => ['description' => '成功绑定服务器数。', 'type' => 'integer', 'format' => 'int64', 'example' => '1'],
'RequestId' => ['description' => 'Id of the request', 'type' => 'string', 'example' => '62A7DCE2-7D9C-511B-919E-0F46A9D19AE6'],
'ResultCode' => ['description' => '结果码', 'type' => 'integer', 'format' => 'int32', 'example' => 'OK'],
],
],
],
],
],
],
],
],
'staticInfo' => ['returnType' => 'synchronous'],
'title' => 'sas-变更按量付费服务防护版本',
'changeSet' => [],
'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6E20BFD0-AA91-594F-B5A7-32CED4777DA0\\",\\n \\"Code\\": \\"200\\",\\n \\"Message\\": \\"operation success.\\",\\n \\"Success\\": true,\\n \\"Data\\": {\\n \\"Body\\": {\\n \\"BindCount\\": 1,\\n \\"RequestId\\": \\"62A7DCE2-7D9C-511B-919E-0F46A9D19AE6\\",\\n \\"ResultCode\\": 0\\n }\\n }\\n}","type":"json"}]',
],
],
'endpoints' => [],
'errorCodes' => [],
'changeSet' => [],
];