All Products
Search
Document Center

NAT Gateway:API overview

Last Updated:Sep 15, 2026

API standards and multilingual preset SDKs

The OpenAPI of this product (Vpc/2016-04-28) uses the RPC signature style. We have encapsulated SDKs for common programming languages for developers. Developers can download the SDK to directly call this product's OpenAPI without worrying about technical details. If the existing SDK does not meet your needs, you can use the signature mechanism for self-signing integration. Since the details of self-signing are very complex, it may take around 5 business days. Therefore, we recommend joining our DingTalk service group (147535001692) and conducting signature integration under expert guidance.

Before using the API, you need to prepare your identity account and access key (AccessKey) to effectively access the API through client tools (such as SDK and CLI). For details, see Obtain an AccessKey.

Custom signature scenarios

If your business scenario has special requirements and you need to integrate the API through self-signing, we recommend consulting our technical support team first (DingTalk service group: 147535001692) to obtain professional guidance and ensure efficient integration.

Account and security preparation

Alibaba Cloud accounts have full administrative permissions over all resources. Once an AccessKey is compromised, all associated resources will be at risk of unauthorized access. To ensure security, it is recommended to create a RAM user with only API access permissions and configure its AccessKey, while configuring RAM policies based on the principle of least privilege (PoLP). Use the Alibaba Cloud account only in specific scenarios where Alibaba Cloud account permissions are explicitly required.

NAT

API

Title

Description

NAT gateway NAT gateway
CreateNatGateway Create a NAT gateway Creates an enhanced Internet NAT gateway or a VPC NAT gateway by calling the CreateNatGateway operation.
DeleteNatGateway Delete a specified NAT gateway Deletes a specified Internet NAT gateway.
ModifyNatGatewayAttribute Modify the attributes of a NAT gateway Modifies the attributes of a NAT gateway.
ModifyNatGatewaySpec Modify the specification of a NAT gateway Modifies the specification of a subscription Internet NAT gateway by calling the ModifyNatGatewaySpec operation.
DescribeNatGateways Query created NAT gateways Queries the details of NAT gateways that meet specified conditions in a specified region.
GetNatGatewayAttribute View details of a single NAT gateway instance Queries the information about a single NAT gateway instance.
ListEnhanhcedNatGatewayAvailableZones Query zones available for enhanced NAT gateways Queries the zones where NAT gateway resources are available by calling the ListEnhanhcedNatGatewayAvailableZones operation.
DescribeNatGatewayAssociateNetworkInterfaces Query elastic network interfaces (ENIs) associated with a VPC NAT gateway Queries the list of elastic network interfaces (ENIs) associated with a VPC NAT gateway when the VPC NAT gateway is referenced as an EPS resource by PrivateLink. This feature is currently not available.
VpcDescribeVpcNatGatewayNetworkInterfaceQuota Query the number of ePs available for reverse access on a VPC NAT gateway Queries the number of endpoints (EPs) that can be created for reverse access on a VPC NAT gateway.
SNAT rule SNAT rule
CreateSnatEntry Add an SNAT entry to an SNAT table Calls the CreateSnatEntry operation to add an SNAT entry to an SNAT table.
DeleteSnatEntry Delete a specified SNAT entry Deletes a specified SNAT entry.
ModifySnatEntry Modify a specified SNAT entry Modifies a specified SNAT entry.
DescribeSnatTableEntries Query created SNAT entries Queries the SNAT entries that have been created.
DNAT rule DNAT rule
CreateForwardEntry Add a DNAT entry to a DNAT table Adds a DNAT entry to a DNAT table by calling the CreateForwardEntry operation.
DeleteForwardEntry Delete a specified DNAT entry Deletes a specified DNAT entry.
ModifyForwardEntry Modify a specified DNAT entry Modifies a specified DNAT entry.
DescribeForwardTableEntries Query created DNAT entries Queries DNAT entries that have been created by calling the DescribeForwardTableEntries operation.
FullNAT rule FullNAT rule
CreateFullNatEntry Add a FULLNAT entry Adds a FULLNAT entry to a FULLNAT table by calling the CreateFullNatEntry operation.
DeleteFullNatEntry Delete a FULLNAT entry Deletes a FULLNAT entry.
ModifyFullNatEntryAttribute Modify a FULLNAT entry Modifies a FULLNAT entry.
ListFullNatEntries Query FULLNAT entries Queries the list of FULLNAT entries.
NAT IP management NAT IP management
NatIp NatIp
CreateNatIp Create a NAT IP address Creates a NAT IP address for a VPC NAT gateway instance.
DeleteNatIp Delete a NAT IP address Deletes a NAT IP address.
ModifyNatIpAttribute Modify the name and description of a NAT IP address Modifies the name and description of a NAT IP address.
ListNatIps Query NAT IP addresses Queries a list of NAT IP addresses.
NatIpCidr NatIpCidr
CreateNatIpCidr Create a NAT CIDR block Creates a NAT CIDR block for a VPC NAT gateway instance.
DeleteNatIpCidr Delete a NAT CIDR block Deletes a NAT CIDR block by calling the DeleteNatIpCidr operation.
ModifyNatIpCidrAttribute Modify the name and description of a NAT CIDR block Modifies the name and description of a NAT CIDR block.
ListNatIpCidrs Query NAT CIDR blocks Queries a list of NAT CIDR blocks.