All Products
Search
Document Center

Data Security Center:DescribeEventTypes

Last Updated:Mar 26, 2024

Queries the types of anomalous events.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
LangstringNo

The language of the content within the request and response. Valid values:

  • zh: Chinese
  • en: English
zh
ParentTypeIdlongNo

The type of anomalous event for which you want to query the anomalous events of subtypes. Valid values:

  • 01: anomalous permission usage
  • 02: anomalous data flow
  • 03: anomalous data operation
01
ResourceIdintegerNo

The type of the resource. Valid values include 1, 2, 3, 4, and 5. The value 1 indicates MaxCompute. The value 2 indicates Object Storage Service (OSS). The value 3 indicates AnalyticDB for MySQL. The value 4 indicates Tablestore. The value 5 indicates ApsaraDB RDS.

5
StatusintegerNo

The status of the anomalous event. Valid values:

  • 1: enabled
  • 2: disabled
1
FeatureTypeintegerNo

This parameter is deprecated.

2

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The ID of the request.

769FB3C1-F4C9-42DF-9B72-7077A8989C13
EventTypeListobject []

An array that consists of the types of anomalous events.

Note If you leave the ParentTypeId parameter empty, anomalous event types are returned. If you set the ParentTypeId parameter, anomalous event subtypes under the specified anomalous event type are returned.
Codestring

The code of the anomalous event type.

01
Descriptionstring

The description of the anomalous event type.

Anomalous permission usage,\*\*\*\*
Namestring

The name of the anomalous event type.

Anomalous permission usage
Idlong

The ID of the anomalous event type.

1
SubTypeListobject []

An array that consists of anomalous event subtypes.

Statusinteger

Indicates whether detection is enabled for the anomalous event subtype. Valid values:

  • 1: yes
  • 0: no
1
Descriptionstring

The description of the anomalous event subtype.

Inappropriate configuration-No protection for the MaxCompute sensitive project, \*\*\*\*
ConfigContentTypeinteger

The content format of anomalous event detection rule. Valid values:

  • 0: numeric values such as thresholds
  • 1: text such as IP addresses
1
EventHitCountinteger

The number of times that the anomalous event hits the anomalous event detection rule.

2
ConfigValuestring

The value of the configuration.

90
ConfigCodestring

The code of the configuration.

0100**
Codestring

The code of the anomalous event subtype.

020008
ConfigDescriptionstring

The description of the configuration.

The period of time for which the permission is not used exceeds the threshold. The specified threshold is ${value} calendar days.
Namestring

The name of the anomalous event subtype.

Inappropriate configuration-No protection for the MaxCompute sensitive project
AdaptedProductstring

The service to which the anomalous event detection rule applies. Valid values include MaxCompute, OSS, ADS, OTS, and RDS.

RDS
Idlong

The ID of the anomalous event subtype.

1

Examples

Sample success responses

JSONformat

{
  "RequestId": "769FB3C1-F4C9-42DF-9B72-7077A8989C13",
  "EventTypeList": [
    {
      "Code": "01",
      "Description": "Anomalous permission usage,\\*\\*\\*\\*\n",
      "Name": "Anomalous permission usage\n",
      "Id": 1,
      "SubTypeList": [
        {
          "Status": 1,
          "Description": "Inappropriate configuration-No protection for the MaxCompute sensitive project, \\*\\*\\*\\*\n",
          "ConfigContentType": 1,
          "EventHitCount": 2,
          "ConfigValue": "90",
          "ConfigCode": "0100**",
          "Code": "020008",
          "ConfigDescription": "The period of time for which the permission is not used exceeds the threshold. The specified threshold is ${value} calendar days.\n",
          "Name": "Inappropriate configuration-No protection for the MaxCompute sensitive project\n",
          "AdaptedProduct": "RDS",
          "Id": 1
        }
      ]
    }
  ]
}

Error codes

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-03-25The request parameters of the API has changedsee changesets
Change itemChange content
Input ParametersThe request parameters of the API has changed.
    Added Input Parameters: FeatureType