All Products
Search
Document Center

Security Center:DescribeExposedInstanceDetail

Last Updated:Mar 01, 2024

Queries the details about a specified server that is exposed on the Internet.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
yundun-sas:DescribeExposedInstanceDetailRead
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
UuidstringYes

The UUID of the server that is exposed on the Internet.

Note You can call the DescribeExposedInstanceList operation to query the UUIDs of servers.
fc82b966-4d70-4e01-bf4f-aa4076a5****
ResourceDirectoryAccountIdlongNo

The Alibaba Cloud account ID of the member in the resource directory.

Note You can call the DescribeMonitorAccounts operation to query the account ID.
1232428423234****

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The ID of the request, which is used to locate and troubleshoot issues.

C590482B-54A7-4273-8115-9DBE2DE46B26
ExposedChainsobject []

The exposure details about the server.

ExposureIpstring

The public IP address.

47.99.XX.XX
GroupNostring

The server group to which the server belongs.

sg-bp1iw5enua6gf5i2xr7z
InternetIpstring

The public IP address of the server.

47.99.XX.XX
InstanceIdstring

The ID of the server.

i-bp116qem8npvchqc****
ExposureTypestring

The resource from which the server is exposed. Valid values:

  • INTERNET_IP: the public IP address of an Elastic Compute Service (ECS) instance
  • SLB: the public IP address of a Server Load Balancer (SLB) instance
  • EIP: an elastic IP address (EIP)
  • DNAT: the NAT gateway that connects to the Internet by using the DNAT feature
INTERNET_IP
IntranetIpstring

The private IP address of the server.

192.168.XX.XX
ExposureTypeIdstring

The ID of the instance to which the resource belongs. The valid values of this parameter vary based on the value of the ExposureType parameter.

  • If the value of the ExposureType parameter is INTERNET_IP, the value of this parameter is an empty string.
  • If the value of the ExposureType parameter is SLB, the value of this parameter is the ID of the Internet-facing SLB instance.
  • If the value of the ExposureType parameter is EIP, the value of this parameter is the ID of the EIP.
  • If the value of the ExposureType parameter is DNAT, the value of this parameter is the ID of the NAT gateway.
eip-bp1bkgowzam49rld3****
RegionIdstring

The region in which the server resides.

Note For more information about the mapping between region IDs and region names, see Regions and zones.
cn-hangzhou
Uuidstring

The UUID of the server.

4f9ce097-4a7d-48fe-baef-6960e5b6****
ExposurePortstring

The port that is exposed on the Internet.

22
InstanceNamestring

The name of the server.

worker-k8s-for-cs-c929ee2a145214f89a8b248005be5****
ExposureComponentstring

The server component that is exposed on the Internet.

openssl,openssh
RealVulListobject []

The information about the vulnerabilities that are exposed on the Internet and can be exploited by attackers.

Typestring

The type of the vulnerability. Valid values:

  • cve: Linux software vulnerabilities
  • sys: Windows system vulnerabilities
  • cms: Web-CMS vulnerabilities
  • app: application vulnerabilities
  • emg: urgent vulnerabilities
  • sca: middleware vulnerabilities
sca
Necessitystring

The priority to fix the vulnerability. Valid values:

  • asap: high
  • later: medium
  • nntf: low
Note We recommend that you fix the vulnerabilities that have the high priority at the earliest opportunity.
asap
Uuidstring

The UUID of the server.

4f9ce097-4a7d-48fe-baef-6960e5b6****
AliasNamestring

The alias of the vulnerability.

RHSA-2022:0274-Important: polkit pkexec Local Privilege Escalation Vulnerability(CVE-2021-4034)
Namestring

The name of the vulnerability.

SCA:ACSV-2020-052801
AllVulListobject []

The information about all vulnerabilities on the server.

Typestring

The type of the vulnerability. Valid values:

  • cve: Linux software vulnerabilities
  • sys: Windows system vulnerabilities
  • cms: Web-CMS vulnerabilities
  • app: application vulnerabilities
  • emg: urgent vulnerabilities
  • sca: middleware vulnerabilities
sca
Necessitystring

The priority to fix the vulnerability. Valid values:

  • asap: high
  • later: medium
  • nntf: low
Note We recommend that you fix the vulnerabilities that have the high priority at the earliest opportunity.
asap
Uuidstring

The UUID of the server.

4f9ce097-4a7d-48fe-baef-6960e5b6****
AliasNamestring

The alias of the vulnerability.

RHSA-2022:0274-Important: polkit pkexec Local Privilege Escalation Vulnerability(CVE-2021-4034)
Namestring

The name of the vulnerability.

SCA:ACSV-2020-052801

Examples

Sample success responses

JSONformat

{
  "RequestId": "C590482B-54A7-4273-8115-9DBE2DE46B26",
  "ExposedChains": [
    {
      "ExposureIp": "47.99.XX.XX",
      "GroupNo": "sg-bp1iw5enua6gf5i2xr7z",
      "InternetIp": "47.99.XX.XX",
      "InstanceId": "i-bp116qem8npvchqc****",
      "ExposureType": "INTERNET_IP",
      "IntranetIp": "192.168.XX.XX",
      "ExposureTypeId": "eip-bp1bkgowzam49rld3****",
      "RegionId": "cn-hangzhou",
      "Uuid": "4f9ce097-4a7d-48fe-baef-6960e5b6****",
      "ExposurePort": "22",
      "InstanceName": "worker-k8s-for-cs-c929ee2a145214f89a8b248005be5****",
      "ExposureComponent": "openssl,openssh",
      "RealVulList": [
        {
          "Type": "sca",
          "Necessity": "asap",
          "Uuid": "4f9ce097-4a7d-48fe-baef-6960e5b6****",
          "AliasName": "RHSA-2022:0274-Important: polkit pkexec Local Privilege Escalation Vulnerability(CVE-2021-4034)",
          "Name": "SCA:ACSV-2020-052801"
        }
      ],
      "AllVulList": [
        {
          "Type": "sca",
          "Necessity": "asap",
          "Uuid": "4f9ce097-4a7d-48fe-baef-6960e5b6****",
          "AliasName": "RHSA-2022:0274-Important: polkit pkexec Local Privilege Escalation Vulnerability(CVE-2021-4034)",
          "Name": "SCA:ACSV-2020-052801"
        }
      ]
    }
  ]
}

Error codes

HTTP status codeError codeError messageDescription
400RdCheckNoPermissionResource directory account verification has no permission.-
403NoPermissioncaller has no permissionYou are not authorized to do this operation.
500RdCheckInnerErrorResource directory account service internal error.-
500ServerErrorServerError-

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-02-28The Error code has changed. The request parameters of the API has changedsee changesets
Change itemChange content
Error CodesThe Error code has changed.
    Added Error Codes: 400
    Added Error Codes: 500
Input ParametersThe request parameters of the API has changed.
    Added Input Parameters: ResourceDirectoryAccountId
2022-12-23API Description Update. The API operation is not deprecated.see changesets
Change itemChange content
API DescriptionAPI Description Update.
API Deprecation DescriptionThe API operation is not deprecated..