The following tables list the API operations available for use in Cloud Config.

Ordinary accounts

An ordinary account is an independent Alibaba Cloud account that is not included in a resource directory by a management account. The following table describes the API operations that you can call by using ordinary accounts.

Item Operation Description
Compliance packages ListCompliancePackTemplates Queries compliance package templates.
CreateCompliancePack Creates a compliance package.
ListCompliancePacks Queries compliance packages.
GetCompliancePack Queries the details of a compliance package.
UpdateCompliancePack Modifies the information about a compliance package.
DeleteCompliancePacks Deletes one or more compliance packages.
GenerateCompliancePackReport Generates an evaluation report for a compliance package.
GetCompliancePackReport Queries the download URL of the evaluation report for a compliance package.
GetConfigRuleComplianceByPack Queries the statistics of rule-specific compliance evaluation results that are generated based on a compliance package.
GetResourceComplianceByPack Queries the statistics of resource-specific compliance evaluation results that are generated based on a compliance package.
Rules CreateConfigRule Creates a rule.
UpdateConfigRule Modifies a rule.
GetConfigRule Queries the details of a rule.
DeactiveConfigRules Disables one or more rules.
ListResourceEvaluationResults Queries the compliance evaluation result of a resource.
ListConfigRuleEvaluationResults Queries the compliance evaluation results that are generated for specific resources based on a rule.
GenerateConfigRulesReport Generates an evaluation report for all rules.
GetConfigRulesReport Queries the download URL of the evaluation report for all rules.
GetResourceComplianceByConfigRule Queries the statistics of the compliance evaluation results that are generated for specific resources based on a rule.
GetConfigRuleSummaryByRiskLevel Queries the statistics of the compliance evaluation results of rules at different risk levels.
Resources GetResourceComplianceTimeline Queries the compliance timeline of a resource.
GetResourceConfigurationTimeline Queries the configuration timeline of a resource.
GetDiscoveredResourceCountsGroupByResourceType Queries the statistics of resources from the resource type dimension.
GetDiscoveredResourceCountsGroupByRegion Queries the statistics of resources from the region dimension.
Delivery channels CreateDeliveryChannel Creates a delivery channel.
UpdateDeliveryChannel Modifies a delivery channel.

Management accounts

A management account is an Alibaba Cloud account that enables a resource directory and manages all member accounts. The following table describes the API operations that you can call by using management accounts.

Item Operation Description
Account groups CreateAggregator Creates an account group.
ListAggregators Queries account groups.
GetAggregator Queries the details of an account group.
UpdateAggregator Modifies the configurations of an account group.
DeleteAggregators Deletes one or more account groups.
Compliance packages ListCompliancePackTemplates Queries compliance package templates.
CreateAggregateCompliancePack Creates a compliance package for an account group.
ListAggregateCompliancePacks Queries the compliance packages in an account group.
GetAggregateCompliancePack Queries the details of a compliance package in an account group.
UpdateAggregateCompliancePack Modifies the information about a compliance package in an account group.
DeleteAggregateCompliancePacks Deletes one or more compliance packages from an account group.
GenerateAggregateCompliancePackReport Generates an evaluation report for a compliance package in an account group.
GetAggregateCompliancePackReport Queries the download URL of the evaluation report for a compliance package in an account group.
GetAggregateResourceComplianceByPack Queries the statistics of resource-specific compliance evaluation results that are generated based on a compliance package in an account group.
GetAggregateConfigRuleComplianceByPack Queries the statistics of rule-specific compliance evaluation results that are generated based on a compliance package in an account group.
GetAggregateAccountComplianceByPack Queries the statistics of member account-specific compliance evaluation results that are generated based on a compliance package in an account group.
Rules CreateAggregateConfigRule Creates a rule for an account group.
ListAggregateConfigRules Queries the rules in an account group.
GetAggregateConfigRule Queries the details of a rule in an account group.
UpdateAggregateConfigRule Modifies a rule in an account group.
DeleteAggregateConfigRules Deletes one or more rules from an account group.
ActiveAggregateConfigRules Enables one or more rules in an account group.
DeactiveAggregateConfigRules Disables one or more rules in an account group.
GenerateAggregateConfigRulesReport Generates an evaluation report for all rules in an account group.
GetAggregateConfigRulesReport Queries the download URL of the evaluation report for all rules in an account group.
StartAggregateConfigRuleEvaluation Uses a rule in an account group to evaluate the compliance of specific resources.
GetAggregateResourceComplianceByConfigRule Queries the statistics of the compliance evaluation results that are generated for specific resources based on a rule in an account group.
GetAggregateConfigRuleSummaryByRiskLevel Queries the statistics of the compliance evaluation results of rules at different risk levels in an account group.
ListAggregateConfigRuleEvaluationResults Queries the compliance evaluation results that are generated for specific resources based on a rule in an account group.
ListAggregateResourceEvaluationResults Queries the compliance evaluation result of a resource in an account group.
Resources GetAggregateResourceCountsGroupByResourceType Queries the statistics of the resources in an account group from the resource type dimension.
GetAggregateResourceCountsGroupByRegion Queries the statistics of the resources in an account group from the region dimension.
GetAggregateResourceConfigurationTimeline Queries the configuration timeline of a resource in an account group.
GetAggregateResourceComplianceTimeline Queries the compliance timeline of a resource in an account group.
Delivery channels CreateDeliveryChannel Creates a delivery channel.
UpdateDeliveryChannel Modifies a delivery channel.

Member accounts

A member account is an Alibaba Cloud account in a resource directory. The API operations that you can call by using a member account vary based on whether it is added to an account group. The following section provides detailed information:
  • If a member account is not added to an account group, you can use the member account to call all API operations that you can call by using an ordinary account. For more information, see the Ordinary accounts section of the "List of operations by function" topic.
  • If a member account is added to an account group, you can use the member account to call all API operations that you can call by using an ordinary account, and call the query API operations that you can call by using a management account to query the account group to which the member account belongs, and the compliance packages, rules, and resources that the member account owns.
    • For more information about all API operations that you can call by using an ordinary account, see the Ordinary accounts section of the "List of operations by function" topic.
    • The following table describes the query API operations that you can call by using a management account.
      Item Operation Description
      Account groups ListAggregators Queries account groups.
      GetAggregator Queries the details of an account group.
      Compliance packages ListAggregateCompliancePacks Queries the compliance packages in an account group.
      GetAggregateCompliancePack Queries the details of a compliance package in an account group.
      GetAggregateResourceComplianceByPack Queries the statistics of resource-specific compliance evaluation results that are generated based on a compliance package in an account group.
      GetAggregateConfigRuleComplianceByPack Queries the statistics of rule-specific compliance evaluation results that are generated based on a compliance package in an account group.
      GetAggregateAccountComplianceByPack Queries the statistics of member account-specific compliance evaluation results that are generated based on a compliance package in an account group.
      Rules ListAggregateConfigRules Queries the rules in an account group.
      GetAggregateConfigRule Queries the details of a rule in an account group.
      GetAggregateResourceComplianceByConfigRule Queries the statistics of the compliance evaluation results that are generated for specific resources based on a rule in an account group.
      GetAggregateConfigRuleSummaryByRiskLevel Queries the statistics of the compliance evaluation results of rules at different risk levels in an account group.
      ListAggregateConfigRuleEvaluationResults Queries the compliance evaluation results that are generated for specific resources based on a rule in an account group.
      Note
      • If you do not set the request parameter ResourceOwnerId, Cloud Config queries the compliance evaluation results generated for specific resources based on the rule that belongs to the current member account.
      • If you want to set the request parameter ResourceOwnerId, you must set this parameter to the ID of the current member account.
      ListAggregateResourceEvaluationResults Queries the compliance evaluation result of a resource in an account group.
      Resources ListAggregateDiscoveredResources Queries the resources in an account group.
      Note
      • If you do not set the request parameter ResourceOwnerId, Cloud Config queries the resources that belong to the current member account.
      • If you want to set the request parameter ResourceOwnerId, you must set this parameter to the ID of the current member account.
      GetAggregateDiscoveredResource Queries the details of a resource in an account group.
      Note
      • If you do not set the request parameter ResourceOwnerId, Cloud Config queries the details of the resource that belongs to the current member account.
      • If you want to set the request parameter ResourceOwnerId, you must set this parameter to the ID of the current member account.
      GetAggregateResourceCountsGroupByResourceType Queries the statistics of the resources in an account group from the resource type dimension.
      GetAggregateResourceCountsGroupByRegion Queries the statistics of the resources in an account group from the region dimension.
      GetAggregateResourceConfigurationTimeline Queries the configuration timeline of a resource in an account group.
      Note
      • If you do not set the request parameter ResourceOwnerId, Cloud Config queries the configuration timeline of the resource that belongs to the current member account.
      • If you want to set the request parameter ResourceOwnerId, you must set this parameter to the ID of the current member account.
      GetAggregateResourceComplianceTimeline Queries the compliance timeline of a resource in an account group.
      Note
      • If you do not set the request parameter ResourceOwnerId, Cloud Config queries the compliance timeline of the resource that belongs to the current member account.
      • If you want to set the request parameter ResourceOwnerId, you must set this parameter to the ID of the current member account.