This topic describes the API behavior when an Elastic Compute Service (ECS) instance is locked for security reasons.

API behavior

If you call the DescribeInstances operation to query information about an ECS instance and the OperationLocks parameter in the response contains LockReason: security, the instance is locked for security reasons.

Note If a disk on the instance is in the In_use state, the behavior of API operations that are related to the disk varies based on the return value of the OperationLocks parameter. If the disk is in another state, the return value of the OperationLocks parameter can be ignored.
OperationBehavior
AllocatePublicIpAddressAffected and returns an error
AttachDiskAffected and returns an error
AuthorizeSecurityGroupUnaffected
CreateDiskUnaffected
CreateImageUnaffected
CreateInstanceAffected and returns an error
CreateSecurityGroupUnaffected
CreateSnapshotAffected and returns an error only when the disk that is attached to the instance is in the In_use state.
DeleteDiskUnaffected
DeleteImageUnaffected
DeleteInstanceUnaffected
DeleteSecurityGroupUnaffected
DeleteSnapshotUnaffected
DescribeAutoSnapshotPolicyUnaffected
DescribeDisksUnaffected
DescribeImagesUnaffected
DescribeInstancesUnaffected
DescribeInstanceStatusUnaffected
DescribeInstanceTypesUnaffected
DescribeInstanceMonitorDataUnaffected
DescribeRegionsUnaffected
DescribeSecurityGroupAttributeUnaffected
DescribeSecurityGroupsUnaffected
DescribeSnapshotAttributeUnaffected
DescribeSnapshotsUnaffected
DescribeZonesUnaffected
DetachDiskAffected and returns an error
JoinSecurityGroupAffected and returns an error
LeaveSecurityGroupAffected and returns an error
ModifyAutoSnapshotPolicyUnaffected
ModifyDiskAttributeUnaffected
ModifyInstanceAttributeAffected and returns an error
RebootInstanceAffected and returns an error
ReInitDisk
  • Affected and returns an error only when the disk that is attached to the instance is in the In_use state.
  • Unaffected when the disk that is attached to the instance is in another state.
ReplaceSystemDiskUnaffected
ResetDiskAffected and returns an error
RevokeSecurityGroupUnaffected
StartInstanceAffected and returns an error
StopInstanceAffected and returns an error