Web Application Firewall (WAF) is integrated with ActionTrail. You can query WAF management events in ActionTrail and deliver them to SLS Logstores or OSS buckets for real-time auditing and issue tracing.
ActionTrail records management events generated when you use the console or call OpenAPI operations to manage cloud resources. The following table lists the WAF events that ActionTrail can record.
|
Event name |
Description |
|
AddDependencies |
Adds a dependency. |
|
AddSasEcsRaspAgent |
Adds a Runtime Application Self-Protection (RASP) agent for an Elastic Compute Service (ECS) instance that is connected to SAS. |
|
BatchModifyIPPortRedirectionStatus |
Batch-modifies the traffic redirection status. |
|
CheckDomainCert |
Checks a domain name certificate. |
|
ClearMajorProtectionBlackIp |
Clears an IP blacklist for major event support. |
|
CopyRuleGroup |
Copies a custom rule group. |
|
Create |
Purchases a resource on the product buy page. |
|
CreateAclRule |
Adds an accurate access control rule for a specified domain name. |
|
CreateAntiBotScene |
Creates an anti-bot scenario configuration. |
|
CreateAntiBotTest |
Performs an anti-bot test. |
|
CreateApiExport |
Creates a task to export API security data. |
|
CreateAssetDomainExport |
Exports asset domain data. |
|
CreateAutoAccess |
Creates an automatic access configuration. |
|
CreateAutoAccessDomain |
Adds a domain name for automatic access. |
|
CreateBotProtectionTest |
Creates a scenario-based test. |
|
CreateBuildGroupApplication |
Creates a build group task. |
|
CreateCertAndKey |
Uploads the certificate and private key for a domain name configuration. |
|
CreateCertificate |
Uploads the certificate and private key for a domain name configuration. |
|
CreateCertificateByCertificateId |
Creates a certificate for a specified domain name based on a certificate ID. |
|
CreateCertUsingCertId |
Creates a certificate using a certificate ID. |
|
CreateCloudNativeDomain |
Creates a cloud-native domain name for WAF in transparent proxy mode. |
|
CreateCloudNativeInstancePortRedirection |
Creates a port forwarding rule for a cloud-native instance. |
|
CreateCopyRuleGroup |
Creates a rule group by copying an existing one. |
|
CreateCustomAssetDomain |
Creates a custom asset domain name. |
|
CreateDefenseResource |
Creates a protected object. |
|
CreateDefenseResourceGroup |
Creates a protected object group. |
|
CreateDefenseRule |
Creates a protection rule. |
|
CreateDefenseTemplate |
Creates a protection template. |
|
CreateDomain |
Adds a domain name configuration. |
|
CreateDomainCertificates |
Uploads a certificate. |
|
CreateDomainConfig |
Adds a domain name configuration. |
|
CreateDomainCustomRoutingRules |
Creates custom routing rules for a hybrid cloud domain. |
|
CreateDomainDrainage |
Creates a domain name export task. |
|
CreateElasticityInstance |
Creates a pay-as-you-go instance. |
|
CreateEmptyLogstore |
Creates an empty log group. |
|
CreateGroupMember |
Adds a member to a group. |
|
CreateHybridCloudCluster |
Creates a hybrid cloud cluster. |
|
CreateHybridCloudGroup |
Creates a group. |
|
CreateInstance |
Creates an instance. |
|
CreateIPBlock |
Creates a rule for a custom IP blacklist. |
|
CreateIPPortRedirection |
Enables traffic redirection for WAF in transparent proxy mode. |
|
CreateLogExportTask |
Creates a log export task. |
|
CreateMajorProtectionBlackIp |
Adds an IP address to a blacklist for major event support. |
|
CreateOutputDomain |
Creates a domain name. |
|
CreatePostpaidInstance |
Backs up the configurations of an instance created for CDN. |
|
CreateProtectionModuleRule |
Adds a protection rule. |
|
CreateRuleGroup |
Creates a custom rule group. |
|
CreateSasApplication |
Creates an SAS RASP application. |
|
CreateSlsLogStore |
Creates an SLS Logstore. |
|
CreateSlsOpenOrder |
Activates SLS. |
|
CreateSlsResource |
Creates a Logstore. |
|
CreateTgw |
Creates a transparent proxy asset. |
|
CreateVirtualClusterInstance |
Creates a virtual cluster instance. |
|
CreateWafCertificate |
Uploads a certificate. |
|
DeleteAclRule |
Deletes a specified accurate access control rule. |
|
DeleteAntiBotScene |
Deletes an anti-bot scenario configuration. |
|
DeleteAntiBotTest |
Deletes an anti-bot test. |
|
DeleteBotProtectionTest |
Deletes the results of a bot scenario test. |
|
DeleteCloudNativeDomain |
Deletes a domain name from WAF in transparent proxy mode. |
|
DeleteCloudNativeInstancePortRedirection |
Deletes a port forwarding rule of a cloud-native instance. |
|
DeleteDefenseResource |
Deletes a protected object. |
|
DeleteDefenseResourceGroup |
Deletes a protected object group. |
|
DeleteDefenseRule |
Deletes a protection rule. |
|
DeleteDefenseTemplate |
Deletes a protection template. |
|
DeleteDomain |
Deletes a specified domain name configuration. |
|
DeleteDomainConfig |
Deletes a specified domain name configuration. |
|
DeleteExpiredMajorProtectionBlackIp |
Deletes an expired IP address from a blacklist for major event support. |
|
DeleteHybridCloudGroup |
Deletes a group. |
|
DeleteInstance |
Releases a pay-as-you-go or an expired subscription WAF instance. |
|
DeleteIPPortRedirection |
Disables traffic redirection for WAF in transparent proxy mode. |
|
DeleteLogExportTask |
Deletes a log export task. |
|
DeleteMajorProtectionBlackIp |
Deletes an IP address from a blacklist for major event support. |
|
DeleteOutputDomain |
Disables a domain name configuration. |
|
DeleteProtectionModuleRule |
Deletes a rule from a protection module. |
|
DeleteRuleGroup |
Deletes a custom rule group. |
|
DeleteSasApplication |
Deletes an SAS RASP application. |
|
DeleteTgw |
Deletes a transparent proxy asset. |
|
DescribeAccessMode |
Queries the access mode. |
|
DescribeAccessWafSourcePvStatistics |
Queries the statistics of page views (PVs) on the origin server that is protected by WAF. |
|
DescribeAccountSecurityEvents |
Queries the list of account security events. |
|
DescribeAclAttackPv |
Queries the number of ACL attack events. |
|
DescribeAclBlockRuleStatisticsInfo |
Queries the list of events that are triggered by access control rules. |
|
DescribeAclRules |
Queries the list of accurate access control rules for a specified domain name. |
|
DescribeAclStatisticsInfo |
Queries the protection information of custom access control rules. |
|
DescribeActiveApis |
Queries the list of active APIs. |
|
DescribeActiveApisStatistics |
Queries the statistics of active APIs. |
|
DescribeAgentFileInfo |
Queries the information about an agent file. |
|
DescribeAntiBotIntelligenceInfos |
Queries the information about a bot threat intelligence library. |
|
DescribeAntiBotRuleInfo |
Queries the information about an anti-bot rule. |
|
DescribeAntiBotRuleStatisticsInfos |
Statistics for anti-crawler rules. |
|
DescribeAntiBotScene |
Queries the configuration of an anti-bot scenario. |
|
DescribeAntiBotSceneCount |
Queries the number of anti-bot scenarios. |
|
DescribeAntiBotSceneInfos |
Queries the configurations of multiple anti-bot scenarios in a batch. |
|
DescribeAntiBotSceneStatisticsInfos |
Overview of anti-crawler protection. |
|
DescribeAntiBotStatisticsInfos |
Anti-crawler protection overview. |
|
DescribeAntiBotTestResult |
Queries the results of an anti-bot test. |
|
DescribeAntiscanBlockTypeStatisticsInfo |
Queries the statistics on the types of blocked scan protection events. |
|
DescribeAntiscanStatisticsInfo |
Queries the trend chart for the total number of requests, blocked requests, and requests that match rules in observation mode. |
|
DescribeApiAbnormalDetail |
Queries the details of an API vulnerability. |
|
DescribeApiAbnormalResolveCount |
Queries the number of fixed risks. |
|
DescribeApiAbnormals |
Queries the list of API vulnerabilities. |
|
DescribeApiBasicInfo |
Queries the basic information about an API. |
|
DescribeApiDetail |
Queries the details of an API. |
|
DescribeApiEventDetail |
Queries the details of an API event. |
|
DescribeApiEvents |
Queries WAF event records. |
|
DescribeApiEventStatistics |
Queries the statistics of WAF events. |
|
DescribeApiExceptionEventDetail |
Queries the details of an API anomaly. |
|
DescribeApiExceptionEvents |
Queries the list of API anomalies. |
|
DescribeApiExports |
Queries the list of tasks to export API security data. |
|
DescribeApiRequestStatistics |
Queries the access statistics of an API in the last 30 days. |
|
DescribeApiRequestTopClient |
Queries the top clients of an API in the last 30 days. |
|
DescribeApiRequestTopIp |
Queries the top IP addresses of an API in the last 30 days. |
|
DescribeApiRequestTopRefer |
Queries the top 5 source IP addresses of attacks on an API in the last 30 days. |
|
DescribeApiRequestTopRegion |
Queries the top 5 source IP addresses of attacks from the overview of a security report. |
|
DescribeApiRisk |
Queries the risk information of an API. |
|
DescribeApiRiskDetail |
Queries the list of API risks. |
|
DescribeApiRiskEvents |
Queries the list of API risk events. |
|
DescribeApiRiskEventsDistributed |
Queries the distribution of API risk events. |
|
DescribeApisAbnormalInfo |
Queries the details of an API vulnerability. |
|
DescribeApisEvents |
Queries the list of API events. |
|
DescribeApisEventStatistics |
Queries the statistics of API events. |
|
DescribeApisRiskCount |
Queries the number of API risks. |
|
DescribeApisRiskDistributed |
Queries the distribution of API risks. |
|
DescribeApisRiskStatistics |
Queries the trend chart of API risks. |
|
DescribeAppKey |
Queries the user-level AppKey. |
|
DescribeApplications |
Queries the list of applications. |
|
DescribeAppsStatusList |
Queries the list of application statuses. |
|
DescribeAssetDomainAttacks |
Queries the details of an attack. |
|
DescribeAssetDomainExports |
A list of Asset export records. |
|
DescribeAssetDomainStatisticsInfo |
Queries the overview of domain names (total number). |
|
DescribeAssetRootDomains |
The following is a list of root domains. |
|
DescribeAssetsAccessDomainInfos |
Queries the information about the access domain names of an asset. |
|
DescribeAssetsAccessDomains |
Queries the details of an access domain name asset. |
|
DescribeAssetsDomainCount |
Queries the number of asset domain names. |
|
DescribeAssetsExactDomainInfos |
Queries the information about an exact-match domain name asset. |
|
DescribeAssetsRootDomainInfos |
Queries the information about a root domain name asset. |
|
DescribeAssetsRootDomains |
Queries root domain name assets. |
|
DescribeAssetsSubDomainInfos |
Queries the information about a subdomain asset. |
|
DescribeAssetsSubDomains |
Queries subdomain assets. |
|
DescribeAssetSubDomains |
Queries the information about a subdomain asset. |
|
DescribeAssetsUrlChildNodes |
Queries the details of a URL child node asset. |
|
DescribeAssetsUrlFirstPaths |
Queries the details of a URL first-path asset. |
|
DescribeAssetsUrlRootNodes |
Queries the details of a URL root path asset. |
|
DescribeAssetsWebsites |
Queries website assets. |
|
DescribeAssociatedAntiBotSceneInfos |
Queries the anti-bot scenario configurations that are associated with a domain name. |
|
DescribeAsyncTaskStatus |
Queries the execution status of a WAF task. |
|
DescribeAttackApplicationCount |
Queries the number of attacking applications. |
|
DescribeAttackCount |
Queries the number of attacks. |
|
DescribeAttackEvents |
Queries the list of attack events. |
|
DescribeAttackEventTypes |
Queries the list of attack event types. |
|
DescribeAttackLog |
Queries attack logs. |
|
DescribeAttacks |
Queries the list of attacks. |
|
DescribeAttackStatisticsInfo |
Queries attack statistics. |
|
DescribeAttackTypeDomainSummary |
Queries the aggregation of attack types for a domain name. |
|
DescribeAttackTypePeakStatistics |
Queries the trend of attack types. |
|
DescribeAttackTypeSummary |
Queries the total number of various attacks. |
|
DescribeAuthorization |
Queries authentication information. |
|
DescribeAutoAccessStatus |
Queries the automatic access status. |
|
DescribeBandwidthStatisticsInfo |
Queries the bandwidth statistics of a WAF instance. |
|
DescribeBeaverWafAttackCount |
Queries the number of attacks on Beaver WAF. |
|
DescribeBills |
Queries bill details. |
|
DescribeBotAppKey |
Queries protection templates by page. |
|
DescribeBotIntelligenceInfos |
Queries protection templates by page. |
|
DescribeBotProtectionTestResult |
Queries the results of a bot scenario test. |
|
DescribeBotRuleInfos |
Queries the scene rules that correspond to fine-grained bot rules. |
|
DescribeBotRuleStatisticsInfos |
Queries the statistics of bot management rules among the matched rules. |
|
DescribeBotSceneStatisticsInfos |
Queries the effectiveness of scenario-based protection. |
|
DescribeBotStatisticsInfos |
Queries the overview of bot protection effectiveness. |
|
DescribeBriefRuleGroups |
Queries the list of simple rule groups. |
|
DescribeBuildGroupQualification |
Queries the details of configuration audit logs. |
|
DescribeCCBlockTypeStatisticsInfo |
Queries the statistics of geo-blocking. |
|
DescribeCCStatisticsInfo |
Queries the CC protection statistics chart. |
|
DescribeCertDetail |
Queries certificate details. |
|
DescribeCertificates |
Queries the optional certificates for a specified domain name. |
|
DescribeCertList |
Queries the list of certificates. |
|
DescribeCertMatchStatus |
Checks whether the uploaded certificate and private key for a specified domain name configuration match. |
|
DescribeCerts |
Queries the list of certificates. |
|
DescribeCloudNativeDomain |
Queries a domain name in WAF in transparent proxy mode. |
|
DescribeCloudNativeDomainAdvanceConfigs |
Queries the list of cloud-native domain names (extended properties). |
|
DescribeCloudNativeEnabledPortsCount |
Queries the number of enabled ports for WAF in transparent proxy mode. |
|
DescribeCloudNativeInstanceConfigs |
Queries the configurations of a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstanceFreePorts |
Queries the idle ports of a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstancePortRedirection |
Queries the port forwarding rules of a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstancePortRedirectionProfiles |
Queries the summary of port forwarding rules for a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstancePortRedirectionTotalCount |
Queries the total number of port forwarding rules for a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstanceRedirection |
Queries the list of forwarding rules for a WAF instance in transparent proxy mode. |
|
DescribeCloudNativeInstances |
Queries the list of WAF instances in transparent proxy mode. |
|
DescribeCloudNativeOpenInstanceNumber |
Queries the number of cloud-native instances that are added to WAF. |
|
DescribeCloudResources |
Queries resource information. |
|
DescribeCommonLogFields |
Queries all supported log fields. |
|
DescribeCustomNodes |
Queries the list of custom node regions. |
|
DescribeDDosCreditThreshold |
Queries the DDoS credit threshold. |
|
DescribeDefenseGroupValidResources |
Queries by page the list of protected objects that can be attached to a protected object group. |
|
DescribeDefenseResourceGroup |
Retrieve a single protected object. |
|
DescribeDefenseResourceGroupNames |
Queries by page the list of protected object group names. |
|
DescribeDefenseResourceGroups |
Queries protected object groups by page. |
|
DescribeDefenseResourceNames |
Queries the names of protected objects by page. |
|
DescribeDefenseResources |
Queries protected objects by page. |
|
DescribeDefenseResourceTemplates |
Queries the protection templates of a protected object or protected object group. |
|
DescribeDefenseRule |
Queries a single protection rule. |
|
DescribeDefenseRules |
Queries protection rules by page. |
|
DescribeDefenseScenes |
Queries the protection scenarios that are in use. |
|
DescribeDefenseTemplates |
Queries protection templates by page. |
|
DescribeDefenseTemplateValidGroups |
Queries by page the list of protected object group names that can be attached to a custom template. |
|
DescribeDefenseTemplateValidResources |
Queries by page the list of protected objects that can be attached to a custom template. |
|
DescribeDependencies |
Queries the list of dependencies. |
|
DescribeDependencyInstances |
Queries the list of dependent instances. |
|
DescribeDisabledIPPortRedirectionProfiles |
Queries the list of ports for which traffic redirection is disabled for an IP address. |
|
DescribeDnsValidateConfig |
Queries the TXT record parsing configuration. |
|
DescribeDomain |
Queries the configuration of an added domain name. |
|
DescribeDomainAccessStatus |
Queries the access status of a domain name. |
|
DescribeDomainAdvanceConfigs |
Queries the details of an added domain name configuration. |
|
DescribeDomainApiAttackLog |
Queries the details of API protection logs. |
|
DescribeDomainApiInfo |
Queries the list of APIs. |
|
DescribeDomainApiInfos |
Queries the list of domain name API information. |
|
DescribeDomainAttackEvents |
Queries the list of attack events for a domain name. |
|
DescribeDomainBasicConfigList |
Queries the list of basic domain name configurations. |
|
DescribeDomainBasicConfigs |
Queries the protection status of a domain name configuration. |
|
DescribeDomainCertificates |
Queries certificates. |
|
DescribeDomainCnameStatus |
Queries the CNAME status of a domain name. |
|
DescribeDomainConfig |
Queries the forwarding configuration of a specified domain name. |
|
DescribeDomainConfigList |
Queries the list of domain name configurations. |
|
DescribeDomainConfigStatus |
Queries whether the forwarding configuration of a specified domain name is in effect. |
|
DescribeDomainCustomRoutingRules |
Queries the list of static routing policies for a domain name. |
|
DescribeDomainDetail |
Queries the details of a domain name. |
|
DescribeDomainList |
Queries domain name asset information. |
|
DescribeDomainLogEnableds |
Queries the list of enabling statuses for domain name logs. |
|
DescribeDomainNames |
Queries the list of added domain names in a specified WAF instance. |
|
DescribeDomainProtocolType |
Queries the protocol type of a domain name. |
|
DescribeDomainRuleGroup |
Queries the ID of the protection rule group that is used by the protection rules engine for a specified domain name configuration. |
|
DescribeDomains |
Queries the list of domain names. |
|
DescribeDomainScores |
Queries the list of user domain name scores. |
|
DescribeDomainsPv |
Queries the access traffic of a server by domain name. |
|
DescribeDomainsRedirectedByCloudNativeInstancePort |
Queries the list of domain name forwards based on a cloud-native instance port. |
|
DescribeDomainSupportedCiphers |
Queries the set of supported TLS cipher suites. |
|
DescribeDomainTlsCipherSuite |
Queries the TLS cipher suite of a domain name. |
|
DescribeDomainTlsConfig |
Queries the TLS configuration of a domain name. |
|
DescribeDomainTotalCount |
Queries the total number of domain names. |
|
DescribeDomainTransferConfig |
Queries the transfer configuration of a domain name. |
|
DescribeDomainValidateConfig |
Queries user TXT records. |
|
DescribeDomainWebAttackTypePv |
Queries the statistics of web attack types. |
|
DescribeDrainageIps |
Queries the list of IP addresses for added domain names in a WAF instance. |
|
DescribeElasticBills |
Queries the bills of the last month. |
|
DescribeEnabledCloudNativeInstances |
Queries the list of WAF instances that are in transparent proxy mode and have been added to WAF. |
|
DescribeFlowChart |
Queries traffic statistics. |
|
DescribeFlowStatisticsInfo |
Queries stream statistics. |
|
DescribeFlowTopResource |
Queries the top 10 protected objects with the most access traffic. |
|
DescribeFlowTopUrl |
Queries the top 10 URLs with the most access traffic. |
|
DescribeHighRiskApis |
Queries the list of high-risk APIs. |
|
DescribeHttpsCertInUse |
Queries the HTTPS certificate that is in use. |
|
DescribeHybridCloudBasicMonitor |
Queries the basic monitoring information of a hybrid cloud. |
|
DescribeHybridCloudCluster |
Queries a hybrid cloud cluster. |
|
DescribeHybridCloudClusterServers |
List of cluster machines. |
|
DescribeHybridCloudGroups |
Queries group information. |
|
DescribeHybridCloudLogDockingConfig |
Pulls configurations. |
|
DescribeHybridCloudProcessMonitor |
Queries the process monitoring information of a hybrid cloud. |
|
DescribeHybridCloudProtectableCount |
Queries the number of protectable objects that can be created. |
|
DescribeHybridCloudPullClusterSdkRule |
Queries the SDK cluster rule information. |
|
DescribeHybridCloudPullLuaSdk |
Queries the SDK LUA information. |
|
DescribeHybridCloudPullPostXagentRule |
Pulls configurations. |
|
DescribeHybridCloudPullXagentRule |
Pulls Xagent configurations. |
|
DescribeHybridCloudSdkServers |
Queries SDK information. |
|
DescribeHybridCloudServerRegions |
Queries the region API. |
|
DescribeHybridCloudSupportRegions |
Queries access regions. |
|
DescribeHybridCloudUnassignedMachines |
Queries the list of unassigned servers. |
|
DescribeHybridCloudUser |
Queries the hybrid cloud client port. |
|
DescribeInstance |
Queries instance information. |
|
DescribeInstanceCompatible |
Queries instance information for compatibility with an earlier version. |
|
DescribeInstanceExtend |
Queries extended instance information. |
|
DescribeInstanceInfo |
Queries the current information of a WAF instance. |
|
DescribeInstanceInfos |
Queries the list of current information for WAF instances. |
|
DescribeInstanceSpecInfo |
Queries the specification information of a WAF instance. |
|
DescribeIPBlock |
Queries the rules of a custom IP blacklist for a domain name. |
|
DescribeIPPortRedirectionProfiles |
Queries the details of a cloud service. |
|
DescribeIPPortRedirectionTotalCount |
Queries the number of ports for which traffic is redirected. |
|
DescribeIPResources |
Queries the list of cloud service servers. |
|
DescribeLogDispatchStatus |
Queries the log collection status. |
|
DescribeLogExportFiles |
Retrieves the log package file from a log export task. |
|
DescribeLogExportTasks |
Queries the list of log export tasks. |
|
DescribeLogHistograms |
Queries the list of collected logs. |
|
DescribeLogQuato |
Queries the configuration of a Logstore. |
|
DescribeLogServiceStatus |
Queries the log service status. |
|
DescribeMajorProtectionBlackIps |
Queries by page the IP addresses in a blacklist for major event support. |
|
DescribeMajorProtectionIntelligenceCount |
Queries the number of threat intelligence rules in a major event support resource plan from the overview page. |
|
DescribeMajorProtectionIntelligenceDetail |
Major Event Support > Overview > Security Reports > Attack List > Threat Intelligence Details. |
|
DescribeMajorProtectionIntelligenceInfos |
Major Event Support Scenarios - Overview - Real-time Threat Intelligence |
|
DescribeMajorProtectionOverview |
Queries the protection data from the overview page for major event support. |
|
DescribeMiddlewareInstances |
Queries the list of middleware instances. |
|
DescribeMultiCloudDefaultRule |
Queries a regular expression rule. |
|
DescribeMultiCloudDomainRules |
Queries the domain name rules of a multicloud service. |
|
DescribeMultiCloudForwardConfig |
Queries the forwarding rules of a multicloud service. |
|
DescribeMultiCloudProtectionRules |
Queries the protection rules of a multicloud service. |
|
DescribeMultiCloudPullClusterDomains |
Queries the list of multicloud service clusters. |
|
DescribeMultiCloudPullDomainRules |
Queries the list of rules for pulling domain names for a multicloud service. |
|
DescribeMultiCloudPullDomainRulesNew |
Queries the list of rules for pulling domain names for a multicloud service using a new API operation. |
|
DescribeMultiCloudPullLogDockingConfig |
Pulls configurations. |
|
DescribeMultiCloudPullProtectionConfigRules |
Queries the list of rules for pulling local protection configurations for a multicloud service. |
|
DescribeMultiCloudPullRules |
Retrieves multi-cloud pull rules. |
|
DescribeNeedUpgradeDomainLimit |
Queries the domain name limit that requires an upgrade. |
|
DescribeNewDiscoverApis |
Queries the list of APIs that were published in the last 30 days. |
|
DescribeNews |
Queries the current information of a WAF instance. |
|
DescribeNormalizedLog |
Queries formatted logs. |
|
DescribeNotice |
Queries the details of a single vulnerability. |
|
DescribeNotices |
Queries emergency vulnerabilities. |
|
DescribeNoTraffficCloudNativeDomainProfiles |
Queries the list of domain names that have no traffic. |
|
DescribeNoUseApis |
Queries the list of uninvoked APIs. |
|
DescribeOssSignature |
Obtains the signature required to upload a file. |
|
DescribeOutputDomains |
Queries domain name configurations. |
|
DescribePackage |
Queries package information. |
|
DescribePayInfo |
Queries the current information of a WAF instance in a specified region. |
|
DescribePeakTrend |
Queries the peak queries per second (QPS). |
|
DescribePeakValueStatisticsInfo |
Queries peak value statistics. |
|
DescribePortsBindToTgw |
Queries the ports of an instance. |
|
DescribePreDomains |
Queries the list of pre-ordered domain names. |
|
DescribeProductInstances |
Queries the list of assets by page. |
|
DescribeProtectBlockSummary |
Queries protection block statistics. |
|
DescribeProtectionConfig |
Queries the WAF protection feature configuration. |
|
DescribeProtectionModuleCodeConfig |
Queries the region codes that are supported in the region-level IP blacklist of WAF. |
|
DescribeProtectionModuleMode |
Queries the current protection mode of each WAF protection module for a specified domain name configuration. The modules include the protection rules engine, Big Data Deep Learning Engine, HTTP flood protection, and proactive defense. |
|
DescribeProtectionModulePolicy |
Queries a protection module policy. |
|
DescribeProtectionModuleRuleInfo |
Queries the information about a protection module rule. |
|
DescribeProtectionModuleRules |
Queries protection rule information. |
|
DescribeProtectionModuleRulesByIdList |
Queries the list of protection module rules. |
|
DescribeProtectionModuleStatus |
Queries the enabling status of a protection feature. |
|
DescribeProtectionStatisticsInfo |
Queries protection statistics. |
|
DescribePunishedDomains |
Queries penalized domain names in a batch. |
|
DescribeQps |
Queries QPS information. |
|
DescribeQpsHourFlowChart |
Queries the details of QPS traffic. |
|
DescribeQrCode |
Queries a QR code. |
|
DescribeRcPunishEvents |
Queries the list of RC events. |
|
DescribeRealProtectSummary |
Queries real protection statistics. |
|
DescribeRegions |
Queries the region information that WAF currently supports. |
|
DescribeRegionStatus |
Queries the available Alibaba Cloud regions. |
|
DescribeRegionThreshold |
Queries regional hot spot information. |
|
DescribeRegularRules |
Queries regular expression rules by page. |
|
DescribeResourceIdInfo |
Queries resource ID information. |
|
DescribeResourceLogStatus |
Queries the log status of a protected object. |
|
DescribeResourcePackageExistStatus |
Queries the status of a resource plan. |
|
DescribeResourceRegionId |
Queries all region IDs for a specified product. |
|
DescribeResourceSupportRegions |
Queries supported region IDs. |
|
DescribeResponseCodeStatisticsInfo |
Queries the statistics of response codes. |
|
DescribeResponseCodeTrendGraph |
View the response code trend graph. |
|
DescribeRiskApisStatistics |
Queries the statistics of risk APIs. |
|
DescribeRiskCount |
Queries the number of risks using an external API. |
|
DescribeRiskCountInner |
Queries risk statistics. |
|
DescribeRiskDependencies |
Queries the list of risk dependencies. |
|
DescribeRiskDependencyStatisticsInfo |
Queries risk dependency data. |
|
DescribeRoleAuthStatus |
Queries the authorization status. |
|
DescribeRule |
Queries regular expression rule information. |
|
DescribeRuleGroupAssociatedTemplates |
Queries the templates that are associated with a custom rule group. |
|
DescribeRuleGroupRule |
Queries a rule group rule. |
|
DescribeRuleGroups |
Queries regular expression rule groups by page. |
|
DescribeRuleGroupTemplates |
Queries the list of rule group templates. |
|
DescribeRuleHitsTopClientIp |
Queries the top 10 attack sources with the most rule hits. |
|
DescribeRuleHitsTopResource |
Queries the top 10 protected objects with the most rule hits. |
|
DescribeRuleHitsTopRuleId |
Queries the top 10 rule IDs with the most hits. |
|
DescribeRuleHitsTopTuleType |
Queries the top 10 protection types with the most rule hits. |
|
DescribeRuleHitsTopUa |
Queries the top 10 attack user agents (UAs) with the most rule hits. |
|
DescribeRuleHitsTopUrl |
Queries the top 10 URLs with the most rule hits. |
|
DescribeRuleInfo |
Queries rule information. |
|
DescribeRuleMonitor |
Queries the monitoring details of a rule. |
|
DescribeRules |
Queries the list of protection rules. |
|
DescribeRuleSummary |
Queries rule statistics. |
|
DescribeSasApplicationKey |
Queries the key of an SAS RASP application. |
|
DescribeSasApplications |
Queries the list of SAS RASP applications. |
|
DescribeSasApplicationsCount |
Queries the statistics of SAS RASP applications. |
|
DescribeSasEcsAccessList |
Queries the list of ECS channels. |
|
DescribeSasInstances |
Queries the list of SAS instances. |
|
DescribeSasInstancesCount |
Queries the statistics of SAS instances. |
|
DescribeSceneAttackLogs |
Queries the list of attack details from the security report on the overview page for major event support. |
|
DescribeSceneAttackTypePv |
Queries the security attack types from the security report on the overview page for major event support. |
|
DescribeSceneDefenseRules |
Queries scene protection rules by page. |
|
DescribeSceneHitsTopClientIp |
Queries the top 5 source IP addresses of attacks from the overview of a security report. |
|
DescribeSceneHitsTopResource |
Queries the top 5 protected objects from the security report on the overview page for major event support. |
|
DescribeSceneHitsTopUrl |
Queries the top 5 attacked URLs from the security report on the overview page for major event support. |
|
DescribeScreenAbnormalMonitor |
Queries the vulnerability monitoring data for the dashboard. |
|
DescribeScreenAccessAreaPv |
Queries the access volume of an access region for the dashboard. |
|
DescribeScreenAccessIpTop |
Queries the top access IP addresses for the dashboard. |
|
DescribeScreenAccessUrlTop |
Queries the top access URLs for the dashboard. |
|
DescribeScreenAttackTopAcl |
Queries the top attack ACL information for the dashboard. |
|
DescribeScreenAttackTopArea |
Queries the top attack region information for the dashboard. |
|
DescribeScreenAttackTopIp |
Queries the top attack IP address information for the dashboard. |
|
DescribeScreenAttackTypeChart |
Queries the attack type chart information for the dashboard. |
|
DescribeScreenAttackTypes |
Queries the attack type information for the dashboard. |
|
DescribeScreenBandwidthGraph |
Queries the bandwidth graph information for the dashboard. |
|
DescribeScreenIpRiskLabel |
Queries the IP risk label information for the dashboard. |
|
DescribeScreenMobileOsPv |
Queries the mobile operating system access volume information for the dashboard. |
|
DescribeScreenPackage |
Queries the package information for the dashboard. |
|
DescribeScreenPayInfo |
Queries the purchase information for the dashboard. |
|
DescribeScreenPcBrowserPv |
Queries the PC browser volume for the dashboard. |
|
DescribeScreenQpsAttackTypeChart |
Queries the QPS attack type chart for the dashboard. |
|
DescribeScreenQpsAttackTypeStatistics |
Queries the QPS attack type statistics for the dashboard. |
|
DescribeScreenRegions |
Queries the available regions for the dashboard. |
|
DescribeServiceStatus |
Queries the WAF service status. |
|
DescribeSlbAttackCount |
Queries the number of attacks on an SLB domain name in the last 30 days. |
|
DescribeSlbAttackUrl |
Queries the attacked URLs of an SLB domain name in the last 30 days. |
|
DescribeSlsAuthStatus |
Queries the authorization status. |
|
DescribeSlsCommonLogField |
Queries the log monitoring information for a specified domain name. |
|
DescribeSlsLogFieldConfig |
Queries the SLS log configuration. |
|
DescribeSlsLogStore |
Queries Logstore details. |
|
DescribeSlsLogStoreStatus |
Queries the status of an SLS Logstore. |
|
DescribeSlsOpenStatus |
Queries the activation status of Simple Log Service. |
|
DescribeSlsResourceStatus |
Queries whether Simple Log Service is activated. |
|
DescribeStandardRegions |
Queries the list of standard regions. |
|
DescribeTemplateDiff |
Queries template difference information. |
|
DescribeTemplateResourceCount |
Queries the statistics of the number of resources that are attached to a protection template. |
|
DescribeTemplateResources |
Queries the resources that are attached to a protection template. |
|
DescribeTgwAccessedPorts |
Queries the list of accessed ports. |
|
DescribeTgws |
Queries accessed instances. |
|
DescribeThreatEvent |
Queries the list of attack events. |
|
DescribeThreatEventAttackTimeDistribute |
Queries the top 5 attack distributions by attack date. |
|
DescribeThreatEventAttackToolDistribute |
Queries the top 5 attack distributions by attack tool. |
|
DescribeThreatEventAttackTypeDistribute |
Queries the top 5 attack distributions by attack type. |
|
DescribeThreatEventDetail |
Queries the details of a threat event. |
|
DescribeThreatEventSourceIpDistribute |
Queries the top 5 attack distributions by source IP address. |
|
DescribeThreatEventTargetDistribute |
Queries the top 5 attack distributions by attack target. |
|
DescribeTransferConfigInWork |
Queries the transfer-in configuration. |
|
DescribeUnprotectAssetSubDomainStatisticsInfo |
Domain Names Overview (Statistics by Subdomain Classification) |
|
DescribeUntractedIps |
Retrieves the list of remaining IP addresses. |
|
DescribeUploadBlackIpFormInfo |
Queries the form information for uploading an IP blacklist for major event support. |
|
DescribeUserAbnormal |
Queries user resource usage information. |
|
DescribeUserAbnormalTrend |
Queries the user vulnerability trend. |
|
DescribeUserApiInfos |
Queries user API information. |
|
DescribeUserApiRequest |
Queries user API requests. |
|
DescribeUserAsset |
Queries a single user asset. |
|
DescribeUserAssets |
Queries the list of user assets. |
|
DescribeUserDomainAsset |
Queries user domain name asset information. |
|
DescribeUserEvent |
Queries a user event. |
|
DescribeUserEvents |
Queries the list of user events. |
|
DescribeUserEventTrend |
Queries user access trends over time. |
|
DescribeUserHourlyBill |
Queries user bill details. |
|
DescribeUserLogFieldConfig |
Queries the user log configuration. |
|
DescribeUserMigrationStatus |
Queries the user migration status. |
|
DescribeUserScore |
User score statistics |
|
DescribeUserSpecInfo |
Queries user specification information. |
|
DescribeUserTagInfos |
Queries user tagging information. |
|
DescribeUserTraffic |
Queries real-time user traffic by category. |
|
DescribeVagentNodeJob |
Queries an agent node task. |
|
DescribeVagentSystemParam |
Queries agent system parameters. |
|
DescribeVipCount |
Queries the number of VIPs. |
|
DescribeVipStatus |
Queries the VIP status of a WAF instance. |
|
DescribeVirtualClusterProperty |
Queries the properties of a specified virtual cluster. |
|
DescribeVisitClientTypes |
Queries the access traffic ranking of each client type. |
|
DescribeVisitTopClients |
Queries the top 10 clients with the most access volume and their access volume. |
|
DescribeVisitTopIp |
Queries the top 10 access traffic statistics by IP address and location. |
|
DescribeVisitUAs |
Queries the top 10 access traffic statistics by UA. |
|
DescribeVisitUaScaleChart |
Queries the access UA ratio chart. |
|
DescribeVisitUrls |
Queries the top 5 URLs with the most visits and their specific visit counts for the day. |
|
DescribeWafSourceIpSegment |
Queries the list of back-to-origin IP CIDR blocks for a WAF instance. |
|
DescribeWafSourceIpV6Segment |
Queries the list of back-to-origin IPv6 CIDR blocks for a WAF instance. |
|
DescribeWarnConfig |
Queries alert configurations. |
|
DescribeWarnMode |
Queries the list of alert modes. |
|
DescribeWebAttackCount |
Queries the number of web attacks. |
|
DescribeWebAttackLog |
Queries web attack logs. |
|
DescribeWebAttackLogs |
Queries the protection logs of basic protection rules. |
|
DescribeWebAttackTypePv |
Queries the PVs of each attack type. |
|
DescribeWebFingerScanStatus |
Queries the active fingerprint scan status. |
|
DescribeWebRegionPv |
Queries the top 5 source regions for web protection. |
|
DescribeWebSourceIpPv |
Queries the top 5 attack sources for web protection. |
|
DisableCloudNativeInstancePortRedirection |
Disables a port forwarding rule for a WAF instance in transparent proxy mode. |
|
DisableCloudNativeInstanceRedirections |
Disables forwarding for a transparent instance. |
|
EnableCloudNativeInstancePortRedirection |
Enables a port forwarding rule for a WAF instance in transparent proxy mode. |
|
EnableCloudNativeInstanceRedirections |
Enables forwarding for a transparent instance. |
|
GetQps |
Queries QPS information. |
|
GetRaspCommercialStatus |
Queries transaction information. |
|
GetRegionList |
Queries the list of regions. |
|
InitializeWafOperationRole |
User authorization |
|
ModifiyCloudNativeDomain |
Modifies the domain name of a WAF instance in transparent proxy mode. |
|
Modify |
Upgrades or downgrades a resource on the product buy page. |
|
ModifyAccessMode |
Modifies the access mode. |
|
ModifyAclRule |
Modifies a specified accurate access control rule. |
|
ModifyAclRulesOrder |
Sorts access control protection rules. |
|
ModifyAntiBotScene |
Modifies an anti-bot scenario configuration. |
|
ModifyAntiBotSceneStatus |
Updates the status of an anti-bot scenario. |
|
ModifyApiAbnormal |
Modifies the ignore status of an API vulnerability. |
|
ModifyApiProtectionModuleMode |
Modifies the mode of an API protection module. |
|
ModifyApiProtectionModuleStatus |
Modifies the status of an API protection module. |
|
ModifyApplicationsRaspState |
Modifies the RASP state of an application. |
|
ModifyCloudNativeInstancePortRedirection |
Modifies a port forwarding rule for a WAF instance in transparent proxy mode. |
|
ModifyDefenseResourceGroup |
Modifies a protected object group. |
|
ModifyDefenseResourceXff |
Modifies the X-Forwarded-For (XFF) settings of a protected object. |
|
ModifyDefenseRule |
Modifies a protection rule. |
|
ModifyDefenseRuleCache |
Updates the cache of a protection rule. |
|
ModifyDefenseRuleStatus |
Modifies the status of a protection rule. |
|
ModifyDefenseTemplate |
Modifies a protection template. |
|
ModifyDefenseTemplateStatus |
Modifies the status of a protection template. |
|
ModifyDomain |
Modifies a specified domain name configuration. |
|
ModifyDomainClusterType |
Modifies the cluster type of a domain name. |
|
ModifyDomainConfig |
Modifies a specified domain name configuration. |
|
ModifyDomainIpv6Status |
Enables or disables the IPv6 security protection feature for a specified domain name configuration. |
|
ModifyDomainPunishStatus |
Removes the penalty from a penalized domain name. |
|
ModifyDomainTlsCipherSuite |
Modifies the TLS cipher suite configuration of a specified domain name. |
|
ModifyDomainTlsConfig |
Modifies the TLS security policy of a specified domain name. |
|
ModifyElasticBillConfig |
Modifies the pay-as-you-go bill configuration. |
|
ModifyElasticBillSpec |
Modifies the pay-as-you-go bill specification. |
|
ModifyExclusiveVipStatus |
Modifies the status of an exclusive IP address. |
|
ModifyGSLBStatus |
Enables or disables the Global Server Load Balancing (GSLB) feature for a specified domain name configuration. |
|
ModifyHybridCloudCluster |
Modifies cluster information. |
|
ModifyHybridCloudGroup |
Modifies group information. |
|
ModifyHybridCloudGroupExpansionServer |
Adds a server to a group. |
|
ModifyHybridCloudGroupShrinkServer |
Removes a hybrid cloud server from a group. |
|
ModifyHybridCloudLogDockingConfig |
Log configuration |
|
ModifyHybridCloudPushSdkInfo |
Pushes SDK information. |
|
ModifyHybridCloudServer |
Modifies server information. |
|
ModifyIPPortRedirection |
Modifies an IP port forwarding rule. |
|
ModifyIPPortRedirectionBypassStatus |
Modifies the bypass status of an IP port forwarding rule. |
|
ModifyJsRuleInner |
Modifies a JavaScript rule. |
|
ModifyLogRetrievalStatus |
Enables or disables the log retrieval feature for a specified domain name. |
|
ModifyLogServiceOpenStatus |
Enables or disables the log collection feature for a domain name configuration. |
|
ModifyLogServiceStatus |
Enables or disables the log collection feature for a specified domain name configuration. |
|
ModifyLogServiceStorageTime |
Modifies the storage period for Simple Log Service. |
|
ModifyLogStatus |
Enables or disables the log collection feature for a specified domain name. |
|
ModifyMajorProtectionBlackIp |
Modifies an IP address in a blacklist for major event support. |
|
ModifyProtectionConfig |
Modifies a protection configuration. |
|
ModifyProtectionModuleMode |
Modifies the protection mode of a specified WAF protection module. The modules include the protection rules engine, Big Data Deep Learning Engine, HTTP flood protection, and proactive defense. |
|
ModifyProtectionModuleRule |
Modifies a protection rule. |
|
ModifyProtectionModuleStatus |
Enables or disables a specified WAF protection module. The modules include web intrusion protection, data security, advanced mitigation, bot management, and access control or throttling. |
|
ModifyProtectionRuleCacheStatus |
Updates the cache of pages that are protected by a specified website tamper-proofing rule. |
|
ModifyProtectionRuleStatus |
Enables or disables a specified website tamper-proofing rule. |
|
ModifyResourceLogStatus |
Enables or disables the log collection feature for a specified domain name configuration. |
|
ModifyRuleGroup |
Modifies a custom rule group. |
|
ModifyRulesInGroup |
Modifies the rules that are associated with a custom rule group. |
|
ModifySasApplicationInfo |
Modifies an SAS RASP application. |
|
ModifySasProtectionConfig |
Modifies an SAS protection configuration. |
|
ModifySasProtectionMode |
Modifies the SAS protection mode. |
|
ModifySlsLogFieldConfig |
Modifies the user log configuration. |
|
ModifySlsOpenStatus |
Enables or disables Simple Log Service. |
|
ModifyTemplateResources |
Attaches a protection resource to or detaches it from a protection template. |
|
ModifyUnblockingIp |
Modifies an unblocked IP address. |
|
ModifyUserLogFieldConfig |
Modifies the configuration in a user log. |
|
ModifyUserMobile |
Modifies user mobile information. |
|
ModifyUserUsedScreen |
Modifies the dashboard that is used by a user. |
|
ModifyVagentNodeJobStatus |
Modifies the status of an agent node task. |
|
ModifyVirtualClusterProperty |
Modifies the properties of a specified virtual cluster. |
|
ModifyWafInstanceSwitch |
Modifies the switch of a WAF instance. |
|
ModifyWafSwitch |
Enables or disables the web attack prevention feature. |
|
ModifyWebFingerScanStatus |
Modifies the active fingerprint scan status. |
|
MoveResourceGroup |
Moves a resource to a new resource group. |
|
OpenService |
Activates a service. |
|
ParseSwaggerFile |
Parses a Swagger file (callback after the file is uploaded). |
|
Release |
Releases a resource such as an instance. |
|
ReleaseInstance |
Releases an instance. |
|
Renew |
Renews a resource such as an instance or a resource plan. |
|
SetDomainRuleGroup |
Configures a protection rule group for a domain name. |
|
SetWarnConfig |
Configures an alert configuration. |
|
SetWarnMode |
Configures an alert mode. |
|
SynchronizeIPResources |
Triggers a task to sync cloud services. |
|
SyncProductInstance |
Syncs assets. |
|
UploadMajorProtectionBlackIp |
Uploads an IP blacklist for major event support. |