Queries the details of all compliance pack templates provided by CloudConfig.
Operation description
A compliance pack template is a collection of rules customized by CloudConfig for compliance scenarios.
Try it now
Test
RAM authorization
Request parameters
|
Parameter |
Type |
Required |
Description |
Example |
| CompliancePackTemplateId |
string |
No |
The ID of the compliance pack template. |
ct-5f26ff4e06a300c4**** |
| RuleRiskLevel |
integer |
No |
The risk level of the rules in the compliance pack. Valid values:
|
2 |
| PageSize |
integer |
No |
The number of entries to return on each page. Valid values: 1 to 100. Default value: 10. |
10 |
| PageNumber |
integer |
No |
The page number. Minimum value: 1. Default value: 1. |
1 |
| ResourceTypes |
string |
No |
The resource type that is evaluated by the rules. If you specify this parameter, only the compliance pack templates that contain rules for the specified resource type are returned. |
ACS::ECS::Instance |
| FilterType |
string |
No |
The field used to filter the query results. |
LAW |
For more information about common request parameters, see Common parameters.
Response elements
|
Element |
Type |
Description |
Example |
|
object |
None. |
||
| CompliancePackTemplatesResult |
object |
The details of the compliance pack templates. |
|
| PageSize |
integer |
The number of entries returned per page. |
10 |
| PageNumber |
integer |
The page number. |
1 |
| TotalCount |
integer |
The total number of compliance pack templates. |
1 |
| CompliancePackTemplates |
array<object> |
A list of compliance pack templates. |
|
|
object |
None. |
||
| RiskLevel |
integer |
The risk level of the rules in the compliance pack. Valid values:
|
1 |
| Description |
string |
The description of the compliance pack. |
Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3. |
| ConfigRules |
array<object> |
A list of default rules in the compliance pack. |
|
|
object |
None. |
||
| Description |
string |
The description of the rule. |
If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state. |
| ManagedRuleIdentifier |
string |
The identifier of the managed rule. |
ecs-instance-updated-security-vul |
| ManagedRuleName |
string |
The name of the managed rule. |
ecs-instance-updated-security-vul |
| ConfigRuleParameters |
array<object> |
The parameters of the managed rule. |
|
|
object |
None. |
||
| Required |
boolean |
Indicates whether the parameter is required for the managed rule. Valid values:
|
true |
| ParameterName |
string |
The name of the parameter for the managed rule. |
necessity |
| ParameterValue |
string |
The value of the parameter for the managed rule. |
asap |
| RiskLevel |
integer |
The risk level of the managed rule. Valid values:
|
2 |
| ControlId |
string |
The ID of the control. Note
This parameter appears only for regulatory compliance packages. |
8.1.4.4 |
| ControlDescription |
string |
The description of the control. This parameter is returned only for compliance packs that are created based on a regulation. |
e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events. |
| DefaultEnable |
boolean |
Indicates whether the rule can be quickly enabled. Valid values:
|
false |
| ResourceTypesScope |
string |
The resource types that are evaluated by the rule. |
ACS::ECS::Instance |
| CompliancePackTemplateName |
string |
The name of the compliance pack template. |
ClassifiedProtectionPreCheck |
| CompliancePackTemplateId |
string |
The ID of the compliance pack template. |
ct-5f26ff4e06a300c4**** |
| Labels |
string |
The classification labels of the compliance pack. |
Regulation |
| LastUpdate |
integer |
The UNIX timestamp when the compliance pack was last updated. |
1747983081 |
| RequestId |
string |
The ID of the request. |
D67FC82F-25AE-4268-A94C-3348340748F9 |
Examples
Success response
JSON format
{
"CompliancePackTemplatesResult": {
"PageSize": 10,
"PageNumber": 1,
"TotalCount": 1,
"CompliancePackTemplates": [
{
"RiskLevel": 1,
"Description": "Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3.",
"ConfigRules": [
{
"Description": "If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state.",
"ManagedRuleIdentifier": "ecs-instance-updated-security-vul",
"ManagedRuleName": "ecs-instance-updated-security-vul",
"ConfigRuleParameters": [
{
"Required": true,
"ParameterName": "necessity",
"ParameterValue": "asap"
}
],
"RiskLevel": 2,
"ControlId": "8.1.4.4",
"ControlDescription": "e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events.",
"DefaultEnable": false,
"ResourceTypesScope": "ACS::ECS::Instance"
}
],
"CompliancePackTemplateName": "ClassifiedProtectionPreCheck",
"CompliancePackTemplateId": "ct-5f26ff4e06a300c4****",
"Labels": "Regulation",
"LastUpdate": 1747983081
}
]
},
"RequestId": "D67FC82F-25AE-4268-A94C-3348340748F9"
}
Error codes
|
HTTP status code |
Error code |
Error message |
Description |
|---|---|---|---|
| 400 | NoPermission | You are not authorized to perform this operation. | You are not authorized to perform this operation. |
| 404 | AccountNotExisted | Your account does not exist. | |
| 503 | ServiceUnavailable | The request has failed due to a temporary failure of the server. | The request has failed due to a temporary failure of the server. |
See Error Codes for a complete list.
Release notes
See Release Notes for a complete list.