All Products
Search

This Product

    Cloud Config:ListResourceEvaluationResults

    Document Center

    Cloud Config:ListResourceEvaluationResults

    Last Updated:Sep 02, 2026

    Queries the evaluation results of rules for a resource from the resource dimension.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    config:ListResourceEvaluationResults

    list

    *All Resource

    *

    		 None None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    ResourceType

    string

    No

    The resource type.

    For information about how to obtain the resource type, see ListDiscoveredResources.

    ACS::RAM::User
    ResourceId

    string

    No

    The resource ID.

    For information about how to obtain the resource ID, see ListDiscoveredResources.

    23642660635396****
    RiskLevel

    integer

    No

    The risk level of the rule. Valid values:

    • 1: high risk.

    • 2: medium risk.

    • 3: low risk.

    1
    SortBy

    string

    No

    By default, no value is passed. Currently supported: LastNonCompliantRecordTimestamp-Asc, which sorts resources so that those that became non-compliant earliest appear first. Use this parameter together with the ComplianceType parameter set to NON_COMPLIANT.

    LastNonCompliantRecordTimestamp-Asc
    ComplianceType

    string

    No

    The compliance evaluation result. Valid values:

    • COMPLIANT: compliant.

    • NON_COMPLIANT: non-compliant.

    • NOT_APPLICABLE: not applicable.

    • INSUFFICIENT_DATA: insufficient data.

    • IGNORED: ignored.

    Valid values:

    • :

      不指定合规状态

    • NOT_APPLICABLE :

      not applicable.

    • COMPLIANT :

      compliant.

    • NON_COMPLIANT :

      non-compliant.

    • INSUFFICIENT_DATA :

      insufficient data.

    • IGNORED :

      ignored.

    NON_COMPLIANT
    NextToken

    string

    No

    If the request is truncated, use NextToken to initiate a new request to retrieve the content after the truncation point.

    IWBjqMYSy0is7zSMGu16****
    MaxResults

    integer

    No

    The maximum number of entries to return in a single request. Valid values: 1 to 100.

    10
    Region

    string

    No

    The region ID of resource ownership. For example, global indicates global, and cn-hangzhou indicates China (Hangzhou).

    For information about how to obtain the region ID of resource ownership, see ListDiscoveredResources.

    global

    For more information about common request parameters, see Common parameters.

    Response elements

    Element

    Type

    Description

    Example

    object

    None.

    RequestId

    string

    The request ID.

    25C89DDB-BB79-487D-88C3-4A561F21EFC4
    EvaluationResults

    object

    The resource evaluation results.

    NextToken

    string

    The token used to query the next page.

    IWBjqMYSy0is7zSMGu16****
    MaxResults

    integer

    The maximum number of entries returned in a single request.

    10
    EvaluationResultList

    array<object>

    The list of resource evaluation results.

    array<object>

    None.

    RiskLevel

    integer

    The risk level of the rule. Valid values:

    • 1: high risk.

    • 2: medium risk.

    • 3: low risk.

    1
    ComplianceType

    string

    The compliance evaluation result. Valid values:

    • COMPLIANT: compliant.

    • NON_COMPLIANT: non-compliant.

    • NOT_APPLICABLE: not applicable.

    • INSUFFICIENT_DATA: insufficient data.

    • IGNORED: ignored.

    NON_COMPLIANT
    ResultRecordedTimestamp

    integer

    The timestamp when the resource evaluation result was generated. Unit: milliseconds.

    1624932227595
    Annotation

    string

    The supplementary information about the non-compliant resource. The following information may be included:

    • configuration: the current actual configuration of the resource, which is the non-compliant configuration.

    • desiredValue: the expected configuration of the resource, which is the compliant configuration.

    • operator: the comparison operator between the current configuration and the expected configuration.

    • property: the JSON path of the current configuration in the resource property struct.

    • reason: the reason for non-compliance.

    {\"configuration\":\"false\",\"desiredValue\":\"True\",\"operator\":\"StringEquals\",\"property\":\"$.LoginProfile.MFABindRequired\"}
    ConfigRuleInvokedTimestamp

    integer

    The timestamp when the rule was triggered to perform evaluation. Unit: milliseconds.

    1624932227157
    InvokingEventMessageType

    string

    The trigger mechanism of the rule. Valid values:

    • ConfigurationItemChangeNotification: configuration change.

    • ScheduledNotification: periodic execution.

    • Manual: manual trigger.

    ScheduledNotification
    EvaluationResultIdentifier

    object

    The identifier of the resource evaluation result.

    OrderingTimestamp

    integer

    The timestamp displayed on the timeline. Unit: milliseconds.

    1624932227157
    EvaluationResultQualifier

    object

    The resource information in the evaluation result.

    ConfigRuleArn

    string

    The Alibaba Cloud Resource Name (ARN) of the rule.

    acs:config::100931896542****:rule/cr-7f7d626622af0041****
    ResourceType

    string

    The resource type.

    ACS::RAM::User
    ConfigRuleName

    string

    The rule name.

    ram-user-mfa-check
    ResourceId

    string

    The resource ID.

    23642660635396****
    ConfigRuleId

    string

    The rule ID.

    cr-7f7d626622af0041****
    ResourceName

    string

    The resource name.

    Alice
    RegionId

    string

    The region ID of resource ownership.

    global
    IgnoreDate

    string

    The automatic recovery date for the ignored evaluation result, in the format of YYYY-MM-DD. An empty value indicates that the result will not be automatically recovered and must be manually recovered.

    2022-06-01
    RemediationEnabled

    boolean

    Indicates whether remediation is enabled. Valid values:

    • true: Remediation is enabled.

    • false: Remediation is not enabled.

    true
    EvaluationId

    string

    The unique ID of the evaluation result.

    00000089-4e0d-58b5-a96a-8e54112110f3
    LastNonCompliantRecordTimestamp

    integer

    The start time of the most recent non-compliant status, expressed as a UNIX timestamp in milliseconds.

    1744696393000

    Examples

    Success response

    JSON format

    {
  "RequestId": "25C89DDB-BB79-487D-88C3-4A561F21EFC4",
  "EvaluationResults": {
    "NextToken": "IWBjqMYSy0is7zSMGu16****",
    "MaxResults": 10,
    "EvaluationResultList": [
      {
        "RiskLevel": 1,
        "ComplianceType": "NON_COMPLIANT",
        "ResultRecordedTimestamp": 1624932227595,
        "Annotation": "{\\\"configuration\\\":\\\"false\\\",\\\"desiredValue\\\":\\\"True\\\",\\\"operator\\\":\\\"StringEquals\\\",\\\"property\\\":\\\"$.LoginProfile.MFABindRequired\\\"}",
        "ConfigRuleInvokedTimestamp": 1624932227157,
        "InvokingEventMessageType": "ScheduledNotification",
        "EvaluationResultIdentifier": {
          "OrderingTimestamp": 1624932227157,
          "EvaluationResultQualifier": {
            "ConfigRuleArn": "acs:config::100931896542****:rule/cr-7f7d626622af0041****",
            "ResourceType": "ACS::RAM::User",
            "ConfigRuleName": "ram-user-mfa-check",
            "ResourceId": "23642660635396****",
            "ConfigRuleId": "cr-7f7d626622af0041****",
            "ResourceName": "Alice",
            "RegionId": "global",
            "IgnoreDate": "2022-06-01"
          }
        },
        "RemediationEnabled": true,
        "EvaluationId": "00000089-4e0d-58b5-a96a-8e54112110f3",
        "LastNonCompliantRecordTimestamp": 1744696393000
      }
    ]
  }
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 NoPermission You are not authorized to perform this operation. You are not authorized to perform this operation.
    404 CloudConfigServiceRoleNotExisted The CloudConfigServiceRole does not exist.
    404 AccountNotExisted Your account does not exist.
    503 ServiceUnavailable The request has failed due to a temporary failure of the server. The request has failed due to a temporary failure of the server.

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.