All Products
Search
Document Center

Cloud Config:Release notes

Last Updated:Aug 25, 2023

This topic describes the API version 2020-09-07, and compares it with the previous API version 2019-01-08.

Comparison between two API versions

  • Settings about compliance packages, remediation, account groups, tags, and service integration are added to the API version 2020-09-07.

  • The API version 2020-09-07 can provide all the features of the API version 2019-01-08, including settings about resources, rules, delivery channels, and resource monitoring. New features are also supported. We recommend that you use the API version 2020-09-07.

API version 2020-09-07

The following table describes the Cloud Config accounts in the API version 2020-09-07.

Account

Definition

Description

Ordinary account

An ordinary account is an independent Alibaba Cloud account that is not included in a resource directory.

An ordinary account can call all API operations except the Account Groups directory and each Multi-account directory under the Resources, Rules, Compliance Package, Remediation templates, and Deliveries directories.

Management account

A management account is an Alibaba Cloud account that enables a resource directory and manages all member accounts in the resource directory.

Note

For information about delegated administrator accounts, see Manage a delegated administrator account.

A management account can call all API operations except each Single-account directory under the Resources, Rules, Compliance Packages, Remediation templates, and Deliveries directories.

Member account

A member account is an Alibaba Cloud account in a resource directory.

The API operations that a member account can call vary based on whether it is added to an account group.

  • If a member account is not added to an account group, the member account can call all API operations that can be called by ordinary accounts.

  • If a member account is added to an account group, the member account can call all API operations that can be called by ordinary accounts, but also the query API operations that can be called by the management account. The query operations can be called to query the account group to which the current member account belongs, and the compliance packages, rules, resources, and remediation settings owned by the member account.