The following tables list the API operations available for use in Cloud Config.
Ordinary accounts
An ordinary account is an independent Alibaba Cloud account that is not included in a resource directory by a management account. The following table describes the API operations that you can call by using ordinary accounts.
Item | Operation | Description |
---|---|---|
Compliance packages | ListCompliancePackTemplates | Queries compliance package templates. |
CreateCompliancePack | Creates a compliance package. | |
ListCompliancePacks | Queries compliance packages. | |
GetCompliancePack | Queries the details of a compliance package. | |
UpdateCompliancePack | Modifies the configurations of a compliance package. | |
DeleteCompliancePacks | Deletes one or more compliance packages. | |
GenerateCompliancePackReport | Generates a compliance evaluation report based on a compliance package. | |
GetCompliancePackReport | Queries the compliance evaluation report that is generated based on a compliance package. | |
GetConfigRuleComplianceByPack | Queries the compliance evaluation results based on rules in a compliance package. | |
GetResourceComplianceByPack | Queries the compliance evaluation results of resources monitored by a compliance package. | |
Rules | CreateConfigRule | Creates a rule. |
UpdateConfigRule | Modifies a rule. | |
GetConfigRule | Queries the details of a rule. | |
DeactiveConfigRules | Disables one or more rules. | |
ListResourceEvaluationResults | Queries the compliance evaluation results of resources. | |
ListConfigRuleEvaluationResults | Queries the compliance evaluation results of resources based on rules. | |
GenerateConfigRulesReport | Generates a compliance evaluation report based on all existing rules. | |
GetConfigRulesReport | Queries the compliance evaluation report that is generated based on all existing rules. | |
GetResourceComplianceByConfigRule | Queries the compliance evaluation results of a resource by using the specific rule. | |
GetConfigRuleSummaryByRiskLevel | Queries the summary of compliance evaluation results by rule risk level. | |
AttachConfigRuleToCompliancePack | Adds one or more rules to a compliance package. | |
DetachConfigRuleToCompliancePack | Removes one or more rules from a compliance package. | |
IgnoreEvaluationResults | Ignores the compliance evaluation results of one or more non-compliant resources that are evaluated by a rule. | |
RevertEvaluationResults | Reverts the ignored compliance evaluation results of one or more non-compliant resources that are evaluated by a rule back to non-compliant. | |
ListManagedRules | Queries managed rules. | |
GetManagedRule | Queries the details of a managed rule. | |
Resources | GetResourceComplianceTimeline | Queries the compliance timeline of a resource. |
GetResourceConfigurationTimeline | Queries the configuration timeline of a resource. | |
GetDiscoveredResourceCountsGroupByResourceType | Queries the statistics on resources grouped by resource type. | |
GetDiscoveredResourceCountsGroupByRegion | Queries the statistics on resources grouped by region. | |
GetDiscoveredResource | Queries the details of a resource. | |
ListDiscoveredResources | Queries resources based on specified query criteria. | |
Remediation templates | ListRemediationTemplates | Queries the official remediation templates for a managed rule. |
CreateRemediation | Configures a remediation template for a rule. | |
ListRemediations | Queries the remediation templates for a rule. | |
DeleteRemediations | Deletes one or more configured remediation templates from a rule. | |
StartRemediation | Performs a remediation operation by using a rule. | |
Delivery channels | CreateDeliveryChannel | Creates a delivery channel. |
UpdateDeliveryChannel | Modifies a delivery channel. |
Management accounts
A management account is an Alibaba Cloud account that enables a resource directory and manages all member accounts. The following table describes the API operations that you can call by using management accounts.
Item | Operation | Description |
---|---|---|
Account groups | CreateAggregator | Creates an account group. |
ListAggregators | Queries account groups. | |
GetAggregator | Queries the details of an account group. | |
UpdateAggregator | Modifies the configurations of an account group. | |
DeleteAggregators | Deletes one or more account groups. | |
Compliance packages | ListCompliancePackTemplates | Queries compliance package templates. |
CreateAggregateCompliancePack | Creates a compliance package for an account group. | |
ListAggregateCompliancePacks | Queries the compliance packages in an account group. | |
GetAggregateCompliancePack | Queries the details of a compliance package in an account group. | |
UpdateAggregateCompliancePack | Modifies the configurations of a compliance package in an account group. | |
DeleteAggregateCompliancePacks | Deletes one or more compliance packages from an account group. | |
GenerateAggregateCompliancePackReport | Generates a compliance evaluation report based on a compliance package in an account group. | |
GetAggregateCompliancePackReport | Queries the compliance evaluation report that is generated based on a compliance package in an account group. | |
GetAggregateResourceComplianceByPack | Queries the compliance evaluation results of resources monitored by a compliance package in an account group. | |
GetAggregateConfigRuleComplianceByPack | Queries the compliance evaluation results based on rules in a compliance package in an account group. | |
GetAggregateAccountComplianceByPack | Queries the compliance evaluation results of member accounts on which a compliance package takes effect in an account group. | |
Rules | CreateAggregateConfigRule | Creates a rule for an account group. |
ListAggregateConfigRules | Queries the rules in an account group. | |
GetAggregateConfigRule | Queries the details of a rule in an account group. | |
UpdateAggregateConfigRule | Modifies a rule in an account group. | |
DeleteAggregateConfigRules | Deletes one or more rules from an account group. | |
ActiveAggregateConfigRules | Enables one or more rules in an account group. | |
DeactiveAggregateConfigRules | Disables one or more rules in an account group. | |
GenerateAggregateConfigRulesReport | Generates a compliance evaluation report based on all rules in an account group. | |
GetAggregateConfigRulesReport | Queries the compliance evaluation report that is generated based on all rules in an account group. | |
StartAggregateConfigRuleEvaluation | Uses a rule in an account group to evaluate the resources involved. | |
GetAggregateResourceComplianceByConfigRule | Queries the compliance evaluation results based on a rule in an account group. | |
GetAggregateConfigRuleSummaryByRiskLevel | Queries the summary of compliance evaluation results by rule risk level in an account group. | |
ListAggregateConfigRuleEvaluationResults | Queries the compliance evaluation results of resources based on rules in an account group. | |
ListAggregateResourceEvaluationResults | Queries the compliance evaluation results of resources in an account group. | |
AttachAggregateConfigRuleToCompliancePack | Adds one or more rules in an account group to a compliance package. | |
DetachAggregateConfigRuleToCompliancePack | Removes one or more rules in an account group from a compliance package. | |
IgnoreAggregateEvaluationResults | Ignores the compliance evaluation results of one or more non-compliant resources that are evaluated by a rule in an account group. | |
RevertAggregateEvaluationResults | Reverts the ignored compliance evaluation results of one or more non-compliant resources that are evaluated by a rule in an account group back to non-compliant. | |
Resources | GetAggregateResourceCountsGroupByResourceType | Queries the statistics on resources grouped by resource type in an account group. |
GetAggregateResourceCountsGroupByRegion | Queries the statistics on resources grouped by region in an account group. | |
GetAggregateResourceConfigurationTimeline | Queries the configuration timeline of a resource in an account group. | |
GetAggregateResourceComplianceTimeline | Queries the compliance timeline of a resource in an account group. | |
GetAggregateDiscoveredResource | Queries the details of a resource in an account group. | |
ListAggregateDiscoveredResources | Queries the resources in an account group. | |
Remediation templates | CreateAggregateRemediation | Configures a remediation template for a rule in an account group. |
ListAggregateRemediations | Queries the remediation templates for a rule in an account group. | |
DeleteAggregateRemediations | Deletes one or more configured remediation templates from a rule in an account group. | |
StartAggregateRemediation | Performs a remediation operation by using a rule in an account group. | |
Delivery channels | CreateDeliveryChannel | Creates a delivery channel. |
UpdateDeliveryChannel | Modifies a delivery channel. |
Member accounts
A member account is an Alibaba Cloud account in a resource directory. The API operations
that you can call by using a member account vary based on whether it is added to an
account group. The following section provides detailed information:
- If a member account is not added to an account group, you can use the member account to call all API operations that you can call by using an ordinary account. For more information, see the Ordinary accounts section of the "List of operations by function" topic.
- If a member account is added to an account group, you can use the member account to
call all API operations that you can call by using an ordinary account, and call the
query API operations that you can call by using a management account to query the
account group to which the member account belongs, and the compliance packages, rules,
resources, and remediation templates that the member account owns.
- For more information about all API operations that you can call by using an ordinary account, see the Ordinary accounts section of the "List of operations by function" topic.
- The following table describes the query API operations that you can call by using
a management account.
Item Operation Description Account groups ListAggregators Queries account groups. GetAggregator Queries the details of an account group. Compliance packages ListAggregateCompliancePacks Queries the compliance packages in an account group. GetAggregateCompliancePack Queries the details of a compliance package in an account group. GetAggregateResourceComplianceByPack Queries the compliance evaluation results of resources monitored by a compliance package in an account group. GetAggregateConfigRuleComplianceByPack Queries the compliance evaluation results based on rules in a compliance package in an account group. GetAggregateAccountComplianceByPack Queries the compliance evaluation results of member accounts on which a compliance package takes effect in an account group. Rules ListAggregateConfigRules Queries the rules in an account group. GetAggregateConfigRule Queries the details of a rule in an account group. GetAggregateResourceComplianceByConfigRule Queries the compliance evaluation results based on a rule in an account group. GetAggregateConfigRuleSummaryByRiskLevel Queries the summary of compliance evaluation results by rule risk level in an account group. ListAggregateConfigRuleEvaluationResults Queries the compliance evaluation results of resources based on rules in an account group. Note- If you do not set the request parameter
ResourceOwnerId
, Cloud Config queries the compliance evaluation results generated for specific resources based on the rules that belong to the current member account. - If you want to set the request parameter
ResourceOwnerId
, you must set this parameter to the ID of the current member account.
ListAggregateResourceEvaluationResults Queries the compliance evaluation results of resources in an account group. Resources ListAggregateDiscoveredResources Queries the resources in an account group. Note- If you do not set the request parameter
ResourceOwnerId
, Cloud Config queries the resources that belong to the current member account. - If you want to set the request parameter
ResourceOwnerId
, you must set this parameter to the ID of the current member account.
GetAggregateDiscoveredResource Queries the details of a resource in an account group. Note- If you do not set the request parameter
ResourceOwnerId
, Cloud Config queries the details of the resource that belongs to the current member account. - If you want to set the request parameter
ResourceOwnerId
, you must set this parameter to the ID of the current member account.
GetAggregateResourceCountsGroupByResourceType Queries the statistics on resources grouped by resource type in an account group. GetAggregateResourceCountsGroupByRegion Queries the statistics on resources grouped by region in an account group. GetAggregateResourceConfigurationTimeline Queries the configuration timeline of a resource in an account group. Note- If you do not set the request parameter
ResourceOwnerId
, Cloud Config queries the configuration timeline of the resource that belongs to the current member account. - If you want to set the request parameter
ResourceOwnerId
, you must set this parameter to the ID of the current member account.
GetAggregateResourceComplianceTimeline Queries the compliance timeline of a resource in an account group. Note- If you do not set the request parameter
ResourceOwnerId
, Cloud Config queries the compliance timeline of the resource that belongs to the current member account. - If you want to set the request parameter
ResourceOwnerId
, you must set this parameter to the ID of the current member account.
Remediation templates ListAggregateRemediations Queries the remediation templates for a rule in an account group. - If you do not set the request parameter