Use ListCompliancePackTemplates to query all compliance pack templates - Cloud Config - Alibaba Cloud - Cloud Config

Queries all compliance package templates and their details provided by Cloud Config.

Operation description

A compliance package template is a collection of rules that Cloud Config customizes for compliance scenarios.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter	Type	Required	Description	Example
CompliancePackTemplateId	string	No	The ID of the compliance package template.	ct-5f26ff4e06a300c4****
RuleRiskLevel	integer	No	The risk level of the rule templates in the compliance package. Valid values: 1: high risk. 2: medium risk. 3: low risk.	2
PageSize	integer	No	The number of entries per page. Valid values: 1 to 100. Minimum value: 1. Default value: 10.	10
PageNumber	integer	No	The page number. Minimum value: 1. Default value: 1.	1
ResourceTypes	string	No	The resource type evaluated by the rule. If you specify this parameter, only rules that include the specified resource type in the compliance package template are returned.	ACS::ECS::Instance
FilterType	string	No	The query filter field.	LAW

For more information about common request parameters, see Common parameters.

Response elements

Element	Type	Description	Example
	object	The response parameters.
CompliancePackTemplatesResult	object	The details of the compliance package templates.
PageSize	integer	The number of entries per page.	10
PageNumber	integer	The page number.	1
TotalCount	integer	The total number of compliance package templates.	1
CompliancePackTemplates	array<object>	The list of compliance package templates.
	array<object>	The compliance package template information.
RiskLevel	integer	The risk level of the rule templates in the compliance package. Valid values: 1: high risk. 2: medium risk. 3: low risk.	1
Description	string	The description of the compliance package.	Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3.
ConfigRules	array<object>	The list of default rules in the compliance package.
	array<object>	The rule information.
Description	string	The description of the rule.	If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state.
ManagedRuleIdentifier	string	The identifier of the rule template.	ecs-instance-updated-security-vul
ManagedRuleName	string	The name of the rule template.	ecs-instance-updated-security-vul
ConfigRuleParameters	array<object>	The parameter information of the rule template.
	object	The rule parameter information.
Required	boolean	Indicates whether the parameter is required in the rule template. Valid values: true: The parameter is required. false: The parameter is optional.	true
ParameterName	string	The name of the rule template parameter.	necessity
ParameterValue	string	The value of the rule template parameter.	asap
RiskLevel	integer	The risk level of the rule template. Valid values: 1: high risk. 2: medium risk. 3: low risk.	2
ControlId	string	The ID of the regulatory article. Note This parameter is displayed only for regulatory compliance packages.	8.1.4.4
ControlDescription	string	The original description of the regulatory article. This information is included only in regulatory compliance packages.	e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events.
DefaultEnable	boolean	Indicates whether the rule supports quick enablement. Valid values: true: Supported. false: Not supported.	false
ResourceTypesScope	string	The resource type evaluated by the rule.	ACS::ECS::Instance
CompliancePackTemplateName	string	The name of the compliance package template.	ClassifiedProtectionPreCheck
CompliancePackTemplateId	string	The ID of the compliance package template.	ct-5f26ff4e06a300c4****
Labels	string	The classification labels of the compliance package.	Regulation
LastUpdate	integer	The last update time of the compliance package, expressed as a UNIX timestamp in seconds.	1747983081
RequestId	string	The request ID.	D67FC82F-25AE-4268-A94C-3348340748F9

Examples

Success response

JSON format

{
  "CompliancePackTemplatesResult": {
    "PageSize": 10,
    "PageNumber": 1,
    "TotalCount": 1,
    "CompliancePackTemplates": [
      {
        "RiskLevel": 1,
        "Description": "Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3.",
        "ConfigRules": [
          {
            "Description": "If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state.",
            "ManagedRuleIdentifier": "ecs-instance-updated-security-vul",
            "ManagedRuleName": "ecs-instance-updated-security-vul",
            "ConfigRuleParameters": [
              {
                "Required": true,
                "ParameterName": "necessity",
                "ParameterValue": "asap"
              }
            ],
            "RiskLevel": 2,
            "ControlId": "8.1.4.4",
            "ControlDescription": "e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events.",
            "DefaultEnable": false,
            "ResourceTypesScope": "ACS::ECS::Instance"
          }
        ],
        "CompliancePackTemplateName": "ClassifiedProtectionPreCheck",
        "CompliancePackTemplateId": "ct-5f26ff4e06a300c4****",
        "Labels": "Regulation",
        "LastUpdate": 1747983081
      }
    ]
  },
  "RequestId": "D67FC82F-25AE-4268-A94C-3348340748F9"
}

Error codes

HTTP status code	Error code	Error message	Description
400	NoPermission	You are not authorized to perform this operation.	You are not authorized to perform this operation.
404	AccountNotExisted	Your account does not exist.
503	ServiceUnavailable	The request has failed due to a temporary failure of the server.	The request has failed due to a temporary failure of the server.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.