Connects an on-premises network to cloud services.


Cloud services refer to the Alibaba Cloud services that use the CIDR block to provide services. These cloud services include Object Storage Service (OSS), Log Service, and Data Transmission Service (DTS). If your on-premises network needs to access a cloud service, you must attach the virtual border router (VBR) or Cloud Connect Network (CCN) instance that is connected to your on-premises network to a Cloud Enterprise Network (CEN) instance. In addition, you must attach a virtual private cloud (VPC) that is deployed in the same region as the cloud service to the CEN instance. This way, your on-premises network can connect to the VPC that is deployed in the same region as the cloud service and access the cloud service through the VPC.


An on-premises network associated with a VBR can use CEN to access only a cloud service that is deployed in the same region.

For example, if a cloud service is deployed in the China (Beijing) region, only on-premises networks connected to VBRs in the China (Beijing) region can access the cloud service.


Before you call this operation, make sure that the following conditions are met:

  • The VBR or CCN instance to which your on-premises network is connected is attached to a CEN instance.
  • A VPC that is deployed in the same region as the cloud service is attached to the CEN instance. For more information, see AttachCenChildInstance.


OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String No ResolveAndRouteServiceInCen

The operation that you want to perform.

Set the value to ResolveAndRouteServiceInCen.

AccessRegionIds.N RepeatList Yes cn-hangzhou

The ID of the region where the cloud service is accessed.

You can call the DescribeChildInstanceRegions operation to query the most recent region list.

CenId String Yes cen-ckwa2hhmuislse****

The ID of the CEN instance.

Host String Yes

The IP address or CIDR block of the cloud service.

Note In most cases, a cloud service has multiple IP addresses or CIDR blocks. We recommend that you call this operation multiple times to add all IP addresses or CIDR blocks of the cloud service.
HostRegionId String Yes cn-hangzhou

The ID of the region where the cloud service is deployed.

HostVpcId String Yes vpc-o6woh5s494zueq40v****

The ID of the VPC that is associated with the cloud service.

ClientToken String No 02fb3da4****

The client token that is used to ensure the idempotence of the request.

You can use the client to generate a token, but you must make sure that it is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length.

Description String No descname

The description of the cloud service.

The description must be 2 to 256 characters in length, and can contain letters, digits, hyphens (-), and periods (.).The description must start with a letter and cannot start with http:// or https://. You can also leave the parameter empty.

Response parameters

Parameter Type Example Description
RequestId String C0245BEF-52AC-44A8-A776-EF96FD26A5CA

The ID of the request.


Sample requests

&<Common request parameters>

Sample success responses

XML format


JSON format

  "RequestId": "C0245BEF-52AC-44A8-A776-EF96FD26A5CA"

Error codes

For a list of error codes, visit the API Error Center.