All Products
Search
Document Center

Cloud Firewall:CreateAclCheck

Last Updated:Nov 25, 2025

Creates an access control list (ACL) check.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

Lang

string

No

The language of the request and response.

Valid values:

  • en :

    English

  • zh :

    Chinese (default)

zh

AclType

string

Yes

The type of the ACL check.

Valid values:

  • NAT :

    NAT border

  • AddressBook :

    address book

  • VPC :

    VPC border

  • Internet :

    Internet Border

Internet

CheckNames

array

No

A list of ACL check names.

string

No

The name of the ACL check.

Valid values:

  • PolicyDuplicate :

    Duplicate or redundant policy

  • PolicyConflict :

    Policy that conflicts with business

  • AddressBookIpSeparated :

    Duplicate, overlapping, or scattered IP addresses in the IP address book

  • DefaultPolicyNotDeny :

    The default policy is not a Deny All policy, which is a whitelist mechanism

  • PolicySourceDestinationSame :

    An invalid policy in which the source and destination are the same

  • PolicyPortHighRisk :

    A risky policy that allows traffic on high-risk ports

  • PolicyTooLoose :

    The control policy is too loose

  • PolicyHitCountZero :

    A policy that is never hit by traffic

  • AddressBookPortSeparated :

    Duplicate, overlapping, or scattered ports in the port address book

  • AddressBookDomainValid :

    The validity of the domain name address book

PolicyHitCountZero

Response elements

Element

Type

Description

Example

object

RequestId

string

The request ID.

4FB718F0-CC04-5A12-B17B-188CFC3F****

TaskIds

array

A list of task IDs.

string

The task ID.

task-c92d4544ef7b6a42

Examples

Success response

JSON format

{
  "RequestId": "4FB718F0-CC04-5A12-B17B-188CFC3F****",
  "TaskIds": [
    "task-c92d4544ef7b6a42\n"
  ]
}

Error codes

HTTP status code

Error code

Error message

Description

400 ErrorAclCheckQuotaUnavailable ACL check quota unavailable. The quota for access control configuration checks is insufficient.
400 ErrorParameters Parameters error. Parameter error.
400 ErrorParametersUid The aliUid parameter is invalid. The aliUid parameter is invalid.
400 ErrorDBSelect An error occurred while querying database. An error occurred while querying database.
400 ErrorDBInsert An error occurred while performing an insert operation in the database. An error occurred while performing an insert operation in the database.
400 ErrorAclCheckBusy ACL check is busy. The access control configuration check is ongoing. Try again later.
400 ErrorDBUpdate internal error: sql updat. An error occurred while updating the database.
400 ErrorRecordLog An error occurred while updating the operation log. An error occurred while updating the operation log.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.