All Products
Search
Document Center

Cloud Firewall:ModifyVpcFirewallCenConfigure

Last Updated:Aug 01, 2025

Modifies the configuration of a VPC firewall that protects traffic between network instances in a Cloud Enterprise Network (CEN) and a specified VPC.

Operation description

This operation modifies the configuration of a VPC firewall. The VPC firewall protects traffic between network instances in a Cloud Enterprise Network (CEN) and a specified VPC. The network instances include VPCs, virtual border routers (VBRs), and Cloud Connect Network (CCN) instances. Before you call this operation, you must call the CreateVpcFirewallCenConfigure operation to create a VPC firewall.

QPS limit

The queries per second (QPS) limit for this operation is 10 for a single user. If the limit is exceeded, API calls are throttled. This may affect your business. Please plan your API calls accordingly.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-cloudfirewall:ModifyVpcFirewallCenConfigure

update

*VpcFirewallCen

acs:cloudfirewall::{#accountId}:vpcfirewallcen/{#VpcFirewallId}

None None

Request parameters

Parameter

Type

Required

Description

Example

Lang

string

No

The language of the request and response. Valid values:

  • zh (default): Chinese.

  • en: English.

zh

VpcFirewallId

string

Yes

The instance ID of the VPC firewall.

Note

You can call the DescribeVpcFirewallCenList operation to query the instance IDs of VPC firewalls.

vfw-m5e7dbc4y****

VpcFirewallName

string

Yes

The instance name of the VPC firewall.

Test instance

MemberUid

string

No

The UID of the member account of the current Alibaba Cloud account.

258039427902****

Response parameters

Parameter

Type

Description

Example

object

RequestId

string

The ID of the request.

850A84D6-0DE4-4797-A1E8-00090125k6f8

Examples

Success response

JSON format

{
  "RequestId": "850A84D6-0DE4-4797-A1E8-00090125k6f8"
}

Error codes

HTTP status code

Error code

Error message

Description

200 ErrorDBUpdateError A database update error occurred. A database update error occurred.
400 ErrorAliUid The aliuid is invalid. The aliuid is invalid.
400 ErrorVpcFirewallIdNotFound The VPC firewall ID is not found. The VPC firewall ID is not found.
400 ErrorDBSelectError A database select error occurred. The error message returned because an internal error has occurred in querying the database.
400 ErrorRegionNoError The region is invalid. The region is invalid.
400 ErrorUnmarshalJSON An error occurred while parsing JSON. An error occurred while decoding JSON.
400 ErrorInvalidMemberUid Member uid is invalid The member is invalid.
400 ErrorFirewallId Firewall ID is invalid. The ID of the firewall is invalid.
400 ErrorFirewallName Firewall name invalid. Firewall name error, please re-enter.
400 ErrorVpcFirewallExist Vpc firewall already exist. The firewall is already configured and cannot be configured repeatedly.
400 ErrorVpcFirewallNotFound Vpc firewall not found. The specified VPC firewall does not exist. Select another one.
400 ErrorFirewallStatusCannotModify Current firewall status, configuration not allowed You cannot configure the firewall because the status of the firewall is invalid.
400 ErrorRegionNoDisable There are unsupported regions, please reselect Some regions are not supported. Specify supported regions.
400 ErrorDBTxError A database transaction error occurred. The error message returned because an internal error has occurred in the database transaction.
400 ErrorRecordLog record operation log error. Update operation log error.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.