All Products
Search
Document Center

Cloud Firewall:ModifyVpcFirewallControlPolicyPosition

Last Updated:Nov 12, 2025

Modifies the priority of an access control policy in a policy group for a VPC firewall.

Operation description

You can call this operation to modify the priority of an access control policy in a policy group for a VPC firewall.

QPS limit

The limit on the number of queries per second (QPS) for a single user is 10. If you exceed this limit, API calls are throttled. This may affect your business. Plan your calls accordingly.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

Lang

string

No

The language of the request and response.

Valid values:

  • zh (Default): Chinese

  • en: English

zh

VpcFirewallId

string

Yes

The ID of the policy group for the VPC firewall. You can call the DescribeVpcFirewallAclGroupList operation to obtain the ID.

Valid values:

  • If the VPC firewall protects a Cloud Enterprise Network (CEN) instance, the ID of the policy group is the ID of the CEN instance.

    Example: cen-ervw0g12b5jbw****

  • If the VPC firewall protects an Express Connect circuit, the ID of the policy group is the ID of the VPC firewall instance.

    Example: vfw-a42bbb7b887148c9****

vfw-a42bbb7b887148c9****

NewOrder

string

Yes

The new priority of the access control policy.

Note

For more information about the valid range of priorities, see DescribePolicyPriorities.

1

OldOrder

string

No

The original priority of the access control policy.

Note

This parameter is deprecated. Use the AclUuid parameter to specify the policy to modify.

5

AclUuid

string

No

The unique ID of the access control policy.

To modify an access control policy, provide the unique ID of the policy. Call the DescribeVpcFirewallControlPolicy operation to obtain the ID.

2746d9ff-5d7c-449d-a2a9-ccaa15fe****

Response elements

Element

Type

Description

Example

object

RequestId

string

The ID of the request.

850A84D6-0DE4-4797-A1E8-00090125EEB1

Examples

Success response

JSON format

{
  "RequestId": "850A84D6-0DE4-4797-A1E8-00090125EEB1"
}

Error codes

HTTP status code

Error code

Error message

Description

400 ErrorParametersAppId The AppId parameter is incorrect. The AppId parameter is invalid.
400 ErrorDBSelect An error occurred while querying database. An error occurred while querying database.
400 ErrorAclNotExist The ACL does not exist. The ACL does not exist.
400 ErrorAclEffectiveTimeNonPermanent ACL rule is not allowed to update status when effective is not permanent. ACL rule is not allowed to update status when effective is not permanent.
400 ErrorUUIDNew The UUID is invalid. The UUID is invalid.
400 ErrorParameterIpVersion The IP version is invalid. The IP version is invalid.
400 ErrorParametersDirection The direction is invalid. The direction is invalid.
400 ErrorParametersSource The source is invalid. The source is invalid.
400 ErrorDomainResolve An error occurred while resolving the domain. An error occurred while resolving the domain.
400 ErrorParametersDestination The Destination parameter is invalid. The Destination parameter is invalid.
400 ErrorParametersProto The protocol is invalid. The protocol is invalid.
400 ErrorParametersDestPort The dst_port is invalid. The dst_port is invalid.
400 ErrorParametersAction The action is invalid. The action is invalid.
400 ErrorParameters Parameters error. Parameter error.
400 ErrorAclExtendedCountExceed ACL or extended ACL rules are not matched. The quota for access control policies or extra access control policies is exhausted.
400 ErrorAclDomainAnyCountExceed The number of resolved domain names cannot exceed 200. ACL configuration can be continued for HTTP, HTTPS, SMTP, SMTPS, and SSL applications. The domain name is resolved to more than 200 IP addresses. We recommend that you set Application in your access control policy to HTTPS, HTTPS, SMTP, SMTPS, or SSL.
400 ErrorDBUpdate internal error: sql updat. An error occurred while updating the database.
400 ErrorDBInsert An error occurred while performing an insert operation in the database. An error occurred while performing an insert operation in the database.
400 ErrorRecordLog An error occurred while updating the operation log. An error occurred while updating the operation log.
400 ErrorMarshalJSON An error occurred while encoding JSON. An error occurred while encoding JSON.
400 ErrorParametersUid The aliUid parameter is invalid. The aliUid parameter is invalid.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.