All Products
Search
Document Center

Data Security Center:DescribeEventTypes

Last Updated:Nov 17, 2022

Queries the types of anomalous activities.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
LangstringNo

The natural language of the request and response. Valid values:

  • zh: Chinese
  • en: English
zh
ParentTypeIdlongNo

The ID of the anomalous activity type for which you want to query anomalous activity subtypes. Valid values:

  • 01: anomalous permission access
  • 02: anomalous data flow
  • 03: anomalous data operation
01
ResourceIdintegerNo

The name of the service. Valid values include 1, 2, 3, 4, and 5. A value of 1 indicates MaxCompute. A value of 2 indicates Object Storage Service (OSS). A value of 3 indicates AnalyticDB for MySQL. A value of 4 indicates Tablestore. A value of 5 indicates ApsaraDB RDS.

5
StatusintegerNo

The status of the anomalous activity types or subtypes to be queried. Valid values:

  • 1: enabled
  • 2: disabled
1

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The ID of the request.

769FB3C1-F4C9-42DF-9B72-7077A8989C13
EventTypeListarray

The list of anomalous activity types that were queried.

NoteIf you leave the ParentTypeId parameter empty, anomalous activity types are returned. If you set the ParentTypeId parameter, anomalous activity subtypes under the specified anomalous activity type are returned.
object

The list of anomalous activity types.

Codestring

The code of the anomalous activity type.

01
Descriptionstring

The description of the anomalous activity type.

Anomalous permission access, ***
Namestring

The name of the anomalous activity type.

Anomalous permission access
Idlong

The unique ID of the anomalous activity type.

1
SubTypeListarray

The list of anomalous activity subtypes that were queried.

object

The details of the anomalous activity subtype.

Statusinteger

Indicates whether detection is enabled for the anomalous activity subtype. Valid values:

  • 1: enabled
  • 0: disabled
1
Descriptionstring

The description of the anomalous activity subtype.

No protection for the MaxCompute sensitive project, *****
ConfigContentTypeinteger

The content format of anomalous activity detection rules. Valid values:

  • 0: numbers, including thresholds.
  • 1: text, including IP addresses.
1
EventHitCountinteger

The number of times for which the event hits an anomalous activity detection rule.

2
ConfigValuestring

The value of the configuration.

90
ConfigCodestring

The code of the configuration.

0100**
Codestring

The code of the anomalous activity subtype.

020008
ConfigDescriptionstring

The description of the configuration.

The period for which the idle permission exists exceeds the threshold. The specified threshold is ${value} calendar days.
Namestring

The name of the anomalous activity subtype.

No protection for the MaxCompute sensitive project
AdaptedProductstring

The service to which the anomalous activity detection rules apply. Valid values include MaxCompute, OSS, ADS, OTS, and RDS.

RDS
Idlong

The unique ID of the anomalous activity subtype.

1

Example

Normal return example

JSONFormat

{
  "RequestId": "769FB3C1-F4C9-42DF-9B72-7077A8989C13",
  "EventTypeList": [
    {
      "Code": "01",
      "Description": "Anomalous permission access, ***",
      "Name": "Anomalous permission access",
      "Id": 1,
      "SubTypeList": [
        {
          "Status": 1,
          "Description": "No protection for the MaxCompute sensitive project, *****",
          "ConfigContentType": 1,
          "EventHitCount": 2,
          "ConfigValue": "90",
          "ConfigCode": "0100**",
          "Code": "020008",
          "ConfigDescription": "The period for which the idle permission exists exceeds the threshold. The specified threshold is ${value} calendar days.",
          "Name": "No protection for the MaxCompute sensitive project",
          "AdaptedProduct": "RDS",
          "Id": 1
        }
      ]
    }
  ]
}

Error codes

For a list of error codes, visit the API error center.