All Products
Search

This Product

    Data Security Center:CreateDataLimit

    Document Center

    Data Security Center:CreateDataLimit

    Last Updated:Jul 07, 2026

    Creates a scan authorization for a database, project, or Object Storage Service (OSS) bucket.

    Operation description

    This operation is used to authorize scanning of data assets to further protect the data security of your data assets.

    QPS limit

    The single-user QPS limit for this operation is 10 calls per second. If the limit is exceeded, the API call is throttled, which may affect your business. Call this operation at an appropriate frequency.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-sddp:CreateDataLimit

    create

    *All Resource

    *
    • acs:ResourceGroupId
    		 None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    ResourceType

    integer

    Yes

    The type of the service to which the asset to be scanned belongs. Valid values:

    • 1: MaxCompute.

    • 2: OSS.

    • 3: ADS.

    • 4: OTS.

    • 5: RDS.

    1
    ServiceRegionId

    string

    No

    Required. The region in which the asset resides. Valid values:

    • cn-beijing: China (Beijing).

    • cn-zhangjiakou: China (Zhangjiakou).

    • cn-huhehaote: China (Hohhot).

    • cn-hangzhou: China (Hangzhou).

    • cn-shanghai: China (Shanghai).

    • cn-shenzhen: China (Shenzhen).

    • cn-hongkong: Hong Kong (China).

    cn-hangzhou
    ParentId

    string

    No

    Required. The name of the asset, which consists of the instance ID and the database connection string separated by a period (.).

    rm-****34.******name
    UserName

    string

    No

    The username of the database asset.

    y*****m
    Password

    string

    No

    The password used to access the database asset.

    p****d
    AuditStatus

    integer

    No

    Specifies whether to enable auditing. Valid values:

    • 0: Auditing is disabled.

    • 1: Auditing is enabled.

    1
    AutoScan

    integer

    No

    Specifies whether to automatically trigger a rescan when rules are changed. Valid values:

    • 0: Automatic rescan is not triggered.

    • 1: Automatic rescan is triggered.

    Note

    When a rule change triggers an automatic rescan, a full scan is performed on all data in the data source.

    1
    LogStoreDay

    integer

    No

    The retention period of raw logs after auditing is enabled. Unit: days. Valid values:

    • 30

    • 90

    • 180

    • 365

    30
    EngineType

    string

    No

    The type of the database. Valid values:

    • MySQL

    • SQLServer

    MySQL
    Port

    integer

    No

    The database connection port.

    3306
    OcrStatus

    integer

    No

    The OCR status. Valid values:

    • 1: Enabled.

    • 0: Disabled.

    0
    EventStatus

    integer

    No

    The anomalous activity detection status. Valid values:

    • 0: Disabled.

    • 1: Enabled (default).

    1
    Enable

    integer

    No

    Specifies whether to enable sensitive data detection. Valid values:

    • 1: Enabled.

    • 0: Disabled.

    Note

    If the asset is authorized for the first time, the default value is 1. If the asset has been previously authorized, the value from the last authorization is used, which may be 0 or 1. To perform sensitive data detection on the asset, set this parameter to 1.

    1
    SamplingSize

    integer

    No

    The number of sample entries for sensitive data detection after data detection is enabled. Valid values:

    • 0

    • 5

    • 10

    Note

    Default value: 10.

    0
    CertificatePermission

    string

    No

    The credential permission. Valid values:

    • ReadOnly: read-only permission.

    • ReadWrite: read and write permission.

    ReadOnly
    FeatureType

    integer

    No

    This parameter is deprecated.

    2
    SourceIp

    string

    No

    This parameter is deprecated.

    106.11.XX.XX
    InstantlyScan

    boolean

    No

    Specifies whether to immediately scan the authorized asset. Valid values:

    • false: The asset is not immediately scanned.

    • true: The asset is immediately scanned.

    false
    Lang

    string

    No

    The language of the request and response. Default value: zh_cn. Valid values:

    • zh_cn: Chinese.

    • en_us: English.

    zh_cn

    Response elements

    Element

    Type

    Description

    Example

    object

    Id

    integer

    The ID of the authorized resource.

    1
    RequestId

    string

    The unique ID generated by Alibaba Cloud for the request.

    7C3AC882-E5A8-4855-BE77-B6837B695EF1

    Examples

    Success response

    JSON format

    {
  "Id": 1,
  "RequestId": "7C3AC882-E5A8-4855-BE77-B6837B695EF1"
}

    Error codes

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.