Use the CreateNetworkInterface API to create an elastic network interface - Elastic Compute Service - Alibaba Cloud - Elastic Compute Service

You can create an elastic network interface (ENI) and specify its primary private IP address.

Operation description

When you call this operation, note the following:

This is a synchronous operation. A newly created elastic network interface is in the Available state and can be attached to an instance immediately.
If the response does not contain a NetworkInterfaceId, try creating the elastic network interface again.
An elastic network interface can be attached to only one instance in a VPC.
When you reattach an elastic network interface to another instance, its properties remain unchanged and network traffic is redirected to the new instance.
You can assign up to 49 secondary private IP addresses when you create an elastic network interface.
To assign an IPv6 address when creating an elastic network interface, ensure that IPv6 is enabled for the specified VSwitch. For more information, see What is an IPv6 gateway.
Each account has a resource quota that limits the number of elastic network interfaces you can create in an Alibaba Cloud region. You can view your resource quotas in the ECS console. For more information, see View and increase resource quotas.

Request examples

Create an elastic network interface

RegionId:  cn-hangzhou,   // China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   // The security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   // The VSwitch ID.

Create an elastic network interface and specify a primary private IP address

RegionId:  cn-hangzhou,   // China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   // security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   // VSwitch ID.
PrimaryIpAddress:  192.168.0.*,   // primary private IP address.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

ecs:CreateNetworkInterface

create

*NetworkInterface

acs:ecs:{#regionId}:{#accountId}:eni/*

*SecurityGroup

acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}

vpc:IsDefaultVSwitch
vpc:IsDefaultVpc
vpc:VPC
vpc:tag
vpc:tag
vpc:tag

None

Request parameters

Parameter	Type	Required	Description	Example
RegionId	string	Yes	The ID of the region in which to create the elastic network interface. You can call the DescribeRegions operation to view the latest list of Alibaba Cloud regions.	cn-hangzhou
Tag	array<object>	No	The tags to add to the elastic network interface.
	object	No	A tag for the elastic network interface.
Key	string	No	The key of the tag. Valid values for N: 1 to 20. The tag key cannot be an empty string. It can be up to 128 characters long and cannot start with `aliyun` or `acs:`. It cannot contain `http://` or `https://`.	TestKey
Value	string	No	The value of the tag. Valid values for N: 1 to 20. The tag value can be an empty string. It can be up to 128 characters long and cannot contain `http://` or `https://`.	TestValue
RegionId	string	Yes	The ID of the region in which to create the elastic network interface. You can call the DescribeRegions operation to view the latest list of Alibaba Cloud regions.	cn-hangzhou
ResourceGroupId	string	No	The ID of the resource group. You can call the ListResourceGroups operation to query resource groups.	rg-bp67acfmxazb4ph****
VSwitchId	string	Yes	The ID of the VSwitch for the elastic network interface. The private IP addresses for the elastic network interface are assigned from the available CIDR block of the VSwitch. Important The elastic network interface and the instance to be attached must be in the same availability zone but can belong to different VSwitches.	vsw-bp1s5fnvk4gn2tws03****
PrimaryIpAddress	string	No	The primary private IP address of the elastic network interface. The IP address must be an available IP address within the CIDR block of the VSwitch. If this parameter is not specified, the system randomly assigns an available IP address from the VSwitch's CIDR block.	172.17..
SecurityGroupId	string	No	The ID of the security group for the elastic network interface. The security group and the elastic network interface must be in the same VPC. Note You must specify either `SecurityGroupId` or `SecurityGroupIds.N`, but not both.	sg-bp1fg655nh68xyz9i****
NetworkInterfaceName	string	No	The name of the elastic network interface. The name must be 2 to 128 characters long and can contain Unicode letters (such as English and Chinese characters), digits (0-9), colons (:), underscores (_), periods (.), and hyphens (-). Default value: empty.	testNetworkInterfaceName
Description	string	No	The description of the elastic network interface. The description must be 2 to 256 characters long and cannot start with `http://` or `https://`. Default value: empty.	testDescription
Visible	boolean	No	Note This parameter is deprecated.	null
InstanceType	string	No	The type of the elastic network interface. Valid values: `Secondary`: a secondary elastic network interface. `Trunk`: a trunk network interface. (This feature is available by invitation only.) Default value: `Secondary`.	Secondary
BusinessType	string	No	Note This parameter is deprecated.	null
SecondaryPrivateIpAddressCount	integer	No	The number of secondary private IP addresses to automatically assign to the elastic network interface. Valid values: 1 to 49.	1
QueueNumber	integer	No	The number of queues for the elastic network interface. Valid values: 1 to 2048. When attached to an instance, this value must be less than the maximum number of queues per elastic network interface that the instance type supports. You can call the DescribeInstanceTypes operation and check the `MaximumQueueNumberPerEni` value in the response to query this limit. If you do not specify this parameter, the default queue number for the instance type is used upon attachment.	1
ClientToken	string	No	A client token to ensure request idempotence. Your client generates this token, which must be unique across requests. The token can contain only ASCII characters and must not exceed 64 characters in length. For more information, see How to ensure idempotence.	123e4567-e89b-12d3-a456-426655440000
NetworkInterfaceTrafficMode	string	No	The traffic mode of the elastic network interface. Valid values: `Standard`: uses the TCP traffic mode. `HighPerformance`: enables the Elastic RDMA Interface (ERI) and uses the RDMA traffic mode. Note An elastic network interface in RDMA traffic mode can be attached only to an ERI-supported instance type. The number of these elastic network interfaces that can be attached is limited by the instance family. For more information, see Instance families, Configure eRDMA on an enterprise-level instance. Default value: `Standard`.	Standard
QueuePairNumber	integer	No	The number of queue pairs for the RDMA-enabled elastic network interface. If you want to attach multiple RDMA-enabled elastic network interfaces to an instance, we recommend that you specify a `QueuePairNumber` value for each elastic network interface. The value should be based on the maximum `QueuePairNumber` value supported by the instance type and the number of elastic network interfaces that you plan to use. The total number of queue pairs for all elastic network interfaces cannot exceed the maximum value for the instance type. You can call the DescribeInstanceTypes operation to query the maximum value. Important If you do not specify `QueuePairNumber` for an RDMA-enabled elastic network interface, the system defaults to the maximum value that the instance type supports. Consequently, you cannot attach any more RDMA-enabled elastic network interfaces to that instance. This does not affect standard elastic network interfaces.	22
SecurityGroupIds	array	No	The IDs of one or more security groups to which to add the elastic network interface. The security groups and the elastic network interface must be in the same VPC. The valid values of N depend on the maximum number of security groups to which an elastic network interface can be added. For more information, see Limits. Note You must specify either `SecurityGroupId` or `SecurityGroupIds.N`, but not both.	sg-bp1fg655nh68xyz9i****
	string	No	The IDs of one or more security groups to which to add the elastic network interface. The security groups and the elastic network interface must be in the same VPC. The valid values of N depend on the maximum number of security groups to which an elastic network interface can be added. For more information, see Limits. Note You must specify either `SecurityGroupId` or `SecurityGroupIds.N`, but not both.	sg-bp1fg655nh68xyz9i****
PrivateIpAddress	array	No	One or more secondary private IP addresses to assign to the elastic network interface. The IP addresses must be available addresses from the CIDR block of the VSwitch to which the elastic network interface belongs. Valid values of N: 0 to 10. Note You cannot specify both `PrivateIpAddress.N` and `SecondaryPrivateIpAddressCount` to assign secondary private IP addresses.	172.17..
	string	No	One or more secondary private IP addresses to assign to the elastic network interface. The IP addresses must be available addresses from the CIDR block of the VSwitch to which the elastic network interface belongs. Valid values of N: 0 to 10. Note You cannot specify both `PrivateIpAddress.N` and `SecondaryPrivateIpAddressCount` to assign secondary private IP addresses.	172.17..
Ipv6Address	array	No	One or more IPv6 addresses to assign to the elastic network interface. You can specify up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: `Ipv6Address.1=2001:db8:1234:1a00::**` Note** You must specify either `Ipv6Address.N` or `Ipv6AddressCount`, but not both, to assign IPv6 addresses.	2001:db8:1234:1a00::****
	string	No	One or more IPv6 addresses to assign to the elastic network interface. You can specify up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: `Ipv6Address.1=2001:db8:1234:1a00::**` Note** You must specify either `Ipv6Address.N` or `Ipv6AddressCount`, but not both, to assign IPv6 addresses.	2001:db8:1234:1a00::****
Ipv6AddressCount	integer	No	The number of random IPv6 addresses to assign to the elastic network interface. Valid values: 1 to 10. Note You must specify either `Ipv6Address.N` or `Ipv6AddressCount`, but not both, to assign IPv6 addresses.	1
Ipv4Prefix	array	No	One or more IPv4 prefixes to assign to the elastic network interface. Valid values of N: 1 to 10. Note You must specify either `Ipv4Prefix.N` or `Ipv4PrefixCount`, but not both, to assign IPv4 prefixes.
	string	No	One or more IPv4 prefixes to assign to the elastic network interface. Valid values of N: 1 to 10. Note You must specify either `Ipv4Prefix.N` or `Ipv4PrefixCount`, but not both, to assign IPv4 prefixes.	192.168../28
Ipv4PrefixCount	integer	No	The number of IPv4 prefixes to assign to the elastic network interface. Valid values: 1 to 10. Note You must specify either `Ipv4Prefix.N` or `Ipv4PrefixCount`, but not both, to assign IPv4 prefixes.	1
Ipv6Prefix	array	No	One or more IPv6 prefixes to assign to the elastic network interface. Valid values of N: 1 to 10. Note You must specify either `Ipv6Prefix.N` or `Ipv6PrefixCount`, but not both, to assign IPv6 prefixes.
	string	No	One or more IPv6 prefixes to assign to the elastic network interface. Valid values of N: 1 to 10. Note You must specify either `Ipv6Prefix.N` or `Ipv6PrefixCount`, but not both, to assign IPv6 prefixes.	2001:db8:1234:1a00:****::/80
Ipv6PrefixCount	integer	No	The number of IPv6 prefixes to assign to the elastic network interface. Valid values: 1 to 10. Note You must specify either `Ipv6Prefix.N` or `Ipv6PrefixCount`, but not both, to assign IPv6 prefixes.	1
DeleteOnRelease	boolean	No	Specifies whether to release the elastic network interface when its attached instance is released. Valid values: `true`: The elastic network interface is released. `false`: The elastic network interface is retained.	true
TxQueueSize	integer	No	The transmit (Tx) queue depth of the elastic network interface. The transmit (Tx) and receive (Rx) queue depths must be equal. The value must be a power of 2 between 8,192 and 16,384. A larger Tx queue depth can improve transmit throughput but consumes more memory. Note This parameter is not publicly available.	8192
RxQueueSize	integer	No	The receive (Rx) queue depth of the elastic network interface. The receive (Rx) and transmit (Tx) queue depths must be equal. The value must be a power of 2 between 8,192 and 16,384. A larger Rx queue depth can improve receive throughput but consumes more memory. Note This parameter is not publicly available.	8192
NetworkInterfaceTrafficConfig	object	No	The communication parameters of the elastic network interface.
QueueNumber	integer	No	The number of queues for the elastic network interface.	8
NetworkInterfaceTrafficMode	string	No	The traffic mode of the elastic network interface.	HighPerformance
QueuePairNumber	integer	No	The number of queue pairs for the RDMA-enabled elastic network interface.	8
TxQueueSize	integer	No	The transmit (Tx) queue depth of the elastic network interface. Note This parameter is available by invitation only. To request access, submit a ticket. This parameter is applicable only to seventh-generation or later ECS instance types. This parameter is applicable only to Linux images. A larger Tx queue depth can improve transmit throughput and reduce the packet loss rate, but consumes more memory.	8192
RxQueueSize	integer	No	The receive (Rx) queue depth of the elastic network interface. Note This parameter is available by invitation only. To request access, submit a ticket. This parameter is applicable only to seventh-generation or later ECS instance types. This parameter is applicable only to Linux images. A larger Rx queue depth can improve receive throughput and reduce the packet loss rate, but consumes more memory.	8192
ConnectionTrackingConfiguration	object	No	The connection tracking settings. Before using this parameter, read Connection timeout management.
TcpEstablishedTimeout	integer	No	The timeout for an established TCP connection, in seconds. Valid values: 30, 60, 80, 100, 200, 300, 500, 700, and 910. Default value: 910.	910
TcpClosedAndTimeWaitTimeout	integer	No	The timeout for a TCP connection in the TIME_WAIT or closing state, in seconds. Valid values: integers from 3 to 15. Default value: 3. Note If your ECS instance works with NLB or CLB, the default timeout period for connections in the `TIME_WAIT` state is 15 seconds.	3
UdpTimeout	integer	No	The timeout for a UDP stream, in seconds. Valid values: 10, 20, 30, 60, 80, and 100. Default value: 30. Note If your ECS instance works with NLB or CLB, the default value is 100 seconds.	30
EnhancedNetwork	object	No	Note This parameter is not publicly available.
EnableSriov	boolean	No	Note This parameter is not publicly available.	true
EnableRss	boolean	No	Note This parameter is not publicly available.	true
VirtualFunctionTotalQueueNumber	integer	No
VirtualFunctionQuantity	integer	No
SourceDestCheck	boolean	No	Specifies whether to enable source/destination check. Enabling this feature enhances network security. Valid values: `true`: enabled. `false`: disabled. Default value: false. Note This feature is available only in some regions. Before you use this feature, read Source/destination check.	false

Response elements

Element	Type	Description	Example
	object
Status	string	The status of the elastic network interface.	Available
Type	string	The type of the elastic network interface.	Secondary
VpcId	string	The ID of the VPC to which the elastic network interface belongs.	vpc-bp1j7w3gc1cexjqd****
NetworkInterfaceName	string	The name of the elastic network interface.	my-eni-name
MacAddress	string	The MAC address of the elastic network interface.	00:16:3e:12::
NetworkInterfaceId	string	The ID of the elastic network interface.	eni-bp14v2sdd3v8htln****
ServiceID	integer	The ID of the distributor for the elastic network interface.	12345678910
OwnerId	string	The ID of the account that owns the elastic network interface.	123456****
ServiceManaged	boolean	Specifies whether the elastic network interface is managed by a cloud service or a distributor.	true
VSwitchId	string	The ID of the vSwitch.	vsw-bp16usj2p27htro3****
RequestId	string	The request ID.	473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E
Description	string	The description of the elastic network interface.	testDescription
ResourceGroupId	string	The ID of the resource group.	rg-2ze88m67qx5z****
ZoneId	string	The ID of the zone.	cn-hangzhou-e
PrivateIpAddress	string	The primary private IP address of the elastic network interface.	172.17..
SecurityGroupIds	object	The IDs of the security groups to which the elastic network interface belongs.
SecurityGroupId	array	A list of security group IDs.
	string	The security group ID.	sg-bp18kz60mefsicfg****
PrivateIpSets	object	The private IP addresses that are assigned to the elastic network interface.
PrivateIpSet	array<object>	A collection of private IP address sets.
	object
PrivateIpAddress	string	The private IP address.	172.17..
Primary	boolean	Indicates whether the IP address is the primary private IP address.	true
Tags	object	The tags of the elastic network interface.
Tag	array<object>	The list of tags.
	object
TagValue	string	The tag value.	TestValue
TagKey	string	The tag key.	TestKey
Ipv6Sets	object	The IPv6 addresses that are assigned to the elastic network interface.
Ipv6Set	array<object>	The assigned IPv6 addresses of the ENI.
	object	Note This parameter is in invitational preview and is not publicly available.
Ipv6Address	string	The IPv6 address.	2001:db8:1234:1a00::****
Ipv4PrefixSets	object	The IPv4 prefixes that are assigned to the elastic network interface.
Ipv4PrefixSet	array<object>	The assigned IPv4 prefixes of the ENI.
	object
Ipv4Prefix	string	The IPv4 prefix.	192.168../28
Ipv6PrefixSets	object	The IPv6 prefixes that are assigned to the elastic network interface.
Ipv6PrefixSet	array<object>	The assigned IPv6 prefixes of the ENI.
	object
Ipv6Prefix	string	The IPv6 prefix.	2001:db8:1234:1a00:****::/80
SourceDestCheck	boolean	Note This parameter is in invitational preview and is not publicly available.	false

Examples

Success response

JSON format

{
  "Status": "Available",
  "Type": "Secondary",
  "VpcId": "vpc-bp1j7w3gc1cexjqd****",
  "NetworkInterfaceName": "my-eni-name",
  "MacAddress": "00:16:3e:12:**:**",
  "NetworkInterfaceId": "eni-bp14v2sdd3v8htln****",
  "ServiceID": 12345678910,
  "OwnerId": "123456****",
  "ServiceManaged": true,
  "VSwitchId": "vsw-bp16usj2p27htro3****",
  "RequestId": "473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E",
  "Description": "testDescription",
  "ResourceGroupId": "rg-2ze88m67qx5z****",
  "ZoneId": "cn-hangzhou-e",
  "PrivateIpAddress": "172.17.**.**",
  "SecurityGroupIds": {
    "SecurityGroupId": [
      "sg-bp18kz60mefsicfg****"
    ]
  },
  "PrivateIpSets": {
    "PrivateIpSet": [
      {
        "PrivateIpAddress": "172.17.**.**",
        "Primary": true
      }
    ]
  },
  "Tags": {
    "Tag": [
      {
        "TagValue": "TestValue",
        "TagKey": "TestKey"
      }
    ]
  },
  "Ipv6Sets": {
    "Ipv6Set": [
      {
        "Ipv6Address": "2001:db8:1234:1a00::****"
      }
    ]
  },
  "Ipv4PrefixSets": {
    "Ipv4PrefixSet": [
      {
        "Ipv4Prefix": "192.168.**.**/28"
      }
    ]
  },
  "Ipv6PrefixSets": {
    "Ipv6PrefixSet": [
      {
        "Ipv6Prefix": "2001:db8:1234:1a00:****::/80"
      }
    ]
  },
  "SourceDestCheck": false
}

Error response

JSON format

{
    "RequestId": "04F0F334-1335-436C-A1D7-6C044FExxxxx",
    "NetworkInterfaceId": "eni-enixxxxx"
}

Error codes

HTTP status code	Error code	Error message	Description
400	MissingParameter	%s	A parameter is not specified.
400	UnsupportedParameter	%s	The parameter is not supported.
400	InvalidParameter	%s	The specified parameter is invalid.
400	InvalidInstanceID.Malformed	%s	The specified InstanceId parameter is invalid.
400	InvalidOperation.InvalidEcsState	%s
400	InvalidOperation.InvalidEniState	%s
400	InvalidOperation.DetachPrimaryEniNotAllowed	%s
400	Forbidden.RegionId	%s	The service is unavailable in the current region.
400	Duplicate.TagKey	The Tag.N.Key contain duplicate key.	The specified tag key already exists. Tag keys must be unique.
400	InvalidTagKey.Malformed	The specified Tag.n.Key is not valid.	The specified Tag.N.Key parameter is invalid.
400	InvalidTagValue.Malformed	The specified Tag.n.Value is not valid.	The specified tag value is invalid.
400	JoinedGroupLimitExceed	%s	The maximum number of security groups to which the specified resource can be added has been reached. For more information, see the return value of the %s placeholder in the error message.
400	InvalidParameter.SecurityGroupIdRepeated	%s	The security group ID passed in is duplicate.
400	InvalidSecurityGroupId.SingleIdAndMultiIdConflict	%s
400	InvalidParameter.Conflict	%s	The specified parameter is invalid. Check whether parameter conflicts exist. %s is a variable. An error message is dynamically returned based on call conditions.
400	InvalidConnectionTrackingConfiguration.RegionOrUserNotSupported	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.
400	InvalidOperation.EniCountExceeded	%s.	The maximum number of NICs in the Enterprise Security Group has been reached.
400	InvalidPrivateIpAddress.Duplicated	The specified private IP address "%s" is duplicated.	The specified IP address is already in use.
400	IncorrectVSwitchStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created Available", but current state is "%s".	The operation is not supported in the current state of the vSwitch.
400	InvalidEniQueueSize.RegionOrUserNotSupported	The specified parameter "RxQueueSize" or "TxQueueSize" is not supported in this region or this account is not allowed to use ENI QueueSize.	You are not authorized to specify the length of NIC queues or cannot specify the length of NIC queues in the current region.
400	InvalidParameter.EniQueueSize	The specified parameter "TxQueueSize" and "RxQueueSize" are not equal or the value must be 8192 or 16384.	The specified parameter TxQueueSize and RxQueueSize are not equal or not the allowed value.
400	InvalidParameter.EniConnectionTrackingConfiguration	The specified ENI connection tracking configuration "%s" must be between %s and %s.	The network connection configuration specified by the network card exceeds the allowable range
400	QuotaExceeded.PrivateIpAddress	There are not enough private IPs in the specified VSwitch.	The current VSwitch does not have enough Ip
400	Throttling	Request was denied due to request throttling.
400	InvalidVSwitch.IllegalStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created", but current state is "%s".	The current VSwitch status does not support this operation.
400	InvalidParameter.EniEnhancedNetwork	The input parameter "EnhancedNetwork" is illegal, when EnableSriov is true, VirtualFunctionTotalQueueNumber must not be empty, and VirtualFunctionQuantity must be 1 to 256. When EnableSriov is empty or false, VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty.	The specified network enhancement function parameter is illegal. When the EnableSriov is set to true, the VirtualFunctionTotalQueueNumber must not be empty and the VirtualFunctionQuantity value range is 1-256; When the EnableSriov is empty or set to false, the VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty
401	InvalidOperation.SecurityGroupNotAuthorized	The specified security group is not authorized to operate.	You do not have permission to operate the current security group.
500	InternalError	The request processing has failed due to some unknown error, exception or failure.	An internal error has occurred. Try again later.
500	InvalidOperation.RegionNotSupportIpPrefix	The current region does not support IP prefix feature.	The region does not support IP prefix allocation.
500	ServiceUnavailable	The request processing has failed due to some unknown error.	Request timed out, please try again.
403	InvalidUserType.NotSupported	%s	Your account does not support this operation.
403	Abs.InvalidAccount.NotFound	%s	Your Alibaba Cloud account does not exist or your AccessKey pair has expired.
403	Forbidden.NotSupportRAM	%s	RAM users are not authorized to perform this operation.
403	Forbidden.SubUser	%s	You are not authorized to manage this resource. Contact the owner of the Alibaba Cloud account for authorization.
403	InValidParameter	%s
403	MaxEniCountExceeded	%s	The maximum number of ENIs that can be managed has been reached.
403	EniPerInstanceLimitExceeded	%s	The maximum number of ENIs that can be attached to the specified instance has been reached.
403	InvalidOperation.AvailabilityZoneMismatch	%s	The operation is invalid.
403	InvalidOperation.VpcMismatch	%s	The operation is invalid. Check whether the VPC in the operation corresponds to other parameters.
403	SecurityGroupInstanceLimitExceed	%s
403	InvalidSecurityGroupId.NotVpc	%s	The specified SecurityGroupId parameter is invalid and the network type of the security group is not VPC.
403	InvalidOperation.InvalidEniType	%s
403	InvalidVSwitchId.IpNotEnough	%s	The number of available IP addresses on the specified vSwitch is insufficient.
403	InvalidVSwitchId.IpInvalid	%s	The specified private IP address is invalid.
403	QuotaExceed.Tags	%s	The number of specified tags exceeds the upper limit. %s is a variable. An error message is dynamically returned based on call conditions.
403	InvalidIp.Address	%s	The IP entered is not in the correct format or is not in the optional CIDR range.
403	InvalidIp.IpRepeated	%s	The specified IP address already exists.
403	MaxEniPrivateIpsCountExceeded	%s	The maximum number of secondary private IP addresses that can be assigned to the specified ENI has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidOperation.ResourceManagedByCloudProduct	%s	You cannot modify security groups managed by cloud services.
403	InvalidOperation.TrunkingIsNotAllowed	%s	The trunk network card is not operational.
403	InvalidParameter.InvalidEniQueueNumber	%s
403	InvalidOperation.MaxEniQueueNumberExceeded	%s
403	InvalidOperation.ExceedInstanceTypeQueueNumber	%s	The maximum number of queues for all ENIs on an instance has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidParameter.EniTrafficMode	%s
403	InvalidOperation.HighPerformanceTrafficModeIsNotAllowed	%s
403	InvalidParameter.QueuePairNumberMustEmpty	%s
403	InvalidParameter.InvalidQueuePairNumber	%s
403	InvalidParams.NetworkInterfaceName	%s
403	InvalidIp.IpPrefixIllegal	The ip prefixes %s is/are illegal.	The IP address prefix is invalid and is not in the CIDR format.
403	InvalidIp.IpPrefixMustInReserveSegment	The ip prefix must in vswitch reserve segment.	The IP address prefix is invalid and is not in the reserved CIDR block of the vSwitch.
403	InvalidOperation.Ipv4CountExceeded	%s	The operation is valid because the maximum number of IPv4 addresses has been reached.
403	InvalidOperation.Ipv6CountExceeded	%s	The operation is valid because the maximum number of IPv6 addresses has been reached.
403	InvalidOperation.HighPerformanceTrafficModeEniUnsupported	High performance traffic mode does not support the current ENI type. Expected ENI type is "%s" but the current ENI type is "%s".	High performance traffic mode does not support the current ENI type.
403	AclLimitExceed	%s	The number of ACL rules for an ENI or instance exceeds the upper limit.
403	InvalidIp.IpPrefixMaskInvalid	The IP prefix mask %s is illegal which must be between %s and %s.	The IP prefix mask is invalid and is not in the valid range.
403	InvalidVSwitchId.IpPrefixNotEnough	The specified VSwitch does not have enough IP prefixes.	The number of IP prefixes in the specified switch is insufficient.
403	InvalidIp.IpPrefixMaskNotSame	The IP prefixes %s are illegal.The IP prefix mask must be the same.	The IP prefix masks are not the same.
403	EnterpriseGroupLimited.MutliGroupType	The specified instance can't associate security group of different types.	The specified instance cannot be added to both a common security group and an enterprise security group. You can call the DescribeSecurityGroups query to specify the type of security group.
403	InvalidOperation.BoundingEniSlaveQuotaExceed	The number of Slave ENIs exceeds the limit of Bond ENI.	The number of Slave ENIs exceeds the limit of Bond ENI.
403	InvalidIp.IpPrefixNotAvailable	The IP prefix is not available.	The IP prefix is not free.
403	InvalidIp.IpPrefixMaskIllegal	The current IP prefix mask is illegal.	Illegal IP prefix mask.
403	InvalidIp.IpPrefixNotStrict	The IP prefix "%s" must be strict CIDR format.	Invalid IP prefix, not strictly cidr.
403	InvalidOperation.NotSupport	The specified region does not support allocating IPv6 when creating ENI.	The specified region does not support allocating IPv6 when creating ENI.
404	InvalidEcsId.NotFound	%s	The specified instance ID does not exist.
404	InvalidEniId.NotFound	%s
404	InvalidVSwitchId.NotFound	%s	The specified vSwitch does not exist.
404	InvalidSecurityGroupId.NotFound	%s	The specified security group ID does not exist.
404	InvalidResourceGroup.NotFound	The ResourceGroup provided does not exist in our records.	The specified resource group does not exist.
404	InvalidOperation.MaxEniIpv6IpsCountExceeded	The ipv6 address count exceed limitation.
404	InvalidOperation.VSwitchIpv6Disabled	The specified VSwitch does not support Ipv6 feature.	The specified VSwitch does not support IPv6.
404	InvalidOperation.EnableIpv6Failed	The specified VSwitch does not support Ipv6 feature.
404	InvalidOperation.AddressAlreadyAllocated	The specified ipv6 has been already allocated.
404	InvalidOperation.AddressNotInVSwitchCidr	The specified ipv6 does not match VSwitch cidr scope.
404	InvalidOperation.SlaveEniMustHaveBondingEni	Ensure you create the corresponding Bond ENI before creating Slave ENI.	You must create a Bond network card before creating a Slave network card.
404	InvalidOperation.EniTrafficModeNotSupportIpv6	The High Performance(RDMA) traffic mode does not support IPv6.	ENIs that use the RDMA communication mode do not support IPv6.
404	InvalidOperation.VSwitchCidrReservationNotExist	The specified VSwitch does not have CIDR reservation.	The specified switch does not have a reserved segment available.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.