All Products
Search
Document Center

Edge Security Acceleration:BatchModifyDcdnWafRules

Last Updated:Aug 20, 2025

You can call BatchModifyDcdnWafRules to modify WAF mitigation rules in a batch. This operation supports modifying configurations only in the bot management scenario.

Operation description

Note

The call frequency for each user is limited to 20 calls per second.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

dcdn:BatchModifyDcdnWafRules

update

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

PolicyId

integer

Yes

The ID of the mitigation policy.

10000001

RuleConfigs

string

Yes

The configurations of the mitigation rules.

[{"id":135,"type":"web_sdk","status":"on","config":{"mode":"automatic","crossDomain":"example.com"},"action":""},{"id":149,"type":"intelligence_fake_crawler","status":"on","config":{},"action":"deny"}]

Description of RuleConfigs

RuleConfigs is a list of structs. Each struct represents a rule.

  • For more information about the rule content in the struct, see BatchCreateDcdnWafRules.

  • You must pass all rules that belong to the current policy.

  • In each struct, add the mitigation rule ID to specify the rule that you want to modify.

Parameter

Type

Required

Example

Description

id

Long

No

134

The ID of the mitigation rule.

In the bot management scenario:

  • To add a rule: Omit the id parameter or set its value to 0.

  • To modify a rule: Pass the ID of the rule and set the status parameter to "on".

  • To delete a rule: Set the status parameter to "off" in the rule's struct. A rule is also deleted if its ID is not included in the policy.

Response parameters

Parameter

Type

Description

Example

object

RequestId

string

The request ID.

CB1A380B-09F0-41BB-XXXX-72F8FD6DA2FE

Examples

Success response

JSON format

{
  "RequestId": "CB1A380B-09F0-41BB-XXXX-72F8FD6DA2FE"
}

Error codes

HTTP status code

Error code

Error message

Description

400 InvalidParameter The specified parameter is invalid. A parameter is set to an invalid value.
400 Policy.NotExist The specified policy does not exist. The specified protection policy does not exist.
400 Rule.NotExist The specified rule does not exist. The specified rule does not exist in the current context or system configuration. Please verify the existence of the rule identifier and ensure it has been correctly defined or implemented.
400 RuleConfigs.Malformed The specified RuleConfigs format is invalid. The RuleConfigs parameter is in an invalid format.
400 RuleName.AlreadyExists Rule name already exists in specified policy. The specified rule name is already used by another rule.
400 Rule.QuantityOverflow Rules are overflowed quantity in specified policy. The number of rules in the specified policy has already reached the upper limit.
500 InternalError An internal error occurred; please try again later. An internal error occurred. Try again later. If the error persists, submit a ticket.
403 %s.NotSupport The specified resource type %s is not supported. The specified resource type is not supported. To use this type of resource, contact us.
403 %s.OverQuota The quantity of %s exceeds the quota. The number of resources exceeds the quota. If you want to apply for more resources, contact us.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.