All Products
Search
Document Center

NAT Gateway:API overview

Last Updated:Jul 07, 2026

API standards and multilingual preset SDKs

The OpenAPI of this product (Vpc/2016-04-28) uses the RPC signature style. We have encapsulated SDKs for common programming languages for developers. Developers can download the SDK to directly call this product's OpenAPI without worrying about technical details. If the existing SDK does not meet your needs, you can use the signature mechanism for self-signing integration. Since the details of self-signing are very complex, it may take around 5 business days. Therefore, we recommend joining our DingTalk service group (147535001692) and conducting signature integration under expert guidance.

Before using the API, you need to prepare your identity account and access key (AccessKey) to effectively access the API through client tools (such as SDK and CLI). For details, see Obtain an AccessKey.

Custom signature scenarios

If your business scenario has special requirements and you need to integrate the API through self-signing, we recommend consulting our technical support team first (DingTalk service group: 147535001692) to obtain professional guidance and ensure efficient integration.

Account and security preparation

Alibaba Cloud accounts have full administrative permissions over all resources. Once an AccessKey is compromised, all associated resources will be at risk of unauthorized access. To ensure security, it is recommended to create a RAM user with only API access permissions and configure its AccessKey, while configuring RAM policies based on the principle of least privilege (PoLP). Use the Alibaba Cloud account only in specific scenarios where Alibaba Cloud account permissions are explicitly required.

NAT

API

Title

Description

NAT gateway NAT gateway
CreateNatGateway CreateNatGateway Createa an enhanced public NAT gateway or a VPC NAT gateway.
ModifyNatGatewayAttribute ModifyNatGatewayAttribute Modifies the name and description of a NAT gateway.
DescribeNatGateways Query created NAT gateways Calls DescribeNatGateways to query the detailed information of NAT gateways that meet specified conditions in a specified region in list form.
GetNatGatewayAttribute GetNatGatewayAttribute Queries the details of a NAT gateway instance.
DescribeNatGatewayAssociateNetworkInterfaces Query elastic network interfaces (ENIs) associated with a VPC NAT gateway Queries the list of elastic network interfaces (ENIs) associated with a VPC NAT gateway when the VPC NAT gateway is referenced as an EPS resource by PrivateLink. This feature is currently unavailable.
SNAT rule SNAT rule
CreateSnatEntry CreateSnatEntry Adds an SNAT entry to an SNAT table.
ModifySnatEntry Modify a specified SNAT entry Modifies a specified SNAT entry.
DescribeSnatTableEntries DescribeSnatTableEntries Queries SNAT entries.
DNAT rule DNAT rule
CreateForwardEntry CreateForwardEntry Adds a DNAT entry to a DNAT table.
ModifyForwardEntry Modify a specified DNAT entry Modifies a specified DNAT entry.
FullNAT rule FullNAT rule
CreateFullNatEntry CreateFullNatEntry Adds a FULLNAT entry to the FULLNAT table.
ModifyFullNatEntryAttribute ModifyFullNatEntryAttribute Modifies a FULLNAT entry.
ListFullNatEntries ListFullNatEntries Queries FULLNAT entries.
NAT IP management NAT IP management
NatIp NatIp
CreateNatIp Create NAT IP address Creates a NAT IP address for a VPC NAT gateway instance.
DeleteNatIp Delete a NAT IP address Deletes a NAT IP address.
ListNatIps ListNatIps Queries the IP addresses on a NAT gateway.
NatIpCidr NatIpCidr
ModifyNatIpCidrAttribute ModifyNatIpCidrAttribute Modifies the name and description of a NAT CIDR block.
ListNatIpCidrs ListNatIpCidrs Queries the CIDR blocks of a specified NAT gateway.