| 409 | AccountTypeOrStatusMismatch | You cannot perform the action on the member account. | You cannot perform the action on the member account. | diagnosis |
| 409 | DeleteConflict.Folder.Account | This folder has accounts. | Failed to delete the resource directory because one or more sub-directories exist in the resource directory. We recommend that you first remove these sub-directories. | diagnosis |
| 409 | DeleteConflict.Folder.SubFolder | This folder has sub folders. | Failed to delete the folder because one or more sub-folders exist in the folder. We recommend that you first remove the sub-folders. | diagnosis |
| 409 | DeleteConflict.Policy.Group | The policy cannot be attached to any group when you delete it. | The policy cannot be attached to any group when you delete it. | diagnosis |
| 409 | DeleteConflict.Policy.Role | The policy cannot be attached to any role when you delete it. | The policy cannot be attached to any role when you delete it. | diagnosis |
| 409 | DeleteConflict.Policy.User | Before deleting the policy, it may not be attached to any user. | The policy must not be attached to any user when you delete it. | diagnosis |
| 409 | DeleteConflict.Policy.Version | You must delete all non-default versions before you delete the policy. | You must delete all non-default versions before you delete the policy. | diagnosis |
| 409 | DeleteConflict.Policy.Version.Default | You cannot delete the default policy version. | You cannot delete the default policy version. | diagnosis |
| 409 | DeleteConflict.ResourceDirectory.Account | Failed to delete the resource directory because one or more member accounts exist. We recommend that you first remove these member accounts. | One or more members exist in the resource directory. Remove the members first. | diagnosis |
| 409 | DeleteConflict.ResourceGroup.Resource | Failed to delete the resource group because one or more cloud resources exist in the resource group. Try again later after you release the cloud resources. | Failed to delete the resource group because one or more cloud resources exist in the resource group. Try again later after you release the cloud resources. | diagnosis |
| 409 | DeleteConflict.ResourceGroup.Status | You cannot perform an operation on a resource group that is being created or deleted. | You cannot perform an operation on a resource group that is being created or deleted. | diagnosis |
| 409 | DeleteConflict.Role.Policy | The role cannot have any attached policies when you delete it. | The role cannot have any attached policies when you delete it. | diagnosis |
| 409 | EnterpriseInvoiceTitleError | The invoice title of the specified account is invalid. You must specify a valid invoice title. | The invoice title of the specified account is invalid. You must specify a valid invoice title. | diagnosis |
| 409 | EnterpriseNameMismatch | Your account does not have the same enterpriseName as the master account. | The specified enterprise name of the current account does not match the enterprise name of the master account. | diagnosis |
| 409 | EnterpriseRealNameVerificationError | The specified account does not pass enterprise real-name verification. We recommend you first complete enterprise real-name verification for the account. | The specified account does not pass enterprise real-name verification. We recommend you first complete enterprise real-name verification for the account. | diagnosis |
| 409 | EntityAlreadyExists.Handshake | Handshakes with the same target entity already exist. | - | diagnosis |
| 409 | EntityAlreadyExists.Policy | The policy already exists. | The policy already exists. | diagnosis |
| 409 | EntityAlreadyExists.ResourceDirectory | The resource directory for the account is already enabled. We recommend that you do not enable the resource directory again. | The resource directory for the account is already enabled. We recommend that you do not enable the resource directory again. | diagnosis |
| 409 | EntityAlreadyExists.ResourceDirectory.Account | The email address that the system generates when you create a member account already exists. Try again later. | The email address that the system generates when you create a member account already exists. Try again later. | diagnosis |
| 409 | EntityAlreadyExists.ResourceGroup | The specified name of the resource group already exists. You must specify a valid name. | The specified name of the resource group already exists. You must specify a valid name. | diagnosis |
| 409 | EntityAlreadyExists.Role | The role already exists. | The role already exists. | diagnosis |
| 409 | EntityAlreadyExists.Role.Policy | This policy is already attached to the role. | This policy is already attached to the role. | diagnosis |
| 409 | EntityAlreadyExists.User.Policy | This policy is already attached to the user. | This policy is already attached to the user. | diagnosis |
| 404 | EntityNotExist.Group.Policy | This policy is not attached to the group. | This policy is not attached to the group. | diagnosis |
| 404 | EntityNotExist.Policy | The policy does not exist. | The policy does not exist. | diagnosis |
| 404 | EntityNotExist.Policy.Version | The policy version does not exist. | The policy version does not exist. | diagnosis |
| 404 | EntityNotExist.Role | The role does not exist. | The role does not exist. | diagnosis |
| 404 | EntityNotExist.Role.Policy | This policy is not attached to the role. | This policy is not attached to the role. | diagnosis |
| 404 | EntityNotExist.User.Policy | This policy is not attached to the user. | This policy is not attached to the user. | diagnosis |
| 404 | EntityNotExists.Account | This resource directory account does not exist. | The specified member account does not exist. We recommend that you first create a member account. | diagnosis |
| 404 | EntityNotExists.AccountRecord | This resource directory account recordId does not exist. | The specified entry ID does not exist or is removed. | diagnosis |
| 404 | EntityNotExists.Folder | The resource directory folder does not exist. | The specified resource directory does not exist. We recommend that you first create a resource directory. | diagnosis |
| 404 | EntityNotExists.Handshake | The specified handshake does not exist. | - | diagnosis |
| 404 | EntityNotExists.Quota | The quota does not exist. | - | diagnosis |
| 404 | EntityNotExists.ResourceDirectory | The resource directory for the account is not enabled. We recommend that you first enable the resource directory for the account. | The resource directory for the account is not enabled. We recommend that you first enable the resource directory for the account. | diagnosis |
| 404 | EntityNotExists.ResourceGroup | The specified resource group does not exist. You must first create a resource group. | The specified resource group does not exist. You must first create a resource group. | diagnosis |
| 409 | HandshakeStatusMismatch | The invitation is invalid. | The invitation is invalid. | diagnosis |
| 404 | Inactive | Resource Management or Resource Access Management is not activated under the account. We recommend that you first activate the two services. | Resource Management or Resource Access Management is not activated under the account. We recommend that you first activate the two services. | diagnosis |
| 409 | Invalid.AccountType | The specified profile type of account is invalid. | The specified AccountType is invalid. | diagnosis |
| 409 | Invalid.EnterpriseName | The specified enterprise name of account is empty. | - | diagnosis |
| 409 | Invalid.PayRelation | Failed to create a member. The specified billing account is unavailable. Please change to another billing account and try again. | Failed to create a member. The specified billing account is unavailable. Please change to another billing account and try again. | diagnosis |
| 409 | Invalid.ResourceGroup.Status | You cannot perform an operation on a resource group that is being created or deleted. | You cannot perform an operation on a resource group that is being created or deleted. | diagnosis |
| 400 | InvalidParameter | The specified parameter is invalid. | The specified parameter is invalid. | diagnosis |
| 400 | InvalidParameter.Account.DisplayName | The DisplayName of account is invalid. | The display name is invalid. The display name can contain only letters, digits, underscores (_), periods (.), and hyphens (-). | diagnosis |
| 409 | InvalidParameter.Account.DisplayName.AlreadyUsed | The displayname of account has been used. | The display name of account has been used. You must specify a valid display name. | diagnosis |
| 400 | InvalidParameter.Account.DisplayName.Length | The DisplayName of the account exceeds the length limit. | The display name of account exceeds the length limit. The name must be 2 to 50 characters in length. | diagnosis |
| 400 | InvalidParameter.AccountId | The AccountId is invalid. | The specified member account ID is invalid. You must specify a valid 16-digit alphanumeric account ID. | diagnosis |
| 400 | InvalidParameter.AssumeRolePolicyDocument.Length | The maximum length of the trust policy document of the role is exceeded. | The maximum length of the trust policy document of the role is exceeded. | diagnosis |
| 400 | InvalidParameter.ChildId | The ChildId is invalid. | The specified sub-directory ID is invalid. The ID must either be a string that starts with r- of 6 characters in length or a string that starts with fd- of 10 character in length. The ID can contain letters and digits. | diagnosis |
| 400 | InvalidParameter.Comments.Length | The maximum length of Note is exceeded. | The maximum length of Note is exceeded. | diagnosis |
| 400 | InvalidParameter.Description.Length | The maximum length of the description is exceeded. It must not exceed 1024 characters. | The maximum length of the description is exceeded. It must not exceed 1024 characters. | diagnosis |
| 400 | InvalidParameter.DestinationFolderId | The DestinationFolderId is invalid. | The specified resource directory ID is invalid. The ID must either be a string that starts with r- of 6 characters in length or a string that starts with fd- of 10 character in length. The ID can contain letters and digits. | diagnosis |
| 400 | InvalidParameter.DisplayName.Length | The maximum length of DisplayName is exceeded. | The maximum length of DisplayName is exceeded. | diagnosis |
| 400 | InvalidParameter.Email | The Email is invalid. | The format of the specified email address is invalid. | diagnosis |
| 409 | InvalidParameter.Email.AlreadyUsed | The email has been used. | The specified email address already exists. You must specify a valid email address. | diagnosis |
| 400 | InvalidParameter.Folder.Name | The Name of folder is invalid. | The Name of folder is invalid. The name must only contain letters, digits, underscores (_), periods (.), and hyphens (-). | diagnosis |
| 400 | InvalidParameter.Folder.Name.AlreadyUsed | The folder name has been used. | - | diagnosis |
| 400 | InvalidParameter.Folder.Name.Length | The Name of folder exceeds the length limit. | The length of the specified folder name exceeds the limit. The name must be 1 to 24 characters in length. | diagnosis |
| 400 | InvalidParameter.FolderId | The FolderId is invalid. | The specified ID of the parent resource directory is invalid. The ID must either be a string that starts with r- of 6 characters in length or a string that starts with fd- of 10 character in length. The ID can contain letters and digits. | diagnosis |
| 400 | InvalidParameter.HandshakeId | The HandshakeId is invalid. | - | diagnosis |
| 400 | InvalidParameter.MaxResults | The MaxResults is invalid. | The MaxResults is invalid. | diagnosis |
| 400 | InvalidParameter.Name.InvalidChars | The specified resource group name is invalid. The name must be 1 to 30 characters in length and can contain letters and digits. | - | diagnosis |
| 400 | InvalidParameter.Name.Length | The maximum length of Name is exceeded. | The maximum length of Name is exceeded. | diagnosis |
| 400 | InvalidParameter.NewAssumeRolePolicyDocument.Length | The maximum length of the new trust policy document of the role is exceeded. | The maximum length of the new trust policy document of the role is exceeded. | diagnosis |
| 400 | InvalidParameter.NewComments.Length | The maximum length of Note is exceeded. | The maximum length of Note is exceeded. | diagnosis |
| 400 | InvalidParameter.NewDisplayName.Length | The maximum length of NewDisplayName is exceeded. | The maximum length of NewDisplayName is exceeded. | diagnosis |
| 400 | InvalidParameter.NextToken | The NextToken is invalid. | The NextToken is invalid. | diagnosis |
| 400 | InvalidParameter.NextToken.Length | The maximum length of NextToken (256 characters) is exceeded. | The maximum length of NextToken (256 characters) is exceeded. | diagnosis |
| 400 | InvalidParameter.Note | The Note is invalid. | - | diagnosis |
| 400 | InvalidParameter.Note.Length | The maximum length of Note (256 characters) is exceeded. | - | diagnosis |
| 400 | InvalidParameter.ParentFolderId | The ParentFolderId is invalid. | The specified ID of the parent folder is invalid. The ID must either be a 6-character string that starts with r- or a 10-character string that starts with fd-. The ID can contain letters and digits. | diagnosis |
| 400 | InvalidParameter.Payer | The specified Payer is invalid. | The specified settlement account is invalid. You must specify a valid settlement account. | diagnosis |
| 400 | InvalidParameter.PolicyDocument.Length | The maximum length of the policy document is exceeded. It must not exceed 2048 characters. | - | diagnosis |
| 400 | InvalidParameter.PolicyName.InvalidChars | The policy name contains invalid characters. It must only contain upper or lower case letters, numbers, and dash (-). | The policy name contains invalid characters. It must only contain upper or lower case letters, numbers, and dash (-). | diagnosis |
| 400 | InvalidParameter.PolicyName.Length | The length of the policy name is invalid. It must be 1 to 64 characters in length. | - | diagnosis |
| 400 | InvalidParameter.PolicyType | The specified policy type is invalid. | The specified policy type is invalid. | diagnosis |
| 400 | InvalidParameter.PrincipalName.Empty | You must specify PrincipalName. | You must specify PrincipalName. | diagnosis |
| 400 | InvalidParameter.QuotaName | The QuotaName is invalid. | - | diagnosis |
| 400 | InvalidParameter.QuotaValue | The QuotaValue is invalid. | - | diagnosis |
| 400 | InvalidParameter.ResourceId | The ResourceId is invalid. | The ResourceId is invalid. | diagnosis |
| 400 | InvalidParameter.RoleName.InvalidChars | The specified role name contains invalid characters. | The specified role name contains invalid characters. | diagnosis |
| 400 | InvalidParameter.RoleName.Length | The maximum length of the role name is exceeded. | The maximum length of the role name is exceeded. | diagnosis |
| 400 | InvalidParameter.RoleName.Prefix | Role name prefix AliyunServiceRoleFor can only be used for Service Linked Roles. | Role name prefix AliyunServiceRoleFor can only be used for Service Linked Roles. | diagnosis |
| 400 | InvalidParameter.Status | The specified Status is invalid. | The specified Status is invalid. | diagnosis |
| 400 | InvalidParameter.Target | The Target is invalid. | The Target is invalid. | diagnosis |
| 400 | InvalidParameter.TargetEntity | The TargetEntity is invalid. | - | diagnosis |
| 400 | InvalidParameter.Targets | The Targets is invalid. | The Targets is invalid. | diagnosis |
| 400 | InvalidParameter.Targets.Duplicate | The Targets contains duplicate values. | The Targets contains duplicate values. | diagnosis |
| 400 | InvalidParameter.Targets.Length | The maximum number of Targets (5) is exceeded. | The maximum number of Targets (5) is exceeded. | diagnosis |
| 400 | InvalidParameter.TargetType | The TargetType is invalid. | - | diagnosis |
| 400 | InvalidParameter.VersionId.Format | The specified version ID is invalid. | The specified version ID is invalid. | diagnosis |
| 400 | InvalidTarget | The target you are sharing does not exist in your resource directory. | The target you are sharing does not exist in your resource directory. | diagnosis |
| 409 | LatestActionNotFinished | The request is being processed. | Processing… | diagnosis |
| 409 | LegalEntityMismatch | Your account does not have the same legal entity as the master account. | - | diagnosis |
| 409 | LimitExceeded.Account | The maximum number of member accounts in a resource directory exceeds the limit. | The maximum number of member accounts in a resource directory exceeds the limit. | diagnosis |
| 409 | LimitExceeded.Folder.Depth | The folder depth exceeds the limit of 5. | The depth of folder levels exceeds the limit. You can create a maximum of 5 levels, excluding the root directory. | diagnosis |
| 409 | LimitExceeded.Frequency | The frequency of request exceeds limit. | The frequency of requests is high. Try again later. | diagnosis |
| 409 | LimitExceeded.Group.Policy | The maximum number of policies attached to this group is exceeded. | The maximum number of policies attached to this group is exceeded. | diagnosis |
| 409 | LimitExceeded.InvitationRate | The number of invitations sent exceeds the limit. | - | diagnosis |
| 409 | LimitExceeded.PageSize | The pagesize exceeds limit of 10. | The maximum number of pages that are included in a list of member accounts exceeds the limit. A list of member accounts can only contain a maximum of 10 pages. | diagnosis |
| 409 | LimitExceeded.Policy | The maximum number of policies is exceeded. | The maximum number of policies attached to this user is exceeded. | diagnosis |
| 409 | LimitExceeded.Policy.Version | The maximum number of policy versions is exceeded. | The maximum number of policy versions is exceeded. | diagnosis |
| 409 | LimitExceeded.ResourceGroup | Failed to create the resource group because the maximum number of resource groups is exceeded. You can create a maximum of 30 resource groups. | - | diagnosis |
| 409 | LimitExceeded.Role | The maximum number of roles is exceeded. | The maximum number of roles is exceeded. | diagnosis |
| 409 | LimitExceeded.Role.Policy | The maximum number of policies attached to this role is exceeded. | The maximum number of policies attached to this role is exceeded. | diagnosis |
| 409 | LimitExceeded.User.Policy | The maximum number of policies attached to this user is exceeded. | The maximum number of policies attached to this user is exceeded. | diagnosis |
| 409 | MalformedPolicyDocument | The policy format is invalid. | The policy format is invalid. | diagnosis |
| 400 | MissingParameter.Account.DisplayName | You must specify DisplayName. | You must specify the display name. | diagnosis |
| 400 | MissingParameter.AccountId | You must specify AccountId. | - | diagnosis |
| 400 | MissingParameter.ChildId | You must specify ChildId. | The specified sub-folder ID is invalid. You must specify a valid sub-folder ID. | diagnosis |
| 400 | MissingParameter.DestinationFolderId | You must specify DestinationFolderId. | The specified resource directory ID is invalid. You must specify a valid resource directory ID. | diagnosis |
| 400 | MissingParameter.Email | You must specify Email. | The specified email address is invalid. You must specify a valid email address. | diagnosis |
| 400 | MissingParameter.Folder.Name | You must specify the resource folder name. | The specified name of the resource directory is invalid. You must specify a valid resource directory name. | diagnosis |
| 400 | MissingParameter.FolderId | You must specify FolderId. | The specified folder ID is invalid. You must specify a valid folder ID. | diagnosis |
| 400 | MissingParameter.HandshakeId | You must specify HandshakeId. | - | diagnosis |
| 400 | MissingParameter.Id | You must specify Id. | - | diagnosis |
| 400 | MissingParameter.Name | You must specify Name. | You must specify Name. | diagnosis |
| 400 | MissingParameter.Note | You must specify Note. | - | diagnosis |
| 400 | MissingParameter.QuotaName | You must specify QuotaName. | - | diagnosis |
| 400 | MissingParameter.QuotaValue | You must specify QuotaValue. | - | diagnosis |
| 400 | MissingParameter.RecordId | You must specify RecordId. | The specified entry ID is invalid. You must specify a valid entry ID. | diagnosis |
| 400 | MissingParameter.ResourceGroupId | Failed to create the resource group because the specified resource group ID is invalid. You must specify a valid resource group ID. | Failed to create the resource group because the specified resource group ID is invalid. You must specify a valid resource group ID. | diagnosis |
| 400 | MissingParameter.ResourceOwner | You must specify ResourceOwner. | You must specify ResourceOwner. | diagnosis |
| 400 | MissingParameter.TargetEntity | You must specify TargetEntity. | - | diagnosis |
| 400 | MissingParameter.TargetType | You must specify TargetType. | - | diagnosis |
| 403 | NoPermission | You are not authorized to perform the operation. | You are not authorized to perform the operation. | diagnosis |
| 409 | NotSupport.Account | You can only perform this operation for a sub-user. | You can only perform this operation for a sub-user. | diagnosis |
| 409 | NotSupport.Account.Site | The caller is not a China site account, which is not supported. | The specified account does not reside in the current region. You must specify a valid account. | diagnosis |
| 409 | NotSupport.AccountInAnotherResourceDirectory | The specified account is an Alibaba Cloud account or already exists in another resource directory. | - | diagnosis |
| 409 | NotSupport.Bid | End users from the International site cannot visit the BID. | End users from the International site cannot visit the BID. | diagnosis |
| 409 | NotSupport.CallerType | Your account type doe not support the operation. | - | diagnosis |
| 409 | NotSupport.PayerAccountInAnotherResourceDirectory | The specified settlement account does not exist in the resource directory. You must specify a valid settlement account. | - | diagnosis |
| 409 | NotSupport.ServiceLinkedRole | Cannot perform the operation on this service linked role. | You cannot operate the Service Linked Role. | diagnosis |
| 409 | OperationUnsupported.AccountTypeOrStatusMismatch.ResendPromoteResourceAccountEmail | The account type or status does not match when resending resource account promotion email. | You cannot perform the action on the member account. | diagnosis |
| 409 | QuotaExceeded.Account.Count | The number of resource directory accounts exceeds the quota. | The maximum number of member accounts in a resource directory exceeds the limit. You can only create a maximum of 20 members accounts in each resource directory. | diagnosis |
| 404 | QuotaExceeded.CreateAccount.Count | The number of accounts that a master account can create exceeds the quota. | The maximum number of member accounts that the main account can create exceeds the limit. Each main account can only create a maximum of 20 member accounts. | diagnosis |
| 409 | QuotaExceeded.Folder.Count | The number of folders exceeds the quota. | The number of folders exceeds the quota. | diagnosis |
| 404 | ResourceDirectoryNotInUse | The specified account is not an Alibaba Cloud account or a member account of the resource directory. | The specified account is not an Alibaba Cloud account or a member account of the resource directory. | diagnosis |
| 404 | SpecifiedResourceDirectoryNotExists | The specified resource directory does not exist. You must specify a valid resource directory. | The specified resource directory does not exist. You must specify a valid resource directory. | diagnosis |
| 409 | UnsupportedOperation.UpdateDefaultResourceGroup | You cannot change the name of the default resource group. | You cannot change the name of the default resource group. | diagnosis |
| 404 | EntityNotExist.ServiceLinkedRole.DeletionTask | The deletion task for the given ID does not exist. | The deletion task for the given ID does not exist. | diagnosis |
| 400 | InvalidParameter.DeletionTaskId.Length | The length of DeletionTaskId must be between 26 and 255 characters. | The length of DeletionTaskId must be between 26 and 255 characters. | diagnosis |
| 404 | EntityNotExist.ServiceLinkedRoleTemplate | The Service Linked Role template does not exist. | The Service Linked Role template does not exist. | diagnosis |
| 404 | EntityNotExist.Service | The service does not exist. | The service does not exist. | diagnosis |
| 400 | InvalidParameter.DeletionTaskId | The DeletionTaskId is invalid. | The DeletionTaskId is invalid. | diagnosis |
| 400 | InvalidParameter.CustomSuffix.InvalidChars | The parameter CustomSuffix contains invalid characters. | The parameter CustomSuffix contains invalid characters. | diagnosis |
| 400 | InvalidParameter.Description.NotAllowed | Custom description is not allowed for default service linked role. | - | diagnosis |
| 400 | InvalidParameter.NewMaxSessionDuration | The NewMaxSessionDuration is invalid. | The NewMaxSessionDuration is invalid. | diagnosis |
| 400 | InvalidParameter.MaxSessionDuration | The parameter MaxSessionDuration is invalid. | The parameter MaxSessionDuration is invalid. | diagnosis |
| 404 | EntityNotExist.ServiceLinkedRole | This role exists but is not a Service Linked Role. | This role exists but is not a Service Linked Role. | diagnosis |
| 400 | InvalidParameter.Language | The parameter Language is invalid. | The parameter Language is invalid. | diagnosis |
| 400 | InvalidParameter.CustomSuffix.Length | The maximum length of the parameter CustomSuffix is exceeded. | The maximum length of the parameter CustomSuffix is exceeded. | diagnosis |
| 400 | NotSupport.Policy | The policy can only be attached to a Service Linked Role. | The policy can only be attached to a Service Linked Role. | diagnosis |
| 400 | InvalidParameter.CustomSuffix.NotAllowed | Custom suffix is not allowed for this Service Linked Role. | Custom suffix is not allowed for this Service Linked Role. | diagnosis |
| 409 | NoRealNameAuthentication | The account invited has not passed real-name authentication. | The account invited has not passed real-name authentication. | diagnosis |
| 409 | MissingAccountRealName | The name of the invited account is not specified. | The name of the invited account is not specified. | diagnosis |
| 409 | LimitExceeded.SameTargetInvitationRate | The number of invitations sent to the same account exceeds the limit. | The number of invitations sent to the same account exceeds the limit. | diagnosis |
| 409 | InvalidControlPolicyEnablementStatus | The control policy enablement status is not valid to perform this operation. | The control policy enablement status is not valid to perform this operation. | diagnosis |
| 400 | MissingParameter.PolicyId | You must specify PolicyId. | You must specify PolicyId. | diagnosis |
| 400 | InvalidParameter.PolicyId | The parameter PolicyId is invalid. | The parameter PolicyId is invalid. | diagnosis |
| 404 | EntityNotExists.ControlPolicy | The specified control policy does not exist. | The specified control policy does not exist. | diagnosis |
| 409 | LimitExceeded.ControlPolicy | The maximum number of policies is exceeded. | The maximum number of policies is exceeded. | diagnosis |
| 400 | MissingParameter.PolicyName | You must specify PolicyName. | You must specify PolicyName. | diagnosis |
| 409 | EntityAlreadyExists.ControlPolicy | The control policy already exists. | The control policy already exists. | diagnosis |
| 400 | MissingParameter.EffectScope | You must specify EffectScope. | You must specify EffectScope. | diagnosis |
| 400 | InvalidParameter.EffectScope | The parameter EffectScope is invalid. | The parameter EffectScope is invalid. | diagnosis |
| 400 | MissingParameter.PolicyDocument | You must specify PolicyDocument. | You must specify PolicyDocument. | diagnosis |
| 400 | InvalidParameter.NewPolicyName.Length | The maximum length of the parameter NewPolicyName is exceeded. | The maximum length of the parameter NewPolicyName is exceeded. | diagnosis |
| 400 | InvalidParameter.NewPolicyName.InvalidChars | The parameter NewPolicyName contains invalid characters. | The parameter NewPolicyName contains invalid characters. | diagnosis |
| 400 | InvalidParameter.NewDescription.Length | The maximum length of the parameter NewDescription is exceeded. | The maximum length of the parameter NewDescription is exceeded. | diagnosis |
| 400 | InvalidParameter.NewPolicyDocument.Length | The maximum length of the parameter NewPolicyDocument is exceeded. | - | diagnosis |
| 409 | ControlPolicyNotEnabled | The control policy has not been enabled. | The control policy has not been enabled. | diagnosis |
| 409 | EntityAlreadyExists.ControlPolicyAttachment | The specified control policy has already been attached to the specified target. | The specified control policy has already been attached to the specified target. | diagnosis |
| 409 | LimitExceeded.ControlPolicyAttachment | The maximum number of control policies on the specified target is exceeded. | The maximum number of control policies on the specified target is exceeded. | diagnosis |
| 400 | MissingParameter.TargetId | You must specify TargetId. | You must specify TargetId. | diagnosis |
| 400 | InvalidParameter.TargetId | The parameter TargetId is invalid. | The parameter TargetId is invalid. | diagnosis |
| 404 | EntityNotExists.Target | The specified target does not exist in the resource directory. | The specified target does not exist in the resource directory. | diagnosis |
| 409 | DeleteConflict.AttachedPolicy | The control policy has been attached and cannot be deleted. | The control policy has been attached and cannot be deleted. | diagnosis |
| 409 | DeleteConflict.SystemControlPolicy | The control policy is a system policy and cannot be deleted. | The control policy is a system policy and cannot be deleted. | diagnosis |
| 409 | LastControlPolicyOnTarget | The last control policy on a target cannot be detached. | The last control policy on a target cannot be detached. | diagnosis |
| 409 | CanNotBeDetached.FullAliyunAccess | The system policy FullAliyunAccess cannot be detached. | The system policy FullAliyunAccess cannot be detached. | diagnosis |
| 404 | EntityNotExists.ControlPolicyAttachment | The specified control policy on the specified target does not exist. | The specified control policy on the specified target does not exist. | diagnosis |
| 409 | Throttling.EnableControlPolicy | The operation is too frequent. Please try again later. | The operation is too frequent. Please try again later. | diagnosis |
| 429 | ConcurrentCallNotSupported | The operation conflicts with other operations. Please try again later. | The operation conflicts with other operations. Please try again later. | diagnosis |
| 400 | NotSupport.PolicyDocument.NotAction | The specified NotAction is not supported. | The specified NotAction is not supported. | diagnosis |
| 400 | InvalidParameter.PolicyDocument.Effect | The specified Effect is invalid. | The specified Effect is invalid. | diagnosis |
| 400 | InvalidParameter.PolicyDocument.Action | The specified Action is invalid. | The specified Action is invalid. | diagnosis |
| 400 | InvalidParameter.PolicyDocument.PrincipalARNValue | The condition value of PrincipalARN is invalid. | The condition value of PrincipalARN is invalid. | diagnosis |