DescribeAutomateResponseConfigFeature - Security Center - Alibaba Cloud Documentation Center

Retrieves the configurable fields and operators for automated response rules.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:DescribeAutomateResponseConfigFeature

get

*All Resource

*

None

Request parameters

Parameter	Type	Required	Description	Example
AutoResponseType	string	No	The type of automated response. Valid values: event: event alert: alert	event
RoleType	integer	No	The type of view. Valid values: 0: the view of the current Alibaba Cloud account. 1: the view of all accounts that are managed by the administrator account.	1
RoleFor	integer	No	The user ID of the member. An administrator can use this parameter to switch to the perspective of the member.	113091674488****
RegionId	string	No	The region where the Data Management center of threat analysis is deployed. Select a region based on the location of your assets. Valid values: cn-hangzhou: Assets in the Chinese mainland and Hong Kong (China). ap-southeast-1: Assets outside China.	cn-hangzhou

Response elements

Element	Type	Description	Example
	object	BaseResponse<List>
Data	array<object>	The returned data.	123456
	object
Feature	string	The name of the condition field for the automated response rule.	alert_desc
DataType	string	The data type of the condition field for the automated response rule.	varchar
SupportOperators	array<object>	The operators that the field supports.
	object
HasRightValue	boolean	Indicates whether a right operand is required. Valid values: true: A right operand is required. false: A right operand is not required.	false
Operator	string	The operator.	<=
OperatorName	string	The display name of the operator.	<=
OperatorDescCn	string	The description of the operator in Chinese.	larger than or equal to
OperatorDescEn	string	The description of the operator in English.	larger than or equal to
SupportDataType	string	The data types that the operator supports. Multiple data types are separated by commas.	varchar
SupportTag	array	The scenarios that the operator supports. Multiple scenarios are separated by commas, such as aggregation. By default, this parameter is empty.	[AGGREGATE]
	string	The supported scenario.	[AGGREGATE]
Index	integer	The position of the operator in the list of operators.	3
RightValueEnums	array<object>	The enumeration of the right operand that corresponds to the field.
	object
Value	string	The enumeration value of the right operand.	serious
ValueMds	string	The Medusa code for the enumeration value of the right operand.	aliyun.siem.automate.feature.alert_level.serious
Success	boolean	Indicates whether the request is successful. Valid values: true: The request is successful. false: The request failed.	true
Code	integer	The status code.	200
Message	string	The returned message.	success
RequestId	string	The request ID.	9AAA9ED9-78F4-5021-86DC-D51C7511****

Examples

Success response

JSON format

{
  "Data": [
    {
      "Feature": "alert_desc",
      "DataType": "varchar",
      "SupportOperators": [
        {
          "HasRightValue": false,
          "Operator": "<=",
          "OperatorName": "<=",
          "OperatorDescCn": "larger than or equal to",
          "OperatorDescEn": "larger than or equal to",
          "SupportDataType": "varchar",
          "SupportTag": [
            "[AGGREGATE]"
          ],
          "Index": 3
        }
      ],
      "RightValueEnums": [
        {
          "Value": "serious",
          "ValueMds": "aliyun.siem.automate.feature.alert_level.serious"
        }
      ]
    }
  ],
  "Success": true,
  "Code": 200,
  "Message": "success",
  "RequestId": "9AAA9ED9-78F4-5021-86DC-D51C7511****"
}

Error codes

HTTP status code	Error code	Error message	Description
500	InternalError	The request processing has failed due to some unknown error.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.