All Products
Search
Document Center

Security Center:ListDataSources

Last Updated:Dec 10, 2025

Lists data sources.

Operation description

Notifications are subject to frequency and time limits. A maximum of two notifications are sent to each user per day, and only between 08:00 and 20:00.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:ListDataSources

list

*DataSource

acs:yundun-sas::{#accountId}:datasource/*

None

None

Request parameters

Parameter

Type

Required

Description

Example

RegionId

string

No

The region where the Data Management Center of your threat analysis feature is located. Select a region based on the location of your assets. Valid values:

  • cn-hangzhou: Your assets are in the Chinese mainland.

  • ap-southeast-1: Your assets are in a region outside China.

cn-hangzhou

Lang

string

No

The language of the response. Valid values:

  • zh (default): Chinese.

  • en: English.

zh

RoleFor

integer

No

The user ID of the member. You can use this parameter to switch the perspective to a member.

173326*******

DataSourceIds

array

No

The IDs of the data sources.

string

No

The ID of the data source.

alibaba_cloud_waf_alert_log_173326*******,alibaba_cloud_waf_flow_log_173326*******

DataSourceName

string

No

The name of the data source.

alibaba_cloud_waf_alert_log

DataSourceType

string

No

The type of the data source. Valid values:

  • preset

  • custom

custom

LogUserIds

array

No

The IDs of the users who can access the data.

integer

No

The ID of the user who can access the data.

173326*******

LogRegionId

string

No

The ID of the log storage region.

cn-hangzhou

LogProjectName

string

No

The name of the Simple Log Service project.

aliyun-cloudsiem-data-173326*******-cn-hangzhou

LogStoreName

string

No

The name of the Simple Log Service Logstore.

audit-activity

DataSourceTemplateIds

array

No

The IDs of the data source templates.

string

No

The ID of the data source template.

alibaba_cloud_sas_account_snapshot_log_173326*******

OrderField

string

No

The sorting field.

UpdateTime

Order

string

No

The sorting order. Valid values:

  • desc

  • asc

desc

PageNumber

string

No

The page number.

1

PageSize

string

No

The number of entries per page.

5

MaxResults

integer

No

The maximum number of entries to return for a single request.

50

NextToken

string

No

The token that is used to retrieve the next page of results. Set this parameter to the value of NextToken that is returned in the response to the previous query. Leave this parameter empty for the first query.

AAAAAUqcj6VO4E3ECWIrFczs****

DataSourceFrom

string

No

The source of the data. Valid values:

  • center

  • custom

center

DataSourceStoreStatus

string

No

The status of the Logstore. Valid values:

  • normal

  • abnormal

normal

DataSourceStatus

string

No

The status of the data source. Valid values:

  • unconfigured

  • normal

  • abnormal

unconfigured

Response elements

Element

Type

Description

Example

object

The response body.

RequestId

string

The request ID.

6276D891-*****-55B2-87B9-74D413F7****

DataSources

array<object>

The data sources.

array<object>

The data sources.

CreateTime

integer

The time when the data source was created.

1733269771123

UpdateTime

integer

The time when the data source was last updated.

1733269771123

DataSourceId

string

The ID of the data source.

ds-scpfegri73oyoknbc90c

DataSourceName

string

The name of the data source.

AD_LOG

DataSourceType

string

The type of the data source. Valid values:

  • preset

  • custom

custom

LogUserId

integer

The ID of the user who can access the data.

173326*******

LogRegionId

string

The ID of the log storage region.

cn-hangzhou

LogProjectName

string

The name of the Simple Log Service project.

aliyun-cloudsiem-data-173326*******-cn-hangzhou

DataSourceFrom

string

The source of the data. Valid values:

  • center

  • custom

center

LogStoreName

string

The name of the Simple Log Service Logstore.

audit-activity

DataSourceTemplateId

string

The ID of the data source template.

alibaba_cloud_sas_account_snapshot_log_173326*******

DataSourceStores

array<object>

The list of Logstores.

object

The Logstore.

DataSourceStoreId

string

The ID of the log storage.

di_xxxx_source_1

DataSourceStoreStatus

string

The status of the log storage. Valid values:

  • normal

  • abnormal

normal

DataSourceStoreFrom

string

The source of the data. Valid values:

  • center

  • custom

center

LogRegionId

string

The ID of the log storage region.

cn-hangzhou

LogProjectName

string

The name of the Simple Log Service project.

aliyun-cloudsiem-data-173326*******-cn-hangzhou

LogStoreName

string

The name of the Simple Log Service Logstore.

audit-activity

CreateTime

integer

The time when the log storage was created.

1733269771123

UpdateTime

integer

The time when the log storage was last updated.

1733269771123

CheckTime

integer

The time when the check was performed.

1733269771123

DataSourceStoreStatusCode

string

The status code of the log storage.

LogStoreNotExist

DataSourceRecognizer

string

The data source recognizer.

alibaba_cloud_sas_account_snapshot

DataSourceRecognizeEnabled

boolean

Indicates whether new Logstores are automatically discovered.

true

DataSourceReferences

array<object>

The list of data ingestion IDs that are associated with the data source.

object

The data ingestion ID that is associated with the data source.

DataIngestionId

string

The data ingestion ID.

alibaba_cloud_sas_account_snapshot_log_173326*******

DataSourceStatus

string

The status of the data source. Valid values:

  • unconfigured

  • normal

  • abnormal

unconfigured

PageNumber

integer

The page number.

1

PageSize

integer

The number of entries per page.

1

TotalCount

integer

The total number of entries returned.

2

TotalPage

integer

The total number of pages.

1

MaxResults

integer

The maximum number of entries returned on each page.

50

NextToken

string

The token that is used to retrieve the next page of results. If a value is returned, it indicates that not all results have been returned. You can use this token in the next query to continue retrieving results.

AAAAAUqcj6VO4E3ECWIrFczs****

Examples

Success response

JSON format

{
  "RequestId": "6276D891-*****-55B2-87B9-74D413F7****",
  "DataSources": [
    {
      "CreateTime": 1733269771123,
      "UpdateTime": 1733269771123,
      "DataSourceId": "ds-scpfegri73oyoknbc90c",
      "DataSourceName": "AD_LOG",
      "DataSourceType": "custom",
      "LogUserId": 0,
      "LogRegionId": "cn-hangzhou",
      "LogProjectName": "aliyun-cloudsiem-data-173326*******-cn-hangzhou",
      "DataSourceFrom": "center",
      "LogStoreName": "audit-activity",
      "DataSourceTemplateId": "alibaba_cloud_sas_account_snapshot_log_173326*******",
      "DataSourceStores": [
        {
          "DataSourceStoreId": "di_xxxx_source_1",
          "DataSourceStoreStatus": "normal",
          "DataSourceStoreFrom": "center",
          "LogRegionId": "cn-hangzhou",
          "LogProjectName": "aliyun-cloudsiem-data-173326*******-cn-hangzhou",
          "LogStoreName": "audit-activity",
          "CreateTime": 1733269771123,
          "UpdateTime": 1733269771123,
          "CheckTime": 1733269771123,
          "DataSourceStoreStatusCode": "LogStoreNotExist"
        }
      ],
      "DataSourceRecognizer": "alibaba_cloud_sas_account_snapshot",
      "DataSourceRecognizeEnabled": true,
      "DataSourceReferences": [
        {
          "DataIngestionId": "alibaba_cloud_sas_account_snapshot_log_173326*******"
        }
      ],
      "DataSourceStatus": "unconfigured"
    }
  ],
  "PageNumber": 1,
  "PageSize": 1,
  "TotalCount": 2,
  "TotalPage": 1,
  "MaxResults": 50,
  "NextToken": "AAAAAUqcj6VO4E3ECWIrFczs****"
}

Error codes

HTTP status code

Error code

Error message

Description

400

IdempotentParameterMismatch

The request uses the same client token as a previous, but non-identical request. Do not reuse a client token with different requests, unless the requests are identical.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.