All Products
Search

This Product

    Security Center:ChangeSecurityScoreRule

    Document Center

    Security Center:ChangeSecurityScoreRule

    Last Updated:Dec 29, 2025

    Modifies the details of the deduction modules of the security score feature, including custom settings.

    Debugging

    You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

    Authorization information

    There is currently no authorization information disclosed in the API.

    Request parameters

    ParameterTypeRequiredDescriptionExample
    SecurityScoreRuleListarray<object>No

    The information about the old version of the security score rule.

    objectNo

    The details of the security score rule.

    RuleTypestringNo

    The type of the security score rule. Valid values:

    • SS_REINFORCE: issue in key feature configuration
    • SS_ALARM: unhandled alert
    • SS_VUL: unfixed vulnerability
    • SS_HC: baseline risk
    • SS_CLOUD_HC: risk item of configuration assessment
    • SS_AK: risk of AccessKey pair leaks
    		SS_ALARM
    ScoreintegerNo

    The deduction threshold of the deduction module.

    Note Valid values: 0 to 100. The sum of the deduction thresholds for all deduction modules must be equal to 100.
    		5
    SecurityScoreItemListarray<object>No

    The deduction items of the deduction module.

    objectNo

    The deduction item of the deduction module.

    SubRuleTypestringNo

    The deduction item of the deduction module. The following list describes the deduction modules and their deduction items:

    • SS_REINFORCE: issue in key feature configuration

      • XPRESS_INSTALL: Security Center is not authorized.
      • REINFORCE_SUSPICIOUS: The anti-virus feature is disabled.
      • RANSOMWARE: The anti-ransomware policy is disabled.
      • WEB_LOCK: The web tamper proofing feature is disabled.
      • VIRUS_SCHEDULE_SCAN: The periodic virus scan policy is disabled.
      • IMAGE_REPO_SCAN: The container image scan range is not configured.
      • IMAGE_SCAN_TASK: The feature of one-click scan of container images for security risks is not performed.

    • SS_ALARM: unhandled alert

      • ALARM_SERIOUS: An unhandled high-risk alert event is detected.
      • ALARM_SUSPICIOUS: An unhandled medium-risk alarm event is detected.
      • ALARM_REMIND: An unhandled low-risk alarm event is detected.

    • SS_VUL: unfixed vulnerability

      • CMS_UNFIX: An unfixed Web-CMS vulnerability is detected.
      • WIN_UNFIX: An unfixed Windows host vulnerability is detected.
      • CVE_UNFIX: An unfixed Linux host vulnerability is detected.
      • ERM_UNFIX: An unfixed emergency vulnerability is detected.
      • ERM_UNCHECK: An undetected emergency vulnerability exists.

    • SS_HC: baseline risk

      • WEAK_EXPLOIT: Weak passwords are exposed to the Internet.
      • WEAK_PASSWORD: Weak passwords exist.
      • HC_EXPLOIT: The data source may be hacked.
      • HC_OTHER_WARNING: Security configuration risks exist.

    • SS_CLOUD_HC: Cloud platform configuration check item problem.

      • CSPM_CIEM_NOT_PASS: A CIEM check item failed the check.
      • CSPM_RISK_NOT_PASS: A security risk check item failed the check.
      • CSPM_COMPLIANCE_NOT_PASS: A compliance check item failed the check.

    • SS_AK: risk of AccessKey pair leaks

    		ALARM_SERIOUS
    ScoreThresholdintegerNo

    The threshold for the deduction item.

    Note Valid values: 0 to the deduction threshold of the deduction module.
    		10
    ScoreintegerNo

    The penalty point of the deduction item.

    		5
    SecurityScoreCategoryListarray<object>No

    The information about the new version of the security score rule.

    objectNo

    The details of the security score rule.

    CategorystringNo

    The category of the security score rule. Valid values:

    • SS_SAS_HANDLE: security governance.
    • SS_SAS_RESPOND: security response.
    		SS_SAS_HANDLE
    ScoreThresholdintegerNo

    The threshold of deduction for the security score rule type.

    Note Valid values: 0 to 100. The sum of the deduction thresholds for all deduction modules must be equal to 100.
    		20
    SecurityRuleListarray<object>No

    The deduction items of the security score rule.

    objectNo

    The data of the security score rule type.

    RuleTypestringNo

    The deducted module that is supported by the security score feature. The type of the sub-deduction item. Valid values:

    • SS_SAS_WEAK_PW: unhandled weak password risk.
    • SS_SAS_ALARM: unhandled alert in Security Center.
    • SS_SAS_EMG_VUL: unfixed urgent vulnerability.
    • SS_SAS_APP_VUL: unfixed application vulnerability.
    • SS_SAS_SYS_VUL: unfixed system vulnerability.
    • SS_SAS_CLOUD_HC: unhandled cloud security posture management (CSPM) risk.
    • SS_SDDP_DATA_RISK: unhandled data security risk.
    • SS_WAF_API_RISK: unhandled API security risk.
    • SS_DDOS_BH_ASSET: asset on which blackhole filtering is triggered.
    • SS_SAS_AK_LEAK: unhandled AK/SK leak event.
    • SS_PRODUCT_CONNECT: security service not integrated.
    • SS_KEY_CONFIG: key feature configuration.
    • SS_PRODUCT_EXPIRE: service that is about to expire.
    • SS_AI_RISK: AI application risk.
    		SS_REINFORCE
    ScoreintegerNo

    The threshold of deduction for the security score rule type.

    Note Valid values: 0 to the deduction threshold of the deduction module.
    		10
    SecurityScoreItemListarray<object>No

    The sub-deduction items of the security score rule.

    objectNo

    The sub-deduction item of the security score rule.

    SubRuleTypestringNo

    The sub-deduction item of the security score rule.

    		SSI_KEY_CONFIG
    ScoreintegerNo

    The penalty point of the deduction item.

    		2
    ScoreThresholdintegerNo

    The threshold for the deduction item.

    Note Valid values: 0 to the deduction threshold of the deduction module.
    		5
    ResetSecurityScoreRulebooleanNo

    Specifies whether to reset to the system default rule. Valid values:

    • true: yes
    • false: no
    		false
    CalTypestringNo

    The old or new version of the security score rule. If you set this parameter to home_security_score, the new version of the security score rule is changed. Otherwise, the old version of the security score rule is changed by default.

    		home_security_score

    Response parameters

    ParameterTypeDescriptionExample
    object
    RequestIdstring

    The request ID.

    		23AD0BD2-8771-5647-819E-6BA51E21****

    Examples

    Sample success responses

    JSONformat

    {
  "RequestId": "23AD0BD2-8771-5647-819E-6BA51E21****"
}

    Error codes

    HTTP status codeError codeError messageDescription
    403NoPermissioncaller has no permissionYou are not authorized to do this operation.
    500ServerErrorServerError-

    For a list of error codes, visit the Service error codes.

    Change history

    Change timeSummary of changesOperation
    No change history