All Products
Search
Document Center

Security Center:DescribeImageSensitiveFileList

Last Updated:Feb 20, 2024

Queries information about sensitive files.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
yundun-sas:DescribeImageSensitiveFileListRead
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
CriteriastringNo

The value of the sensitive file type.

Rails Master Key
CriteriaTypestringNo

The type of the sensitive files that you want to query. Valid values:

  • SensitiveFileKey: the type of alerts for sensitive files. Valid values:

    • npm_token: Node Package Manager (NPM) access token
    • ftp_cfg: FTP configuration
    • google_oauth_key: Google OAuth key
    • planetscale_passwd: PlanetScale password
    • github_ssh_key: Github SSH key
    • msbuild_publish_profile: MSBuild publish profile
    • fastly_cdn_token: Fastly CDN token
    • ssh_private_key: SSH private key
    • aws_cli: Amazon Web Services (AWS) CLI credentials
    • cpanel_proftpd: cPanel ProFTPD credentials
    • postgresql_passwd: PostgreSQL password
    • discord_client_cred: Discord client credentials
    • rails_database: Rails database configuration
    • aws_access_key: AWS access key
    • esmtp_cfg: Extended Simple Mail Transfer Protocol (ESMTP) configuration
    • docker_registry_cfg: Docker image repository configuration
    • pem: Privacy-Enhanced Mail (PEM)
    • common_cred: common credentials
    • sftp_cfg: Secure File Transfer Protocol (SFTP) connection configuration
    • grafana_token: Grafana token
    • slack_token: Slack token
    • ec_private_key: EC private key
    • pypi_token: upload token for the Python Package Index (PyPI)
    • finicity_token: Finicity token
    • k8s_client_key: Kubernetes private key
    • git_cfg: Git configuration
    • django_key: Django key
    • jenkins_ssh: Jenkins SSH configuration file
    • openssh_private_key: OpenSSL private key
    • square_oauth: OAuth credential for Square
    • typeform_token: Typeform token
    • common_database_cfg: general database connection configuration
    • wordpress_database_cfg: WordPress database configuration
    • googlecloud_api_key: API key for Google Cloud
    • vscode_sftp: VSCode SFTP configuration
    • apache_htpasswd: Apache htpasswd
    • planetscale_token: PlanetScale token
    • contentful_preview_token: preview token for Contentful
    • php_database_cfg: database password for a PHP application
    • atom_remote_sync: Atom remote synchronization configuration
    • aws_session_token: AWS session token
    • atom_sftp_cfg: Atom SFTP configuration
    • asana_client_private_key: Asana client key
    • tencentcloud_ak: secret ID of a third-party cloud
    • rsa_private_key: Rivest-Shamir-Adleman (RSA) private key
    • github_personal_token: personal access token for GitHub
    • pgp: Pretty Good Privacy (PGP) encrypted file
    • stripe_skpk: Stripe secret key
    • square_token: Square access token
    • rails_carrierwave: file upload credentials for Rails Carrierwave
    • dbeaver_database_cfg: DBeaver database configuration
    • robomongo_cred: Robomongo credentials
    • github_oauth_token: OAuth access token for GitHub
    • pulumi_token: Pulumi token
    • ventrilo_voip: Ventrilo VoIP server configuration
    • macos_keychain :macOS keychain
    • amazon_mws_token: Amazon MWS token
    • dynatrace_token: Dynatrace token
    • java_keystore: Java KeyStore (JKS)
    • microsoft_sdf: Microsoft SQL Server Compact Edition (CE) database
    • kubernetes_dashboard_cred: user credentials for Kubernetes Dashboard
    • atlassian_token: Atlassian token
    • rdp: remote desktop protocol (RDP)
    • mailgun_key: Mailgun webhook signing key
    • mailchimp_api_key: API key for Mailchimp
    • netrc_cfg: .netrc configuration file
    • openvpn_cfg: OpenVPN configuration
    • github_refresh_token: GitHub refresh token
    • salesforce: Salesforce credentials
    • salesforce: Sendinblue credentials
    • pkcs_private_key: PKCS#12 key
    • rubyonrails_passwd: Ruby on Rails password file
    • filezilla_ftp: FileZilla FTP configuration
    • databricks_token: Databricks token
    • gitLab_personal_toke: personal access token for GitLab
    • rails_master_key: Rails master key
    • sqlite: SQLite3 or SQLite database
    • firefox_logins: Firefox logon configuration
    • mailgun_private_token: Mailgun private token
    • joomla_cfg: Joomla configuration
    • hashicorp_terraform_token: HashiCorp Terraform token
    • jetbrains_ides: JetBrains IDEs configuration
    • heroku_api_key: Heroku API key
    • messagebird_token: MessageBird token
    • messagebird_token: MessageBird token
    • hashicorp_vault_token: HashiCorp Vault token
    • pgp_private_key: PGP private key
    • sshpasswd: SSH password
    • huaweicloud_ak: secret access key of a third-party cloud
    • aws_s3cmd: AWS S3cmd configuration
    • php_config: PHP configuration
    • common_private_key: private key of a common type
    • microsoft_mdf: Microsoft SQL Server database
    • mediawiki_cfg: MediaWiki configuration
    • jenkins_cred: Jenkins credentials
    • rubygems_cred: RubyGems credentials
    • clojars_token: Clojars token
    • phoenix_web_passwd: Phoenix web credentials
    • puttygen_private_key: PuTTYgen private key
    • google_oauth_token: Google OAuth access token
    • rubyonrails_cfg: Ruby On Rails database configuration
    • lob_api_key: Lob API key
    • pkcs_cred: PKCS#12 certificate
    • otr_private_key: Off-the-Record Messaging (OTR) private key
    • contentful_delivery_token: delivery token for Contentful
    • digital_ocean_tugboat: DigitalOcean Tugboat configuration
    • dsa_private_key: Digital Signature Algorithm (DSA) private key
    • rails_app_token: Rails app token
    • git_cred: Git user credential
    • newrelic_api_key: User API key for New Relic
    • github_hub: hub configuration for storing GitHub tokens
    • rubygem: RubyGem token
  • SensitiveFileName: the name of the alert type for sensitive files.

SensitiveFileKey
RiskLevelstringNo

The risk level. Valid values:

  • high
  • medium
  • low
low
ScanRangearrayNo

An array that consists of the types of the assets that you want to scan. Valid values:

  • image
  • container
stringNo

The type of the asset that you want to scan. Valid values:

  • image
  • container
container
LangstringNo

The language of the content within the request and response. Default value: zh. Valid values:

  • zh: Chinese
  • en: English
zh
CurrentPageintegerNo

The number of the page to return. Pages start from page 1. Default value: 1.

1
PageSizeintegerNo

The number of entries to return on each page. Default value: 20.

20
ImageUuidstringNo

The UUID of the image.

Note You can call the DescribeGroupedContainerInstances operation of Container Registry to query the image UUID from the value of the ImageUuid response parameter.
850613a48999900f48417c7e6e9dcfdd

Response parameters

ParameterTypeDescriptionExample
object

The response parameters.

SensitiveFileListobject []

The information about the sensitive file.

RiskLevelstring

The risk level. Valid values:

  • high
  • medium
  • low
high
SensitiveFileKeystring

The type of the alert for the sensitive file. Valid values:

  • npm_token: NPM access token
  • ftp_cfg: FTP configuration
  • google_oauth_key: Google OAuth key
  • planetscale_passwd: PlanetScale password
  • github_ssh_key: Github SSH key
  • msbuild_publish_profile: MSBuild publish profile
  • fastly_cdn_token: Fastly CDN token
  • ssh_private_key: SSH private key
  • aws_cli: AWS CLI credentials
  • cpanel_proftpd: cPanel ProFTPD credentials
  • postgresql_passwd: PostgreSQL password file
  • discord_client_cred: Discord client credentials
  • rails_database: Rails database configuration
  • aws_access_key: AWS access key
  • esmtp_cfg: ESMTP configuration
  • docker_registry_cfg: configuration of a Docker image repository
  • pem: PEM
  • common_cred: common credential
  • sftp_cfg: SFTP connection configuration
  • grafana_token: Grafana token
  • slack_token: Slack token
  • ec_private_key: EC private key
  • pypi_token: upload token for the PyPI
  • finicity_token: Finicity token
  • k8s_client_key: Kubernetes private key
  • git_cfg: Git configuration
  • django_key: Django key
  • jenkins_ssh: Jenkins SSH configuration file
  • openssh_private_key: OpenSSL private key
  • square_oauth: OAuth credential for Square
  • typeform_token: Typeform token
  • common_database_cfg: general database connection configuration
  • wordpress_database_cfg: WordPress database configuration
  • googlecloud_api_key: API key for Google Cloud
  • vscode_sftp: VSCode SFTP configuration
  • apache_htpasswd: Apache htpasswd
  • planetscale_token: PlanetScale token
  • contentful_preview_token: preview token for Contentful
  • php_database_cfg: database password for a PHP application
  • atom_remote_sync: Atom remote synchronization configuration
  • aws_session_token: AWS session token
  • atom_sftp_cfg: Atom SFTP configuration
  • asana_client_private_key: Asana project client key
  • tencentcloud_ak: secret ID of a third-party cloud
  • rsa_private_key: RSA private key
  • github_personal_token: personal access token for GitHub
  • pgp: PGP encrypted file
  • stripe_skpk: Stripe secret key
  • square_token: Square access token
  • rails_carrierwave: file upload credential for Rails Carrierwave
  • dbeaver_database_cfg: DBeaver database configuration
  • robomongo_cred: credential for RoboMongo
  • github_oauth_token: OAuth access token for GitHub
  • pulumi_token: Pulumi token
  • ventrilo_voip: configuration of a Ventrilo VoIP server
  • macos_keychain: macOS keychain
  • amazon_mws_token: Amazon MWS token
  • dynatrace_token: Dynatrace token
  • java_keystore: JKS
  • microsoft_sdf: Microsoft SQL Server CE database
  • kubernetes_dashboard_cred: user credential for Kubernetes Dashboard
  • atlassian_token: Atlassian token
  • rdp: RDP
  • mailgun_key: Mailgun webhook signing key
  • mailchimp_api_key: API key for Mailchimp
  • netrc_cfg: netrc configuration file
  • openvpn_cfg: OpenVPN configuration
  • github_refresh_token: GitHub refresh token
  • salesforce: Salesforce credentials
  • salesforce: Sendinblue credentials
  • pkcs_private_key: PKCS#12 key
  • rubyonrails_passwd: Ruby on Rails password file
  • filezilla_ftp: FileZilla FTP configuration
  • databricks_token: Databricks token
  • gitLab_personal_toke: personal access token for GitLab
  • rails_master_key: Rails master key
  • sqlite: SQLite3 or SQLite database
  • firefox_logins: Firefox logon configuration
  • mailgun_private_token: Mailgun private token
  • joomla_cfg: Joomla configuration
  • hashicorp_terraform_token: HashiCorp Terraform token
  • jetbrains_ides: JetBrains IDEs configuration
  • heroku_api_key: Heroku API key
  • messagebird_token: MessageBird token
  • messagebird_token: MessageBird token
  • hashicorp_vault_token: HashiCorp Vault token
  • pgp_private_key: PGP private key
  • sshpasswd: SSH password
  • huaweicloud_ak: secret access key of a third-party cloud
  • aws_s3cmd: AWS S3cmd configuration
  • php_config: PHP configuration
  • common_private_key: private key of a common type
  • microsoft_mdf: Microsoft SQL Server database
  • mediawiki_cfg: MediaWiki configuration
  • jenkins_cred: Jenkins credentials
  • rubygems_cred: RubyGems credentials
  • clojars_token: Clojars token
  • phoenix_web_passwd: Phoenix web credentials
  • puttygen_private_key: PuTTYgen private key
  • google_oauth_token: Google OAuth access token
  • rubyonrails_cfg: Ruby On Rails database configuration
  • lob_api_key: Lob API key
  • pkcs_cred: PKCS#12 certificate
  • otr_private_key: OTR private key
  • contentful_delivery_token: delivery token for Contentful
  • digital_ocean_tugboat: DigitalOcean Tugboat configuration
  • dsa_private_key: Digital DSA private key
  • rails_app_token: Rails app token
  • git_cred: Git user credentials
  • newrelic_api_key: User API key for New Relic
  • github_hub: hub configuration for storing GitHub tokens
  • rubygem: Rubygem Token
google_oauth_key
SensitiveFileNamestring

The name of the alert type for the sensitive file.

AccessKeyLeak
FirstScanTimelong

The timestamp generated when the first scan was performed. Unit: milliseconds.

1663321552000
LastScanTimelong

The timestamp generated when the last scan was performed. Unit: milliseconds.

1663321552000
Countinteger

The number of scans that are performed on the sensitive file.

9
ClassKeystring

The key of the sensitive file type.

password
ClassNamestring

The name of the sensitive file type.

password
PageInfoobject

The pagination information.

CurrentPageinteger

The page number of the returned page.

1
PageSizeinteger

The number of entries returned per page. Default value: 20.

20
TotalCountinteger

The total number of entries returned.

149
Countinteger

The number of entries returned on the current page.

1
LastRowKeystring

The key of the last data entry.

CAESGgoSChAKDGNvbXBsZXRlVGltZRABCgQiAggAGAAiQAoJAGYXFWIAAAAACjMDLgAAADFTNzMyZDMwMzAzMDM1Mzc3Njc4MzA2ODY5NmI2YTY1Nzg2NTcxNjE2NDc4NjE=
Successboolean

Indicates whether the request was successful. Valid values:

  • true: The request was successful.
  • false: The request failed.
true
Codestring

The status code returned. The status code 200 indicates that the request was successful. Other status codes indicate that the request failed. You can identify the cause of the failure based on the status code.

200
Messagestring

The error message returned.

successful
RequestIdstring

The ID of the request, which is used to locate and troubleshoot issues.

8D19A089-E6BC-5244-800C-7E590D50487F
HttpStatusCodeinteger

The HTTP status code.

200

Examples

Sample success responses

JSONformat

{
  "SensitiveFileList": [
    {
      "RiskLevel": "high",
      "SensitiveFileKey": "google_oauth_key",
      "SensitiveFileName": "AccessKeyLeak",
      "FirstScanTime": 1663321552000,
      "LastScanTime": 1663321552000,
      "Count": 9,
      "ClassKey": "password",
      "ClassName": "password"
    }
  ],
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 149,
    "Count": 1,
    "LastRowKey": "CAESGgoSChAKDGNvbXBsZXRlVGltZRABCgQiAggAGAAiQAoJAGYXFWIAAAAACjMDLgAAADFTNzMyZDMwMzAzMDM1Mzc3Njc4MzA2ODY5NmI2YTY1Nzg2NTcxNjE2NDc4NjE="
  },
  "Success": true,
  "Code": "200",
  "Message": "successful",
  "RequestId": "8D19A089-E6BC-5244-800C-7E590D50487F",
  "HttpStatusCode": 200
}

Error codes

HTTP status codeError codeError messageDescription
403NoPermissioncaller has no permissionYou are not authorized to do this operation.
500ServerErrorServerError-

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2023-10-17The Error code has changed. The response structure of the API has changedsee changesets
Change itemChange content
Error CodesThe Error code has changed.
    delete Error Codes: 500
Output ParametersThe response structure of the API has changed.