Security Statistics Overview via DescribeSecurityStatInfo - Security Center - Alibaba Cloud - Security Center

Queries the statistics of each security check item and the daily statistics in the security check item trend chart.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:DescribeSecurityStatInfo

get

*All Resource

*

None

Request parameters

Parameter	Type	Required	Description	Example
SourceIp	string	No	The source IP address of the request.	1.2.XX.XX
Lang	string	No	The language of the request and response. Default value: zh. Valid values: zh: Chinese en: English.	zh
ResourceDirectoryAccountId	string	No	The ID of the member account in the resource folder. This parameter is used by the multi-account security management feature of Security Center to query the security information of specified member accounts.	12345

Response elements

Element	Type	Description	Example
	object
Success	boolean	Indicates whether the query is successful. Valid values: true: Successful. false: Failed.	true
RequestId	string	The ID of the request. Alibaba Cloud generates a unique identifier for each request. You can use the ID to troubleshoot issues.	A3E61730-85E2-4789-8017-B9B1B70F0568
SecurityEvent	object	The statistics of pending security alerts.
SuspiciousCount	integer	The number of alerts with the Suspicious severity level on the current day.	148
SeriousCount	integer	The number of alerts with the Urgent severity level on the current day.	404
RemindCount	integer	The number of alerts with the Reminder severity level detected on the current day.	0
TotalCount	integer	The total number of pending alerts on the current day.	552
ValueArray	array	The collection of pending alert counts at each statistical time point.
	string	The number of pending alerts at a statistical time point.	444
TimeArray	array	The collection of statistical time periods for alerts.
	string	The statistical time period for alerts.	1641484800000
RemindList	array	The collection of Reminder-level alert counts at each statistical time point.
	string	The number of alerts with the Reminder severity level at a statistical time point.	5,
LevelsOn	array	The collection of alert severity levels included in the statistics for pending alerts.
	string	The alert severity level included in the statistics for pending alerts. Valid values: remind: Reminder suspicious: Suspicious serious: Urgent.	remind
DateArray	array	The collection of statistical time points in the pending alert trend chart.
	string	The statistical time point in the pending alert trend chart.	2020-01-08
SuspiciousList	array	The collection of Suspicious-level alert counts at each statistical time point.
	string	The number of alerts with the Suspicious severity level at a statistical time point.	111,
SeriousList	array	The collection of Urgent-level alert counts at each statistical time point.
	string	The number of alerts with the Urgent severity level at a statistical time point.	111
AttackEvent	object	The statistics of attack events.
TotalCount	integer	The number of attacks on the current day.	1096
DateArray	array	The collection of statistical time points in the attack count trend chart.
	string	The statistical time point in the attack count trend chart.	2020-01-04
ValueArray	array	The collection of attack counts at each statistical time point.
	string	The number of attacks at a statistical time point.	2620
HealthCheck	object	The statistics of baseline issues.
HighCount	integer	The number of high-risk baseline issues on the current day.	10
LowCount	integer	The number of low-risk baseline issues on the current day.	0
TotalCount	integer	The total number of baseline issues on the current day.	32
MediumCount	integer	The number of medium-risk baseline issues on the current day.	21
ValueArray	array	The collection of total baseline counts at each statistical time point.
	string	The total number of baselines at a statistical time point.	31
TimeArray	array	The collection of statistical time periods for baselines.
	string	The statistical time period for baselines.	1641484800000
LevelsOn	array	The collection of baseline risk levels included in the statistics.
	string	The baseline risk level included in the statistics. Valid values: high: high risk medium: medium risk low: low risk.	high
LowList	array	The collection of low-risk baseline issue counts at each statistical time point.
	string	The number of low-risk baseline issues at a statistical time point.	0
MediumList	array	The collection of medium-risk baseline issue counts at each statistical time point.
	string	The number of medium-risk baseline issues at a statistical time point.	0
DateArray	array	The collection of statistical time points in the baseline issue trend chart.
	string	The statistical time point in the baseline issue trend chart.	2020-01-04
HighList	array	The collection of high-risk baseline counts at each statistical time point.
	string	The number of high-risk baselines at a statistical time point.	11
Vulnerability	object	The statistics information of unfixed vulnerabilities.
NntfCount	integer	The number of unfixed vulnerabilities with low priority on the current day.	0
LaterCount	integer	The number of unfixed vulnerabilities with medium priority on the current day.	275
TotalCount	integer	The number of unfixed vulnerabilities on the current day.	384
AsapCount	integer	The number of unfixed vulnerabilities with high priority on the current day.	109
NntfList	array	The collection of low-priority unfixed vulnerability counts at each statistical time point.
	string	The number of unfixed vulnerabilities with low priority at a statistical time point.	0
AsapList	array	The collection of high-priority unfixed vulnerability counts at each statistical time point.
	string	The number of unfixed vulnerabilities with high priority at a statistical time point.	60
ValueArray	array	The collection of unfixed vulnerability counts at each statistical time point.
	string	The number of unfixed vulnerabilities at a statistical time point.	384
TimeArray	array	The collection of statistical time periods for unfixed vulnerabilities.
	string	The statistical time period for unfixed vulnerabilities.	1641484800000
LevelsOn	array	The collection of vulnerability priority levels included in the statistics for unfixed vulnerabilities.
	string	The vulnerability priority level included in the statistics for unfixed vulnerabilities. Valid values: asap: high later: medium nntf: low.	later
LaterList	array	The collection of medium-priority unfixed vulnerability counts at each statistical time point.
	string	The number of unfixed vulnerabilities with medium priority at a statistical time point.	275
DateArray	array	The collection of statistical time points in the unfixed vulnerability trend chart.
	string	The statistical time point in the unfixed vulnerability trend chart.	2020-01-04

Examples

Success response

JSON format

{
  "Success": true,
  "RequestId": "A3E61730-85E2-4789-8017-B9B1B70F0568",
  "SecurityEvent": {
    "SuspiciousCount": 148,
    "SeriousCount": 404,
    "RemindCount": 0,
    "TotalCount": 552,
    "ValueArray": [
      "444"
    ],
    "TimeArray": [
      "1641484800000"
    ],
    "RemindList": [
      "5,"
    ],
    "LevelsOn": [
      "remind"
    ],
    "DateArray": [
      "2020-01-08"
    ],
    "SuspiciousList": [
      "111,"
    ],
    "SeriousList": [
      "111"
    ]
  },
  "AttackEvent": {
    "TotalCount": 1096,
    "DateArray": [
      "2020-01-04"
    ],
    "ValueArray": [
      "2620"
    ]
  },
  "HealthCheck": {
    "HighCount": 10,
    "LowCount": 0,
    "TotalCount": 32,
    "MediumCount": 21,
    "ValueArray": [
      "31"
    ],
    "TimeArray": [
      "1641484800000"
    ],
    "LevelsOn": [
      "high"
    ],
    "LowList": [
      "0"
    ],
    "MediumList": [
      "0"
    ],
    "DateArray": [
      "2020-01-04"
    ],
    "HighList": [
      "11"
    ]
  },
  "Vulnerability": {
    "NntfCount": 0,
    "LaterCount": 275,
    "TotalCount": 384,
    "AsapCount": 109,
    "NntfList": [
      "0"
    ],
    "AsapList": [
      "60"
    ],
    "ValueArray": [
      "384"
    ],
    "TimeArray": [
      "1641484800000"
    ],
    "LevelsOn": [
      "later"
    ],
    "LaterList": [
      "275"
    ],
    "DateArray": [
      "2020-01-04"
    ]
  }
}

Error codes

HTTP status code	Error code	Error message
400	NoPermission	no permission
400	UnknownError	UnknownError
500	ServerError	ServerError
403	NoPermission	caller has no permission

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.