Call the GetAssetsPropertyDetail API to query asset fingerprint details - Security Center - Alibaba Cloud - Security Center

Queries the details of Asset Fingerprints for startup items, kernel modules, or web sites.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:GetAssetsPropertyDetail

get

*All Resource

*

None

Request parameters

Parameter	Type	Required	Description	Example
Lang	string	No	The language type of the request and response messages. Valid values: zh: Chinese en: English.	en
Biz	string	Yes	The type of Asset Fingerprints to query. Default value: sca. Valid values: lkm: kernel module autorun: startup item web_server: web site.	lkm
ItemName	string	No	The aggregation item name of the Asset Fingerprints to query. Note Call the GetAssetsPropertyItem operation to obtain this parameter.	virtio
SearchCriteriaList	array<object>	No	The collection of search criteria for querying Asset Fingerprints details.
	object	No	The details of a search criterion for querying Asset Fingerprints details.
Name	string	No	The name of the search criterion. Valid values: remarkItemName: the aggregation item name of Asset Fingerprints. Fuzzy match is supported. Note When Biz is set to web_server, remarkItemName indicates the domain name. When Biz is set to lkm, remarkItemName indicates the module name. When Biz is set to autorun, remarkItemName indicates the startup item path.	remarkItemName
Value	string	No	The value of the search criterion.	virtio
Remark	string	No	The server name or IP address.	1.2.XX.XX
Uuid	string	No	The UUID of the asset to query. Note Call the DescribeCloudCenterInstances operation to obtain this parameter.	38f72ea4-4c9f-4df1-bc6c-0f267614****
CurrentPage	integer	No	The page number of the page to return. Default value: 1.	1
PageSize	integer	No	The maximum number of entries per page for a paging query. Default value: 20. If you leave this parameter empty, 20 entries are returned per page by default. Note Do not leave PageSize empty.	20
UseNextToken	boolean	No	Specifies whether to use the NextToken method to retrieve the vulnerability list. If this parameter is used, TotalCount is no longer returned. Valid values: true: Use the NextToken method. false: Do not use the NextToken method.	true
NextToken	string	No	The token that marks the starting position for the query. Leave this parameter empty to query from the beginning. Note Do not specify this parameter for the first call. The response includes the NextToken value for the next call. Each subsequent response contains the NextToken value for the following call.	71640f04f6e7b49764c8d08ae170xxxx

Response elements

Element	Type	Description	Example
	object	The response parameters.
RequestId	string	The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use this ID to troubleshoot issues.	4C1AE3F3-18FA-4108-BBB9-AFA1A032****
PageInfo	object	The paging information displayed on the page.
CurrentPage	integer	The page number of the current page in a paging query.	1
PageSize	integer	The number of Asset Fingerprints details displayed per page in a paging query.	20
TotalCount	integer	The total number of Asset Fingerprints detail entries returned.	23
Count	integer	The number of Asset Fingerprints detail entries on the current page.	20
NextToken	string	The NextToken value returned when the NextToken method is used.	AAAAAV3MpHK1AP0pfERHZN5pu6k+AtdhNE3kgQEK36GujZ5on+tWdc+4WoaoMP/kUNxxxx
Propertys	array<object>	The collection of Asset Fingerprints details.
	object	The Asset Fingerprints detail.
ModuleName	string	The module name. Note This parameter is returned only when Biz is set to lkm.	alihids
Size	integer	The size of the kernel module. Note This parameter is returned only when Biz is set to lkm.	10
Filepath	string	The file path of the kernel module. Note This parameter is returned only when Biz is set to lkm.	/lib/modules/4****
UsedByCount	integer	The number of dependencies on the kernel module. Note This parameter is returned only when Biz is set to lkm.	0
Path	string	The meaning of this parameter varies based on the value of Biz: When Biz is set to web_server, this parameter indicates the web root path. When Biz is set to autorun, this parameter indicates the startup item path.	/lib/systemd/system****
ServerType	string	The type of the web site. Note This parameter is returned only when Biz is set to web_server.	nginx
Port	string	The port of the web site. Note This parameter is returned only when Biz is set to web_server.	80
Pid	string	The PID of the web site process. Note This parameter is returned only when Biz is set to web_server.	813
ListenProtocol	string	The listening protocol of the web site process. Note This parameter is returned only when Biz is set to web_server.	tcp
ProcessStarted	integer	The timestamp when the web site process started, in milliseconds. Note This parameter is returned only when Biz is set to web_server.	1671186801000
WebPath	string	The web path of the web site. Note This parameter is returned only when Biz is set to web_server.	/usr/share/nginx/html
Domain	string	The domain name of the web site. Note This parameter is returned only when Biz is set to web_server.	localhost
User	string	The user of the web site. Note This parameter is returned only when Biz is set to web_server.	root
PathMode	string	The directory permissions of the web site. Note This parameter is returned only when Biz is set to web_server.	755
InstanceId	string	The instance ID of the server.	i-hp35tftuh52wbp1g****
IntranetIp	string	The private IP address of the server.	100.104.XX.XX
InternetIp	string	The public IP address of the server.	47.42.XX.XX
Ip	string	The IP address of the server.	47.42.XX.XX
Uuid	string	The UUID of the server.	162eb349-c2d9-4f8b-805c-75b43d4c****
InstanceName	string	The name of the server instance.	hc-host-****
RegionId	string	The region ID of the instance.	cn-hangzhou
CreateTimestamp	integer	The timestamp of the latest Asset Fingerprints scan, in milliseconds.	1649149566000
ImageName	string	The image name.	registry-vpc.cn-beijing.aliyuncs.com/acs/aliyun-ingress-controller****
ContainerName	string	The container name.	5-rce_web_1
ModelName	string	The name of the large language model provider.	阿里云百炼
EndPoint	string	The endpoint address of the large language model service.	dashscope.aliyuncs.com
File	string	The file path for requesting the large language model service.	/root/llm.py
MiddlewareName	string	The name of the AI tool.	vllm
MiddlewareVersion	string	The version of the AI tool.	1.0.1
InstallationPath	string	The installation path of the AI tool.	/etc/pip3/env/vllm
RepoName	string	The RepoName of the image.	ACR-Example
RepoNamespace	string	The repo namespace of the image.	Default
Tag	string	The tag.	AI
ImageDigest	string	The digest of the image.	ImageDigest
Agent	string	The agent.	Mozilla/5.0 (Windows NT 10.0%3B Win64%3B x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0
SkillsName	string	The skill name.	Analytics and Data Analysis
McpName	string	The MCP name.	@modelcontextprotocol/server-github
Description	string	The asset description.	{'Type': 'text', 'Value': u'\u786e\u4fdd\u7f51\u5173\u5b89\u5168\u9632\u62a4\u3002\u8981\u6c42\uff1a\u5f00\u542fWAF\u9632\u706b\u5899\u9632\u62a4\u529f\u80fd\u3002'}
TransportName	string	The transport name.	test

Examples

Success response

JSON format

{
  "RequestId": "4C1AE3F3-18FA-4108-BBB9-AFA1A032****",
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 23,
    "Count": 20,
    "NextToken": "AAAAAV3MpHK1AP0pfERHZN5pu6k+AtdhNE3kgQEK36GujZ5on+tWdc+4WoaoMP/kUNxxxx"
  },
  "Propertys": [
    {
      "ModuleName": "alihids",
      "Size": 10,
      "Filepath": "/lib/modules/4****",
      "UsedByCount": 0,
      "Path": "/lib/systemd/system****",
      "ServerType": "nginx",
      "Port": "80",
      "Pid": "813",
      "ListenProtocol": "tcp",
      "ProcessStarted": 1671186801000,
      "WebPath": "/usr/share/nginx/html",
      "Domain": "localhost",
      "User": "root",
      "PathMode": "755",
      "InstanceId": "i-hp35tftuh52wbp1g****",
      "IntranetIp": "100.104.XX.XX",
      "InternetIp": "47.42.XX.XX",
      "Ip": "47.42.XX.XX",
      "Uuid": "162eb349-c2d9-4f8b-805c-75b43d4c****",
      "InstanceName": "hc-host-****",
      "RegionId": "cn-hangzhou",
      "CreateTimestamp": 1649149566000,
      "ImageName": "registry-vpc.cn-beijing.aliyuncs.com/acs/aliyun-ingress-controller****",
      "ContainerName": "5-rce_web_1",
      "ModelName": "阿里云百炼",
      "EndPoint": "dashscope.aliyuncs.com",
      "File": "/root/llm.py",
      "MiddlewareName": "vllm",
      "MiddlewareVersion": "1.0.1",
      "InstallationPath": "/etc/pip3/env/vllm",
      "RepoName": "ACR-Example",
      "RepoNamespace": "Default",
      "Tag": "AI",
      "ImageDigest": "ImageDigest",
      "Agent": "Mozilla/5.0 (Windows NT 10.0%3B Win64%3B x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0",
      "SkillsName": "Analytics and Data Analysis",
      "McpName": "@modelcontextprotocol/server-github",
      "Description": "{'Type': 'text', 'Value': u'\\u786e\\u4fdd\\u7f51\\u5173\\u5b89\\u5168\\u9632\\u62a4\\u3002\\u8981\\u6c42\\uff1a\\u5f00\\u542fWAF\\u9632\\u706b\\u5899\\u9632\\u62a4\\u529f\\u80fd\\u3002'}",
      "TransportName": "test"
    }
  ]
}

Error codes

HTTP status code	Error code	Error message
400	IllegalParam	Illegal param
500	ServerError	ServerError
403	NoPermission	caller has no permission

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.