All Products
Search
Document Center

Security Center:ListCheckItem

Last Updated:Feb 20, 2024

Queries the check items that can be customized.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
CurrentPageintegerNo

The number of the page to return. Default value: 1.

1
PageSizeintegerNo

The number of entries per page. Default value: 20.

10
LangstringNo

The language of the content within the request and response. Default value: zh. Valid value:

  • zh: Chinese
  • en: English
zh

Response parameters

ParameterTypeDescriptionExample
object

ListCheckResultResponse

CheckItemsobject []

The check items.

InstanceSubTypestring

The asset subtype of the cloud service. Valid value:

  • If InstanceType is set to ECS, this parameter supports the following valid values:

    • INSTANCE
    • DISK
    • SECURITY_GROUP
  • If InstanceType is set to ACR, this parameter supports the following valid values:

    • REPOSITORY_ENTERPRISE
    • REPOSITORY_PERSON
  • If InstanceType is set to RAM, this parameter supports the following valid values:

    • ALIAS
    • USER
    • POLICY
    • GROUP
  • If InstanceType is set to WAF, this parameter supports the following valid values:

    • DOMAIN
  • If InstanceType is set to other values, this parameter supports the following valid values:

    • INSTANCE
ECS
CheckIdlong

The ID of the check item.

21
CheckShowNamestring

The name of the check item.

Enable deletion protection
InstanceTypestring

The asset type of the cloud service. Valid value:

  • ECS: Elastic Compute Service (ECS)
  • SLB: Server Load Balancer (SLB)
  • RDS: ApsaraDB RDS
  • MONGODB: ApsaraDB for MongoDB (MongoDB)
  • KVSTORE: ApsaraDB for Redis (Redis)
  • ACR: Container Registry
  • CSK: Container Service for Kubernetes (ACK)
  • VPC: Virtual Private Cloud (VPC)
  • ACTIONTRAIL: ActionTrail
  • CDN: Alibaba Cloud CDN (CDN)
  • CAS: Certificate Management Service (formerly SSL Certificates Service)
  • RDC: Apsara Devops
  • RAM: Resource Access Management (RAM)
  • DDOS: Anti-DDoS
  • WAF: Web Application Firewall (WAF)
  • OSS: Object Storage Service (OSS)
  • POLARDB: PolarDB
  • POSTGRESQL: ApsaraDB RDS for PostgreSQL
  • MSE: Microservices Engine (MSE)
  • NAS: Apsara File Storage NAS (NAS)
  • SDDP: Sensitive Data Discovery and Protection (SDDP)
  • EIP: Elastic IP Address (EIP)
OSS
RiskLevelstring

The risk level of the check item. Valid value:

  • HIGH
  • MEDIUM
  • LOW
HIGH
Vendorstring

The type of the cloud asset. Valid value:

  • 0: an asset provided by Alibaba Cloud
  • 1: a third-party cloud asset
  • 2: an asset in a data center
  • 3, 4, 5, and 7: other cloud asset
  • 8: a simple application server
0
SectionIdsarray

The IDs of the sections associated with the check items.

long

The ID of the section associated with the check item.

102
Descriptionobject

The description of the check item.

Typestring

The type of the description of the check item. Valid value:

  • text
text
Valuestring

The content of the description for the check item when the Type parameter is text.

The download of query results that are returned by SELECT statements in DataStudio must be prohibited at the MaxCompute level.
CustomConfigsobject []

The check items.

Namestring

The name of the check item.

IPList
TypeDefinestring

The type of the check item. The value is a JSON string.

{\"type\":\"LIST\",\"range\":[1,512],\"listType\":{\"type\":\"STRING\",\"range\":[0,22]}}
DefaultValuestring

The default value of the check item. The value is a string.

0
Valuestring

The specified value of the check item. The value is a string.

1
ShowNamestring

The display name of the check item.

Ensure RAM password policy prevents password reuse
PageInfoobject

The pagination information.

CurrentPageinteger

The page number of the returned page.

1
PageSizeinteger

The number of entries per page.

10
TotalCountinteger

The total number of entries returned.

149
Countinteger

The number of entries returned on the current page.

10
RequestIdstring

The request ID.

9F4E6157-9600-5588-86B9-38F09067****

Examples

Sample success responses

JSONformat

{
  "CheckItems": [
    {
      "InstanceSubType": "ECS",
      "CheckId": 21,
      "CheckShowName": "Enable deletion protection",
      "InstanceType": "\bOSS",
      "RiskLevel": "HIGH",
      "Vendor": "0",
      "SectionIds": [
        102
      ],
      "Description": {
        "Type": "text",
        "Value": "The download of query results that are returned by SELECT statements in DataStudio must be prohibited at the MaxCompute level."
      },
      "CustomConfigs": [
        {
          "Name": "IPList",
          "TypeDefine": "{\\\"type\\\":\\\"LIST\\\",\\\"range\\\":[1,512],\\\"listType\\\":{\\\"type\\\":\\\"STRING\\\",\\\"range\\\":[0,22]}}",
          "DefaultValue": "0",
          "Value": "1",
          "ShowName": "Ensure RAM password policy prevents password reuse"
        }
      ]
    }
  ],
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 10,
    "TotalCount": 149,
    "Count": 10
  },
  "RequestId": "9F4E6157-9600-5588-86B9-38F09067****"
}

Error codes

HTTP status codeError codeError messageDescription
403NoPermissioncaller has no permissionYou are not authorized to do this operation.
500ServerErrorServerError-

For a list of error codes, visit the Service error codes.