All Products
Search

This Product

    Security Center:ListCloudAssetInstances

    Document Center

    Security Center:ListCloudAssetInstances

    Last Updated:Sep 07, 2026

    Retrieves the list of cloud service assets.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-sas:ListCloudAssetInstances

    get

    *All Resource

    *

    		 None None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    RegionId

    string

    No

    The region ID of the instance.

    cn-hangzhou
    Criteria

    string

    No

    The search conditions for assets. This parameter is in JSON format and contains the following fields:

    • name: The search item.

    • value: The value of the search item.

    • logicalExp: The logical relationship between multiple search item values. Valid values:

      • OR: The search item values are evaluated using the OR operator.

      • AND: The search item values are evaluated using the AND operator.

    Note

    You can call the GetCloudAssetCriteria operation to query the supported search conditions.

    [{\"name\":\"internetIp\",\"value\":\"192.168\",\"logicalExp\":\"OR\"}]
    LogicalExp

    string

    No

    The logical relationship between multiple search conditions. Valid values:

    • OR: The search conditions are evaluated using the OR operator.

    • AND: The search conditions are evaluated using the AND operator.

    OR
    PageSize

    integer

    No

    The maximum number of entries per page. Maximum value: 100. Default value: 20.

    20
    CurrentPage

    integer

    No

    The page number of the current page in a paging query.

    2
    CloudAssetTypes

    array<object>

    No

    The list of cloud asset instance types.

    object

    No

    The cloud asset instance.

    AssetType

    integer

    No

    The type of the cloud asset.

    Note

    For specific meanings, refer to the AssetType parameter in the GetCloudAssetCriteria operation.

    18
    AssetSubType

    integer

    No

    The subtype of the cloud service.

    Note

    For specific meanings, refer to the AssetSubType parameter in the GetCloudAssetCriteria operation.

    0
    Vendor

    integer

    No

    The server vendor. Valid values:

    • 0: Alibaba Cloud asset

    • 1: Non-cloud asset

    • 2: IDC asset

    • 3, 4, 5, 7: Third-party cloud asset

    • 8: Lightweight asset

    0
    CloudAssetQueryData

    array<object>

    No

    The data list queried by keyword.

    object

    No

    Data

    string

    No

    The query content.

    163.8.8.9
    Operator

    string

    No

    The query operator. Currently, only INCLUDE is supported.

    INCLUDE
    IsSaleData

    boolean

    No

    Specifies whether to return sale-related data. Valid values:

    • true: Returns sale-related data.

    • false: Does not return sale-related data.

    ResourceDirectoryAccountId

    integer

    No

    The ID of the Alibaba Cloud account of the resource folder member accounts.

    Note

    You can invoke the DescribeMonitorAccounts operation to obtain this parameter.

    Response elements

    Element

    Type

    Description

    Example

    object

    Success

    boolean

    Indicates whether the call was successful. Valid values:

    • true: The call was successful.

    • false: The call failed.

    true
    RequestId

    string

    The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use this ID to troubleshoot issues.

    028CF634-5268-5660-9575-48C9ED6BF880
    PageInfo

    object

    The pagination information.

    CurrentPage

    integer

    The page number of the current page in a paging query.

    2
    PageSize

    integer

    The number of entries per page.

    100
    TotalCount

    integer

    The total number of cloud assets.

    69
    Count

    integer

    The number of entries returned on the current page.

    20
    Instances

    array<object>

    The list of cloud asset details.

    object

    The cloud asset details.

    RegionId

    string

    The region ID of the asset instance.

    cn-hanghzou
    Vendor

    integer

    The asset vendor. Valid values:

    • 0: Alibaba Cloud asset

    • 1: Non-cloud asset

    • 2: IDC asset

    • 3, 4, 5, 7: Third-party cloud asset

    • 8: Lightweight asset

    0
    AssetType

    integer

    The type of the asset. Valid values:

    • 0: Elastic Compute Service (ECS) server

    • 1: Server Load Balancer (SLB)

    • 3: ApsaraDB RDS database

    • 4: ApsaraDB for MongoDB database

    • 5: Tair (Redis® OSS-Compatible) database

    • 6: Container Registry

    • 8: Container Service for Kubernetes (ACK)

    • 9: Virtual Private Cloud (VPC)

    • 11: ActionTrail

    • 12: CDN

    • 13: Certificate Management Service (formerly SSL Certificates Service)

    • 14: Apsara Devops

    • 16: Anti-DDoS

    • 17: Web Application Firewall (WAF)

    • 18: Object Storage Service (OSS)

    • 19: Cloud-native relational database PolarDB

    • 20: ApsaraDB RDS for PostgreSQL database

    • 21: Microservices Engine (MSE)

    • 22: Apsara File Storage NAS

    • 23: Data Security Center (DSC)

    • 24: Elastic IP Address (EIP)

    • 25: Alibaba Cloud IDaaS EIAM

    • 26: PolarDB-X

    • 27: Elasticsearch

    0
    AssetSubType

    string

    The subtype of the cloud service. The value is in the format of asset type - subtype. Valid values:

    • 0: Elastic Compute Service (ECS) server

      • 0: Instance

      • 1: Cloud disk (storage)

      • 2: Security group

    • 1: Server Load Balancer (SLB)

      • 0: Classic Load Balancer (CLB)

      • 1: Application Load Balancer (ALB)

    • 3: ApsaraDB RDS database

      • 0: Instance

    • 4: ApsaraDB for MongoDB database

      • 0: Instance

    • 5: Tair (Redis® OSS-Compatible) database

      • 0: Instance

    • 6: Container Registry

      • 1: Enterprise Edition

      • 2: Personal Edition

    • 8: Container Service for Kubernetes (ACK)

      • 0: Cluster

    • 9: Virtual Private Cloud (VPC)

      • 0: NAT gateway

      • 1: EIP

      • 2: VPN

      • 3: FLOW_LOG

    • 11: ActionTrail

      • 0: Trail

    • 12: CDN

      • 0: Instance

    • 13: Certificate Management Service (formerly SSL Certificates Service)

      • 0: Certificate

    • 14: Apsara Devops

      • 0: Organization

    • 16: Anti-DDoS

      • 0: Instance

    • 17: Web Application Firewall (WAF)

      • 0: Domain name

    • 18: Object Storage Service (OSS)

      • 0: Bucket

    • 19: Cloud-native relational database PolarDB

      • 0: Cluster

    • 20: ApsaraDB RDS for PostgreSQL database

      • 0: Instance

    • 21: Microservices Engine (MSE)

      • 0: Cluster

    • 22: Apsara File Storage NAS

      • 0: File system

    • 23: Data Security Center (DSC)

      • 0: Instance

    • 24: Elastic IP Address (EIP)

      • 0: Anycast EIP

    • 25: Alibaba Cloud IDaaS EIAM

      • 0: Instance

    • 26: PolarDB-X

      • 0: Instance

    • 27: Elasticsearch

      • 0: Instance

    0
    InstanceId

    string

    The ID of the cloud asset instance.

    d-uf60vevzkztnflx7cny5
    InstanceName

    string

    The name of the asset instance.

    yztest-l***
    CreatedTime

    integer

    The time when the instance was created. The value is a UNIX timestamp in milliseconds.

    1607365213000
    InternetIp

    string

    The public IP address of the instance.

    1.2.XX.XX
    AlarmStatus

    string

    Indicates whether security alerts exist for the cloud asset. Valid values:

    • YES: Security alerts exist.

    • NO: No security alerts exist.

    NO
    RiskStatus

    string

    Indicates whether security risks exist for the cloud asset. Valid values:

    • YES: Security risks exist.

    • NO: No security risks exist.

    NO
    AssetTypeName

    string

    The name of the cloud asset type.

    ECS
    AssetSubTypeName

    string

    The name of the cloud asset subtype.

    SECURITY_GROUP
    SecurityInfo

    string

    The security information of the cloud asset.

    {"seriousNum":0,"appNum":0,"baselineMedium":0,"remindNum":0,"imageVulNntf":0,"cveNum":0,"vul":0,"uuid":"yuejia-test","emgNum":0,"weakPWNum":0,"imageMaliciousFileRemind":0,"imageBaselineMedium":0,"laterVulCount":0,"cmsNum":0,"imageMaliciousFileSerious":0,"agentlessMalicious":0,"suspNum":0,"imageBaselineHigh":0,"asapVulCount":0,"imageVulLater":0,"agentlessAll":0,"sysNum":0,"containerLater":0,"containerSuspicious":0,"imageBaselineNum":0,"newSuspicious":0,"nntfVulCount":0,"scaNum":0,"containerNntf":0,"health":0,"trojan":0,"suspicious":0,"imageMaliciousFileSuspicious":0,"containerRemind":0,"baselineLow":0,"imageVulAsap":0,"imageBaselineLow":0,"containerAsap":0,"agentlessBaseline":0,"agentlessVulSca":0,"agentlessVulCve":0,"containerSerious":0,"baselineHigh":0,"account":0,"baselineNum":5}
    Tags

    array

    The list of tags.

    string

    The tag.

    AI
    VendorUid

    string

    The account ID of the multi-cloud instance.

    123xxx
    VendorUserName

    string

    The username of the multi-cloud instance.

    testxxx
    SaleCspm

    integer

    The Cloud Security Posture Management (CSPM) sale identifier.

    AssetUuid

    string

    The UUID of the asset.

    SaleType

    integer

    The sale type.

    Examples

    Success response

    JSON format

    {
  "Success": true,
  "RequestId": "028CF634-5268-5660-9575-48C9ED6BF880",
  "PageInfo": {
    "CurrentPage": 2,
    "PageSize": 100,
    "TotalCount": 69,
    "Count": 20
  },
  "Instances": [
    {
      "RegionId": "cn-hanghzou",
      "Vendor": 0,
      "AssetType": 0,
      "AssetSubType": "0",
      "InstanceId": "d-uf60vevzkztnflx7cny5",
      "InstanceName": "yztest-l***",
      "CreatedTime": 1607365213000,
      "InternetIp": "1.2.XX.XX",
      "AlarmStatus": "NO",
      "RiskStatus": "NO",
      "AssetTypeName": "ECS",
      "AssetSubTypeName": "SECURITY_GROUP",
      "SecurityInfo": "{\"seriousNum\":0,\"appNum\":0,\"baselineMedium\":0,\"remindNum\":0,\"imageVulNntf\":0,\"cveNum\":0,\"vul\":0,\"uuid\":\"yuejia-test\",\"emgNum\":0,\"weakPWNum\":0,\"imageMaliciousFileRemind\":0,\"imageBaselineMedium\":0,\"laterVulCount\":0,\"cmsNum\":0,\"imageMaliciousFileSerious\":0,\"agentlessMalicious\":0,\"suspNum\":0,\"imageBaselineHigh\":0,\"asapVulCount\":0,\"imageVulLater\":0,\"agentlessAll\":0,\"sysNum\":0,\"containerLater\":0,\"containerSuspicious\":0,\"imageBaselineNum\":0,\"newSuspicious\":0,\"nntfVulCount\":0,\"scaNum\":0,\"containerNntf\":0,\"health\":0,\"trojan\":0,\"suspicious\":0,\"imageMaliciousFileSuspicious\":0,\"containerRemind\":0,\"baselineLow\":0,\"imageVulAsap\":0,\"imageBaselineLow\":0,\"containerAsap\":0,\"agentlessBaseline\":0,\"agentlessVulSca\":0,\"agentlessVulCve\":0,\"containerSerious\":0,\"baselineHigh\":0,\"account\":0,\"baselineNum\":5}",
      "Tags": [
        "AI"
      ],
      "VendorUid": "123xxx",
      "VendorUserName": "testxxx",
      "SaleCspm": 0,
      "AssetUuid": "",
      "SaleType": 0
    }
  ]
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 AccountIdNotExist AccountId not exist
    400 NoPermission no permission
    400 RdCheckNoPermission Resource directory account verification has no permission.
    500 ServerError ServerError
    500 RdCheckInnerError Resource directory account service internal error.
    403 NoPermission caller has no permission You are not authorized to do this operation.

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.