All Products
Search

This Product

    Security Center:ModifyContainerDefenseRule

    Document Center

    Security Center:ModifyContainerDefenseRule

    Last Updated:Feb 20, 2024

    Modifies a rule for non-image program defense.

    Debugging

    OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

    Authorization information

    There is currently no authorization information disclosed in the API.

    Request parameters

    ParameterTypeRequiredDescriptionExample
    RuleIdlongNo

    The ID of the rule.

    Note You can call the ListContainerDefenseRule operation to query the IDs of rules.
    		123
    RuleActionintegerNo

    The action specified in the rule. Valid values:

    • 1: alert
    • 2: block
    		1
    RuleSwitchintegerNo

    The status of the rule. Valid values:

    • 1: enabled
    • 0: disabled
    		1
    RuleNamestringNo

    The name of the rule.

    		text-001
    DescriptionstringNo

    The description of the rule.

    		Prevent non-mirror programs from starting in containers
    RuleTypeintegerNo

    The type of the rule. Valid values:

    • 1: system rule
    • 2: custom rule
    		1
    WhitelistobjectNo

    The whitelist.

    HasharrayNo

    The hash values of the files that need to be added to the whitelist.

    Note This parameter is not supported.
    stringNo

    The hash value of the file that needs to be added to the whitelist.

    Note This parameter is not supported.
    		0
    PatharrayNo

    The paths to the files that need to be added to the whitelist.

    stringNo

    The path to the file that needs to be added to the whitelist.

    		/home/workspace/
    ImagearrayNo

    The images that need to be added to the whitelist.

    stringNo

    The image that needs to be added to the whitelist.

    		repo:tag
    Scopeobject []No

    The effective scope of the rule.

    ClusterIdstringNo

    The ID of the cluster on which the rule takes effect.

    Note You can call the DescribeGroupedContainerInstances operation to query the IDs of clusters.
    		c54b***1501
    AllNamespaceintegerNo

    Specifies whether to include all namespaces. Valid values:

    • 0: no
    • 1: yes
    		1
    NamespacesarrayNo

    The namespaces.

    stringNo

    The ID of the namespace.

    		kube-system

    Response parameters

    ParameterTypeDescriptionExample
    object

    PlainResult

    Datalong

    The ID of the rule that was modified.

    		100
    Successboolean

    Indicates whether the request was successful. Valid values:

    • true
    • false
    		True
    Codestring

    The response code. The status code 200 indicates that the request was successful. Other status codes indicate that the request failed. You can identify the cause of the failure based on the status code.

    		200
    Messagestring

    The returned message.

    		successful
    RequestIdstring

    The request ID.

    		768DFBE5-*A5DC35**
    HttpStatusCodeinteger

    The HTTP status code. The value 200 indicates that the request was successful.

    		200

    Examples

    Sample success responses

    JSONformat

    {
  "Data": 100,
  "Success": true,
  "Code": "200",
  "Message": "successful",
  "RequestId": "768DFBE5-*A5DC35**",
  "HttpStatusCode": 200
}

    Error codes

    HTTP status codeError codeError messageDescription
    403NoPermissioncaller has no permissionYou are not authorized to do this operation.
    500ServerErrorServerError-

    For a list of error codes, visit the Service error codes.

    Change history

    Change timeSummary of changesOperation
    2023-11-23The Error code has changedsee changesets
    Change itemChange content
    Error CodesThe Error code has changed.
      delete Error Codes: 500