All Products
Search
Document Center

Security Center:ModifyPostPayModuleSwitch

Last Updated:Sep 15, 2026

Enables or disables pay-as-you-go billing for a specified feature.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:ModifyPostPayModuleSwitch

update

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

PostPayInstanceId

string

No

The pay-as-you-go instance ID. This parameter is required.

Note

Invoke the DescribeVersionConfig operation to obtain this parameter.

postpay-sas-**

PostPayModuleSwitch

string

No

The switch status of pay-as-you-go modules in JSON string format. Valid values:

  • Key:
    • VUL: vulnerability management module

    • CSPM: Cloud Security Posture Management (CSPM) module

    • AGENTLESS: agentless detection module

    • SERVERLESS: serverless security module

    • CTDR: threat detection and response module

    • POST_HOST: host and container security module

    • SDK: malicious file detection SDK module

    • RASP: application protection module

    • CTDR_STORAGE: log management module

    • ANTI_RANSOMWARE: anti-ransomware management

  • Value: 0 indicates disabled. 1 indicates enabled.

Note

Modules for which no value is specified remain unchanged.

Important This parameter has the same meaning as PostPayModuleSwitchObj. If both parameters are specified, the value of PostPayModuleSwitch takes precedence.

{"VUL":1,"CSPM":0}

ClientToken

string

No

The client token that is used to ensure the idempotence of the request. Use a different token for each request. Only ASCII characters are supported. The token can be up to 64 characters in length.

PostPaidHostAutoBind

integer

No

Specifies whether to automatically bind new assets for host and container protection. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

PostPaidHostAutoBindVersion

integer

No

The edition to which new assets are automatically bound for host and container protection. Valid values:

  • 1: Free Edition.

  • 3: Enterprise Edition.

  • 5: Advanced Edition.

  • 6: Anti-virus Edition.

  • 7: Ultimate Edition.

3

PostPayModuleSwitchObj

object

No

The pay-as-you-go module switch.

Important This parameter has the same meaning as PostPayModuleSwitch. If both parameters are specified, the value of PostPayModuleSwitch takes precedence.

Agentless

integer

No

The agentless detection module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

AiDigital

integer

No

The AI digital human module.

1

AntiRansomware

integer

No

The anti-ransomware module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

BasicService

integer

No

The basic service module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

Important The basic service module switch cannot be manually modified. This module is in the enabling status when any other module is enabled, and is in the shutdown status only when all other modules are disabled.

1

Cspm

integer

No

The cloud security configuration check module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

Ctdr

integer

No

The threat detection and response module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

CtdrStorage

integer

No

The log management module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

PostHost

integer

No

The host and container security module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

Rasp

integer

No

The application protection module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

Sdk

integer

No

The malicious file detection SDK module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

Serverless

integer

No

The serverless security module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

Vul

integer

No

The vulnerability management module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

WebLock

integer

No

The file tamper-proofing module. Valid values:

  • 0: Disabled.

  • 1: Enabled.

1

EdrModuleSwitch

object

No

AutoBind

integer

No

EDR_HOST_USAGE

integer

No

No

Specifies whether to perform a dry run. Valid values: true: performs a check without executing the operation. false: executes the operation. Default value: false.

Response elements

Element

Type

Description

Example

object

BaseResult

Code

string

The result code. A value of 200 indicates success. Other values indicate failure. Use this field to determine the cause of failure.

200

HttpStatusCode

integer

The HTTP status code of the request.

200

Message

string

The message returned for the request.

successful

RequestId

string

The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use this ID to troubleshoot issues.

ACF97412-FD09-4D1F-994F-34DF12BREF20

Success

boolean

Indicates whether the call was successful. Valid values:

  • true: The call was successful.

  • false: The call failed.

true

Examples

Success response

JSON format

{
  "Code": "200",
  "HttpStatusCode": 200,
  "Message": "successful",
  "RequestId": "ACF97412-FD09-4D1F-994F-34DF12BREF20",
  "Success": true
}

Error codes

HTTP status code

Error code

Error message

Description

400 PostPayInstanceNotExist post pay instance not exist. Pay-As-You-Go instance does not exist.
400 IdempotentParameterMismatch 相同的 ClientToken 被用于不同的请求参数。
500 ServerError ServerError
403 NoPermission caller has no permission You are not authorized to do this operation.
409 IdempotentRequestInProgress 使用相同 ClientToken 的请求正在处理中。

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.