UpdateOpaStrategyNew - Security Center - Alibaba Cloud Documentation Center

Updates the blocking rule for at-risk images.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Debug

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

Parameter	Type	Required	Description	Example
StrategyId	long	No	The rule ID. Note You can call the ListOpaClusterStrategyNew operation to query the rule ID.	1003
StrategyTemplateId	long	No	The ID of the rule template. Note You can call the GetOpaStrategyTemplateSummary operation to query the ID of the rule template.	109
ClusterId	string	No	The cluster ID. Note This parameter is deprecated. You can use the Scopes parameter to specify a scope in which cluster parameters take effect.	c870ec78ecbcb41d2a35c679823ef****
StrategyName	string	No	The rule name.	test
Description	string	No	The rule description.	4566
ClusterName	string	No	The cluster name. Note This parameter is deprecated.	docker-law
UnScanedImage	boolean	No	Specifies whether the rule supports unscanned images. Valid values: true false	true
MaliciousImage	boolean	No	Specifies whether the rule supports malicious Internet images. Valid values: true false	true
ImageName	array	No	The image names.
	string	No	The image name. Note You can call the GetOpaClusterImageList operation to query the image name.	muximux:latest
Label	array	No	The image tags.
	string	No	The image tag. Note You can call the GetOpaClusterLabelList operation to query the image tag.	alertmanager:main
RuleAction	integer	No	The action that is performed when the rule is hit. Valid values: 1: alert 2: block 3: allow	1
WhiteList	array	No	The whitelists.
	string	No	The name of the image that is added to the whitelist.	repo-016
AlarmDetail	object	No	The rule configuration.
Baseline	object	No	The baseline check configuration.
RiskLevel	array	No	The risk levels.
	string	No	The risk level. Valid values: high medium low	medium
Item	object []	No	The baseline check configuration.
Id	string	No	The ID of the baseline check item. Note You can call the GetOpaClusterBaseLineList operation to query the ID of the baseline check item.	hc.image.checklist.identify.hc_exploit_couchdb_linux.item
Name	string	No	The name of the baseline check item. Note You can call the GetOpaClusterBaseLineList operation to query the name of the baseline check item.	passwd
Vul	object	No	The vulnerability configuration.
RiskLevel	array	No	The risk levels.
	string	No	The risk level. Valid values: high medium low	high
Item	object []	No	The information about the vulnerability.
Id	string	No	The vulnerability ID. Note You can call the DescribeVulListPage operation to query the vulnerability ID.	CVE-2023-36034
Name	string	No	The vulnerability name. Note You can call the DescribeVulListPage operation to query the vulnerability name.	oval:com.redhat.rhsa:def:20227002
RiskClass	object []	No	Risk type of vulnerability.
Id	string	No	The ID of the vulnerability types. Valid values: cve: system vulnerability app: application vulnerability	cve
Name	string	No	The name of the vulnerability. Valid values: system vulnerability application vulnerability	system vulnerability
MaliciousFile	object	No	The configuration of malicious samples.
RiskLevel	array	No	The risk levels.
	string	No	The risk level. Valid values: high medium low	medium
Item	object []	No	The configuration of malicious samples.
Id	string	No	The ID of the malicious sample. Note You can call the DescribeMatchedMaliciousNames operation to query the ID of the malicious sample.	65201
Name	string	No	The name of the malicious sample. Note You can call the DescribeMatchedMaliciousNames operation to query the name of the malicious sample.	abnormal binary file
SensitiveFile	object	No	The configuration of sensitive file.
RiskLevel	array	No	The risk levels.
	string	No	The risk level. Valid values: high medium low	high
Item	object []	No	The configuration of sensitive file.
Id	string	No	The ID of the sensitive files. Note You can call the GetSensitiveDefineRuleConfig operation to query the ID of the malicious sample.	key
Name	string	No	The name of the sensitive files. Note You can call the GetSensitiveDefineRuleConfig operation to query the ID of the malicious sample.	name
BuildRisk	object	No	The configuration of image build risk.
RiskLevel	array	No	The risk levels.
	string	No	The risk level. Valid values: high medium low	high
Item	object []	No	The configuration of image build risk.
Id	string	No	The ID of the image build risk. Note You can call the ListImageBuildRiskItem operation to query the ID of the malicious sample.	key
Name	string	No	The name of the image build risk. Note You can call the ListImageBuildRiskItem operation to query the ID of the malicious sample.	name
Scopes	object []	No	The application scope.
ClusterId	string	No	The cluster ID. Note You can call the DescribeGroupedContainerInstances operation to query the cluster ID.	cdcb56a931c**
AllNamespace	integer	No	Specifies whether all namespaces are included. Valid values: 0: Not all namespaces are included. 1: All namespaces are included.	1
NamespaceList	array	No	The namespaces. Note This parameter is valid only when the AllNamespace parameter is set to 0.
	string	No	The namespaces.	m1
AckPolicyInstanceId	string	No	The ID of the cluster node to which the rule is applied. Note You can call the GetOpaStrategyDetailNew operation to query the ID of the cluster node to which the rule is applied.	ack-1

Response parameters

Parameter	Type	Description	Example
	object	BaseResult
Success	boolean	Indicates whether the request was successful. Valid values: true false	true
Code	string	The status code returned. The status code 200 indicates that the request was successful. Other status codes indicate that the request failed. You can identify the cause of the failure based on the status code.	200
Message	string	The returned message.	success
RequestId	string	The request ID.	F75B5FF5-DCB2-59CE-8978-08510707A9E6
HttpStatusCode	integer	The HTTP status code.	200
Data	array	The IDs of the clusters that failed to be updated.
	string	The ID of the cluster that failed to be updated.	['c8d**7614df1bf']

Examples

Sample success responses

JSONformat

{
  "Success": true,
  "Code": "200",
  "Message": "success",
  "RequestId": "F75B5FF5-DCB2-59CE-8978-08510707A9E6",
  "HttpStatusCode": 200,
  "Data": [
    "['c8d**7614df1bf']"
  ]
}

Error codes

HTTP status code	Error code	Error message	Description
403	NoPermission	caller has no permission	You are not authorized to do this operation.
500	ServerError	ServerError	-

For a list of error codes, visit the Service error codes.

Change history

Change time

Summary of changes

Operation

2023-12-22

The Error code has changed

see changesets

Change item	Change content
Error Codes	The Error code has changed.
	delete Error Codes: 500