All Products
Search
Document Center

Security Center:VerifyCheckCustomConfig

Last Updated:Oct 24, 2025
This topic is generated by a machine translation engine without any human intervention. ALIBABA CLOUD DOES NOT GUARANTEE THE ACCURACY OF MACHINE TRANSLATED CONTENT. To request a human-translated version of this topic or provide feedback on this translation, please include it in the feedback form.

Customization and validation of check items and repair parameters

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • For mandatory resource types, indicate with a prefix of * .
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
yundun-sas:VerityCheckCustomConfigget
*All Resources
*
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
CheckIdlongNo

Check item ID.

76
CustomConfigsarray<object>No

List of custom configuration items for the check item.

objectNo

List of custom configuration items for the check item.

NamestringNo

Name of the custom configuration item for the check item, unique within the same check item.

IPList
ValuestringNo

User-configured value string for the custom configuration item of the check item.

10.12.4.XX
OperationstringNo

Operation type for the custom configuration item of the check item. Only pass DELETE when deleting; no need to pass for creation or update.

DELETE
RepairConfigsarray<object>No

Repair parameters supported by the check item's repair function.

objectNo

Repair parameters supported by the check item's repair function.

NamestringNo

Name of the repair parameter for the check item, unique within the same check item.

IPLists
ValuestringNo

User-configured value string for the repair parameter of the check item.

172.26.49.XX
FlowIdstringNo

ID of the repair process during the repair.

7fec0a3395b345c18f108ffc9fc0****
OperationstringNo

Operation type for the custom configuration item of the check item. Only pass DELETE when deleting; no need to pass for creation or update.

DELETE
TypestringNo

Situation Awareness parameter validation types:

  • REPAIR_CONFIG: Repair and custom parameter validation (default)
  • CHECK_ITEM_CONFIG: Custom check item validation
REPAIR_CONFIG
CustomCheckConfigobjectNo

Custom check item to validate input parameters.

VendorstringNo

Cloud asset vendor. Values:

  • ALIYUN: Alibaba Cloud
  • Tencent: Tencent Cloud
  • HUAWEICLOUD: Huawei Cloud
  • Azure: Microsoft
  • AWS: Amazon Web Services (AWS)
ALIYUN
InstanceTypestringNo

Asset types of cloud products. Values:

  • ECS: Elastic Compute Service
  • SLB: Server Load Balancer
  • RDS: Relational Database Service
  • MONGODB: MongoDB Database
  • KVSTORE: Redis Database
  • ACR: Container Registry
  • CSK: CSK
  • VPC: Virtual Private Cloud
  • ACTIONTRAIL: Action Trail
  • CDN: Content Delivery Network
  • CAS: Digital Certificate Management Service [formerly SSL Certificates]
  • RDC: DevOps
  • RAM: Resource Access Management
  • DDOS: Distributed Denial of Service
  • WAF: Web Application Firewall
  • OSS: Object Storage Service
  • POLARDB: POLARDB
  • POSTGRESQL: PostgreSQL
  • MSE: MSE
  • NAS: Network Attached Storage
  • SDDP: Sensitive Data Discovery and Protection
  • EIP: Elastic IP
ECS
InstanceSubTypestringNo

Asset subtype of the cloud product

DISK
CheckRulestringNo

Define rules for custom inspection items.

{"AssociatedData":{"ToDataList":[{"DataName":"ACS_ECS_Instance","PropertyPath":"InstanceId","FromPropertyPath":"InstanceId"}]},"MatchProperty":{"Operator":"AND","MatchProperties":[{"DataName":"ACS_ECS_Disk","PropertyPath":"DiskId","MatchOperator":"EQ","MatchPropertyValue":"testId"}]}}
CloudAssetInstanceobjectNo

Asset instance that requires testing rules

InstanceIdstringNo

Instance ID of the asset.

i-0jl4mjgl261cfrz5****
RegionIdstringNo

The region ID of the instance.

ap-southeast-1

Response parameters

ParameterTypeDescriptionExample
object

Structure of the returned message.

RequestIdstring

The ID of this call request, a unique identifier generated by Alibaba Cloud for the request, which can be used for troubleshooting and problem localization.

7532B7EE-7CE7-5F4D-BF04-B12447DD****
ErrorCheckConfigsarray<object>

List of check parameters with configuration errors.

ErrorCheckConfigobject
Namestring

Name of the custom configuration item for the check item, unique within the same check item.

IpList
Valuestring

User-configured value string for the custom configuration item of the check item.

10.12.4.XX
Typestring

Type of the erroneous parameter:

  • custom: Custom configuration parameter
custom
ErrorCodestring

Error code.

ConfigEqualIllegal
ErrorMsgstring

Error message.

Custom parameter is not equal to corresponding check parameter
LinkErrorConfigsarray<object>

Related configurations causing this error.

LinkErrorConfigobject
Namestring

Name of the check item configuration, unique within the same check item.

IpLists
ShowNamestring

Display name of the user's check configuration.

IP Lists
Typestring

The type of the parameter that caused the error:

  • repair: Repair parameter
  • custom: Custom configuration parameter
repair
ErrorRepairConfigsarray<object>

List of repair parameters with configuration check errors.

ErrorRepairConfigobject
Namestring

Name of the check item's repair configuration, unique within the same check item.

IpLists
Valuestring

Name of the check item's repair parameter, unique within the same check item.

172.26.49.XX
Typestring

The type of the parameter that caused the error:

  • repair: Repair parameter
repair
ErrorCodestring

Error code.

ConfigEqualIllegal
ErrorMsgstring

Error message.

Repair parameter is not equal to corresponding check parameter
LinkErrorConfigsarray<object>

Related configurations causing this error.

LinkErrorConfigobject
Namestring

Name of the check item's configuration, unique within the same check item.

IpList
ShowNamestring

Display name of the user's check configuration.

Ip List
Typestring

The type of the parameter that caused the error:

  • repair: Repair parameter
  • custom: Custom configuration parameter
custom
ErrorCheckCustomConfigobject

Check the error code returned by the custom check item.

ErrorCodestring

Error code when failed. This parameter is not returned upon success.

  • CspmVerifyCheckCustomItemNoPass: The asset did not pass the set custom rules.
  • CspmVerifyCheckCustomItemError: Verification error, there is an issue with the input rule.
CspmVerifyCheckCustomItemNoPass
ErrorMsgstring

Error message

Creation verification failed.

Examples

Sample success responses

JSONformat

{
  "RequestId": "7532B7EE-7CE7-5F4D-BF04-B12447DD****",
  "ErrorCheckConfigs": [
    {
      "Name": "IpList",
      "Value": "10.12.4.XX",
      "Type": "custom",
      "ErrorCode": "ConfigEqualIllegal",
      "ErrorMsg": "Custom parameter is not equal to corresponding check parameter",
      "LinkErrorConfigs": [
        {
          "Name": "IpLists",
          "ShowName": "IP Lists",
          "Type": "repair"
        }
      ]
    }
  ],
  "ErrorRepairConfigs": [
    {
      "Name": "IpLists",
      "Value": "172.26.49.XX\n",
      "Type": "repair",
      "ErrorCode": "ConfigEqualIllegal",
      "ErrorMsg": "Repair parameter is not equal to corresponding check parameter",
      "LinkErrorConfigs": [
        {
          "Name": "IpList",
          "ShowName": "Ip List",
          "Type": "custom"
        }
      ]
    }
  ],
  "ErrorCheckCustomConfig": {
    "ErrorCode": "CspmVerifyCheckCustomItemNoPass",
    "ErrorMsg": "Creation verification failed."
  }
}

Error codes

HTTP status codeError codeError messageDescription
400ParamIllegal.%sThe parameter %s is invalid, please fill it in again.Invalid parameter, please fill in again
400NoPurchaseThe user did not purchase this product.User has not purchased this product
400CspmVerifyItemRuleError.%sAudit check item check rule error: %s.The format of the check item rule does not pass. For details, see the return error code.
403NoPermissioncaller has no permissionYou are not authorized to do this operation.
500ServerErrorServerError-

For a list of error codes, visit the Service error codes.