Creates an access control list (ACL).

You can create multiple ACLs. Each ACL can contain one or more IP addresses or CIDR blocks. Before you create an ACL, take note of the following limits:

  • An account can have a maximum of 50 ACLs in each region.
  • You can add a maximum of 50 IP addresses or CIDR blocks at a time within an account.
  • Each ACL can contain a maximum of 300 IP addresses or CIDR blocks.


OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String Yes CreateAccessControlList

The operation that you want to perform. Set the value to CreateAccessControlList.

AclName String Yes rule1

The name of the ACL. The name must be 1 to 80 characters in length, and can contain letters, digits, periods (.), hyphens (-), forward slashes (/), and underscores (_). The name of the ACL that you create must be unique within each region.

RegionId String Yes cn-hangzhou

The ID of the region where you want to create the ACL.

AddressIPVersion String No ipv4

The IP version. Valid values: ipv4 and ipv6.

ResourceGroupId String No rg-atstuj3rt******

The ID of the resource group to which the ACL belongs.

Response parameters

Parameter Type Example Description
AclId String acl-rj9xpxzcwxrukois****

The ID of the ACL.

RequestId String 988CB45E-1643-48C0-87B4-928DDF77EA49

The ID of the request.


Sample requests

&<Common request parameters>

Sample success responses

XML format


JSON format

    "RequestId": "988CB45E-1643-48C0-87B4-928DDF77EA49",
    "AclId": "acl-rj9xpxzcwxrukois****"

Error codes

For a list of error codes, visit the API Error Center.