All Products
Search
Document Center

Virtual Private Cloud:AssociateNetworkAcl

Last Updated:Aug 28, 2026

Associates a network ACL with a vSwitch.

Operation description

Description

  • AssociateNetworkAcl is an asynchronous operation. After you send a request, the system returns a request ID and runs the task in the background. Call DescribeNetworkAclAttributes to query the task status.

    • If the network ACL is in the BINDING state, the association is in progress.

    • If the network ACL is in the BINDED state, the association is complete.

  • Do not call AssociateNetworkAcl repeatedly within the specified period of time.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

Resource

array<object>

No

The resources to associate.

object

No

ResourceType

string

Yes

The resource type. Set the value to vSwitch.

Valid values of N: 0 to 29. You can associate up to 30 vSwitches.

vSwitch

ResourceId

string

Yes

The resource ID.

vsw-bp1de348lntdw****

NetworkAclId

string

Yes

The ID of the network ACL.

nacl-a2do9e413e0sp****

RegionId

string

Yes

The region ID of the network ACL. Call DescribeRegions to query available regions.

cn-hangzhou

ClientToken

string

No

The client token that ensures the idempotence of the request.

You can use the client to generate the token. The token must be unique across requests and can contain only ASCII characters.

Note

If you do not specify this parameter, the system uses the request ID as the client token. The request ID may differ for each request.

123e4567-e89b-12d3-a456-426655440000

DryRun

boolean

No

Specifies whether to perform a dry run without making the actual request.

false

RegionId

string

Yes

The region ID of the network ACL. Call DescribeRegions to query available regions.

cn-hangzhou

Response elements

Element

Type

Description

Example

object

RequestId

string

The request ID.

4CF20CC7-D1FC-425B-A15B-DF7C8E2131A7

Examples

Success response

JSON format

{
  "RequestId": "4CF20CC7-D1FC-425B-A15B-DF7C8E2131A7"
}

Error codes

HTTP status code

Error code

Error message

Description

400 ParameterMissing.AliUid ParameterMissing.AliUid
400 ParameterMissing.Bid ParameterMissing.Bid
400 ParameterMissing.RegionId ParameterMissing.RegionId
400 ParameterEmpty.RegionId ParameterEmpty.RegionId
400 ParameterMissing.NetworkAclId ParameterMissing.NetworkAclId
400 ParameterEmpty.NetworkAclId ParameterEmpty.NetworkAclId
400 ParameterMissing.Resources ParameterMissing.Resources
400 ParameterEmpty.Resources ParameterEmpty.Resources
400 InvalidNetworkAcl.NotFound The special Network Acl is not found. The network ACL is not found.
400 NetworkStatus.Modifying The special Network Acl is in modifying. The network ACL is being modified.
400 ResourceStatus.Error The binding instance is in middle status. The status of the instance is invalid.
400 InvalidResource.NotFound The binding instance is not found.
400 InvalidResource.VpcError The network acl and resource not in same vpc.
400 InvalidResource.BindingExist The binding instance has been binded. The instance is already in the Associated state.
400 NotSupport.NetworkAcl Network acl is not support now.
400 ParameterIllegal.ResourceType The specified resource type is illegal.
400 MissingParam.Resource Missing parameter Resource. Missing parameter Resource
400 OperationDenied.NetworkAclAttachmentInMiddleStatus The network ACL is being bound to or unbound from the switch. The network ACL is being bound to or unbound from the switch.
500 InternalError The request processing has failed due to some unknown error.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.