DescribeAbnormalCloudResources - Web Application Firewall

Queries abnormal cloud resources added in cloud native mode.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-waf:DescribeAbnormalCloudResources

none

*All Resource

*

acs:ResourceGroupId

None

Request parameters

Parameter	Type	Required	Description	Example
InstanceId	string	Yes	The ID of the Web Application Firewall (WAF) instance. Note Call the DescribeInstance operation to query the ID of your WAF instance.	waf_v3prepaid_public_cn-***
RegionId	string	No	The region where the WAF instance resides. Valid values: cn-hangzhou: the Chinese mainland. ap-southeast-1: a region outside the Chinese mainland.	cn-hangzhou
ResourceManagerResourceGroupId	string	No	The ID of the Alibaba Cloud resource group.	rg-acfm***q

Response elements

Element	Type	Description	Example
	object	Schema of Response
RequestId	string	The ID of the request.	66A98669-CC6E-4F3E-80A6-***
AbnormalCloudResources	array<object>	Information about the abnormal cloud resources that are added in cloud native mode.
	array<object>	A cloud resource that is in an abnormal state.
ResourceInstanceId	string	The ID of the instance that is added to WAF.	lb-***
ResourceInstancePort	integer	The port of the instance that is added to WAF.	80
ResourceInstanceName	string	The name of the instance that is added to WAF.	test-name
ResourceProduct	string	The cloud service to which the resource belongs. By default, instances of Application Load Balancer (ALB), MSE, FC, and SAE are returned. Valid values: alb: ALB. mse: MSE. fc: FC. sae: SAE. ecs: ECS. clb4: Classic Load Balancer (CLB) that uses TCP. clb7: CLB that uses HTTP or HTTPS. nlb: Network Load Balancer (NLB). Note Each cloud service is supported in different regions. If you specify this parameter, make sure that the specified cloud service is supported in the selected region. Otherwise, the request may fail.	clb7
Reason	string	The cause of the exception. Valid values: InvalidCert: The certificate is invalid. ClientCertOpend: Mutual authentication is enabled. NetworkConfigLost: A network error occurred. UserUploadCert: A custom certificate is uploaded. CertNotExistInCertCenter: The certificate ID does not exist in SSL Certificate Service. CertExpired: The certificate has expired. EmptyCertCN: The common name (CN) is empty.	CertExpired
Details	array<object>	The details of the exception.
	object	The details of the exception.
Code	string	The cause of the exception. Valid values: InvalidCert: The certificate is invalid. ClientCertOpend: Mutual authentication is enabled. NetworkConfigLost: A network error occurred. UserUploadCert: A custom certificate is uploaded. CertNotExistInCertCenter: The certificate ID does not exist in SSL Certificate Service. CertExpired: The certificate has expired. EmptyCertCN: The CN is empty.	CertExpired
CertName	string	The name of the certificate in SSL Certificate Service.	test-name
ProductCertId	string	The ID of the certificate that is configured in the cloud service console.	123-cn-hangzhou
ProductCertName	string	The name of the certificate that is configured in the cloud service console.	test-cert-name
ProductDomainExtension	string	The additional domain name that is configured in the cloud service console.	www.test.com
AppliedType	string	The type of the certificate for the HTTPS protocol. Valid values: default: default certificate. extension: additional certificate.	default
CommonName	string	The common name (CN).	www.test.com
ExpireTime	integer	The time when the certificate expires. This value is a UNIX timestamp. Unit: milliseconds.	1735009193
CloudResourceId	string	The ID of the added resource. The ID is automatically generated by WAF.

Examples

Success response

JSON format

{
  "RequestId": "66A98669-CC6E-4F3E-80A6-***",
  "AbnormalCloudResources": [
    {
      "ResourceInstanceId": "lb-***",
      "ResourceInstancePort": 80,
      "ResourceInstanceName": "test-name",
      "ResourceProduct": "clb7",
      "Reason": "CertExpired",
      "Details": [
        {
          "Code": "CertExpired",
          "CertName": "test-name",
          "ProductCertId": "123-cn-hangzhou",
          "ProductCertName": "test-cert-name",
          "ProductDomainExtension": "www.test.com",
          "AppliedType": "default",
          "CommonName": "www.test.com\n",
          "ExpireTime": 1735009193
        }
      ],
      "CloudResourceId": ""
    }
  ]
}

Error codes

HTTP status code	Error code	Error message	Description
400	Waf.Pullin.CertNotExist	Certificate does not exist in SSL Certificate Center, certificate type:%s, certificate ID:%s.	Certificate does not exist in SSL Certificate Center, certificate type:%s, certificate ID:%s.
400	Waf.Pullin.ResourceNotExist	The accessed resource already exists. Resource:%s.	The accessed resource already exists. Resource:%s.
400	Waf.Pullin.AlreadyAccessed	The cloud product has been accessed. Instance ID:%s, Port:%s, Product Type:%s.	The cloud product has been accessed. Instance ID:%s, Port:%s, Product Type:%s.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.