All Products
Search

This Product

    Web Application Firewall:DescribeCloudResourceList

    Document Center

    Web Application Firewall:DescribeCloudResourceList

    Last Updated:Jul 10, 2026

    Queries the list of resources connected to WAF in cloud native mode.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-waf:DescribeCloudResourceList

    list

    *DefenseResource

    acs:yundun-waf:{#regionId}:{#accountId}:defenseresource/{#Resource}

    		 None
    • yundun-waf:DescribeCloudResourceList

    Request syntax

    POST  HTTP/1.1

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    InstanceId

    string

    Yes

    The ID of the WAF instance.

    Note

    You can call DescribeInstance to query the ID of the current WAF instance.

    waf_elasticity-cn-0xldbqt****
    ResourceManagerResourceGroupId

    string

    No

    The ID of the Alibaba Cloud resource group.

    rg-acfm***q
    OwnerUserId

    string

    No

    The UID of the resource ownership user.

    1111111111
    ResourceInstanceId

    string

    No

    The instance ID of the resource.

    i-8vbdlsd********81e22
    Port

    string

    No

    The port of the cloud service connected to WAF.

    80
    ResourceProduct

    string

    No

    The cloud service to which the resource belongs. Valid values:

    • alb: Application Load Balancer (ALB).

    • mse: Microservices Engine (MSE).

    • fc: Function Compute (FC).

    • sae: Serverless App Engine (SAE).

    • ecs: Elastic Compute Service (ECS).

    • clb4: Classic Load Balancer (CLB) (TCP).

    • clb7: Classic Load Balancer (CLB) (HTTP/HTTPS).

    • apig: API Gateway (APIG).

    • nlb: Network Load Balancer (NLB).

    • ddos: Anti-DDoS.

    Note

    Different products are supported in different regions. If you specify a value for this parameter, make sure that the product is supported in the specified region. Otherwise, the query may fail.

    ecs
    CloudResourceId

    string

    No

    The ID of the connected resource, which is automatically generated by WAF in cloud native mode.

    Note

    You can call CreateCloudResource to connect a resource and then view the resource ID in the response.

    i-8vbdlsd********81e22-80-ecs
    NextToken

    string

    No

    The pagination token for the next page. If a value is returned for this parameter, the next page exists.

    Note

    If this parameter has a return value, the next page exists. You can use the returned NextToken value as a request parameter to obtain the next page of data. Repeat this process until no value is returned, which indicates that all data has been retrieved.

    AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS
    MaxResults

    integer

    No

    The number of entries per page in a paged query. Valid values: 1 to 100. Default value: 10.

    10
    RegionId

    string

    No

    The region where the WAF instance resides. Valid values:

    • cn-hangzhou: the Chinese mainland.

    • ap-southeast-1: outside the Chinese mainland.

    cn-hangzhou
    ResourceDomain

    string

    No

    The domain name connected to WAF.

    Note

    This parameter is supported only when the cloud service type is ddos.

    www.c**sw.net
    Region IDRegionSupported products
    cn-hangzhouChina (Hangzhou)SAE,ALB,FC,MSE,ECS,CLB,NLB
    cn-shanghaiChina (Shanghai)SAE,ALB,FC,MSE,ECS,CLB,NLB
    cn-shenzhenChina (Shenzhen)SAE,ALB,FC,MSE,ECS,CLB,NLB
    cn-beijingChina (Beijing)SAE,ALB,FC,MSE,ECS,CLB,NLB
    cn-zhangjiakouChina (Zhangjiakou)SAE,ALB,FC,MSE,ECS,CLB,NLB
    cn-chengduChina (Chengdu)ALB,ECS,CLB,NLB
    cn-qingdaoChina (Qingdao)ALB,ECS,CLB,NLB
    cn-guangzhouChina (Guangzhou)ALB
    cn-wulanchabuChina (Ulanqab)ALB
    cn-hongkongHong Kong (China)ALB,MSE,ECS,CLB,NLB
    cn-fuzhouChina (Fuzhou - Local Region - Discontinuing)ALB
    ap-southeast-6Philippines (Manila)ALB
    ap-southeast-5Indonesia (Jakarta)ALB,ECS,CLB,NLB
    ap-northeast-1Japan (Tokyo)ALB
    ap-southeast-3Malaysia (Kuala Lumpur)ALB,MSE,ECS,CLB,NLB
    ap-southeast-1SingaporeALB,MSE
    eu-central-1Germany (Frankfurt)ALB
    us-west-1US (Silicon Valley)ALB
    us-east-1US (Virginia)ALB

    Response elements

    Element

    Type

    Description

    Example

    object

    RequestId

    string

    The ID of the request.

    F35F45B0-5D6B-4238-BE02-A62D****E840
    NextToken

    string

    The pagination token for the next page. If a value is returned for this parameter, the next page exists.

    Note

    If this parameter has a return value, the next page exists. You can use the returned NextToken value as a request parameter to obtain the next page of data. Repeat this process until no value is returned, which indicates that all data has been retrieved.

    AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS
    TotalCount

    integer

    The total number of entries returned.

    118
    MaxResults

    integer

    The number of entries per page in a paged query.

    20
    CloudResourceList

    array<object>

    The list of resources connected to WAF in cloud native mode.

    object

    The resource connected to WAF in cloud native mode.

    Protocol

    string

    The protocol type. Valid values:

    • http: HTTP.

    • https: HTTPS.

    http
    Port

    integer

    The port of the cloud service connected to WAF.

    80
    ResourceRegionId

    string

    The resource ownership region ID. For valid values, see the supplementary description of response parameters.

    cn-hangzhou
    ResourceInstanceId

    string

    The instance ID of the resource connected to WAF.

    i-8vbdlsd********81e22
    ResourceProduct

    string

    The cloud service to which the resource belongs. Valid values:

    • alb: Application Load Balancer (ALB).

    • mse: Microservices Engine (MSE).

    • fc: Function Compute (FC).

    • sae: Serverless App Engine (SAE).

    • ecs: Elastic Compute Service (ECS).

    • clb4: Classic Load Balancer (CLB) (TCP).

    • clb7: Classic Load Balancer (CLB) (HTTP/HTTPS).

    • nlb: Network Load Balancer (NLB).

    ecs
    CloudResourceId

    string

    The ID of the connected resource, which is automatically generated by WAF.

    i-8vbdlsd********81e22-80-ecs
    ResourceManagerResourceGroupId

    string

    The ID of the Alibaba Cloud resource group.

    rg-aek2uo2****lbka
    ResourceDomain

    string

    The domain name connected to WAF.

    www.c**sw.net

    Examples

    Success response

    JSON format

    {
  "RequestId": "F35F45B0-5D6B-4238-BE02-A62D****E840",
  "NextToken": "AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS",
  "TotalCount": 118,
  "MaxResults": 20,
  "CloudResourceList": [
    {
      "Protocol": "http",
      "Port": 80,
      "ResourceRegionId": "cn-hangzhou",
      "ResourceInstanceId": "i-8vbdlsd********81e22",
      "ResourceProduct": "ecs",
      "CloudResourceId": "i-8vbdlsd********81e22-80-ecs",
      "ResourceManagerResourceGroupId": "rg-aek2uo2****lbka",
      "ResourceDomain": "www.c**sw.net"
    }
  ]
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 Waf.Instance.ValidFaild WAF instance check failed. Check whether the instance ID is correct. WAF instance check failed. Check whether the instance ID is correct.
    400 Waf.Pullin.CloudProductParamEmpty The resource Id of the cloud product accessing WAF is null or null values exist in the three input parameters of the cloud product name, port, and cloud product instance. The resource Id of the cloud product accessing WAF is null or null values exist in the three input parameters of the cloud product name, port, and cloud product instance.
    400 Waf.Pullin.CloudResourceInvalid CloudResourceId parameter is illegal. CloudResourceId parameter is illegal

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.