All Products
Search
Document Center

Web Application Firewall:ModifyCloudResourceCert

Last Updated:Mar 11, 2026

Modifies the certificate for a resource managed by WAF in cloud native mode.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request syntax

POST  HTTP/1.1

Request parameters

Parameter

Type

Required

Description

Example

InstanceId

string

Yes

The ID of the WAF instance.

Note

Call the DescribeInstance operation to query the ID of the WAF instance.

waf_v2_public_cn-***

ResourceProductdeprecated

string

No

The type of the cloud product. Valid values:

  • ecs: Elastic Compute Service (ECS).

  • clb4: Layer 4 Classic Load Balancer (CLB).

  • nlb: Network Load Balancer (NLB).

clb4

ResourceInstanceIddeprecated

string

No

The ID of the cloud product instance.

lb-bp1*****jqnnqk5uj2p

Portdeprecated

integer

No

The port of the cloud product that is added to WAF.

443

Certificates

array<object>

Yes

The list of certificates.

Note

Enter all certificate IDs. This includes the default certificate and all additional certificates. After you submit the request, WAF compares the submitted IDs with the existing ones. WAF adds new certificates and deletes certificates that are not in your list. Deleting a certificate may affect related services.

object

Yes

The list of certificates.

CertificateId

string

Yes

The ID of the certificate.

232***-cn-hangzhou

AppliedType

string

Yes

The type of the certificate for the HTTPS protocol. Valid values:

  • default: the default certificate.

  • extension: the additional certificate.

default

RegionId

string

Yes

The region where the WAF instance resides. Valid values:

  • cn-hangzhou: the Chinese mainland.

  • ap-southeast-1: outside the Chinese mainland.

cn-hangzhou

CloudResourceId

string

No

The ID of the resource that is added to WAF. WAF automatically generates this ID when you add the resource in cloud native mode.

Note

Call the CreateCloudResource operation to add a resource. Then, view the resource ID in the response.

lb-bp*********k5uj2p-443-clb7

Response elements

Element

Type

Description

Example

object

The response schema.

RequestId

string

The ID of the request.

A47D2DC0-7151-51EF-BFB7-***

Examples

Success response

JSON format

{
  "RequestId": "A47D2DC0-7151-51EF-BFB7-***"
}

Error codes

HTTP status code

Error code

Error message

Description

400

Waf.Pullin.CertNotExist

Certificate does not exist in SSL Certificate Center, certificate type:%s, certificate ID:%s.

Certificate does not exist in SSL Certificate Center, certificate type:%s, certificate ID:%s.

400

Waf.Pullin.OnlyBeOneDefaultCert

There can be only one default certificate.

There can be only one default certificate.

400

Waf.Pullin.MaxCertCountLimit

The number of selected certificate IDs exceeds the maximum number in the system.

The number of selected certificate IDs exceeds the maximum number in the system.

400

Waf.Pullin.CertExpired

Certificate expired, certificate ID:%s .

400

Waf.Pullin.CloudResourceInvalid

CloudResourceId parameter is illegal.

CloudResourceId parameter is illegal

400

Waf.Pullin.CloudProductParamEmpty

The resource Id of the cloud product accessing WAF is null or null values exist in the three input parameters of the cloud product name, port, and cloud product instance.

The resource Id of the cloud product accessing WAF is null or null values exist in the three input parameters of the cloud product name, port, and cloud product instance.

400

Waf.Pullin.CloudProductParamNotMatch

The value of the cloud product, port, instance, and input parameter to which the resource ID of the cloud product is connected to WAF does not match.

The value of the cloud product, port, instance, and input parameter to which the resource ID of the cloud product is connected to WAF does not match.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.