查询配置审计提供的所有合规包模板及其详细信息。
接口说明
合规包模板是配置审计根据合规场景定制的一组规则的集合。
调试
您可以在OpenAPI Explorer中直接运行该接口,免去您计算签名的困扰。运行成功后,OpenAPI Explorer可以自动生成SDK代码示例。

授权信息
请求参数
名称 |
类型 |
必填 |
描述 |
示例值 |
CompliancePackTemplateId |
string |
否 |
合规包模板 ID。 |
ct-5f26ff4e06a300c4**** |
RuleRiskLevel |
integer |
否 |
合规包中规则模板的风险等级。取值:
|
2 |
PageSize |
integer |
否 |
分页时每页显示的数据行数。 取值范围:1~100。起始值:1。默认值:10。 |
10 |
PageNumber |
integer |
否 |
页码。 起始值:1。默认值:1。 |
1 |
ResourceTypes |
string |
否 |
规则评估的资源类型。输入该参数时,只返回合规包模板中包括该资源类型的规则。 |
ACS::ECS::Instance |
FilterType |
string |
否 |
查询过滤字段。 |
LAW |
关于公共请求参数的详情,请参见公共参数。
返回参数
名称 |
类型 |
描述 |
示例值 |
object |
无 |
||
CompliancePackTemplatesResult |
object |
合规包模板详情。 |
|
PageSize |
integer |
分页时每页显示的数据行数。 |
10 |
PageNumber |
integer |
页码。 |
1 |
TotalCount |
integer |
合规包模板总数。 |
1 |
CompliancePackTemplates |
array<object> |
合规包模板列表。 |
|
object |
无 |
||
RiskLevel |
integer |
合规包中规则模板的风险等级。取值:
|
1 |
Description |
string |
合规包描述。 |
Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3. |
ConfigRules |
array<object> |
合规包中默认规则列表。 |
|
object |
无 |
||
Description |
string |
规则描述。 |
If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state. |
ManagedRuleIdentifier |
string |
规则模板标识。 |
ecs-instance-updated-security-vul |
ManagedRuleName |
string |
规则模板名称。 |
ecs-instance-updated-security-vul |
ConfigRuleParameters |
array<object> |
规则模板参数信息。 |
|
object |
无 |
||
Required |
boolean |
规则模板中参数是否必填。取值:
|
true |
ParameterName |
string |
规则模板的参数名称。 |
necessity |
ParameterValue |
string |
规则模板的参数值。 |
asap |
RiskLevel |
integer |
规则模板的风险等级。取值:
|
2 |
ControlId |
string |
法规条例 ID。 说明
仅法规类合规包显示该参数。 |
8.1.4.4 |
ControlDescription |
string |
法规类条目原文描述,只有法规类合规包包含此信息。 |
e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events. |
DefaultEnable |
boolean |
规则是否支持快速启用。取值:
|
false |
ResourceTypesScope |
string |
规则评估的资源类型。 |
ACS::ECS::Instance |
CompliancePackTemplateName |
string |
合规包模板名称。 |
ClassifiedProtectionPreCheck |
CompliancePackTemplateId |
string |
合规包模板 ID。 |
ct-5f26ff4e06a300c4**** |
Labels |
string |
合规包的分类标签。 |
Regulation |
LastUpdate |
integer |
合规包最后更新的时间戳。 |
1747983081 |
RequestId |
string |
请求 ID。 |
D67FC82F-25AE-4268-A94C-3348340748F9 |
示例
正常返回示例
JSON
格式
{
"CompliancePackTemplatesResult": {
"PageSize": 10,
"PageNumber": 1,
"TotalCount": 1,
"CompliancePackTemplates": [
{
"RiskLevel": 1,
"Description": "Checks the compliance of Alibaba Cloud resources based on the specific requirements of MLPS 2.0 Level 3.",
"ConfigRules": [
{
"Description": "If no vulnerabilities that are of the specified type and severity level and to be fixed exist on the running ECS instances that are protected by Security Center, the configuration is considered compliant. This rule does not apply to ECS instances that are not in the running state.",
"ManagedRuleIdentifier": "ecs-instance-updated-security-vul",
"ManagedRuleName": "ecs-instance-updated-security-vul",
"ConfigRuleParameters": [
{
"Required": true,
"ParameterName": "necessity",
"ParameterValue": "asap"
}
],
"RiskLevel": 2,
"ControlId": "8.1.4.4",
"ControlDescription": "e) Possible known vulnerabilities should be found and remedied in a timely manner after adequate testing and evaluation.\\nf) It shall be able to detect intrusion into important nodes and provide an alarm in case of serious intrusion events.",
"DefaultEnable": false,
"ResourceTypesScope": "ACS::ECS::Instance"
}
],
"CompliancePackTemplateName": "ClassifiedProtectionPreCheck",
"CompliancePackTemplateId": "ct-5f26ff4e06a300c4****",
"Labels": "Regulation",
"LastUpdate": 1747983081
}
]
},
"RequestId": "D67FC82F-25AE-4268-A94C-3348340748F9"
}
错误码
HTTP status code |
错误码 |
错误信息 |
描述 |
---|---|---|---|
400 | NoPermission | You are not authorized to perform this operation. | 您无权执行此操作。 |
404 | AccountNotExisted | Your account does not exist. | |
503 | ServiceUnavailable | The request has failed due to a temporary failure of the server. | 服务不可用。 |
访问错误中心查看更多错误码。
变更历史
更多信息,参考变更详情。