GetOpRiskData

更新时间:
复制 MD 格式

Queries high-risk sensitive data access records for a specified date across all DataWorks workspaces of a tenant.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

PageSize

integer

Yes

The number of entries per page. Maximum value: 1000.

100

PageNo

integer

Yes

The page number. Pages start from 1.

1

Name

string

No

The filter conditions for querying access records. Valid values:

  • dbType

  • instanceName

  • databaseName

  • projectName

  • clusterName

Example: to query access records for the abc database of Hologres instance ABC, use [ {"dbType":"hologres","instanceName":"ABC","databaseName":"abc"} ].

Configure the parameters based on your compute engine.

[ {"dbType":"hologres","instanceName":"ABC","databaseName":"abc"}, {"dbType":"ODPS.ODPS","projectName":"adbc"} ]

Date

string

Yes

The date for which to query access records, in yyyyMMdd format.

20210221

RiskType

string

No

The risk identification method.

  • Manual identification.

  • A sensitive data identification rule. You can obtain the rule name from the Risk Identification Rules page in Data Security Guard on the DataWorks console.

Manual identification

Response elements

Element

Type

Description

Example

object

The returned results.

RiskData

string

High-risk sensitive data information, including totalCount and opRiskDatas. The opRiskDatas array contains the following fields:

  • sensType: the sensitive data type

  • sensLevel: the sensitivity level

  • opType: the operation type

  • sql: the executed SQL statement

  • opAccount: the account used to perform the operation

  • opTime: the time when the operation was performed

{ "opRiskDatas": [ { "riskType": "Hierarchical dimension, EMR engine dimension and project dimension, EMR engine project dimension operation data, export method dimension, EMR engine", "opTime": "2021-01-04 23:39:13", "opType": "SQL_SELECT", "opAccount": "user", "sensType": "Email/name/mobile phone number", "sql": "SELECT * FROM default.jiade_1219_test_create LIMIT 20" } ], "totalCount": 499 }

RequestId

string

The request ID.

0000-ABCD-EFG****

Examples

Success response

JSON format

{
  "RiskData": "{     \"opRiskDatas\": [       {         \"riskType\": \"Hierarchical dimension, EMR engine dimension and project dimension, EMR engine project dimension operation data, export method dimension, EMR engine\",         \"opTime\": \"2021-01-04 23:39:13\",         \"opType\": \"SQL_SELECT\",         \"opAccount\": \"user\",         \"sensType\": \"Email/name/mobile phone number\",         \"sql\": \"SELECT * FROM default.jiade_1219_test_create LIMIT 20\"       }     ],     \"totalCount\": 499   }",
  "RequestId": "0000-ABCD-EFG****"
}

Error codes

HTTP status code

Error code

Error message

Description

400 Invalid.Param The request parameter is invalid.
500 InternalError.DQC.BizError An internal error occurred.
403 Forbidden.NoTenant The tenant information cannot be obtained using user ID.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.