ModifyInstanceMetadataOptions

更新时间:
复制 MD 格式

Modifies the metadata access configurations of instances in a specific region, including whether to enable the metadata access channel and whether to forcefully use the security hardening mode to access instance metadata.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

ecs:ModifyInstanceMetadataOptions

update

*Instance

acs:ecs:{#regionId}:{#accountId}:instance/{#instanceId}

None None

Request parameters

Parameter

Type

Required

Description

Example

RegionId

string

Yes

The region ID of the instance. You can call the DescribeRegions operation to query the most recent region list.

cn-hangzhou

InstanceId

string

No

The ID of the instance.

i-bp67acfmxaz****

HttpEndpoint

string

Yes

Specifies whether to enable the access channel for instance metadata. Valid values:

  • enabled

  • disabled

Default value: enabled.

Note

For information about instance metadata, see Obtain instance metadata.

enabled

HttpTokens

string

No

Specifies whether to forcefully use the security hardening mode (IMDSv2) to access instance metadata. Valid values:

  • optional: does not forcefully use the security hardening mode (IMDSv2).

  • required: forcefully uses the security hardening mode (IMDSv2). After you set this parameter to required, you cannot access instance metadata in normal mode.

Default value: optional.

Note

For more information about modes of accessing instance metadata, see Obtain instance metadata.

optional

HttpPutResponseHopLimit

integer

No

Note

This parameter is not publicly available.

0

InstanceMetadataTags

string

No

Specifies whether to enable the access channel for instance metadata. Valid values:

  • enabled

  • disabled

Default value: disabled.

Note

The tag key must be a combination of letters, digits, @, colons (:), underscores (_), hyphens (-), periods (.), equal signs (=), and commas (,). The tag key cannot be "." or "..". Otherwise, the tag key cannot be accessed in the metadata.

disabled

Response elements

Element

Type

Description

Example

object

RequestId

string

The request ID.

473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E

Examples

Success response

JSON format

{
  "RequestId": "473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E"
}

Error codes

HTTP status code

Error code

Error message

Description

400 InvalidHttpEndpoint.NotSupported The specified HttpEndpoint not supported, you can use enabled(default) or disabled. The specified HttpEndpoint parameter is invalid. The valid values of this parameter are enabled and disabled. The default value is enabled.
400 InvalidHttpTokens.NotSupported The specified HttpTokens not supported, you can use optional(default) or required. The specified HttpTokens parameter is invalid. The valid values of this parameter are optional and required. The default value is optional.
400 InvalidHttpPutResponseHopLimit.NotSupported The specified HttpPutResponseHopLimit not supported, more than 1 and less than 64 is reasonable. The specified HttpPutResponseHopLimit parameter is invalid. The valid values of this parameter are 1 to 64.
400 InvalidInstanceMetadataTags.NotSupported The specified InstanceMetadataTags not supported.
400 InvalidImdsAccessPolicyId.NotFound The specified parameter ImdsAccessPolicyId is not found. The specified parameter ImdsAccessPolicyId is not found.
404 InvalidInstanceId.NotFound The specified InstanceId is not found. The specified instance ID does not exist.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.