DescribeApisecExamples-阿里云帮助中心

Retrieves API security examples.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter	Type	Required	Description	Example
InstanceId	string	Yes	The ID of the WAF instance. Note Call the DescribeInstance operation to query the ID of the WAF instance.	waf_elasticity-cn-0xldbqtm005
RegionId	string	No	The region where the WAF instance resides. Valid values: cn-hangzhou: the Chinese mainland. ap-southeast-1: outside the Chinese mainland.	cn-hangzhou
ResourceManagerResourceGroupId	string	No	The ID of the Alibaba Cloud resource group.	rg-acfm***q
ApiId	string	Yes	The ID of the API.	867ade***24ee6e205b8da82b8f84
ExampleType	string	No	The type of the example. Valid values: sensitive: sensitive data. risk: threat.	sensitive
RequestSensitiveTypeList	array	No	The list of sensitive data types in requests.
	string	No	The type of sensitive data in requests.	1001
ResponseSensitiveTypeList	array	No	The list of sensitive data types in responses.
	string	No	The type of sensitive data in responses.	1001
AbnormalTag	string	No	The type of threat.	LackOfSpeedLimit
NextToken	string	No	The token that is used to retrieve the next page of results.	AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS
MaxResults	integer	No	The number of entries to return on each page. Valid values: 1 to 5. Default value: 5.	5
ClusterId	string	No	The ID of the hybrid cloud cluster. Note This parameter is available only in hybrid cloud scenarios. Call the DescribeHybridCloudClusters operation to query information about hybrid cloud clusters.	176

Response elements

Element	Type	Description	Example
	object	The result of the request.
RequestId	string	The ID of the request.	D7861F61-5B61-46CE-A47C-6B19160D5EB0
Examples	array<object>	The list of examples.
	array<object>	The information about the example.
Protocol	string	The type of protocol. Valid values: http: HTTP https: HTTPS	http
ApiUrl	string	The complete request URL.	http://www.test.com/api/v1/hello.php?token=TkJGQw
PocPayload	string	The proof-of-concept (PoC) request.	curl -X GET -H 'Accept: /' -H 'Connection: keep-alive' -H 'User-agent: Mozilla/5.0 (Windows NT 10.0; WOW64)' -H 'Host: www.test.com' -H 'Accept-encoding: gzip, deflate' -H 'Eagleeye-rpcid: 0.1' 'http://www.test.com/api/v1/hello.php?token=TkJGQw'
RequestSensitiveData	array<object>	The list of sensitive data in the request.
	object	The information about the sensitive data in the request.
SensitiveCode	string	The type of sensitive data.	1000
SensitiveDataList	array	The list of sensitive data.
	string	The sensitive data.	90.88.49.19
ResponseSensitiveData	array<object>	The list of sensitive data in the response.
	object	The information about the sensitive data in the response.
SensitiveCode	string	The type of sensitive data.	1000
SensitiveDataList	array	The list of sensitive data.
	string	The sensitive data.	90.88.49.19
Request	string	The content of the sample request. This is a string converted from a JSON object that consists of a series of parameters. The JSON object contains the following fields: method: the request method. host: the requested domain name. header: the request header. server_port: the service port. body: the request body. url: the URI of the request. server_protocol: the server-side protocol. Note If the body content exceeds 16 KB, only a portion of the content is returned.	{ "method": "GET", "host": "www.test.com", "header": { "Accept": "/", "Connection": "keep-alive" }, "server_port": "80", "body": "-", "url": "/api/v1/hello.php?token=TkJGQw", "server_protocol": "HTTP/1.1" }
Response	string	The content of the sample response. This is a string converted from a JSON object that consists of a series of parameters. The JSON object contains the following fields: status: the status code. header: the response header. body: the response body. Note If the body content exceeds 16 KB, only a portion of the content is returned.	{ "header": { "Connection": "keep-alive", "Content-Encoding": "gzip", "Content-Type": "text/html; charset=UTF-8" }, "body": "xxxx", "status": 200 }
NextToken	string	The token that is used to retrieve the next page of results.	AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS
MaxResults	integer	The number of entries returned on each page. Valid values: 1 to 5. Default value: 5.	5
TotalCount	integer	The total number of results.	5

Examples

Success response

JSON format

{
  "RequestId": "D7861F61-5B61-46CE-A47C-6B19160D5EB0",
  "Examples": [
    {
      "Protocol": "http",
      "ApiUrl": "http://www.test.com/api/v1/hello.php?token=TkJGQw",
      "PocPayload": "curl -X GET -H 'Accept: */*' -H 'Connection: keep-alive' -H 'User-agent: Mozilla/5.0 (Windows NT 10.0; WOW64)' -H 'Host: www.test.com' -H 'Accept-encoding: gzip, deflate' -H 'Eagleeye-rpcid: 0.1' 'http://www.test.com/api/v1/hello.php?token=TkJGQw'",
      "RequestSensitiveData": [
        {
          "SensitiveCode": "1000",
          "SensitiveDataList": [
            "90.88.49.19"
          ]
        }
      ],
      "ResponseSensitiveData": [
        {
          "SensitiveCode": "1000",
          "SensitiveDataList": [
            "90.88.49.19"
          ]
        }
      ],
      "Request": "{\n  \"method\": \"GET\",\n  \"host\": \"www.test.com\",\n  \"header\": {\n    \"Accept\": \"*/*\",\n    \"Connection\": \"keep-alive\"\n  },\n  \"server_port\": \"80\",\n  \"body\": \"-\",\n  \"url\": \"/api/v1/hello.php?token=TkJGQw\",\n  \"server_protocol\": \"HTTP/1.1\"\n}",
      "Response": "{\n  \"header\": {\n    \"Connection\": \"keep-alive\",\n    \"Content-Encoding\": \"gzip\",\n    \"Content-Type\": \"text/html; charset=UTF-8\"\n  },\n  \"body\": \"xxxx\",\n  \"status\": 200\n}"
    }
  ],
  "NextToken": "AAAAAGBgV9tolsLfijC4wam2htS*****D/46H3X2wIS",
  "MaxResults": 5,
  "TotalCount": 5
}

Error codes

See for a complete list.

Release notes

See Release Notes for a complete list.