Domain name for API request: csip.intl.tencentcloudapi.com.
This API is used to obtain the asset risk list.
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: DescribeAssetBaselineRiskList. |
| Version | Yes | String | Common Params. The value used for this API: 2022-11-21. |
| Region | No | String | Common Params. This parameter is not required. |
| AssetUniqueID | Yes | String | Unique asset identifier (UUID), used with AssetType to locate a specific asset. |
| AssetType | Yes | String | Asset type. Parameter Value: HOST (host), CLUSTER (cluster). |
| AssetAppID | Yes | Integer | appid of asset ownership |
| MemberId.N | No | Array of String | Group account member id |
| Filters.N | No | Array of Filters | Universal Filter Criteria. Supported fields: ItemName (detection item name, blurry), PolicyName (baseline name, blurry), ResultStatus (result status), RiskLevel (risk level). Different Names are in an AND relationship with each other, and multiple Values under the same Name are in an OR relationship. |
| Limit | No | Integer | Number of items per page for paging query. Maximum value: 100. If exceeded, the server will automatically fall back to the default value 10. |
| Offset | No | Integer | Paging query starting offset amount, starting from 0. |
| Parameter Name | Type | Description |
|---|---|---|
| List | Array of AssetBaselineRisk | Baseline risk repair record list. |
| TotalCount | Integer | Total number of secrets |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
Retrieve the host asset risk list
POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeAssetBaselineRiskList
<Common request parameters>
{
"AssetUniqueID": "87cd7655-**2**4******a1-6267cb76707d",
"AssetType": "HOST",
"AssetAppID": 260083796,
"MemberId": [
"mem-***c**t*6*57*5*5**66e429"
],
"Limit": 10,
"Offset": 0
}{
"Response": {
"List": [
{
"Item": {
"AffectedVersionList": [],
"Category": {
"CheckAssetType": "HOST",
"Description": "CIS Benchmarks from the Center for Internet Security (CIS) are a set of globally recognized consensus-driven best practices"
"ID": 209,
"Name": "International standard—TencentOS 4 security baseline check"
},
"CheckObject": [
"HOST"
],
"CustomItemID": 0,
"CustomValueList": [],
"DefaultValueList": [],
"Description": ".netrc file contains authentication data for logging in to a remote host via FTP for file transfer.",
"FixSuggestion": "The following script will remove the .netrc file from the interactive user's main directory\n#!/bin/bash\n\nawk -F: '($1!~/(halt|sync|shutdown|nfsnobody)/ && $7!~/^(\\/usr)?\\/sbin\\/nologin(\\/)?$/ && $7!~/(\\/usr)?\\/bin\\/false(\\/)?$/) { print $6 }' /etc/passwd | while read -r dir; do\n\tif [ -d \"$dir\" ]; then\n\t\tfile=\"$dir/.netrc\"\n\t\t[ ! -h \"$file\" ] && [ -f \"$file\" ] && rm -f \"$file\"\n\tfi\ndone"
"ID": 5593,
"IsCustomConf": false,
"Name": "Underwrite no .netrc file for all users"
"ReferenceLink": "",
"RiskLevel": "LOW",
"RuleID": 14584,
"SupportCustomValue": false,
"SupportFix": false,
"SystemCategory": {
"CheckAssetType": "HOST",
"Description": "CIS Benchmarks from the Center for Internet Security (CIS) are a set of globally recognized consensus-driven best practices"
"ID": 2,
"Name": "Internationally Compatible Baseline of Best Security Practices (CIS)"
},
"WebEditParam": ""
},
"LatestCheckTime": "2026-09-21T19:25:40Z",
"PolicyInfo": {
"ID": 1008,
"IsSystem": false,
"PolicyName": "vcvbcvb"
},
"ResultStatus": "PASS",
"RiskID": "03d747385c23a17c834615ee0c6f1ea8"
}
],
"TotalCount": 10,
"RequestId": "0bd276e2-31f8-4d34-a327-31ca8a8a2ac7"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
There is no error code related to the API business logic. For other error codes, please see Common Error Codes.
フィードバック