Domain name for API request: csip.intl.tencentcloudapi.com.
This API is used to modify the CSC abnormal login self-learning allowlist rule group, locating the entire group by (AppId, common login location). Constraints: creating is not supported, and taking effect by tag is not supported (TagIDs must be empty). Only Scope=0 direct selection and Scope=1 all assets + removal are supported. Reject when the rule group row count exceeds 5000. In a single transaction, insert first and delete later. It takes effect within one cache cycle (default 120s) after editing. This API does not rescan historical alarms.
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: ModifyLoginWhiteLearnEDR. |
| Version | Yes | String | Common Params. The value used for this API: 2022-11-21. |
| Region | No | String | Common Params. This parameter is not required. |
| Id | Yes | Integer | Rule ID; for self-learning, it is the rule group ID (minimum line ID in the group) |
| Places.N | Yes | Array of LoginWhitePlaceInput | List of common login locations. Required. 1-200 entries. It is the unique content dimension of the self-learning rule. |
| MemberId.N | No | Array of String | Group account member id |
| RuleAppId | No | Integer | AppId of the account associated with the policy (obtained from the list output parameter AppId); if empty, the current account is used; non-current accounts must pass ownership verification |
| Remark | No | String | Remark, up to 255 characters |
| Scope | No | Integer | Effective asset scope: 0-specified hosts (host or tag hit) 1-all hosts |
| InstanceIDsWithAppId.N | No | Array of InstanceIDWithAppIdItem | List of specified hosts (in instance ID form), up to 10,000 items. The server translates them to QUUIDs via idmap, then merges and deduplicates them with QUUIDSWithAppId. |
| ExcludeInstanceIDsWithAppId.N | No | Array of InstanceIDWithAppIdItem | List of hosts (instance ID form) to remove, up to 10,000 items |
| TagIDs.N | No | Array of String | Security center tag ID list, up to 100. When Scope=0, it is in an OR relationship with the host. Self-learning allowlist does not support taking effect by tag (a non-empty value will be rejected). |
| Parameter Name | Type | Description |
|---|---|---|
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
Modify exception login self-learning allowlist (all assets + remove host)
POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: ModifyLoginWhiteLearnEDR
<Common request parameters>
{
"Id": 39781687,
"Places": [
{
"CountryId": 1,
"ProvinceId": 1,
"CityId": 1
}
],
"RuleAppId": 260199983,
"Remark": "remark2",
"Scope": 0,
"InstanceIDsWithAppId": [
{
"AppId": 260199983,
"InstanceID": "ins-2zltluch"
}
]
}{
"Response": {
"RequestId": "6f81cb29-2f49-49e3-b27b-f7062ea5841e"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
| Error Code | Description |
|---|---|
| FailedOperation | Operation failed. |
| InternalError | Internal error. |
| InvalidParameter | Parameter error. |
| ResourceNotFound | The resource does not exist. |
フィードバック