Querying the Diagnosis Result of the Data Source Protection Module

Function

Calling Method

For details, see Calling APIs.

URI

GET /v1/{project_id}/security/diagnose/datasource-protection

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Project ID. For details about how to obtain the project ID, see Project ID and Account ID.

Request Parameters

**Table 2** Request header parameters
Parameter	Mandatory	Type	Description
workspace	Yes	String	Workspace ID. For details about how to obtain the workspace ID, see Instance ID and Workspace ID.
X-Auth-Token	Yes	String	IAM token, which is obtained by calling the IAM API for obtaining a user token (value of X-Subject-Token in the response header). This parameter is mandatory for token authentication.

Response Parameters

Status code: 200

**Table 3** Response body parameters
Parameter	Type	Description
task_id	String	Diagnosis task ID
scanning	Boolean	Whether a scan is in progress
check_time	Long	Last check time
kerberos	SecurityCertification object	Security authentication diagnosis result
public_network_access	PublicNetworkAccess object	Internet access diagnosis result
security_group	SecurityGroupResult object	Security group diagnosis result

**Table 4** SecurityCertification
Parameter	Type	Description
result	String	detection results NO_RISK MEDIUM_RISK HIGH_RISK NOT_SCANNED
kerberos_info	Array of KerberosStatus objects	Kerberos information

**Table 5** KerberosStatus
Parameter	Type	Description
cluster_id	String	Cluster ID.
cluster_name	String	Cluster name.
status	Boolean	Whether Kerberos authentication is enabled. Value true indicates that it is enabled, and false indicates that it is disabled.

**Table 6** PublicNetworkAccess
Parameter	Type	Description
result	String	detection results NO_RISK MEDIUM_RISK HIGH_RISK NOT_SCANNED
public_network_info	Array of PublicNetworkStatus objects	Kerberos information

**Table 7** PublicNetworkStatus
Parameter	Type	Description
cluster_id	String	Cluster ID.
cluster_name	String	Cluster name.
status	Boolean	Whether Internet access is enabled. Value true indicates that it is enabled, and false indicates that it is disabled.
ip	String	Internet IP address

**Table 8** SecurityGroupResult
Parameter	Type	Description
result	String	detection results NO_RISK MEDIUM_RISK HIGH_RISK NOT_SCANNED
security_group	Array of SecurityGroupStatus objects	Kerberos information

**Table 9** SecurityGroupStatus
Parameter	Type	Description
cluster_id	String	Cluster ID.
cluster_name	String	Cluster name.
security_group_name	String	Security group name.
group_description	String	Risk description

Example Requests

/v1/0833a5737480d53b2f25c010dc1a7b88/security/diagnose/datasource-protection

Example Responses

Status code: 200

{
  "check_time" : 1716455965000,
  "kerberos" : {
    "kerberos_info" : [ {
      "cluster_id" : "ec26b187-626a-4e89-bd1f-6824fbcfb2b6",
      "cluster_name" : "mrs_noauth_autotest_do_not_del",
      "status" : false
    } ],
    "result" : "MEDIUM_RISK"
  },
  "public_network_access" : {
    "public_network_info" : [ {
      "cluster_id" : "ec26b187-626a-4e89-bd1f-6824fbcfb2b6",
      "cluster_name" : "mrs_noauth_autotest_do_not_del",
      "ip" : "100.93.6.203",
      "status" : true
    } ],
    "result" : "MEDIUM_RISK"
  },
  "scanning" : false,
  "security_group" : {
    "result" : "MEDIUM_RISK",
    "security_group" : [ {
      "cluster_id" : "ec26b187-626a-4e89-bd1f-6824fbcfb2b6",
      "cluster_name" : "mrs_noauth_autotest_do_not_del",
      "group_description" : "default",
      "security_group_name" : "default"
    } ]
  },
  "task_id" : "bd10160985ff47dd8f1edf8115a3cec3"
}