Ignorar, dejar de ignorar, reparar o verificar los elementos de verificación de configuración fallidos

Función

Ignorar, dejar de ignorar, reparar o verificar los elementos de verificación de configuración fallidos

Método de invocación

Para obtener más información, consulte Invocación a las API.

URI

PUT /v5/{project_id}/baseline/check-rule/action

Parámetros de solicitud

Parámetros de respuesta

Ninguna

Solicitudes de ejemplo

• Esta API se utiliza para ignorar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación se aplica a todos los servidores afectados.

  PUT https://{endpoint}/v5/{project_id}/baseline/check-rule/action?enterprise_project_id=xxx&action=ignore
  
  {
    "check_rules" : [ {
      "check_name" : "SSH",
      "check_rule_id" : "1.11",
      "standard" : "hw_standard"
    } ]
  }

• Esta API se utiliza para restaurar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación solo se aplica al servidor cuyo ID es xxx. Los parámetros de restauración son los siguientes: Establezca el valor del elemento de reparación cuyo ID es de 1 a 5 y el valor del elemento de reparación cuyo ID es de 2 a 20.

  PUT https://{endpoint}/v5/{project_id}/baseline/check-rule/action?enterprise_project_id=xxx&host_id=xxx&action=fix
  
  {
    "check_rules" : [ {
      "check_name" : "SSH",
      "check_rule_id" : "1.11",
      "standard" : "hw_standard",
      "fix_values" : [ {
        "rule_param_id" : 1,
        "fix_value" : 5
      }, {
        "rule_param_id" : 2,
        "fix_value" : 20
      } ]
    } ]
  }

Ejemplo de respuestas

Ninguna

Código de ejemplo del SDK

El código de ejemplo del SDK es el siguiente.

Java

• Esta API se utiliza para ignorar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación se aplica a todos los servidores afectados.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

  package com.huaweicloud.sdk.test; import com.huaweicloud.sdk.core.auth.ICredential; import com.huaweicloud.sdk.core.auth.BasicCredentials; import com.huaweicloud.sdk.core.exception.ConnectionException; import com.huaweicloud.sdk.core.exception.RequestTimeoutException; import com.huaweicloud.sdk.core.exception.ServiceResponseException; import com.huaweicloud.sdk.hss.v5.region.HssRegion; import com.huaweicloud.sdk.hss.v5.*; import com.huaweicloud.sdk.hss.v5.model.*; import java.util.List; import java.util.ArrayList; public class ChangeCheckRuleActionSolution { public static void main(String[] args) { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment String ak = System.getenv("CLOUD_SDK_AK"); String sk = System.getenv("CLOUD_SDK_SK"); ICredential auth = new BasicCredentials() .withAk(ak) .withSk(sk); HssClient client = HssClient.newBuilder() .withCredential(auth) .withRegion(HssRegion.valueOf("<YOUR REGION>")) .build(); ChangeCheckRuleActionRequest request = new ChangeCheckRuleActionRequest(); request.withEnterpriseProjectId("<enterprise_project_id>"); request.withHostId("<host_id>"); request.withAction("<action>"); CheckRuleIdListRequestInfo body = new CheckRuleIdListRequestInfo(); List<CheckRuleKeyInfoRequestInfo> listbodyCheckRules = new ArrayList<>(); listbodyCheckRules.add( new CheckRuleKeyInfoRequestInfo() .withCheckName("SSH") .withCheckRuleId("1.11") .withStandard("hw_standard") ); body.withCheckRules(listbodyCheckRules); request.withBody(body); try { ChangeCheckRuleActionResponse response = client.changeCheckRuleAction(request); System.out.println(response.toString()); } catch (ConnectionException e) { e.printStackTrace(); } catch (RequestTimeoutException e) { e.printStackTrace(); } catch (ServiceResponseException e) { e.printStackTrace(); System.out.println(e.getHttpStatusCode()); System.out.println(e.getRequestId()); System.out.println(e.getErrorCode()); System.out.println(e.getErrorMsg()); } } }

• This API is used to restore the configuration check items whose baseline name is SSH, check item ID is 1.11, check standard is cloud security practice standard, and enterprise project ID is xxx. This operation applies only to the server whose ID is xxx. The restoration parameters are as follows: Set the value of the repair item whose ID is 1 to 5 and the value of the repair item whose ID is 2 to 20.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72

  package com.huaweicloud.sdk.test; import com.huaweicloud.sdk.core.auth.ICredential; import com.huaweicloud.sdk.core.auth.BasicCredentials; import com.huaweicloud.sdk.core.exception.ConnectionException; import com.huaweicloud.sdk.core.exception.RequestTimeoutException; import com.huaweicloud.sdk.core.exception.ServiceResponseException; import com.huaweicloud.sdk.hss.v5.region.HssRegion; import com.huaweicloud.sdk.hss.v5.*; import com.huaweicloud.sdk.hss.v5.model.*; import java.util.List; import java.util.ArrayList; public class ChangeCheckRuleActionSolution { public static void main(String[] args) { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment String ak = System.getenv("CLOUD_SDK_AK"); String sk = System.getenv("CLOUD_SDK_SK"); ICredential auth = new BasicCredentials() .withAk(ak) .withSk(sk); HssClient client = HssClient.newBuilder() .withCredential(auth) .withRegion(HssRegion.valueOf("<YOUR REGION>")) .build(); ChangeCheckRuleActionRequest request = new ChangeCheckRuleActionRequest(); request.withEnterpriseProjectId("<enterprise_project_id>"); request.withHostId("<host_id>"); request.withAction("<action>"); CheckRuleIdListRequestInfo body = new CheckRuleIdListRequestInfo(); List<CheckRuleFixValuesInfo> listCheckRulesFixValues = new ArrayList<>(); listCheckRulesFixValues.add( new CheckRuleFixValuesInfo() .withRuleParamId(1) .withFixValue(5) ); listCheckRulesFixValues.add( new CheckRuleFixValuesInfo() .withRuleParamId(2) .withFixValue(20) ); List<CheckRuleKeyInfoRequestInfo> listbodyCheckRules = new ArrayList<>(); listbodyCheckRules.add( new CheckRuleKeyInfoRequestInfo() .withCheckName("SSH") .withCheckRuleId("1.11") .withStandard("hw_standard") .withFixValues(listCheckRulesFixValues) ); body.withCheckRules(listbodyCheckRules); request.withBody(body); try { ChangeCheckRuleActionResponse response = client.changeCheckRuleAction(request); System.out.println(response.toString()); } catch (ConnectionException e) { e.printStackTrace(); } catch (RequestTimeoutException e) { e.printStackTrace(); } catch (ServiceResponseException e) { e.printStackTrace(); System.out.println(e.getHttpStatusCode()); System.out.println(e.getRequestId()); System.out.println(e.getErrorCode()); System.out.println(e.getErrorMsg()); } } }

Python

• Esta API se utiliza para ignorar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación se aplica a todos los servidores afectados.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42

  # coding: utf-8 from huaweicloudsdkcore.auth.credentials import BasicCredentials from huaweicloudsdkhss.v5.region.hss_region import HssRegion from huaweicloudsdkcore.exceptions import exceptions from huaweicloudsdkhss.v5 import * if __name__ == "__main__": # The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. # In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak = __import__('os').getenv("CLOUD_SDK_AK") sk = __import__('os').getenv("CLOUD_SDK_SK") credentials = BasicCredentials(ak, sk) \ client = HssClient.new_builder() \ .with_credentials(credentials) \ .with_region(HssRegion.value_of("<YOUR REGION>")) \ .build() try: request = ChangeCheckRuleActionRequest() request.enterprise_project_id = "<enterprise_project_id>" request.host_id = "<host_id>" request.action = "<action>" listCheckRulesbody = [ CheckRuleKeyInfoRequestInfo( check_name="SSH", check_rule_id="1.11", standard="hw_standard" ) ] request.body = CheckRuleIdListRequestInfo( check_rules=listCheckRulesbody ) response = client.change_check_rule_action(request) print(response) except exceptions.ClientRequestException as e: print(e.status_code) print(e.request_id) print(e.error_code) print(e.error_msg)

• This API is used to restore the configuration check items whose baseline name is SSH, check item ID is 1.11, check standard is cloud security practice standard, and enterprise project ID is xxx. This operation applies only to the server whose ID is xxx. The restoration parameters are as follows: Set the value of the repair item whose ID is 1 to 5 and the value of the repair item whose ID is 2 to 20.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53

  # coding: utf-8 from huaweicloudsdkcore.auth.credentials import BasicCredentials from huaweicloudsdkhss.v5.region.hss_region import HssRegion from huaweicloudsdkcore.exceptions import exceptions from huaweicloudsdkhss.v5 import * if __name__ == "__main__": # The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. # In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak = __import__('os').getenv("CLOUD_SDK_AK") sk = __import__('os').getenv("CLOUD_SDK_SK") credentials = BasicCredentials(ak, sk) \ client = HssClient.new_builder() \ .with_credentials(credentials) \ .with_region(HssRegion.value_of("<YOUR REGION>")) \ .build() try: request = ChangeCheckRuleActionRequest() request.enterprise_project_id = "<enterprise_project_id>" request.host_id = "<host_id>" request.action = "<action>" listFixValuesCheckRules = [ CheckRuleFixValuesInfo( rule_param_id=1, fix_value=5 ), CheckRuleFixValuesInfo( rule_param_id=2, fix_value=20 ) ] listCheckRulesbody = [ CheckRuleKeyInfoRequestInfo( check_name="SSH", check_rule_id="1.11", standard="hw_standard", fix_values=listFixValuesCheckRules ) ] request.body = CheckRuleIdListRequestInfo( check_rules=listCheckRulesbody ) response = client.change_check_rule_action(request) print(response) except exceptions.ClientRequestException as e: print(e.status_code) print(e.request_id) print(e.error_code) print(e.error_msg)

Go

• Esta API se utiliza para ignorar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación se aplica a todos los servidores afectados.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53

  package main import ( "fmt" "github.com/huaweicloud/huaweicloud-sdk-go-v3/core/auth/basic" hss "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5" "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/model" region "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/region" ) func main() { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak := os.Getenv("CLOUD_SDK_AK") sk := os.Getenv("CLOUD_SDK_SK") auth := basic.NewCredentialsBuilder(). WithAk(ak). WithSk(sk). Build() client := hss.NewHssClient( hss.HssClientBuilder(). WithRegion(region.ValueOf("<YOUR REGION>")). WithCredential(auth). Build()) request := &model.ChangeCheckRuleActionRequest{} enterpriseProjectIdRequest:= "<enterprise_project_id>" request.EnterpriseProjectId = &enterpriseProjectIdRequest hostIdRequest:= "<host_id>" request.HostId = &hostIdRequest request.Action = "<action>" checkNameCheckRules:= "SSH" checkRuleIdCheckRules:= "1.11" standardCheckRules:= "hw_standard" var listCheckRulesbody = []model.CheckRuleKeyInfoRequestInfo{ { CheckName: &checkNameCheckRules, CheckRuleId: &checkRuleIdCheckRules, Standard: &standardCheckRules, }, } request.Body = &model.CheckRuleIdListRequestInfo{ CheckRules: &listCheckRulesbody, } response, err := client.ChangeCheckRuleAction(request) if err == nil { fmt.Printf("%+v\n", response) } else { fmt.Println(err) } }

• Esta API se utiliza para restaurar los elementos de verificación de configuración cuyo nombre de línea base es SSH, el ID de elemento de verificación es 1.11, el estándar de verificación es el estándar de práctica de seguridad en la nube y el ID de proyecto empresarial es xxx. Esta operación solo se aplica al servidor cuyo ID es xxx. Los parámetros de restauración son los siguientes: Establezca el valor del elemento de reparación cuyo ID es de 1 a 5 y el valor del elemento de reparación cuyo ID es de 2 a 20.

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68

  package main import ( "fmt" "github.com/huaweicloud/huaweicloud-sdk-go-v3/core/auth/basic" hss "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5" "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/model" region "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/region" ) func main() { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak := os.Getenv("CLOUD_SDK_AK") sk := os.Getenv("CLOUD_SDK_SK") auth := basic.NewCredentialsBuilder(). WithAk(ak). WithSk(sk). Build() client := hss.NewHssClient( hss.HssClientBuilder(). WithRegion(region.ValueOf("<YOUR REGION>")). WithCredential(auth). Build()) request := &model.ChangeCheckRuleActionRequest{} enterpriseProjectIdRequest:= "<enterprise_project_id>" request.EnterpriseProjectId = &enterpriseProjectIdRequest hostIdRequest:= "<host_id>" request.HostId = &hostIdRequest request.Action = "<action>" ruleParamIdFixValues:= int32(1) fixValueFixValues:= int32(5) ruleParamIdFixValues1:= int32(2) fixValueFixValues1:= int32(20) var listFixValuesCheckRules = []model.CheckRuleFixValuesInfo{ { RuleParamId: &ruleParamIdFixValues, FixValue: &fixValueFixValues, }, { RuleParamId: &ruleParamIdFixValues1, FixValue: &fixValueFixValues1, }, } checkNameCheckRules:= "SSH" checkRuleIdCheckRules:= "1.11" standardCheckRules:= "hw_standard" var listCheckRulesbody = []model.CheckRuleKeyInfoRequestInfo{ { CheckName: &checkNameCheckRules, CheckRuleId: &checkRuleIdCheckRules, Standard: &standardCheckRules, FixValues: &listFixValuesCheckRules, }, } request.Body = &model.CheckRuleIdListRequestInfo{ CheckRules: &listCheckRulesbody, } response, err := client.ChangeCheckRuleAction(request) if err == nil { fmt.Printf("%+v\n", response) } else { fmt.Println(err) } }

Más información

Para obtener un código de ejemplo del SDK de más lenguajes de programación, consulte la pestaña Código de ejemplo en API Explorer. El código de ejemplo del SDK se puede generar automáticamente.

Códigos de estado

Códigos de error

Consulte Códigos de error.