Updated on 2026-02-27 GMT+08:00

Listing Drifts

Function

This API is used to list all drift details of the landing zone.

Authorization Information

Each account root user has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

rgc:driftDetail:list

List

-

-

-

-

URI

GET /v1/governance/drift-details

Request Parameters

None

Response Parameters

Status code: 200

Table 1 Response body parameters

Parameter

Type

Description

drift_details

Array of DriftDetail objects

Drift details.

Table 2 DriftDetail

Parameter

Type

Description

managed_account_id

String

Management account ID.

drift_type

String

Drift type. It can be SCP_UPDATED, SCP_ATTACHED_TO_OU, SCP_ATTACHED_TO_ACCOUNT, SCP_DETACHED_FROM_OU, SCP_DETACHED_FROM_ACCOUNT, or SCP_DELETED.

drift_target_id

String

ID of an enrolled account or registered OU where drift occurs.

drift_target_type

String

Type of the entity in the drift state. It can be accounts, OUs, or policies.

drift_message

String

Drift.

parent_organizational_unit_id

String

ID of a registered parent OU.

solve_solution

String

Method for repairing drift.

Status code: 403

Table 3 Response body parameters

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

request_id

String

Unique ID of the request.

encoded_authorization_message

String

Encrypted error message.

details

Array of ForbiddenErrorDetail objects

Error message indicating no permissions for cross-service invoking.

Table 4 ForbiddenErrorDetail

Parameter

Type

Description

error_code

String

Error code.

error_msg

String

Error message.

Example Requests

Listing all drift details of the landing zone

GET https://{endpoint}/v1/governance/drift-details

Example Responses

Status code: 200

Request succeeded.

{
  "drift_details" : [ {
    "managed_account_id" : "string",
    "drift_type" : "string",
    "drift_target_id" : "string",
    "drift_target_type" : "string",
    "drift_message" : "string",
    "parent_organizational_unit_id" : "string",
    "solve_solution" : "string"
  } ]
}

Status Codes

Status Code

Description

200

Request succeeded.

403

No permissions.

Error Codes

See Error Codes.