Host Security Service (HSS)

Actions Supported by Identity Policy-based Authorization

IAM provides system-defined identity policies to define typical cloud service permissions. You can also create custom identity policies using the actions supported by cloud services for more refined access control.

In addition to IAM, the Organizations service also provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to an entity. They only set the permissions boundary for the entity. When SCPs are attached to an organizational unit (OU) or a member account, the SCPs do not directly grant permissions to that OU or member account. Instead, the SCPs only determine what permissions are available for that member account or those member accounts under that OU. The granted permissions can be applied only if they are allowed by the SCPs.

To learn more about how IAM is different from Organizations for access control, see How IAM Is Different from Organizations for Access Control?.

This section describes the elements used by IAM custom identity policies and Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to edit an IAM custom identity policy, see Creating a Custom Identity Policy.
For details about how to use these elements to edit a custom SCP, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an identity policy.

The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an identity policy.
The Resource Type column indicates whether the action supports resource-level permissions.
- You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your identity policy statements.
- If this column includes a resource type, you must specify the URN in the Resource element of your identity policy statements.
- Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.
For details about the resource types defined by HSS, see Resources.
The Condition Key column contains keys that you can specify in the Condition element of an identity policy statement.
- If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
- If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
- If the Condition Key column is empty (-) for an action, the action does not support any condition keys.
For details about the condition keys defined by HSS, see Conditions.
The Alias column lists the policy actions that are configured in identity policies. With these actions, you can use APIs for policy-based authorization. For details, see Policies and Identity Policies.

The following table lists the actions that you can define in identity policy statements for HSS.

**Table 1** Actions supported by HSS
Action	Description	Access Level	Resource Type (*: required)	Condition Key	Alias
hss:host:addHostsGroup	Grants permission to create a server group.	Write	host *	g:EnterpriseProjectId	hss:hostGroup:set
hss:ars:addPWLPolicyHost	Grants permission to add servers to a whitelist policy.	Write	host *	g:EnterpriseProjectId	hss:ars:set
hss:rasp:addRaspPolicy	Grants permission to add protection policies.	Write	-	g:EnterpriseProjectId	hss:rasp:set
hss:safetyReport:addSecurityReport	Grants permission to create or copy new reports.	Write	-	g:EnterpriseProjectId	hss:safetyReport:set
hss:wtp:addTimingOffConfigInfo	Grants permission to add the configuration of scheduled protection disabling.	Write	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:set
hss:wtp:addWtpHostProtectDirInfo	Grants permission to add protected directories.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:wtp:addWtpPrivilegedProcessInfo	Grants permission to add privileged processes.	Write	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcess:set
hss:setting:changeAutoKillVirusStatus	Grants permission to enable or disable automatic program isolation and killing.	Write	-	g:EnterpriseProjectId	hss:automaticKillMp:set
hss:event:changeBlockedIp	Grants permission to unblock objects.	Write	host *	g:EnterpriseProjectId	hss:accountCracks:unblock
hss:setting:changeMalwareCollectStatus	Grants permission to enable or disable the sample collection for malware cloud scans.	Write	-	g:EnterpriseProjectId	hss:automaticKillMp:set
hss:ars:changePWLPolicy	Grants permission to modify whitelist policies.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:changePWLPolicyProcessStatus	Grants permission to mark the whitelist policy identification processes.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:safetyReport:changeSecurityReport	Grants permission to modify reports.	Write	-	g:EnterpriseProjectId	hss:safetyReport:set
hss:ars:createPWLPolicy	Grants permission to create whitelist policies.	Write	host *	-	hss:ars:set
hss:ars:createPWLPolicy	Grants permission to create whitelist policies.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:deletePWLPolicy	Grants permission to delete whitelist policies.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:deletePWLPolicyHost	Grants permission to delete servers from a whitelist policy.	Write	host *	g:EnterpriseProjectId	hss:ars:set
hss:antiransomware:deleteRansomwareDuplicationInfo	Grants permission to delete backup copies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:deleteRansomwareProtectionPolicy	Grants permission to delete protection policies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:rasp:deleteRaspPolicy	Grants permission to delete protection policies.	Write	-	g:EnterpriseProjectId	hss:rasp:set
hss:safetyReport:deleteSecurityReport	Grants permission to delete reports.	Write	-	g:EnterpriseProjectId	hss:safetyReport:set
hss:wtp:deleteTimingOffConfigInfo	Grants permission to delete the configuration of scheduled protection disabling.	Write	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:set
hss:wtp:deleteWtpBackupHostInfo	Grants permission to delete the remote backup server.	Write	host *	g:EnterpriseProjectId	hss:wtpBackup:set
hss:wtp:deleteWtpHostProtectDirInfo	Grants permission to delete protected directories.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:wtp:deleteWtpPrivilegedProcessInfo	Grants permission to delete privileged processes.	Write	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcess:set
hss:setting:getAgentInstallScript	Grants permission to query the agent installation script.	Read	-	g:EnterpriseProjectId	hss:installAgent:get
hss:setting:getAlarmConfig	Grants permission to query alarm configurations.	Read	-	g:EnterpriseProjectId	hss:alertConfig:get
hss:rasp:getAppRaspSwitchStatus	Grants permission to query application protection status (enabled or disabled).	Read	host *	g:EnterpriseProjectId	hss:rasp:list
hss:setting:getAutoKillVirusStatus	Grants permission to query the automatic isolation and killing status of programs.	Read	-	g:EnterpriseProjectId	hss:automaticKillMp:get
hss:container:getContainerNodeStatistics	Grants permission to query container node protection overview statistics.	Read	-	g:EnterpriseProjectId	hss:containers:list
hss:keyfile:getFileStatistic	Grants permission to obtain server file statistics.	Read	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:setting:getMalwareCollectStatus	Grants permission to query the status of the sample collection configuration switch for malware cloud scans.	Read	-	g:EnterpriseProjectId	hss:automaticKillMp:get
hss:setting:getMalwareReminders	Grants permission to obtain prompt information configurations.	Read	-	g:EnterpriseProjectId	hss:automaticKillMp:get
hss:securitycheck:getManualSecurityCheckStatus	Grants permission to query the status and progress of manual health checks.	Read	-	g:EnterpriseProjectId	hss:securitycheck:list
hss:overview:getOverviewAssetGroupsStatistics	Grants permission to obtain business group distribution statistics and identify regular, important, and core assets.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewAssetOsStatistics	Grants permission to obtain operating system distribution statistics.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewAssetStatistics	Grants permission to obtain asset statistics, including servers, containers, and images.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewAttckMitre	Grants permission to investigate responses (ATT&CK attack path matrix).	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewDefenseStatistics	Grants permission to obtain proactive defense statistics.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewProtectionStatusStatistics	Grants permission to query the protection status of the current cloud load.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewQuotaStatistics	Grants permission to obtain server security statistics.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewRiskLists	Grants permission to query the risk list.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewRiskManageStatistics	Grants permission to obtain risk management information, including risk trends and type statistics.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewRiskScore	Grants permission to query risk scores.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewRiskStatistics	Grants permission to query risk statistics, security risks, security alarms, and proactive defense.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:getOverviewTrialsStatistics	Grants permission to try server risk statistics.	Read	-	g:EnterpriseProjectId	hss:overview:list
hss:antiransomware:getRansomwareBackupInfoByBackupId	Grants permission to query specified backup information.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getRansomwareHSSBackupPolicyInfo	Grants permission to query backup policy information.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getRansomwareBackupStatistics	Grants permission to query backup statistics.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getRansomwareProtectionStatistics	Grants permission to query protection statistics.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getRansomwareVaultInfo	Grants permission to query backup vault information.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:rasp:getRaspPolicyDetail	Grants permission to query protection policy details.	Read	-	g:EnterpriseProjectId	hss:rasp:list
hss:rasp:getRaspProtectStatistics	Grants permission to obtain protection data statistics.	Read	-	g:EnterpriseProjectId	hss:rasp:list
hss:wtp:getRaspSwitchStatus	Grants permission to query whether the dynamic WTP is enabled.	Read	host *	g:EnterpriseProjectId	hss:wtpHosts:list
hss:securitycheck:getSecurityCheckConfig	Grants permission to query security check schedules.	Read	-	g:EnterpriseProjectId	hss:securitycheck:list
hss:securitycheck:getSecurityCheckHostReport	Grants permission to query the security check report of a specified server.	Read	host *	g:EnterpriseProjectId	hss:securitycheck:list
hss:securitycheck:getSecurityCheckOverview	Grants permission to query the security check overview.	Read	-	g:EnterpriseProjectId	hss:securitycheck:list
hss:securitycheck:getSecurityCheckStatistic	Grants permission to query security check statistics.	Read	-	g:EnterpriseProjectId	hss:securitycheck:list
hss:safetyReport:getSecurityReport	Grants permission to query the content of the security report.	Read	-	g:EnterpriseProjectId	hss:safetyReport:list
hss:safetyReport:getSecurityReportSubscription	Grants permission to query the content of a report subscription.	Read	-	g:EnterpriseProjectId	hss:safetyReport:list
hss:wtp:getTimingOffStatusInfo	Grants permission to query whether a protection configuration is in the scheduled disabling list.	Read	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:get
hss:wtp:getWtpDashboardProtectStatistics	Grants permission to query protection statistics.	Read	-	g:EnterpriseProjectId	hss:wtpDashboard:get
hss:wtp:getWtpDirectory	Grants permission to query the Tomcat bin directory for dynamic WTP.	Read	host *	g:EnterpriseProjectId	hss:wtpDirectorys:list
hss:wtp:getWtpDirectoryMonitorOnlyStatus	Grants permission to query the status of the monitoring-only switch.	Read	host *	g:EnterpriseProjectId	hss:wtpDirectorys:list
hss:wtp:getWtpPrivilegedProcessesChildStatus	Grants permission to display the trust status of privileged subprocesses.	Read	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcesses:list
hss:wtp:getWtpRemoteBackupHostInfo	Grants permission to query information about the remote backup server.	Read	host *	g:EnterpriseProjectId	hss:wtpProtectMode:get
hss:setting:listAgentVersion	Grants permission to query agent versions.	List	-	g:EnterpriseProjectId	hss:installAgent:get
hss:container:listContainerNodes	Grants permission to query the container node list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:keyfile:listFileEvents	Grants permission to obtain the list of changed files.	List	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:keyfile:listFileHostEventDetails	Grants permission to obtain details about a server change file.	List	host *	g:EnterpriseProjectId	hss:keyfiles:list
hss:keyfile:listFileHosts	Grants permission to obtain the ECS change list.	List	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:host:listHostGroups	Grants permission to query the server group list.	List	-	g:EnterpriseProjectId	hss:hostGroup:get
hss:setting:listLoginCommonIp	Grants permission to query common login IP addresses.	List	-	g:EnterpriseProjectId	hss:commonIPs:list
hss:setting:listLoginCommonLocation	Grants permission to query common login locations.	List	-	g:EnterpriseProjectId	hss:commonLocations:list
hss:setting:listLoginWhiteIp	Grants permission to query the login IP address whitelist.	List	-	g:EnterpriseProjectId	hss:whiteIps:list
hss:policy:listPolicyGroup	Grants permission to query the policy group list.	List	-	g:EnterpriseProjectId	hss:policy:get
hss:asset:listPortHost	Grants permission to query asset fingerprints - port - server list.	List	-	g:EnterpriseProjectId	hss:ports:list
hss:asset:listProcessesHost	Grants permission to query asset fingerprints - process - server list.	List	-	g:EnterpriseProjectId	hss:processes:list
hss:ars:listPWLEvent	Grants permission to query process whitelist events.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:listPwlPolicy	Grants permission to query the process whitelist policy list.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:listPwlPolicyHost	Grants permission to query the servers associated with a process whitelist policy.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:listPwlPolicyProcess	Grants permission to query the process whitelist policy identification processes.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:antiransomware:listRansomwareBackedupByHostId	Grants permission to query the vulnerability list.	List	host *	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:listRansomwareOperationLogsByVaultName	Grants permission to query the backup and restoration task list.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:listRansomwareProtectionOptionalServer	Grants permission to query the servers under ransomware protection.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:listRansomwareProtectionPolicy	Grants permission to query protection policies.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:listRansomwareProtectionServer	Grants permission to query servers protected against ransomware.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:rasp:listRaspCheckFeatureRule	Grants permission to query detection rules.	List	-	g:EnterpriseProjectId	hss:rasp:list
hss:rasp:listRaspEvents	Grants permission to query application protection events.	List	-	g:EnterpriseProjectId	hss:rasp:list
hss:rasp:listRaspPolicies	Grants permission to query protection policies.	List	-	g:EnterpriseProjectId	hss:rasp:list
hss:rasp:listRaspProtectionServers	Grants permission to query protected servers.	List	-	g:EnterpriseProjectId	hss:rasp:list
hss:securitycheck:listSecurityCheckHostReportHistory	Grants permission to query historical security check reports of a specified server.	List	host *	g:EnterpriseProjectId	hss:securitycheck:list
hss:securitycheck:listSecurityCheckHostResult	Grants permission to query the security check results of servers.	List	-	g:EnterpriseProjectId	hss:securitycheck:list
hss:safetyReport:listSecurityReport	Grants permission to query the list on the report overview page.	List	-	g:EnterpriseProjectId	hss:safetyReport:list
hss:safetyReport:listSecurityReportHistoryPeriod	Grants permission to query the statistical period list of historical reports.	List	-	g:EnterpriseProjectId	hss:safetyReport:list
hss:safetyReport:listSecurityReportSendingRecord	Grants permission to query report sending records.	List	-	g:EnterpriseProjectId	hss:safetyReport:list
hss:wtp:listTimingOffConfigInfo	Grants permission to query the scheduled disabling list.	List	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:get
hss:setting:listTwoFactorLoginHost	Grants permission to query the list of servers with 2FA enabled.	List	-	g:EnterpriseProjectId	hss:twofactorAuth:list
hss:wtp:listWtpBackupHostsInfo	Grants permission to query the remote backup server.	List	-	g:EnterpriseProjectId	hss:wtpBackup:get
hss:wtp:listWtpHostProtectDirInfo	Grants permission to query protected directories.	List	host *	g:EnterpriseProjectId	hss:wtpDirectorys:list
hss:wtp:listWtpHostProtectHistoryInfo	Grants permission to query the static WTP status of the server.	List	-	g:EnterpriseProjectId	hss:wtpReports:list
hss:wtp:listWtpHostRaspProtectHistoryInfo	Grants permission to query the dynamic WTP status of the server.	List	-	g:EnterpriseProjectId	hss:wtpReports:list
hss:wtp:listWtpPrivilegedProcessesInfo	Grants permission to query privileged process configurations.	List	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcesses:list
hss:wtp:listWtpProtectHost	Grants permission to query the protection list.	List	-	g:EnterpriseProjectId	hss:wtpHosts:list
hss:setting:modifyLoginCommonIp	Grants permission to add, edit, or delete common login IP addresses.	Write	host *	g:EnterpriseProjectId	hss:commonIPs:set
hss:setting:modifyLoginCommonLocation	Grants permission to add, edit, or delete common login locations.	Write	host *	g:EnterpriseProjectId	hss:commonLocations:set
hss:setting:modifyLoginWhiteIp	Grants permission to add, edit, or delete the login IP address whitelist.	Write	host *	g:EnterpriseProjectId	hss:whiteIps:set
hss:ars:operatePWLEvent	Grants permission to handle events.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:relearnPWLPolicy	Grants permission to relearn whitelist policies.	Write	host *	g:EnterpriseProjectId	hss:ars:set
hss:overview:resetOverviewRiskScore	Grants permission to reset risk scores and perform health checks again.	Write	-	g:EnterpriseProjectId	hss:overview:set
hss:antiransomware:restoreRansomwareDuplicationInfo	Grants permission to back up and restore data.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:safetyReport:sendSecurityReport	Grants permission to send security reports.	Write	-	g:EnterpriseProjectId	hss:safetyReport:set
hss:setting:setAlarmConfig	Grants permission to configure prompt information.	Write	-	g:EnterpriseProjectId	hss:alertConfig:get
hss:setting:setMalwareReminders	Grants permission to configure prompt information.	Write	-	g:EnterpriseProjectId	hss:automaticKillMp:set
hss:wtp:setRemoteWtpBackupInfo	Grants permission to enable or disable remote backup.	Write	host *	g:EnterpriseProjectId	hss:wtpBackup:set
hss:wtp:setTimingOffSwitchInfo	Grants permission to set the status of the scheduled protection disabling.	Write	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:set
hss:setting:setTwoFactorLoginConfig	Grants permission to configure 2FA login.	Write	host *	g:EnterpriseProjectId	hss:twofactorAuth:set
hss:wtp:setWtpDirectoryMonitorOnlyStatus	Grants permission to configure the monitoring-only switch.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:wtp:setWtpPrivilegedProcessesChildStatus	Grants permission to set the trust status of privileged subprocesses.	Write	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcesses:list
hss:wtp:setWtpProtectionStatusInfo	Grants permission to enable or disable WTP.	Write	host *	g:EnterpriseProjectId	hss:wtpProtect:switch
hss:wtp:setWtpProtectSwitch	Grants permission to enable or disable dynamic WTP.	Write	host *	g:EnterpriseProjectId	hss:wtpProtect:switch
hss:wtp:setWtpScheduledProtectionDateOffConfigInfo	Grants permission to configure the frequency and period for automatically disabling protection.	Write	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:set
hss:securitycheck:startManualSecurityCheck	Grants permission to start a manual health check.	Write	-	g:EnterpriseProjectId	hss:securitycheck:set
hss:antiransomware:startRansomwareBackupSingle	Grants permission to enable the backup function for a single server.	Write	host *	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:startRansomwareProtection	Grants permission to enable ransomware protection.	Write	host *	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:startRansomwareProtectionSingle	Grants permission to enable ransomware protection for a single server.	Write	host *	g:EnterpriseProjectId	hss:antiransomware:set
hss:securitycheck:stopManualSecurityCheck	Grants permission to cancel a manual health check.	Write	-	g:EnterpriseProjectId	hss:securitycheck:set
hss:antiransomware:stopRansomwareProtection	Grants permission to disable ransomware protection.	Write	host *	g:EnterpriseProjectId	hss:antiransomware:set
hss:container:switchContainerProtectStatus	Grants permission to switch the protection status.	Write	host *	g:EnterpriseProjectId	hss:containers:set
hss:ars:switchPWLPolicyHost	Grants permission to enable or disable a server whitelist policy.	Write	host *	g:EnterpriseProjectId	hss:ars:set
hss:rasp:switchRasp	Grants permission to enable or disable application protection.	Write	host *	g:EnterpriseProjectId	hss:rasp:set
hss:safetyReport:switchSecurityReportStatus	Grants permission to enable or disable security reports.	Write	-	g:EnterpriseProjectId	hss:safetyReport:set
hss:wtp:switchWtpHostProtectDirInfo	Grants permission to enable or disable directory protection.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:host:uninstallAgents	Grants permission to uninstall the agent.	Write	host *	g:EnterpriseProjectId	hss:agent:uninstall
hss:setting:updateAlarmConfig	Grants permission to configure alarm configurations.	Write	-	g:EnterpriseProjectId	hss:alertConfig:set
hss:antiransomware:updateRansomwareBackupPolicyInfo	Grants permission to modify backup policies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:updateRansomwareProtectionPolicy	Grants permission to modify protection policies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:rasp:updateRaspPolicy	Grants permission to modify protection policies.	Write	-	g:EnterpriseProjectId	hss:rasp:set
hss:securitycheck:updateSecurityCheckConfig	Grants permission to modify security check schedules.	Write	-	g:EnterpriseProjectId	hss:securitycheck:set
hss:wtp:updateTimingOffConfigInfo	Grants permission to modify the configuration of scheduled protection disabling.	Write	host *	g:EnterpriseProjectId	hss:wtpScheduledProtections:set
hss:wtp:updateWtpBackupHostInfo	Grants permission to add or modify a remote backup server.	Write	host *	g:EnterpriseProjectId	hss:wtpBackup:set
hss:wtp:updateWtpDirectoryInfo	Grants permission to modify the Tomcat bin directory of dynamic WTP.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:wtp:updateWtpHostProtectDirInfo	Grants permission to modify protected directories.	Write	host *	g:EnterpriseProjectId	hss:wtpDirectorys:set
hss:wtp:updateWtpPrivilegedProcessInfo	Grants permission to modify privileged processes.	Write	host *	g:EnterpriseProjectId	hss:wtpPrivilegedProcess:set
hss:asset:addValuesLevel	Grants permission to configure asset management - server management - asset importance.	Write	host *	g:EnterpriseProjectId	hss:assets:set
hss:asset:batchModifyPortStatus	Grants permission to change port status.	Write	host *	g:EnterpriseProjectId	hss:ports:operate
hss:asset:deleteToolConditionHistory	Grants permission to clear the search records of tools (operation tool).	Write	-	g:EnterpriseProjectId	hss:assets:set
hss:asset:executeTool	Grants permission to perform search with tools (operation tools).	Write	-	g:EnterpriseProjectId	hss:assets:set
hss:asset:getAccountTop	Grants permission to obtain asset management - overview - top accounts.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getAgentStatisticsStatus	Grants permission to obtain asset management - overview - asset status - server agent status.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getAssetStatistic	Grants permission to obtain asset statistics, including accounts, ports, and processes.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getAssetType	Grants permission to obtain asset management - overview - asset status - asset distribution.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getAutoLaunchTop	Grants permission to obtain asset management - overview - top auto-started items.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getCommonPort	Grants permission to display details about a port.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getContainerProtectionStatus	Grants permission to obtain asset management - overview - asset status - container protection status.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getCoreConfFileTop	Grants permission to obtain asset management - overview - top key configurations.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getEnvironmentTop	Grants permission to obtain asset management - overview - top environment variables.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getHostAssetManualCollectStatus	Grants permission to obtain the status of the API for immediately collecting the asset fingerprints of a server.	Read	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:getHostProtectionStatus	Grants permission to obtain asset management - overview - asset status - agent status.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getJarPackageTop	Grants permission to obtain asset management - overview - top JAR packages.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getKernelModuleTop	Grants permission to obtain asset management - overview - top kernel modules.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getOsStatisticsInfo	Grants permission to obtain asset management - overview - asset status - OS statistics.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getPorcessTop	Grants permission to obtain asset management - overview - top processes.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getPortTop	Grants permission to obtain asset management - overview - top ports.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getQuotaStatisticsInfo	Grants permission to obtain asset management - overview - asset status - protection quota statistics.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getSoftwareTop	Grants permission to obtain asset management - overview - top software.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getWebAppAndServiceTop	Grants permission to obtain asset management - overview - top web apps and services.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getWebAppTop	Grants permission to obtain asset management - overview - top web applications.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getWebFrameworkTop	Grants permission to obtain asset management - overview - top web frameworks.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getWebServiceTop	Grants permission to obtain asset management - overview - top web services.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:getWebSiteTop	Grants permission to obtain asset management - overview - top websites.	Read	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listAppChangeHistories	Grants permission to obtain asset fingerprints – software information – operation history.	List	-	g:EnterpriseProjectId	hss:softwares:list
hss:asset:listApps	Grants permission to obtain asset fingerprints of a single server – software.	List	-	g:EnterpriseProjectId	hss:softwares:list
hss:asset:listAppStatistics	Grants permission to obtain asset fingerprints – software information.	List	-	g:EnterpriseProjectId	hss:softwares:list
hss:asset:listAutoLaunchChangeHistories	Grants permission to obtain asset fingerprints - auto-started items - change history.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listAutoLaunchs	Grants permission to obtain asset fingerprints of a server - auto-started items.	List	-	g:EnterpriseProjectId	hss:launch:list
hss:asset:listAutoLaunchStatistics	Grants permission to obtain asset fingerprints - auto-started items.	List	-	g:EnterpriseProjectId	hss:launch:list
hss:asset:listCoreConfFileHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of key configuration files.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listCoreConfFileInfo	Grants permission to obtain asset management - server management - fingerprint type - key configurations.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listCoreConfFileStatistics	Grants permission to obtain asset management - asset fingerprints - key configuration file navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listEnvironmentHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of key environment variables (on the right of asset fingerprints).	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listEnvironmentInfo	Grants permission to obtain asset management - server management - fingerprint type - environment variables.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listEnvironmentStatistics	Grants permission to obtain asset management - asset fingerprints - environment variable file navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listJarPackageHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of JAR packages.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listJarPackageInfo	Grants permission to obtain asset management - server management - fingerprint type - JAR packages.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listJarPackageStatistics	Grants permission to obtain asset management - asset fingerprints - JAR package navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listKernelModuleHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of kernel modules.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listKernelModuleInfo	Grants permission to obtain asset management - server management - fingerprint type - kernel modules.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listKernelModuleStatistics	Grants permission to obtain asset management - asset fingerprints - kernel module navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listPorts	Grants permission to obtain single-server asset fingerprint (open port information).	List	host *	g:EnterpriseProjectId	hss:ports:list
hss:asset:listPortStatistics	Grants permission to obtain asset fingerprints (open port information).	List	-	g:EnterpriseProjectId	hss:ports:list
hss:asset:listProcesses	Grants permission to obtain the process list.	List	host *	g:EnterpriseProjectId	hss:processes:list
hss:asset:listProcessStatistics	Grants permission to obtain asset fingerprints (process information).	List	-	g:EnterpriseProjectId	hss:processes:list
hss:asset:listResult	Grants permission to obtain execution results (operation tools).	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listTool	Grants permission to obtain the tool list (operation tools).	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listToolConditionHistory	Grants permission to obtain the search records of tools (operation tools).	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listUserChangeHistories	Grants permission to obtain the account change history.	List	-	g:EnterpriseProjectId	hss:accounts:list
hss:asset:listUserGroup	Grants permission to obtain the user group list.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listUsers	Grants permission to obtain the account list of assets.	List	-	g:EnterpriseProjectId	hss:accounts:list
hss:asset:listUserStatistics	Grants permission to obtain asset fingerprints - software information.	List	-	g:EnterpriseProjectId	hss:accounts:list
hss:asset:listWebAppAndServices	Grants permission to obtain asset management - asset fingerprints - web app and service assets on the right.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebAppAndServiceStatistics	Grants permission to obtain asset management - asset fingerprints - web app and service navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebAppHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of web applications.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebAppInfo	Grants permission to obtain asset management - server management - fingerprint type - web applications.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebAppStatistics	Grants permission to obtain asset management - asset fingerprints - web application navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebFrameworkHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of web frameworks.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebFrameworkInfo	Grants permission to obtain asset management - server management - fingerprint type - web frameworks.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebFrameworkStatistics	Grants permission to obtain asset management - asset fingerprints - web framework navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebServiceHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of web servers.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebServiceInfo	Grants permission to obtain asset management - server management - fingerprint type - web services.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebServiceStatistics	Grants permission to obtain asset management - asset fingerprints - web services navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebSiteHostInfo	Grants permission to obtain asset management - asset fingerprints - the server list of websites.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebSiteInfo	Grants permission to obtain asset management - server management - fingerprint type - websites.	List	host *	g:EnterpriseProjectId	hss:assets:list
hss:asset:listWebSiteStatistics	Grants permission to obtain asset management - asset fingerprints - website navigation tree on the left.	List	-	g:EnterpriseProjectId	hss:assets:list
hss:asset:runHostAssetManualCollect	Grants permission to immediately collect the asset fingerprints of a server.	Write	host *	g:EnterpriseProjectId	hss:assets:set
hss:baseline:addSecurityCheckPolicyGroup	Grants permission to create a configuration detection policy.	Write	-	g:EnterpriseProjectId	hss:baselines:set
hss:baseline:changeCheckRuleState	Grants permission to ignore, unignore, repair, and verify failed configuration check items.	Write	baseline *	g:EnterpriseProjectId	hss:configDetects:operate
hss:baseline:deleteSecurityCheckPolicyGroup	Grants permission to delete a specified configuration detection policy.	Write	-	g:EnterpriseProjectId	hss:baselines:set
hss:baseline:exportSecurityCheckReport	Grants permission to export the configuration detection report.	List	-	g:EnterpriseProjectId	hss:configDetects:list
hss:baseline:getBaselineOverview	Grants permission to query baseline check statistics.	Read	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getBaselineScanStatus	Grants permission to query the progress of a baseline check task.	Read	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getBaselineStatistic	Grants permission to query baseline check statistics, including weak passwords, password complexity, and configuration detection.	Read	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getCheckRuleDetail	Grants permission to query the check report of a configuration check item.	Read	baseline *	g:EnterpriseProjectId	hss:configDetects:list
hss:baseline:getCheckRuleFixFailDetail	Grants permission to query the cause of the check item repair failure.	Read	baseline *	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getDefaultSecurityCheckPolicy	Grants permission to query the default baseline of a configuration detection policy.	Read	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getDefaultSecurityCheckPolicyDetails	Grants permission to query detailed baseline check items.	Read	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:getRiskConfigDetail	Grants permission to query the check result of a specified security configuration item.	Read	-	g:EnterpriseProjectId	hss:configDetects:list
hss:baseline:listCheckRuleHost	Grants permission to query servers covered by a configuration check item.	List	baseline *	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:listPasswordComplexity	Grants permission to query the password complexity policy check report.	List	-	g:EnterpriseProjectId	hss:complexityPolicys:list
hss:baseline:listRiskConfigCheckRules	Grants permission to query the check item list of a specified security configuration item.	List	-	g:EnterpriseProjectId	hss:configDetects:list
hss:baseline:listRiskConfigHosts	Grants permission to query servers affected by a specified security configuration item.	List	-	g:EnterpriseProjectId	hss:riskConfigHost:list
hss:baseline:listRiskConfigs	Grants permission to query the server security configuration check result list of a tenant.	List	-	g:EnterpriseProjectId	hss:configDetects:list
hss:baseline:listSecurityCheckPolicyGroup	Grants permission to query the list of configuration detection policy groups.	List	-	g:EnterpriseProjectId	hss:baselines:list
hss:baseline:listWeakPasswordUsers	Grants permission to query the weak password detection results.	List	-	g:EnterpriseProjectId	hss:weakPwds:list
hss:baseline:runBaselineDetect	Grants permission to perform manual detection for weak passwords and configurations on the servers specified in a policy.	Write	-	g:EnterpriseProjectId	hss:baselines:set
hss:baseline:updateSecurityCheckPolicyGroup	Grants permission to modify a specified configuration detection policy.	Write	-	g:EnterpriseProjectId	hss:baselines:set
hss:event:addLoginWhiteList	Grants permission to add a login whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:batchChangeEvent	Grants permission to handle alarm events in batches.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:changeEvent	Grants permission to handle alarm events.	Write	event *	g:EnterpriseProjectId	hss:event:set
hss:event:changeIsolatedFile	Grants permission to restore isolated files.	Write	host *	g:EnterpriseProjectId	hss:event:set
hss:event:exportAlarmWhiteList	Grants permission to export the alarm whitelist.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:exportEmergency	Grants permission to export emergency malware.	List	-	g:EnterpriseProjectId	hss:event:set
hss:event:getEmergencyStatistics	Grants permission to obtain emergency event statistics.	Read	-	g:EnterpriseProjectId	hss:event:get
hss:event:getEventAttackTag	Grants permission to query the list of attack ID distribution statistics.	Read	-	g:EnterpriseProjectId	hss:event:get
hss:event:getEventSeverity	Grants permission to query the list of threat level statistics.	Read	-	g:EnterpriseProjectId	hss:event:get
hss:event:getEventStatistics	Grants permission to query alarm event statistics.	Read	-	g:EnterpriseProjectId	hss:event:get
hss:event:getMalwareInfo	Grants permission to obtain the list of details about sudden malware.	Read	event *	g:EnterpriseProjectId	hss:event:get
hss:event:handleMalwareEvent	Grants permission to handle malware.	Write	event *	g:EnterpriseProjectId	hss:event:set
hss:event:importAlarmWhiteList	Grants permission to import an alarm whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:isolateOperateEmergency	Grants permission to enable or disable the isolation box.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:listAlarmWhiteList	Grants permission to query the alarm whitelist.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listBlockedIp	Grants permission to query the list of blocked IP addresses.	List	-	g:EnterpriseProjectId	hss:accountCracks:list
hss:event:listEventOperates	Grants permission to query the handling types supported by events.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listEventTopRisk	Grants permission to query the list of top 10 event type statistics.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listEventType	Grants permission to query the list of event type statistics.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listFileIsolateList	Grants permission to obtain the list of files isolated by sudden malware.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listIsolatedFile	Grants permission to query the isolated file list.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listLoginWhiteList	Grants permission to query the login whitelist.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listMalware	Grants permission to obtain the list of unexpected malicious program events.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listSecurityEvents	Grants permission to query the intrusion event list.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:recoverIsolateFile	Grants permission to restore the file isolation box.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:removeAlarmWhiteList	Grants permission to delete an alarm whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:removeLoginWhiteList	Grants permission to delete a login whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:host:associateHostAssetValue	Grants permission to associate asset importance.	Write	host *	g:EnterpriseProjectId	hss:hosts:set
hss:host:associateHostsGroup	Grants permission to allocate servers to a server group.	Write	host *	g:EnterpriseProjectId	hss:hostGroup:set
hss:host:batchInstallAgent	Grants permission to install agents in batches.	Write	host *	g:EnterpriseProjectId	hss:hosts:set
hss:host:changeHostsGroup	Grants permission to edit a server group.	Write	-	g:EnterpriseProjectId	hss:hostGroup:set
hss:host:deleteHostsGroup	Grants permission to delete a server group.	Write	-	g:EnterpriseProjectId	hss:hostGroup:set
hss:host:getHostsStatistics	Grants permission to collect server statistics.	Read	-	g:EnterpriseProjectId	hss:hosts:list
hss:host:listFirewallStatus	Grants permission to query the firewall status of a server.	Read	host *	g:EnterpriseProjectId	hss:hosts:list
hss:host:listHostGroupAssetValue	Grants permission to query the list of servers in a server group by asset importance.	List	-	g:EnterpriseProjectId	hss:hosts:list
hss:host:listHostsRisk	Grants permission to obtain ECS risk status.	Read	host *	g:EnterpriseProjectId	hss:hosts:list
hss:host:listHostStatus	Grants permission to query the list of protected servers.	List	-	g:EnterpriseProjectId	hss:hosts:list
hss:host:listHostsUpgrade	Grants permission to obtain the agent upgrade status of a server.	Read	host *	-	hss:hosts:list
hss:host:listHostsUpgrade		Read	-	g:EnterpriseProjectId	hss:hosts:list
hss:host:manualCheckVul	Grants permission to manually detect vulnerabilities.	Write	-	g:EnterpriseProjectId	hss:hosts:manualDetect
hss:host:switchFirewallStatus	Grants permission to modify the firewall authorization status.	Write	host *	g:EnterpriseProjectId	hss:hosts:switchVersion
hss:host:switchHostsProtectStatus	Grants permission to switch the protection status.	Write	host *	g:EnterpriseProjectId	hss:hosts:switchVersion
hss:host:upgradeAgent	Grants permission to upgrade the agent from 1.0 to 2.0.	Write	host *	-	hss:hosts:switchVersion
hss:host:upgradeAgent	Grants permission to upgrade the agent from 1.0 to 2.0.	Write	-	g:EnterpriseProjectId	hss:hosts:switchVersion
hss:host:upgradeAgents	Grants permission to upgrade the agent.	Write	host *	g:EnterpriseProjectId	hss:hosts:set
hss:image:batchScanLocalImage	Grants permission to perform local image scanning.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:batchScanPrivateImage	Grants permission to scan images in private image repositories in batches.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:getImageFilesStat	Grants permission to query image file statistics.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:image:getImageLocalVulOverview	Grants permission to query local vulnerabilities.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:image:getImageVulOverview	Grants permission to query repository vulnerabilities.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:image:listCfgCheckAffectedImage	Grants permission to query the list of images affected by a tenant image that failed baseline checks.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listGlobalCfgCheck	Grants permission to query container image baseline inspection results.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listGlobalMalware	Grants permission to query the list of malicious tenant files.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listGlobalVul	Grants permission to query vulnerability details about a tenant image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageApps	Grants permission to query the image software list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageAppVul	Grants permission to query the software vulnerability list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageCfgCheck	Grants permission to query configuration baseline check results of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageFiles	Grants permission to query the list of image files that have no owners.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageLocal	Grants permission to query the local image list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageMalware	Grants permission to query the list of malicious image files.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageNamespace	Grants permission to query the namespace of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageRepository	Grants permission to query the list of images in a private image repository.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageVul	Grants permission to query image vulnerability details.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listInstanceImageVul	Grants permission to query vulnerability details about enterprise images.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageApp	Grants permission to query the local software image list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageAppVuls	Grants permission to query the vulnerability list of a piece of software in a local image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageContainers	Grants permission to query the container information about a local image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageHosts	Grants permission to query the server information about a local image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageMalware	Grants permission to query malicious file information about local images.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageVuls	Grants permission to query vulnerability information about a local image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalVulRepoImage	Grants permission to query details about images and containers affected by local image vulnerabilities.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listPrivateImageRepository	Grants permission to query the list of images in a private image repository.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listSharedImageRepository	Grants permission to query the list of images in the shared image repository.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listVulCve	Grants permission to query CVE details about a vulnerability.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listVulRepoImage	Grants permission to query details about images in the image repository affected by a vulnerability.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:runImageScan	Grants permission to scan images.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:runImageSynchronizeTask	Grants permission to synchronize the free image list from SWR.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:runSwrImageScan	Grants permission to update and scan SWR images and to access SWR.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:sharedImageSynchronization	Grants permission to update images shared from SWR.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:policy:addPolicyGroup	Grants permission to copy server policy groups.	Write	policy *	g:EnterpriseProjectId	hss:policy:set
hss:policy:associatePolicyGroup	Grants permission to deploy a policy.	Write	policy *	g:EnterpriseProjectId	hss:policy:set
hss:policy:associatePolicyGroup	Grants permission to deploy a policy.	Write	host *	g:EnterpriseProjectId	hss:policy:set
hss:policy:changePolicyDetail	Grants permission to modify a policy.	Write	policy *	g:EnterpriseProjectId	hss:policy:set
hss:policy:changePolicyGroup	Grants permission to modify policy groups.	Write	policy *	g:EnterpriseProjectId	hss:policy:set
hss:policy:deletePolicyGroup	Grants permission to delete policy groups.	Write	policy *	g:EnterpriseProjectId	hss:policy:set
hss:policy:getPolicyDetail	Grants permission to query details about a specified policy.	Read	policy *	g:EnterpriseProjectId	hss:policy:get
hss:policy:listPolicyGroupDetail	Grants permission to query the policy information list of a policy group.	List	policy *	g:EnterpriseProjectId	hss:policy:get
hss:quota:addResourceInstanceTag	Grants permission to add tags to a resource.	Tagging	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:batchCreateTags	Grants permission to create tags in batches.	Write	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:batchDeleteTags	Grants permission to delete tags in batches.	Write	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:cancelHostsQuota	Grants permission to unbind quotas.	Write	-	-	hss:quotas:set
hss:quota:changeTmsResourceTagInfo	Grants permission to add or delete resource tags in batches.	Write	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:countResourceInstances	Grants permission to query the number of purchased resources by tag.	List	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:dealOrder	Grants permission to purchase quotas.	Write	-	-	hss:quotas:set
hss:quota:deleteResourceInstanceTag	Grants permission to delete tags from a resource.	Tagging	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:filterResourceInstanceList	Grants permission to search for purchased resources by tag.	List	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:set
hss:quota:getResourceInstanceTag	Grants permission to query tags of a resource.	Read	-	-	hss:quotas:get
hss:quota:getResourceQuotas	Grants permission to query quota information.	Read	-	-	hss:quotas:get
hss:quota:getTmsResourceTagsInfo	Grants permission to query resource tags.	Read	-	-	hss:quotas:get
hss:quota:listProjectTags	Grants permission to query all used tags in the current project.	List	-	-	hss:quotas:get
hss:quota:listQuotasDetail	Grants permission to query quota details.	List	-	-	hss:quotas:get
hss:quota:listResourceIds	Grants permission to query quota IDs in batches.	List	-	-	hss:quotas:get
hss:quota:listTmsResourceInstancesInfo	Grants permission to query resource instances.	List	-	g:RequestTag/<tag-key> g:TagKeys	hss:quotas:get
hss:quota:upgradeOrder	Grants permission to change specifications.	Write	-	-	hss:quotas:set
hss:vulnerability:changeVulStatus	Grants permission to modify the status of a vulnerability.	Write	host *	g:EnterpriseProjectId	hss:vuls:set
hss:vulnerability:exportEmergencyVulnerabilities	Grants permission to export emergency vulnerabilities.	List	-	g:EnterpriseProjectId	hss:vuls:set
hss:vulnerability:exportVulsList	Grants permission to export information about vulnerabilities and their affected servers.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getCmsVulDetail	Grants permission to query basic information about the Web-CMS vulnerabilities.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getEmergencySummary	Grants permission to query the event overview.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getEmergencyVulDetail	Grants permission to query vulnerability details in events.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getLinuxVulDetail	Grants permission to query basic information about Linux vulnerabilities.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getVulCheckStatus	Grants permission to query the status of server vulnerability scanning.	Read	-	g:EnterpriseProjectId	hss:manualDetectStatus:get
hss:vulnerability:getVulSummary	Grants permission to query vulnerability statistics.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getWindosVulDetail	Grants permission to query basic information about Windows vulnerabilities.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getWindowsVulNum	Grants permission to query the number of Windows vulnerabilities on a server.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listEmergencyVul	Grants permission to query vulnerabilities in events.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listHostVuls	Grants permission to query vulnerability information about a single server.	List	host *	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listHostVulSummary	Grants permission to query server statistics and top 5 risky servers.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listTopVulSummary	Grants permission to query top 5 vulnerabilities.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHosts	Grants permission to query ECSs affected by a specific vulnerability.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulnerabilities	Grants permission to query the vulnerability list.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulRepairFailedDetail	Grants permission to query information about vulnerability fixing failures.	List	host *	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulTypeSummary	Grants permission to query vulnerability type distribution.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:operateEmergency	Grants permission to operate vulnerabilities in events.	Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:host:getScanStatus	Grants permission to query the manual scan status.	Read	host *	g:EnterpriseProjectId	hss:hostGroup:get
hss:host:setManualDetect	Grants permission to deliver a manual scan.	Write	host *	g:EnterpriseProjectId	hss:hosts:manualDetect
hss::getTrustServiceStatus	Grants permission to get trust-service status.	Read	-	-	-
hss::enableTrustService	Grants permission to enable trust-service.	Permission_management	-	-	-
hss::validateAdmin	Grants permission to validate admin accounts.	Tagging	-	-	-
hss::listAccounts	Grants permission to list accounts.	List	-	-	-
hss::batchAddAccounts	Grants permission to batch add accounts.	Write	-	-	-
hss::deleteAccount	Grants permission to delete account by id.	Write	-	-	-
hss::listOrganizationTree	Grants permission to list organization tree.	List	-	-	-
hss::listDelegatedAccounts	Grants permission to list organization tree.	List	-	-	-
hss:antiransomware:listBackupVaults	Grants permission to query the list of backup vaults.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:listRansomwareProtectionNodes	Grants permission to query servers protected against ransomware.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getBackupsStatistics	Grants permission to query backup statistics.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:startSingleBackup	Grants permission to enable the backup function for a single server.	Write	host *	-	hss:antiransomware:set
hss:antiransomware:startSingleBackup		Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:getBackupPolicyInfo	Grants permission to query single backup policy information.	Read	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:hostGroup:getOutsideGroupStatus	Grants permission to query whether creating a data center server group is supported.	Read	-	g:EnterpriseProjectId	hss:hostGroup:get
hss:hostGroup:getOutsideHostGroup	Grants permission to query offline data center server groups.	Read	-	g:EnterpriseProjectId	hss:hostGroup:get
hss:hostGroup:addOutsideHostGroup	Grants permission to create an offline data center server group.	Write	-	g:EnterpriseProjectId	hss:hostGroup:set
hss:hostGroup:changeOutsideHostGroup	Grants permission to edit an offline data center server group.	Write	-	g:EnterpriseProjectId	hss:hostGroup:set
hss:images:listImageTag	Grants permission to query the image tag version list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:images:listImageSensitive	Grants permission to query sensitive information about the image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:images:getFilePathWhiteDetail	Grants permission to query the mirror's sensitive information file path whitelist.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:images:changeFilePathWhiteDetail	Grants permission to modify the mirror's sensitive information file path whitelist.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:images:changeSensitiveInfo	Grants permission to handle sensitive information.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:event:listTopEventType	Grants permission to query the top 5 event type statistics list.	List	-	g:EnterpriseProjectId	hss:event:get
hss:vulnerability:getVulScanPolicy	Grants permission to query a vulnerability scan policy.	Read	-	-	hss:vuls:list
hss:vulnerability:changeVulScanPolicy	Grants permission to modify a vulnerability scan policy.	Write	host *	-	hss:vuls:set
hss:vulnerability:listVulWhiteList	Grants permission to query the vulnerability whitelist.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getVulWhiteListDetail	Grants permission to query vulnerability whitelist details.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:changeVulWhiteList	Grants permission to modify the vulnerability whitelist.	Write	host *	-	hss:vuls:set
hss:vulnerability:changeVulWhiteList	Grants permission to modify the vulnerability whitelist.	Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:vulnerability:deleteVulWhiteList	Grants permission to delete an item from the vulnerability whitelist.	Write	-	-	hss:vuls:set
hss:vulnerability:addVulWhiteList	Grants permission to add an item to the vulnerability whitelist.	Write	host *	-	hss:vuls:set
hss:vulnerability:addVulWhiteList		Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:vulnerability:listVulWhiteListVulOptions	Grants permission to query vulnerability options when adding a whitelist item.	List	-	-	hss:vuls:list
hss:vulnerability:listVulScanTask	Grants permission to query the vulnerability scan task list.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulScanTaskHost	Grants permission to query the list of servers corresponding to a vulnerability scan task.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:rescanVulScanTask	Grants permission to rescan servers in a vulnerability scan task.	Write	host *	-	hss:vuls:set
hss:vulnerability:rescanVulScanTask		Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:vulnerability:getVulScanTaskStatistics	Grants permission to query vulnerability scan task statistics.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listHostVulStatistics	Grants permission to query vulnerability management statistics.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHostApps	Grants permission to query details about the software list of servers affected by vulnerabilities.	List	host *	-	hss:vuls:list
hss:vulnerability:listVulHostApps		List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHostProcess	Grants permission to query details about the process list of servers affected by vulnerabilities.	List	host *	-	hss:vuls:list
hss:vulnerability:listVulHostProcess		List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHandleHistory	Grants permission to query historical vulnerability handling records.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHostHosts	Grants permission to query the list of servers with vulnerabilities.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHostVuls	Grants permission to query emergency fixes and unfixed vulnerabilities.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHostHandleVuls	Grants permission to query vulnerabilities handled today and the total vulnerabilities handled.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:image:listImageNonCompliantApp	Grants permission to query the non-compliant software information of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:batchExportSWRVulList	Grants permission to export vulnerabilities from an SWR image repository in batches.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:batchExportLocalVulList	Grants permission to export local image vulnerabilities in batches.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:getExtendedWeakPassword	Grants permission to query the user-defined weak passwords of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:changeExtendedWeakPassword	Grants permission to modify the user-defined weak passwords of an image.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:listImageBasicImage	Grants permission to query basic image information.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImagePwdComplexity	Grants permission to query the password complexity check report of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageWeakPwdUsers	Grants permission to query the image weak password check results of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageRiskConfigs	Grants permission to query the security configuration check results of an image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageRiskConfigCheckRules	Grants permission to query the check items of a specified image security configuration item.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:getImageRiskConfigDetail	Grants permission to query the check results of a specified image security configuration item.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:image:getImageCheckRuleDetail	Grants permission to query the check reports of an image configuration check item.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:image:getImageBaselineStatistic	Grants permission to query baseline check statistics, including weak passwords, password complexity, and configuration detection.	Read	-	g:EnterpriseProjectId	hss:images:list
hss:event:addSystemUserWhiteList	Grants permission to add users to the system user whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:updateSystemUserWhiteList	Grants permission to modify the system user whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:listSystemUserWhiteList	Grants permission to query the system user whitelist.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:removeSystemUserWhiteList	Grants permission to remove users from the system user whitelist.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:container:saveClusters	Grants permission to synchronize cluster information.	Write	-	g:EnterpriseProjectId	hss:containers:set
hss:container:listClusterInfo	Grants permission to query the Kubernetes cluster list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listPodInfo	Grants permission to query the basic pod information list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:showPodDetail	Grants permission to query pod details.	Read	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listContainerInfo	Grants permission to query the basic container information list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:showContainerDetail	Grants permission to query container details.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listServiceInfo	Grants permission to query the Kubernetes service list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:showServiceDetail	Grants permission to query Kubernetes service details.	Read	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listEndpointInfo	Grants permission to query the Kubernetes endpoint list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:showEndpointDetail	Grants permission to query Kubernetes endpoint details.	Read	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listDeployments	Grants permission to query the Kubernetes Deployment list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listStatefulSets	Grants permission to query the Kubernetes StatefulSet list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listDaemonSets	Grants permission to query the Kubernetes daemon list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listJobs	Grants permission to query the Kubernetes common job list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:listCronJobs	Grants permission to query the Kubernetes scheduled task list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:vulnerability:showVulAffectedStatics	Grants permission to count the servers affected by vulnerabilities.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHandleTask	Grants permission to query the vulnerability handling task list.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listVulHandleTaskDetail	Grants permission to query vulnerability handling task details.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:container:isolateK8sContainer	Grants permission to modify the status of container.	Write	-	g:EnterpriseProjectId	hss:containers:set
hss:container:getNetworkStatistics	Grants permission to query container firewall stat status.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:getClusters	Grants permission to query cluster list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:getClusterNetworkInfo	Grants permission to query cluster network information.	Read	-	g:EnterpriseProjectId	hss:container-network:read
hss:container:getClusterPolicyList	Grants permission to query container network policy list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:deletePolicy	Grants permission to delete container network policy.	Write	-	g:EnterpriseProjectId	hss:clusterProtect:delete
hss:container:createPolicy	Grants permission to create container network policy.	Write	-	g:EnterpriseProjectId	hss:container-network:set
hss:container:updatePolicy	Grants permission to update container network policy.	Write	-	g:EnterpriseProjectId	hss:container-network:set
hss:container:syncClusterPolicyList	Grants permission to sync container network policy.	Read	-	g:EnterpriseProjectId	hss:container-network:read
hss:container:syncClusterList	Grants permission to sync cluster namespace information.	Read	-	g:EnterpriseProjectId	hss:container-network:read
hss:container:getNamespaceList	Grants permission to query cluster namespace list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:getNodeList	Grants permission to query cluster node list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:syncClusterNodeList	Grants permission to sync cluster node list.	Read	-	g:EnterpriseProjectId	hss:container-network:read
hss:vulnerability:getVulScanTaskEstimatedTime	Grants permission to query estimated vulnerability scan duration.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:antiransomware:addRansomwareProtectionPolicy	Grants permission to add ransomware protection policies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:associateBackupPolicy	Grants permission to apply backup policies to vaults.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:listBackupPolicy	Grants permission to query the backup policy list.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:associateProtectionPolicy	Grants permission to switch ransomware protection policies.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:antiransomware:batchStartProtection	Grants permission to enable ransomware protection.	Write	-	g:EnterpriseProjectId	hss:antiransomware:set
hss:event:getEventAttCk	Grants permission to query the list of ATT&CK attack phase statistics.	List	event *	-	hss:event:get
hss:event:getEventAttCk		List	-	g:EnterpriseProjectId	hss:event:get
hss:event:downloadEventSourceFile	Grants permission to download alarm source files.	List	event *	-	hss:event:get
hss:event:downloadEventSourceFile	Grants permission to download alarm source files.	List	-	g:EnterpriseProjectId	hss:event:get
hss:overview:showSecurityScore	Grants permission to query security scores.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:listSecurityRisk	Grants permission to query the security risk list.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showQuotaHostStatistics	Grants permission to query server quota statistics.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showAgentStatistics	Grants permission to query the numbers of agents to be upgraded, online, and offline.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showHotInformation	Grants permission to query hot news.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showSecurityRisk	Grants permission to query security risk information.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showProtectStatistics	Grants permission to query the protection period, virus library update time, vulnerability library update time, and accumulated number of records of each module.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:overview:showStatistics	Grants permission to query the numbers of servers with enabled ransomware protection, application protection, web tamper protection, and two-factor authentication; and the number of isolated files.	List	-	g:EnterpriseProjectId	hss:overview:list
hss:event:listEventHandleHistory	Grants permission to query the list of historical events handling.	List	event *	-	hss:event:get
hss:event:listEventHandleHistory		List	-	g:EnterpriseProjectId	hss:event:get
hss:image:listSwrImageRepository	Grants permission to query the image list in the SWR image repository.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:batchScanSwrImage	Grants permission to scan images in the image repository in batches.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:vulnerabilities	Grants permission to query image vulnerability details.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listVulnerabilityCve	Grants permission to query CVE details about a vulnerability.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listImageRiskConfigRules	Grants permission to query the check items of a specified image security configuration item.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:runImageSynchronize	Grants permission to synchronize the image list from SWR.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:event:listEventForensic	Grants permission to query event forensics information.	List	event *	-	hss:event:get
hss:event:listEventForensic	Grants permission to query event forensics information.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listSimilarHandledEvents	Grants permission to query similar handled alarms.	List	event *	-	hss:event:get
hss:event:listSimilarHandledEvents	Grants permission to query similar handled alarms.	List	-	g:EnterpriseProjectId	hss:event:get
hss:event:listSameEvent	Grants permission to query the same alarms.	List	event *	-	hss:event:get
hss:event:listSameEvent	Grants permission to query the same alarms.	List	-	g:EnterpriseProjectId	hss:event:get
hss:container:getPolicies	Grants permission to query the policy list.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:getPolicyDetail	Grants permission to query policy details.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:getOverview	Grants permission to query cluster protection overview.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:getProtectEvents	Grants permission to query cluster protection events.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:getProtectClusters	Grants permission to query cluster protection information.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:changeProtectStatus	Grants permission to change the cluster protection status.	Write	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:addWhiteImage	Grants permission to add images to the whitelist.	Write	-	g:EnterpriseProjectId	hss:clusterProtect:set
hss:container:listDefaultPolicy	Grants permission to query the default policy template.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:container:listProtectionItem	Grants permission to query the protection scope.	List	-	g:EnterpriseProjectId	hss:clusterProtect:list
hss:vulnerability:getVulBackupStatistics	Grants permission to query backup statistics of the server corresponding to the vulnerability handling.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:ListVulHostVaults	Grants permission to query the list of server vaults corresponding to vulnerability handling.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:ListVulHostBackups	Grants permission to query the list of backups that can be rolled back.	List	host *	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:RestoreVulHostBackup	Grants permission to roll back with backups.	Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:event:exportEvent	Grants permission to export event alarms.	Write	event *	-	hss:event:set
hss:event:exportEvent	Grants permission to export event alarms.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:event:queryExportTask	Grants permission to query the task of exporting event alarms.	Read	event *	-	hss:event:get
hss:event:queryExportTask		Read	-	g:EnterpriseProjectId	hss:event:get
hss:event:downloadEvent	Grants permission to download event alarms.	Read	event *	-	hss:event:get
hss:event:downloadEvent	Grants permission to download event alarms.	Read	-	g:EnterpriseProjectId	hss:event:get
hss:ars:createAppWhitelistPolicy	Grants permission to create an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:createAppWhitelistPolicy		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:listAppWhitelistPolicy	Grants permission to query the list of application process whitelist policies.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:changeAppWhitelistPolicy	Grants permission to modify an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:changeAppWhitelistPolicy		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:deleteAppWhitelistPolicy	Grants permission to delete an application process whitelist policy.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:showAppWhitelistPolicy	Grants permission to query the application process whitelist policy information.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:switchAppWhitelistPolicyHost	Grants permission to modify the protection status of an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:switchAppWhitelistPolicyHost		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:addAppWhitelistPolicyHost	Grants permission to add servers to an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:addAppWhitelistPolicyHost		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:listAppWhitelistPolicyHost	Grants permission to query the list of servers that an application process whitelist policy applies to.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:deleteAppWhitelistPolicyHost	Grants permission to remove servers from an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:deleteAppWhitelistPolicyHost		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:listAppWhitelistHostStatus	Grants permission to query the list of available servers for an application process whitelist policy.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:listAppWhitelistPolicyProcess	Grants permission to query the list of processes that an application process whitelist policy applies to.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:changeAppWhitelistPolicyProcessStatus	Grants permission to modify the process trust status of an application process whitelist policy.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:addAppWhitelistPolicyProcess	Grants permission to add processes to an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:addAppWhitelistPolicyProcess		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:listAppWhitelistPolicyProcessExtend	Grants permission to query the extended process list for an application process whitelist policy.	List	host *	-	hss:ars:list
hss:ars:listAppWhitelistPolicyProcessExtend		List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:exportAppWhitelistPolicyProcess	Grants permission to export the list of processes that an application process whitelist policy applies to.	List	host *	-	hss:ars:list
hss:ars:exportAppWhitelistPolicyProcess		List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:switchAppWhitelistPolicyLearnStatus	Grants permission to modify the learning status of an application process whitelist policy.	Write	host *	-	hss:ars:set
hss:ars:switchAppWhitelistPolicyLearnStatus		Write	-	g:EnterpriseProjectId	hss:ars:set
hss:ars:showAppWhitelistAgentStatics	Grants permission to query the number of servers that are protected by the premium edition and do not support application process control.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:ars:listAppWhitelistEvent	Grants permission to query the list of suspicious process events detected by application process control.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:container:deleteSelfBuildK8sClusterDaemonsetInfo	Grants permission to delete the DaemonSet of an on-premises cluster.	Write	-	g:EnterpriseProjectId	hss:containers:set
hss:container:saveSelfBuildK8sClusterDaemonsetInfo	Grants permission to save the DaemonSet of an on-premises cluster.	Write	-	g:EnterpriseProjectId	hss:containers:set
hss:container:showSelfBuildK8sClusterDaemonsetInfo	Grants permission to query the DaemonSet of an on-premises cluster.	Read	-	g:EnterpriseProjectId	hss:containers:get
hss:container:listSelfBuildK8sClusterInfo	Grants permission to query the on-premises Kubernetes cluster list.	List	-	g:EnterpriseProjectId	hss:containers:list
hss:container:createDaemonset	Grants permission to create DaemonSet of a CCE cluster.	Write	-	g:EnterpriseProjectId	hss:containers:set
hss:vulnerability:listVulRepairCmds	Grants permission to query vulnerability fixing commands.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:listUrgentVulnerabilities	Grants permission to query the emergency vulnerability list.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:antivirus:createAntivirusTask	Grants permission to create virus scan tasks.	Write	host *	-	hss:ars:set
hss:antivirus:createAntivirusTask	Grants permission to create virus scan tasks.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:antivirus:listAntivirusTask	Grants permission to query the virus scan task list.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:antivirus:switchAntivirusTask	Grants permission to cancel virus scan tasks.	Write	host *	-	hss:ars:set
hss:antivirus:switchAntivirusTask	Grants permission to cancel virus scan tasks.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:antivirus:listAntivirusHost	Grants permission to query the list of servers available for virus scan.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:antivirus:createAntivirusPolicy	Grants permission to create custom virus scan policies.	Write	host *	-	hss:ars:set
hss:antivirus:createAntivirusPolicy	Grants permission to create custom virus scan policies.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:antivirus:listAntivirusPolicy	Grants permission to query the list of custom virus scan policies.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:antivirus:listAntivirusResult	Grants permission to query the list of virus scan results.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:antivirus:operateAntivirusResult	Grants permission to handle virus scan results.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:antivirus:exportAntivirusResult	Grants permission to export virus scan results.	Write	-	g:EnterpriseProjectId	hss:ars:set
hss:antivirus:showAntivirusStatistic	Grants permission to query virus scan statistics.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:image:showImageFullScanProgress	Grants permission to query the progress of a full image scan.	List	-	g:EnterpriseProjectId	hss:images:list
hss:host:changeHostIgnoreStatus	Grants permission to ignore or unignore servers.	Write	host *	-	hss:hosts:set
hss:host:changeHostIgnoreStatus	Grants permission to ignore or unignore servers.	Write	-	g:EnterpriseProjectId	hss:hosts:set
hss:host:listIgnoreHosts	Grants permission to query ignored servers.	List	host *	-	hss:hosts:list
hss:host:listIgnoreHosts	Grants permission to query ignored servers.	List	-	g:EnterpriseProjectId	hss:hosts:list
hss:image:batchExportBaselineTask	Grants permission to export image baseline check results.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:image:showImageSecurityReportStatistic	Grants permission to query the number of image scan results to be exported.	Write	-	g:EnterpriseProjectId	hss:images:set
hss:vulnerability:exportVuls	Grants permission to create vulnerability export tasks.	Write	-	g:EnterpriseProjectId	hss:vuls:set
hss:exportTask:queryExportTask	Grants permission to query export tasks.	List	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:file:downloadExportedFile	Grants permission to download files.	List	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:image:listGlobalVulnerabilities	Grants permission to query vulnerability details about a tenant image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listVulnerabilityImages	Grants permission to query details about images in the image repository affected by a vulnerability.	List	-	g:EnterpriseProjectId	hss:images:list
hss:setting:getPluginInstallScript	Grants permission to query server plug-in information.	List	-	g:EnterpriseProjectId	hss:installAgent:get
hss:setting:getPluginList	Grants permission to query the plug-in installation guide.	List	-	g:EnterpriseProjectId	hss:installAgent:get
hss:setting:getAutoOpenQuotaStatus	Grants permission to query the status of automatic quota binding.	Read	-	g:EnterpriseProjectId	hss:hosts:list
hss:setting:changeAutoOpenQuotaStatus	Grants permission to modify the status of automatic quota binding.	Write	-	g:EnterpriseProjectId	hss:hosts:list
hss:image:batchExportSWRVulTask	Grants permission to export SWR image vulnerability scan results.	Write	-	g:EnterpriseProjectId	hss:images:list
hss:image:batchExportLocalVulTask	Grants permission to export local image vulnerability scan results.	Write	-	g:EnterpriseProjectId	hss:images:list
hss:vulnerability:exportVulReport	Grants permission to export vulnerability reports in HTML format.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getVulReportData	Grants permission to obtain vulnerability reports in PDF format.	List	-	g:EnterpriseProjectId	hss:vuls:list
hss:setting:getAgentAutoUpgradeStatus	Grants permission to query the status of automatic agent upgrade.	Read	-	g:EnterpriseProjectId	hss:hosts:list
hss:setting:changeAgentAutoUpgradeStatus	Grants permission to modify the status of automatic agent upgrade.	Write	-	g:EnterpriseProjectId	hss:hosts:list
hss:quota:showProductdataOfferingInfos	Grants permission to query product information.	List	-	g:EnterpriseProjectId	hss:quotas:get
hss:image:listLocalImageAppInfo	Grants permission to query the local image software list.	List	-	g:EnterpriseProjectId	hss:images:list
hss:image:listLocalImageAppVulnerabilities	Grants permission to query a single software vulnerability list for local image.	List	-	g:EnterpriseProjectId	hss:images:list
hss:antiransomware:getRansomwareProtectionStatus	Grants permission to query ransomware protection status.	List	-	g:EnterpriseProjectId	hss:antiransomware:list
hss:antiransomware:getAutoDeployAgentList	Grants permission to query servers for which ransomware protection is automatically enabled.	List	-	-	hss:antiransomware:list
hss:antiransomware:updateAutoDeployAgent	Grants permission to update servers for which ransomware protection is automatically enabled.	Write	-	-	hss:antiransomware:set
hss:vulnerability:getVulIndividualStatistics	Grants permission to query vulnerability statistics.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:vulnerability:getVulAffectInfo	Grants permission to query information about vulnerabilities affected servers or vulnerabilities on servers.	Read	-	g:EnterpriseProjectId	hss:vuls:list
hss:event:deleteIsolatedFile	Grants permission to delete isolation box files.	Write	host *	-	hss:event:set
hss:event:deleteIsolatedFile	Grants permission to delete isolation box files.	Write	-	g:EnterpriseProjectId	hss:event:set
hss:antivirus:listAntivirusHandleHistory	Grants permission to query historical virus scanning and killing records.	List	-	g:EnterpriseProjectId	hss:ars:list
hss:decoyport:showStatistics	Grants permission to view port honeypot protection statistics.	Read	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:showAutoBind	Grants permission to view the automatic binding status of the port honeypot.	Read	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:switchAutoBind	Grants permission to modify the automatic binding status of the port honeypot.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:showHostList	Grants permission to view the protected server list of the port honeypot policy.	List	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:listPolicy	Grants permission to view the policy list of the port honeypot.	List	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:listAvailableHost	Grants permission to view the list of servers where the port honeypot can be enabled.	List	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:switchHostPolicy	Grants permission to switch the port honeypot protection policy of the server.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:deleteHostPolicy	Grants permission to disable the port honeypot protection policy of the server.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:createPolicy	Grants permission to add port honeypot policies.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:modifyPolicy	Grants permission to edit port honeypot protection policies.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:showPolicyDetails	Grants permission to view port honeypot policy details.	Read	-	g:EnterpriseProjectId	hss:decoyport:get
hss:decoyport:deletePolicy	Grants permission to delete port honeypot policies.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:decoyport:switchPolicy	Grants permission to enable or disable the port honeypot policies.	Write	-	g:EnterpriseProjectId	hss:decoyport:set
hss:exportTask:queryLatestExportTaskByType	Grants permission to query the latest export tasks.	Read	-	g:EnterpriseProjectId	hss:keyfiles:list
hss:container:createSecurityGroupPolicy	Grants permission to create security group policies.	Write	-	g:EnterpriseProjectId	hss:container-network:set
hss:container:updateSecurityGroupPolicy	Grants permission to update security group policies.	Write	-	g:EnterpriseProjectId	hss:container-network:set
hss:container:getSecurityGroupPolicyList	Grants permission to query the security group policy list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:deleteSecurityGroupPolicy	Grants permission to delete security group policies.	Write	-	g:EnterpriseProjectId	hss:container-network:set
hss:container:syncSecurityGroupPolicy	Grants permission to synchronize security group policies in a cluster.	Read	-	g:EnterpriseProjectId	hss:container-network:read
hss:container:getWorkloadList	Grants permission to query the workload list.	List	-	g:EnterpriseProjectId	hss:container-network:list
hss:container:getSecurityGroupList	Grants permission to query the security group list.	List	-	g:EnterpriseProjectId	hss:container-network:list

Each API of HSS usually supports one or more actions. Table 2 lists the supported actions and dependencies.

**Table 2** Actions and dependencies supported by HSS APIs
API	Action	Dependencies
POST /v5/{project_id}/host-management/groups	hss:host:addHostsGroup	eps:enterpriseProjects:list
PUT /v5/{project_id}/pwl/{policy_id}/host	hss:ars:addPWLPolicyHost	eps:enterpriseProjects:list
POST /v5/{project_id}/rasp/policy	hss:rasp:addRaspPolicy	eps:enterpriseProjects:list
POST /v5/{project_id}/report/security-report	hss:safetyReport:addSecurityReport	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/timing-off-config	hss:wtp:addTimingOffConfigInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/protect-directories	hss:wtp:addWtpHostProtectDirInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/privileged-process	hss:wtp:addWtpPrivilegedProcessInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/setting/virus-kill	hss:setting:changeAutoKillVirusStatus	eps:enterpriseProjects:list
PUT /v5/{project_id}/event/blocked-ip	hss:event:changeBlockedIp	eps:enterpriseProjects:list
PUT /v5/{project_id}/setting/malware/collect	hss:setting:changeMalwareCollectStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/pwl/policy	hss:ars:changePWLPolicy	eps:enterpriseProjects:list
POST /v5/{project_id}/pwl/{policy_id}/process	hss:ars:changePWLPolicyProcessStatus	eps:enterpriseProjects:list
PUT /v5/{project_id}/report/security-report	hss:safetyReport:changeSecurityReport	eps:enterpriseProjects:list
PUT /v5/{project_id}/pwl/policy	hss:ars:createPWLPolicy	eps:enterpriseProjects:list
DELETE /v5/{project_id}/pwl/policy	hss:ars:deletePWLPolicy	eps:enterpriseProjects:list
DELETE /v5/{project_id}/pwl/{policy_id}/host	hss:ars:deletePWLPolicyHost	eps:enterpriseProjects:list
DELETE /v5/{project_id}/ransomware/duplication/{backup_id}	hss:antiransomware:deleteRansomwareDuplicationInfo	eps:enterpriseProjects:list
DELETE /v5/{project_id}/ransomware/protection/policy	hss:antiransomware:deleteRansomwareProtectionPolicy	eps:enterpriseProjects:list
DELETE /v5/{project_id}/rasp/policy	hss:rasp:deleteRaspPolicy	eps:enterpriseProjects:list
DELETE /v5/{project_id}/report/security-report	hss:safetyReport:deleteSecurityReport	eps:enterpriseProjects:list
DELETE /v5/{project_id}/wtp/{host_id}/timing-off-config	hss:wtp:deleteTimingOffConfigInfo	eps:enterpriseProjects:list
DELETE /v5/{project_id}/wtp/{host_id}/protect-directories	hss:wtp:deleteWtpHostProtectDirInfo	eps:enterpriseProjects:list
DELETE /v5/{project_id}/wtp/{host_id}/privileged-process	hss:wtp:deleteWtpPrivilegedProcessInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/agent-install-script	hss:setting:getAgentInstallScript	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/alarm-config	hss:setting:getAlarmConfig	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/{host_id}/status	hss:rasp:getAppRaspSwitchStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/virus-kill	hss:setting:getAutoKillVirusStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/container/node-statistics	hss:container:getContainerNodeStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/files/statistic	hss:keyfile:getFileStatistic	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/malware/collect	hss:setting:getMalwareCollectStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/malware/reminders	hss:setting:getMalwareReminders	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/manual-check/status	hss:securitycheck:getManualSecurityCheckStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/asset/groups/statistics	hss:overview:getOverviewAssetGroupsStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/asset/os/statistics	hss:overview:getOverviewAssetOsStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/asset/statistics	hss:overview:getOverviewAssetStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/attck-mitre	hss:overview:getOverviewAttckMitre	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/defense/statistics	hss:overview:getOverviewDefenseStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/protection/statistics	hss:overview:getOverviewProtectionStatusStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/quota/statistics	hss:overview:getOverviewQuotaStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/lists	hss:overview:getOverviewRiskLists	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/manage/statistics	hss:overview:getOverviewRiskManageStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/score	hss:overview:getOverviewRiskScore	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/risk/event/statistics	hss:overview:getOverviewRiskStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/overview/trial/statistic	hss:overview:getOverviewTrialsStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/backup/{backup_id}/detail	hss:antiransomware:getRansomwareBackupInfoByBackupId	eps:enterpriseProjects:list
GET /v5/{project_id}/backup/policy	hss:antiransomware:getRansomwareHSSBackupPolicyInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/statistics/backup	hss:antiransomware:getRansomwareBackupStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/statistics/protection	hss:antiransomware:getRansomwareProtectionStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/backup/vault	hss:antiransomware:getRansomwareVaultInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/policy/detail	hss:rasp:getRaspPolicyDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/statistics	hss:rasp:getRaspProtectStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/rasp/status	hss:wtp:getRaspSwitchStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/config	hss:securitycheck:getSecurityCheckConfig	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/host-report/{host_id}	hss:securitycheck:getSecurityCheckHostReport	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/overview	hss:securitycheck:getSecurityCheckOverview	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/statistic	hss:securitycheck:getSecurityCheckStatistic	eps:enterpriseProjects:list
GET /v5/{project_id}/report/security-report	hss:safetyReport:getSecurityReport	eps:enterpriseProjects:list
GET /v5/{project_id}/report/report-subscription	hss:safetyReport:getSecurityReportSubscription	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/timing-off/status	hss:wtp:getTimingOffStatusInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/statistics	hss:wtp:getWtpDashboardProtectStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/rasp_path	hss:wtp:getWtpDirectory	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/monitor-only/status	hss:wtp:getWtpDirectoryMonitorOnlyStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/webtamper/static/{host_id}/privileged-child/status	hss:wtp:getWtpPrivilegedProcessesChildStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/backup-host	hss:wtp:getWtpRemoteBackupHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/agent-version	hss:setting:listAgentVersion	eps:enterpriseProjects:list
GET /v5/{project_id}/container/nodes	hss:container:listContainerNodes	eps:enterpriseProjects:list
GET /v5/{project_id}/files/change-files	hss:keyfile:listFileEvents	eps:enterpriseProjects:list
GET /v5/{project_id}/{host_id}/files/change-files	hss:keyfile:listFileHostEventDetails	eps:enterpriseProjects:list
GET /v5/{project_id}/files/change-host	hss:keyfile:listFileHosts	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/groups	hss:host:listHostGroups	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/login-common-ip	hss:setting:listLoginCommonIp	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/login-common-location	hss:setting:listLoginCommonLocation	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/login-white-ip	hss:setting:listLoginWhiteIp	eps:enterpriseProjects:list
GET /v5/{project_id}/policy/groups	hss:policy:listPolicyGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/ports/detail	hss:asset:listPortHost	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/processes/detail	hss:asset:listProcessesHost	eps:enterpriseProjects:list
GET /v5/{project_id}/pwl/event	hss:ars:listPWLEvent	eps:enterpriseProjects:list
GET /v5/{project_id}/pwl/policy	hss:ars:listPwlPolicy	eps:enterpriseProjects:list
GET /v5/{project_id}/pwl/{policy_id}/host	hss:ars:listPwlPolicyHost	eps:enterpriseProjects:list
GET /v5/{project_id}/pwl/{policy_id}/process	hss:ars:listPwlPolicyProcess	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/backup/{host_id}	hss:antiransomware:listRansomwareBackedupByHostId	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/backup/operation-logs	hss:antiransomware:listRansomwareOperationLogsByVaultName	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/optional/server	hss:antiransomware:listRansomwareProtectionOptionalServer	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/protection/policy	hss:antiransomware:listRansomwareProtectionPolicy	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/server	hss:antiransomware:listRansomwareProtectionServer	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/rule	hss:rasp:listRaspCheckFeatureRule	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/events	hss:rasp:listRaspEvents	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/policies	hss:rasp:listRaspPolicies	eps:enterpriseProjects:list
GET /v5/{project_id}/rasp/servers	hss:rasp:listRaspProtectionServers	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/host-report/history/{host_id}	hss:securitycheck:listSecurityCheckHostReportHistory	eps:enterpriseProjects:list
GET /v5/{project_id}/security-check/host-results	hss:securitycheck:listSecurityCheckHostResult	eps:enterpriseProjects:list
GET /v5/{project_id}/report/report-list	hss:safetyReport:listSecurityReport	eps:enterpriseProjects:list
GET /v5/{project_id}/report/period-list	hss:safetyReport:listSecurityReportHistoryPeriod	eps:enterpriseProjects:list
GET /v5/{project_id}/report/sending-list	hss:safetyReport:listSecurityReportSendingRecord	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/timing-off-config	hss:wtp:listTimingOffConfigInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/setting/two-factor-login/hosts	hss:setting:listTwoFactorLoginHost	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/backup-hosts	hss:wtp:listWtpBackupHostsInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/protect-directories	hss:wtp:listWtpHostProtectDirInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/webtamper/static/protect-history	hss:wtp:listWtpHostProtectHistoryInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/webtamper/rasp/protect-history	hss:wtp:listWtpHostRaspProtectHistoryInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/wtp/{host_id}/privileged-process	hss:wtp:listWtpPrivilegedProcessesInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/webtamper/hosts	hss:wtp:listWtpProtectHost	eps:enterpriseProjects:list vpc:ports:list
POST /v5/{project_id}/setting/login-common-ip	hss:setting:modifyLoginCommonIp	eps:enterpriseProjects:list
POST /v5/{project_id}/setting/login-common-location	hss:setting:modifyLoginCommonLocation	eps:enterpriseProjects:list
POST /v5/{project_id}/setting/login-white-ip	hss:setting:modifyLoginWhiteIp	eps:enterpriseProjects:list
POST /v5/{project_id}/pwl/event/operate	hss:ars:operatePWLEvent	eps:enterpriseProjects:list
POST /v5/{project_id}/pwl/{policy_id}/relearn	hss:ars:relearnPWLPolicy	eps:enterpriseProjects:list
PUT /v5/{project_id}/overview/risk/score	hss:overview:resetOverviewRiskScore	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/duplication/{backup_id}/restore	hss:antiransomware:restoreRansomwareDuplicationInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/report/sending	hss:safetyReport:sendSecurityReport	eps:enterpriseProjects:list
PUT /v5/{project_id}/setting/reminders-config	hss:setting:setAlarmConfig	eps:enterpriseProjects:list
PUT /v5/{project_id}/setting/malware/reminders	hss:setting:setMalwareReminders	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/set-remote-backup	hss:wtp:setRemoteWtpBackupInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/timing-off/status	hss:wtp:setTimingOffSwitchInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/setting/two-factor-login/config	hss:setting:setTwoFactorLoginConfig	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/monitor-only/status	hss:wtp:setWtpDirectoryMonitorOnlyStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/webtamper/static/{host_id}/privileged-child/status	hss:wtp:setWtpPrivilegedProcessesChildStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/webtamper/static/status	hss:wtp:setWtpProtectionStatusInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/webtamper/rasp/status	hss:wtp:setWtpProtectSwitch	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/{host_id}/date-off-config	hss:wtp:setWtpScheduledProtectionDateOffConfigInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/security-check/manual-check/start	hss:securitycheck:startManualSecurityCheck	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/backup/open/{host_id}	hss:antiransomware:startRansomwareBackupSingle	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/protection/open	hss:antiransomware:startRansomwareProtection	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/protection/open/{host_id}	hss:antiransomware:startRansomwareProtectionSingle	eps:enterpriseProjects:list
POST /v5/{project_id}/security-check/manual-check/stop	hss:securitycheck:stopManualSecurityCheck	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/protection/close	hss:antiransomware:stopRansomwareProtection	eps:enterpriseProjects:list
POST /v5/{project_id}/container/switch-version	hss:container:switchContainerProtectStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/pwl/{policy_id}/host	hss:ars:switchPWLPolicyHost	eps:enterpriseProjects:list
PUT /v5/{project_id}/rasp/status	hss:rasp:switchRasp	eps:enterpriseProjects:list
POST /v5/{project_id}/report/report-status	hss:safetyReport:switchSecurityReportStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/wtp/{host_id}/protect-directories/status	hss:wtp:switchWtpHostProtectDirInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/uninstall	hss:host:uninstallAgents	eps:enterpriseProjects:list
PUT /v5/{project_id}/setting/alarm-config	hss:setting:updateAlarmConfig	eps:enterpriseProjects:list
PUT /v5/{project_id}/backup/policy	hss:antiransomware:updateRansomwareBackupPolicyInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/ransomware/protection/policy	hss:antiransomware:updateRansomwareProtectionPolicy	eps:enterpriseProjects:list
PUT /v5/{project_id}/rasp/policy	hss:rasp:updateRaspPolicy	eps:enterpriseProjects:list
POST /v5/{project_id}/security-check/config	hss:securitycheck:updateSecurityCheckConfig	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/{host_id}/timing-off-config	hss:wtp:updateTimingOffConfigInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/backup-hosts	hss:wtp:updateWtpBackupHostInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/{host_id}/rasp_path	hss:wtp:updateWtpDirectoryInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/{host_id}/protect-directories	hss:wtp:updateWtpHostProtectDirInfo	eps:enterpriseProjects:list
PUT /v5/{project_id}/wtp/{host_id}/privileged-process	hss:wtp:updateWtpPrivilegedProcessInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/asset/values/host	hss:asset:addValuesLevel	eps:enterpriseProjects:list
POST /v5/{project_id}/asset/batch-modify-port-status	hss:asset:batchModifyPortStatus	eps:enterpriseProjects:list
DELETE /v5/{project_id}/investigation/tool/condition-history	hss:asset:deleteToolConditionHistory	eps:enterpriseProjects:list
POST /v5/{project_id}/investigation/tool/execute	hss:asset:executeTool	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/account	hss:asset:getAccountTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/agent	hss:asset:getAgentStatisticsStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics	hss:asset:getAssetStatistic	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/type	hss:asset:getAssetType	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/auto-launch	hss:asset:getAutoLaunchTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/common-port-info	hss:asset:getCommonPort	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/container/protection	hss:asset:getContainerProtectionStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/core-conf-file	hss:asset:getCoreConfFileTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/environment	hss:asset:getEnvironmentTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/manual-collect/{type}	hss:asset:getHostAssetManualCollectStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/host/protection	hss:asset:getHostProtectionStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/jar-package	hss:asset:getJarPackageTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/kernel-module	hss:asset:getKernelModuleTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/os	hss:asset:getOsStatisticsInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/process	hss:asset:getPorcessTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/port	hss:asset:getPortTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/status/quota	hss:asset:getQuotaStatisticsInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/software	hss:asset:getSoftwareTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/web-app-and-service	hss:asset:getWebAppAndServiceTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/web-app	hss:asset:getWebAppTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/web-framework	hss:asset:getWebFrameworkTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/web-service	hss:asset:getWebServiceTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/overview/statistics/top/web-site	hss:asset:getWebSiteTop	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/app/change-history	hss:asset:listAppChangeHistories	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/apps	hss:asset:listApps	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/app/statistics	hss:asset:listAppStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/auto-launch/change-history	hss:asset:listAutoLaunchChangeHistories	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/auto-launchs	hss:asset:listAutoLaunchs	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/auto-launch/statistics	hss:asset:listAutoLaunchStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/core-conf-file	hss:asset:listCoreConfFileHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/core-conf-file	hss:asset:listCoreConfFileInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/core-conf-file	hss:asset:listCoreConfFileStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/environment	hss:asset:listEnvironmentHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/environment	hss:asset:listEnvironmentInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/environment	hss:asset:listEnvironmentStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/midwares/detail	hss:asset:listJarPackageHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/jar-package	hss:asset:listJarPackageInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/midwares	hss:asset:listJarPackageStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/kernel-module	hss:asset:listKernelModuleHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/kernel-module	hss:asset:listKernelModuleInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/kernel-module	hss:asset:listKernelModuleStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/ports	hss:asset:listPorts	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/port/statistics	hss:asset:listPortStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/processes	hss:asset:listProcesses	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/process/statistics	hss:asset:listProcessStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/investigation/tool/result	hss:asset:listResult	eps:enterpriseProjects:list
GET /v5/{project_id}/investigation/tool/list	hss:asset:listTool	eps:enterpriseProjects:list
GET /v5/{project_id}/investigation/tool/condition-history	hss:asset:listToolConditionHistory	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/user/change-history	hss:asset:listUserChangeHistories	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/userGroup	hss:asset:listUserGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/users	hss:asset:listUsers	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/user/statistics	hss:asset:listUserStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/web-app-and-services	hss:asset:listWebAppAndServices	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/web-app-and-service-statistics	hss:asset:listWebAppAndServiceStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/web-app	hss:asset:listWebAppHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/web-app	hss:asset:listWebAppInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/web-app	hss:asset:listWebAppStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/web-framework	hss:asset:listWebFrameworkHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/web-framework	hss:asset:listWebFrameworkInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/web-framework	hss:asset:listWebFrameworkStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/web-service	hss:asset:listWebServiceHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/web-service	hss:asset:listWebServiceInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/web-service	hss:asset:listWebServiceStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/host/web-site	hss:asset:listWebSiteHostInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/{host_id}/web-site	hss:asset:listWebSiteInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/asset/statistics/web-site	hss:asset:listWebSiteStatistics	eps:enterpriseProjects:list
POST /v5/{project_id}/asset/manual-collect/{type}	hss:asset:runHostAssetManualCollect	eps:enterpriseProjects:list
POST /v5/{project_id}/baseline/security-checks/policy-group/add	hss:baseline:addSecurityCheckPolicyGroup	eps:enterpriseProjects:list
PUT /v5/{project_id}/baseline/check-rule/action	hss:baseline:changeCheckRuleState	eps:enterpriseProjects:list
DELETE /v5/{project_id}/baseline/security-checks/policy-group/{group_id}	hss:baseline:deleteSecurityCheckPolicyGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/risk-config/export	hss:baseline:exportSecurityCheckReport	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/overview	hss:baseline:getBaselineOverview	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/scan-status	hss:baseline:getBaselineScanStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/statistic	hss:baseline:getBaselineStatistic	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/check-rule/detail	hss:baseline:getCheckRuleDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/check-rule/fail-detail	hss:baseline:getCheckRuleFixFailDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/security-checks/default-policy	hss:baseline:getDefaultSecurityCheckPolicy	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/security-checks/default-policy/details	hss:baseline:getDefaultSecurityCheckPolicyDetails	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/risk-config/{check_name}/detail	hss:baseline:getRiskConfigDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/check-rule/hosts	hss:baseline:listCheckRuleHost	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/password-complexity	hss:baseline:listPasswordComplexity	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/risk-config/{check_name}/check-rules	hss:baseline:listRiskConfigCheckRules	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/risk-config/{check_name}/hosts	hss:baseline:listRiskConfigHosts	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/risk-configs	hss:baseline:listRiskConfigs	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/security-checks/policy-groups	hss:baseline:listSecurityCheckPolicyGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/weak-password-users	hss:baseline:listWeakPasswordUsers	eps:enterpriseProjects:list
GET /v5/{project_id}/baseline/detection/{group_id}	hss:baseline:runBaselineDetect	eps:enterpriseProjects:list
POST /v5/{project_id}/baseline/security-checks/policy-group/{group_id}	hss:baseline:updateSecurityCheckPolicyGroup	eps:enterpriseProjects:list
POST /v5/{project_id}/event/white-list/login	hss:event:addLoginWhiteList	eps:enterpriseProjects:list
POST /v5/{project_id}/event/batch-operate	hss:event:batchChangeEvent	eps:enterpriseProjects:list
POST /v5/{project_id}/event/operate	hss:event:changeEvent	eps:enterpriseProjects:list
PUT /v5/{project_id}/event/isolated-file	hss:event:changeIsolatedFile	eps:enterpriseProjects:list
GET /v5/{project_id}/event/white-list/export	hss:event:exportAlarmWhiteList	eps:enterpriseProjects:list
POST /v5/{project_id}/emergency/event/export	hss:event:exportEmergency	eps:enterpriseProjects:list
GET /v5/{project_id}/emergency/event/emergency-statistics	hss:event:getEmergencyStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/event/attack-tag	hss:event:getEventAttackTag	eps:enterpriseProjects:list
GET /v5/{project_id}/event/severity	hss:event:getEventSeverity	eps:enterpriseProjects:list
GET /v5/{project_id}/event/statistics	hss:event:getEventStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/emergency/event/event-detail	hss:event:getMalwareInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/emergency/event/handle-malware-event	hss:event:handleMalwareEvent	eps:enterpriseProjects:list
POST /v5/{project_id}/event/white-list/import	hss:event:importAlarmWhiteList	eps:enterpriseProjects:list
POST /v5/{project_id}/emergency/event/isolate-operate	hss:event:isolateOperateEmergency	eps:enterpriseProjects:list
GET /v5/{project_id}/event/white-list/alarm	hss:event:listAlarmWhiteList	eps:enterpriseProjects:list
GET /v5/{project_id}/event/blocked-ip	hss:event:listBlockedIp	eps:enterpriseProjects:list
GET /v5/{project_id}/event/batch-operate	hss:event:listEventOperates	eps:enterpriseProjects:list
GET /v5/{project_id}/event/top-risk	hss:event:listEventTopRisk	eps:enterpriseProjects:list
GET /v5/{project_id}/event/event-type	hss:event:listEventType	eps:enterpriseProjects:list
GET /v5/{project_id}/emergency/event/file-isolate-list	hss:event:listFileIsolateList	eps:enterpriseProjects:list
GET /v5/{project_id}/event/isolated-file	hss:event:listIsolatedFile	eps:enterpriseProjects:list
GET /v5/{project_id}/event/white-list/login	hss:event:listLoginWhiteList	eps:enterpriseProjects:list
GET /v5/{project_id}/emergency/event/event-list	hss:event:listMalware	eps:enterpriseProjects:list
GET /v5/{project_id}/event/events	hss:event:listSecurityEvents	eps:enterpriseProjects:list
POST /v5/{project_id}/emergency/event/recover-isolate-file	hss:event:recoverIsolateFile	eps:enterpriseProjects:list
DELETE /v5/{project_id}/event/white-list/alarm	hss:event:removeAlarmWhiteList	eps:enterpriseProjects:list
DELETE /v5/{project_id}/event/white-list/login	hss:event:removeLoginWhiteList	eps:enterpriseProjects:list
PUT /v5/{project_id}/host-management/asset-value/associate	hss:host:associateHostAssetValue	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/group/associate	hss:host:associateHostsGroup	eps:enterpriseProjects:list
POST /v5/{project_id}/setting/batch-install-agent	hss:host:batchInstallAgent	eps:enterpriseProjects:list ecs:cloudServers:listServersDetails
PUT /v5/{project_id}/host-management/groups	hss:host:changeHostsGroup	eps:enterpriseProjects:list
DELETE /v5/{project_id}/host-management/groups	hss:host:deleteHostsGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/host-statistics	hss:host:getHostsStatistics	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/firewall	hss:host:listFirewallStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/asset-value	hss:host:listHostGroupAssetValue	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/hosts-risk	hss:host:listHostsRisk	eps:enterpriseProjects:list vpc:ports:list eip:publicIps:list
GET /v5/{project_id}/host-management/hosts	hss:host:listHostStatus	eps:enterpriseProjects:list vpc:ports:list eip:publicIps:list
GET /v5/{project_id}/upgrade/agent-upgrade	hss:host:listHostsUpgrade	eps:enterpriseProjects:list
POST /v5/{project_id}/vulnerability/scan-task	hss:host:manualCheckVul	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/firewall	hss:host:switchFirewallStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/protection	hss:host:switchHostsProtectStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/upgrade/agent-upgrade	hss:host:upgradeAgent	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/upgrade	hss:host:upgradeAgents	eps:enterpriseProjects:list
POST /v5/{project_id}/image/local/batch-scan	hss:image:batchScanLocalImage	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/files-statistics	hss:image:getImageFilesStat	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/vul/overview	hss:image:getImageLocalVulOverview	eps:enterpriseProjects:list
GET /v5/{project_id}/image/vul/overview	hss:image:getImageVulOverview	eps:enterpriseProjects:list
GET /v5/{project_id}/image/baseline/affected	hss:image:listCfgCheckAffectedImage	eps:enterpriseProjects:list
GET /v5/{project_id}/image/baseline	hss:image:listGlobalCfgCheck	eps:enterpriseProjects:list
GET /v5/{project_id}/image/malwares	hss:image:listGlobalMalware	eps:enterpriseProjects:list
GET /v5/{project_id}/image/vuls	hss:image:listGlobalVul	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/apps	hss:image:listImageApps	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/app/vuls	hss:image:listImageAppVul	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/baseline	hss:image:listImageCfgCheck	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/files	hss:image:listImageFiles	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local-repository	hss:image:listImageLocal	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_id}/malwares	hss:image:listImageMalware	eps:enterpriseProjects:list
GET /v5/{project_id}/image/namespace	hss:image:listImageNamespace	eps:enterpriseProjects:list
GET /v5/{project_id}/image/repos	hss:image:listImageRepository	eps:enterpriseProjects:list
GET /v5/{project_id}/instance/{instance_id}/image/vuls	hss:image:listInstanceImageVul	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/containers	hss:image:listLocalImageContainers	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/hosts	hss:image:listLocalImageHosts	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/malware	hss:image:listLocalImageMalware	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/vuls	hss:image:listLocalImageVuls	eps:enterpriseProjects:list
GET /v5/{project_id}/image/local/{vul_id}/images	hss:image:listLocalVulRepoImage	eps:enterpriseProjects:list
GET /v5/{project_id}/image/shared-repository	hss:image:listSharedImageRepository	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{vul_id}/images	hss:image:listVulRepoImage	eps:enterpriseProjects:list
POST /v5/{project_id}/image/vul-task	hss:image:runImageScan	eps:enterpriseProjects:list
POST /v5/{project_id}/image/swr/vul-task	hss:image:runSwrImageScan	eps:enterpriseProjects:list
POST /v5/{project_id}/image/shared-synchronize-task	hss:image:sharedImageSynchronization	eps:enterpriseProjects:list
PUT /v5/{project_id}/policy/group	hss:policy:addPolicyGroup	eps:enterpriseProjects:list
POST /v5/{project_id}/policy/deploy	hss:policy:associatePolicyGroup	eps:enterpriseProjects:list
POST /v5/{project_id}/policy/{policy_id}	hss:policy:changePolicyDetail	eps:enterpriseProjects:list
POST /v5/{project_id}/policy/group	hss:policy:changePolicyGroup	eps:enterpriseProjects:list
DELETE /v5/{project_id}/policy/group	hss:policy:deletePolicyGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/policy/{policy_id}	hss:policy:getPolicyDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/policy/group/{group_id}	hss:policy:listPolicyGroupDetail	eps:enterpriseProjects:list
POST /v5/{project_id}/{resource_type}/{resource_id}/tags	hss:quota:addResourceInstanceTag	eps:enterpriseProjects:list
POST /v5/{project_id}/{resource_type}/{resource_id}/tags/create	hss:quota:batchCreateTags	eps:enterpriseProjects:list
DELETE /v5/{project_id}/{resource_type}/{resource_id}/tags/delete	hss:quota:batchDeleteTags	eps:enterpriseProjects:list
PUT /v5/{project_id}/billing/quotas	hss:quota:cancelHostsQuota	eps:enterpriseProjects:list
POST /v1/{project_id}/hss/{resource_id}/tags/action	hss:quota:changeTmsResourceTagInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/{resource_type}/resource-instances/count	hss:quota:countResourceInstances	eps:enterpriseProjects:list
DELETE /v5/{project_id}/{resource_type}/{resource_id}/tags/{key}	hss:quota:deleteResourceInstanceTag	eps:enterpriseProjects:list
POST /v5/{project_id}/{resource_type}/resource-instances/filter	hss:quota:filterResourceInstanceList	eps:enterpriseProjects:list
GET /v5/{project_id}/{resource_type}/{resource_id}/tags	hss:quota:getResourceInstanceTag	eps:enterpriseProjects:list
GET /v5/{project_id}/billing/quotas	hss:quota:getResourceQuotas	eps:enterpriseProjects:list
GET /v1/{project_id}/hss/{resource_id}/tags	hss:quota:getTmsResourceTagsInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/{resource_type}/tags	hss:quota:listProjectTags	eps:enterpriseProjects:list
GET /v5/{project_id}/billing/quotas-detail	hss:quota:listQuotasDetail	eps:enterpriseProjects:list
POST /v5/{project_id}/billing/resource-id-list	hss:quota:listResourceIds	eps:enterpriseProjects:list
POST /v1/{project_id}/hss/resource_instances/action	hss:quota:listTmsResourceInstancesInfo	eps:enterpriseProjects:list
POST /v5/{project_id}/hss/upgrade_orders/{order_id}	hss:quota:upgradeOrder	eps:enterpriseProjects:list
PUT /v5/{project_id}/vulnerability/status	hss:vulnerability:changeVulStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/emergency/list	hss:vulnerability:exportEmergencyVulnerabilities	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/export-vuls-list	hss:vulnerability:exportVulsList	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/cms-detail	hss:vulnerability:getCmsVulDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/emergency/summary	hss:vulnerability:getEmergencySummary	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/emergency/detail	hss:vulnerability:getEmergencyVulDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/linux-detail	hss:vulnerability:getLinuxVulDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/manual/scan/status	hss:vulnerability:getVulCheckStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/vul-summary	hss:vulnerability:getVulSummary	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/windows-detail	hss:vulnerability:getWindosVulDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/windows/vul/num	hss:vulnerability:getWindowsVulNum	eps:enterpriseProjects:list
GET /v5/{project_id}/vulnerability/host/{host_id}	hss:vulnerability:listHostVuls	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/host-summary	hss:vulnerability:listHostVulSummary	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/top-vul	hss:vulnerability:listTopVulSummary	eps:enterpriseProjects:list
GET /v5/{project_id}/vulnerability/hosts	hss:vulnerability:listVulHosts	eps:enterpriseProjects:list
GET /v5/{project_id}/vulnerability/vulnerabilities	hss:vulnerability:listVulnerabilities	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/{host_id}/fail_detail	hss:vulnerability:listVulRepairFailedDetail	eps:enterpriseProjects:list
GET /v5/{project_id}/vul/vul-type-summary	hss:vulnerability:listVulTypeSummary	eps:enterpriseProjects:list
POST /v5/{project_id}/vul/emergency/operate	hss:vulnerability:operateEmergency	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/{host_id}/scan_status	hss:host:getScanStatus	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/{host_id}/manual_detect	hss:host:setManualDetect	eps:enterpriseProjects:list
GET /v5/setting/account/trusted-services	hss::getTrustServiceStatus	eps:enterpriseProjects:list
POST /v5/setting/account/trusted-services	hss::enableTrustService	eps:enterpriseProjects:list
GET /v5/setting/account/admin	hss::validateAdmin	eps:enterpriseProjects:list
GET /v5/setting/account/accounts	hss::listAccounts	eps:enterpriseProjects:list
POST /v5/setting/account/accounts	hss::batchAddAccounts	eps:enterpriseProjects:list
DELETE /v5/setting/account/accounts	hss::deleteAccount	eps:enterpriseProjects:list
GET /v5/setting/account/organization-tree	hss::listOrganizationTree	eps:enterpriseProjects:list
GET /v5/setting/account/delegated-accounts	hss::listDelegatedAccounts	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/optional/vaults	hss:antiransomware:listBackupVaults	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/servers	hss:antiransomware:listRansomwareProtectionNodes	eps:enterpriseProjects:list
GET /v5/{project_id}/ransomware/statistics/backups	hss:antiransomware:getBackupsStatistics	eps:enterpriseProjects:list
POST /v5/{project_id}/ransomware/backup/single_open	hss:antiransomware:startSingleBackup	eps:enterpriseProjects:list
GET /v5/{project_id}/backup/{policy_id}	hss:antiransomware:getBackupPolicyInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/outside-group/status	hss:hostGroup:getOutsideGroupStatus	eps:enterpriseProjects:list
GET /v5/{project_id}/host-management/outside-group	hss:hostGroup:getOutsideHostGroup	eps:enterpriseProjects:list
POST /v5/{project_id}/host-management/outside-group	hss:hostGroup:addOutsideHostGroup	eps:enterpriseProjects:list
PUT /v5/{project_id}/host-management/outside-group	hss:hostGroup:changeOutsideHostGroup	eps:enterpriseProjects:list
GET /v5/{project_id}/image/tags	hss:images:listImageTag	eps:enterpriseProjects:list
GET /v5/{project_id}/image/{image_digest}/sensitive	hss:images:listImageSensitive	eps:enterpriseProjects:list
GET /v5/{project_id}/image/sensitive/filepath_whitelist	hss:images:getFilePathWhiteDetail	eps:enterpriseProjects:list
POST /v5/{project_id}/image/sensitive/filepath_whitelist	hss:images:changeFilePathWhiteDetail	eps:enterpriseProjects:list
POST /v5/{project_id}/image/sensitive/operate	hss:images:changeSensitiveInfo	eps:enterpriseProjects:list
GET /v5/{project_id}/event/top-event-type	hss:event:listTopEventType	eps:enterpriseProjects:list
GET /v5/{project_id}/vulnerability/scan-policy	hss:vulnerability:getVulScanPolicy	-
PUT /v5/{project_id}/vulnerability/scan-policy	hss:vulnerability:changeVulScanPolicy	-
GET /v5/{project_id}/vulnerability/white-lists	hss:vulnerability:listVulWhiteList	-
GET /v5/{project_id}/vulnerability/white-list/{id}	hss:vulnerability:getVulWhiteListDetail	-
PUT /v5/{project_id}/vulnerability/white-list/{id}	hss:vulnerability:changeVulWhiteList	-
DELETE /v5/{project_id}/vulnerability/white-list/{id}	hss:vulnerability:deleteVulWhiteList	-
POST /v5/{project_id}/vulnerability/white-list	hss:vulnerability:addVulWhiteList	-
GET /v5/{project_id}/vulnerability/white-list/vulnerability-options	hss:vulnerability:listVulWhiteListVulOptions	-
GET /v5/{project_id}/vulnerability/scan-tasks	hss:vulnerability:listVulScanTask	-
GET /v5/{project_id}/vulnerability/scan-task/{task_id}/hosts	hss:vulnerability:listVulScanTaskHost	-
PUT /v5/{project_id}/vulnerability/scan/task/{task_id}/rescan	hss:vulnerability:rescanVulScanTask	-
GET /v5/{project_id}/vulnerability/scan/task/statistics	hss:vulnerability:getVulScanTaskStatistics	-
GET /v5/{project_id}/vulnerability/statistics	hss:vulnerability:listHostVulStatistics	-
GET /v5/{project_id}/vulnerability/{host_id}/apps	hss:vulnerability:listVulHostApps	-
GET /v5/{project_id}/vulnerability/{host_id}/process	hss:vulnerability:listVulHostProcess	-
GET /v5/{project_id}/vulnerability/handle-history	hss:vulnerability:listVulHandleHistory	-
GET /v5/{project_id}/vulnerability/host/hosts	hss:vulnerability:listVulHostHosts	-
GET /v5/{project_id}/vulnerability/host-vulnerability/vulnerabilities	hss:vulnerability:listVulHostVuls	-
GET /v5/{project_id}/vulnerability/handle/vulnerabilities	hss:vulnerability:listVulHostHandleVuls	-
GET /v5/{project_id}/image/{image_digest}/non-compliant-app	hss:image:listImageNonCompliantApp	-
POST /v5/{project_id}/image/swr/vul/batch-export-vul	hss:image:batchExportSWRVulList	-
POST /v5/{project_id}/image/local/vul/batch-export-vul	hss:image:batchExportLocalVulList	-
GET /v5/{project_id}/image/baseline/extended-weak-password	hss:image:getExtendedWeakPassword	-
POST /v5/{project_id}/image/baseline/extended-weak-password	hss:image:changeExtendedWeakPassword	-
GET /v5/{project_id}/image/{image_digest}/basic-image	hss:image:listImageBasicImage	-
GET /v5/{project_id}/image/baseline/password-complexity	hss:image:listImagePwdComplexity	-
GET /v5/{project_id}/image/baseline/weak-password-users	hss:image:listImageWeakPwdUsers	-
GET /v5/{project_id}/image/baseline/risk-configs	hss:image:listImageRiskConfigs	-
GET /v5/{project_id}/image/baseline/risk-configs/{check_name}/detail	hss:image:getImageRiskConfigDetail	-
GET /v5/{project_id}/image/baseline/check-rule/detail	hss:image:getImageCheckRuleDetail	-
GET /v5/{project_id}/image/baseline/statistic	hss:image:getImageBaselineStatistic	-
POST /v5/{project_id}/event/white-list/userlist	hss:event:addSystemUserWhiteList	-
PUT /v5/{project_id}/event/white-list/userlist	hss:event:updateSystemUserWhiteList	-
GET /v5/{project_id}/event/white-list/userlist	hss:event:listSystemUserWhiteList	-
DELETE /v5/{project_id}/event/white-list/userlist	hss:event:removeSystemUserWhiteList	-
POST /v5/{project_id}/kubernetes/save-clusters	hss:container:saveClusters	-
GET /v5/{project_id}/kubernetes/clusters	hss:container:listClusterInfo	-
GET /v5/{project_id}/kubernetes/pods	hss:container:listPodInfo	-
GET /v5/{project_id}/kubernetes/{pod_name}/pod/detail	hss:container:showPodDetail	-
GET /v5/{project_id}/kubernetes/containers	hss:container:listContainerInfo	-
GET /v5/{project_id}/kubernetes/container/detail	hss:container:showContainerDetail	-
GET /v5/{project_id}/kubernetes/services	hss:container:listServiceInfo	-
GET /v5/{project_id}/kubernetes/service/detail	hss:container:showServiceDetail	-
GET /v5/{project_id}/kubernetes/endpoints	hss:container:listEndpointInfo	-
GET /v5/{project_id}/kubernetes/endpoint/detail	hss:container:showEndpointDetail	-
GET /v5/{project_id}/kubernetes/deployments	hss:container:listDeployments	-
GET /v5/{project_id}/kubernetes/statefulsets	hss:container:listStatefulSets	-
GET /v5/{project_id}/kubernetes/daemonsets	hss:container:listDaemonSets	-
GET /v5/{project_id}/kubernetes/jobs	hss:container:listJobs	-
GET /v5/{project_id}/kubernetes/cronjobs	hss:container:listCronJobs	-
GET /v5/{project_id}/vulnerability/statistics/affected	hss:vulnerability:showVulAffectedStatics	-
PUT /v5/{project_id}/kubernetes/{container_name}/container/isolate	hss:container:isolateK8sContainer	-
GET /v5/{project_id}/container-network/network-statistics	hss:container:getNetworkStatistics	-
GET /v5/{project_id}/container-network/cluster-list	hss:container:getClusters	-
GET /v5/{project_id}/container-network/{cluster_id}/network-info	hss:container:getClusterNetworkInfo	-
GET /v5/{project_id}/container-network/{cluster_id}/policy-list	hss:container:getClusterPolicyList	-
DELETE /v5/{project_id}/container-network/{cluster_id}/policy	hss:container:deletePolicy	-
POST /v5/{project_id}/container-network/{cluster_id}/policy	hss:container:createPolicy	-
PUT /v5/{project_id}/container-network/{cluster_id}/policy	hss:container:updatePolicy	-
GET /v5/{project_id}/container-network/{cluster_id}/policy-sync	hss:container:syncClusterPolicyList	-
GET /v5/{project_id}/container-network/cluster-sync	hss:container:syncClusterList	-
GET /v5/{project_id}/container-network/{cluster_id}/namespace-list	hss:container:getNamespaceList	-
GET /v5/{project_id}/container-network/{cluster_id}/node-list	hss:container:getNodeList	-
GET /v5/{project_id}/container-network/{cluster_id}/node-sync	hss:container:syncClusterNodeList	-
POST /v5/{project_id}/ransomware/protection/policy	hss:antiransomware:addRansomwareProtectionPolicy	-
POST /v5/{project_id}/ransomware/backup/associate-policy	hss:antiransomware:associateBackupPolicy	-
GET /v5/{project_id}/ransomware/backup/policies	hss:antiransomware:listBackupPolicy	-
POST /v5/{project_id}/ransomware/protection/policy/deploy	hss:antiransomware:associateProtectionPolicy	-
POST /v5/{project_id}/ransomware/protection/batch-open	hss:antiransomware:batchStartProtection	-
GET /v5/{project_id}/event/att-ck	hss:event:getEventAttCk	-
GET /v5/{project_id}/event/download-file	hss:event:downloadEventSourceFile	-
GET /v5/{project_id}/overview/security/score	hss:overview:showSecurityScore	-
GET /v5/{project_id}/overview/security/risk/list	hss:overview:listSecurityRisk	-
GET /v5/{project_id}/overview/quotas/host/statistics	hss:overview:showQuotaHostStatistics	-
GET /v5/{project_id}/overview/agent/statistics	hss:overview:showAgentStatistics	-
GET /v5/{project_id}/overview/hot/information	hss:overview:showHotInformation	-
GET /v5/{project_id}/overview/security/risk	hss:overview:showSecurityRisk	-
GET /v5/{project_id}/overview/protection/statistics	hss:overview:showProtectStatistics	-
GET /v5/{project_id}/overview/statistics	hss:overview:showStatistics	-
GET /v5/{project_id}/image/swr-repository	hss:image:listSwrImageRepository	-
POST /v5/{project_id}/image/batch-scan	hss:image:batchScanSwrImage	-
GET /v5/{project_id}/image/{image_id}/vulnerabilities	hss:image:vulnerabilities	-
GET /v5/{project_id}/image/vulnerability/{vul_id}/cve	hss:image:listVulnerabilityCve	-
GET /v5/{project_id}/image/baseline/risk-configs/{check_name}/rules	hss:image:listImageRiskConfigRules	-
POST /v5/{project_id}/image/synchronize	hss:image:runImageSynchronize	-
GET /v5/{project_id}/event/forensic	hss:event:listEventForensic	-
GET /v5/{project_id}/event/similar-handled-events	hss:event:listSimilarHandledEvents	-
GET /v5/{project_id}/cluster-protect/policy	hss:container:getPolicies	-
GET /v5/{project_id}/cluster-protect/policy/{policy_id}	hss:container:getPolicyDetail	-
GET /v5/{project_id}/cluster-protect/events	hss:container:getProtectEvents	-
GET /v5/{project_id}/cluster-protect/clusters	hss:container:getProtectClusters	-
GET /v5/{project_id}/cluster-protect/switch-mode	hss:container:changeProtectStatus	-
GET /v5/{project_id}/cluster-protect/whiteimage	hss:container:addWhiteImage	-
GET /v5/{project_id}/cluster-protect/default-policy	hss:container:listDefaultPolicy	-
GET /v5/{project_id}/cluster-protect/protection-item	hss:container:listProtectionItem	-
POST /v5/{project_id}/vulnerability/backup-statistics	hss:vulnerability:getVulBackupStatistics	-
GET /v5/{project_id}/vulnerability/backup/host-vaults	hss:vulnerability:ListVulHostVaults	-
GET /v5/{project_id}/vulnerability/backup/backups	hss:vulnerability:ListVulHostBackups	-
PUT /v5/{project_id}/vulnerability/backup/{backup_id}/restore	hss:vulnerability:RestoreVulHostBackup	-
POST /v5/{project_id}/event/export	hss:event:exportEvent	-
GET /v5/{project_id}/event/export-task/{task_id}	hss:event:queryExportTask	-
GET /v5/{project_id}/event/download/{file_id}	hss:event:downloadEvent	-
POST /v5/{project_id}/app/policy	hss:ars:createAppWhitelistPolicy	-
GET /v5/{project_id}/app/policy	hss:ars:listAppWhitelistPolicy	-
PUT /v5/{project_id}/app/policy	hss:ars:changeAppWhitelistPolicy	-
DELETE /v5/{project_id}/app/policy	hss:ars:deleteAppWhitelistPolicy	-
GET /v5/{project_id}/app/{policy_id}/detail	hss:ars:showAppWhitelistPolicy	-
PUT /v5/{project_id}/app/host	hss:ars:switchAppWhitelistPolicyHost	-
POST /v5/{project_id}/app/{policy_id}/host	hss:ars:addAppWhitelistPolicyHost	-
GET /v5/{project_id}/app/host	hss:ars:listAppWhitelistPolicyHost	-
DELETE /v5/{project_id}/app/{policy_id}/host	hss:ars:deleteAppWhitelistPolicyHost	-
GET /v5/{project_id}/app/host-management/hosts	hss:ars:listAppWhitelistHostStatus	-
GET /v5/{project_id}/app/{policy_id}/process	hss:ars:listAppWhitelistPolicyProcess	-
PUT /v5/{project_id}/app/{policy_id}/process	hss:ars:changeAppWhitelistPolicyProcessStatus	-
POST /v5/{project_id}/app/{policy_id}/process	hss:ars:addAppWhitelistPolicyProcess	-
GET /v5/{project_id}/app/{policy_id}/process-extend	hss:ars:listAppWhitelistPolicyProcessExtend	-
GET /v5/{project_id}/app/{policy_id}/process/export	hss:ars:exportAppWhitelistPolicyProcess	-
POST /v5/{project_id}/app/{policy_id}/learn	hss:ars:switchAppWhitelistPolicyLearnStatus	-
GET /v5/{project_id}/app/agent/statistics	hss:ars:showAppWhitelistAgentStatics	-
GET /v5/{project_id}/app/event	hss:ars:listAppWhitelistEvent	-
DELETE /v5/{project_id}/selfbuilt/kubernetes/cluster/daemonset	hss:container:deleteSelfBuildK8sClusterDaemonsetInfo	-
POST /v5/{project_id}/selfbuilt/kubernetes/cluster/daemonset	hss:container:saveSelfBuildK8sClusterDaemonsetInfo	-
GET /v5/{project_id}/selfbuilt/kubernetes/cluster/daemonset	hss:container:showSelfBuildK8sClusterDaemonsetInfo	-
GET /v5/{project_id}/selfbuilt/kubernetes/clusters	hss:container:listSelfBuildK8sClusterInfo	-
POST /v5/{project_id}/namespaces/{namespace}/daemonsets	hss:container:createDaemonset	-
POST /v5/{project_id}/vulnerability/repair-cmds	hss:vulnerability:listVulRepairCmds	-
GET /v5/{project_id}/vulnerability/urgent-vulnerabilities	hss:vulnerability:listUrgentVulnerabilities	-
PUT /v5/{project_id}/antivirus/task	hss:antivirus:switchAntivirusTask	-
GET /v5/{project_id}/antivirus/statistic	hss:antivirus:showAntivirusStatistic	-
GET /v5/{project_id}/image/full-scan-progress	hss:image:showImageFullScanProgress	-
PUT /v5/{project_id}/host/operate	hss:host:changeHostIgnoreStatus	-
POST /v5/{project_id}/image/baseline/export	hss:image:batchExportBaselineTask	-
POST /v5/{project_id}/image/security-report/statistic	hss:image:showImageSecurityReportStatistic	-
POST /v5/{project_id}/vul/export	hss:vulnerability:exportVuls	-
GET /v5/{project_id}/export-task/{task_id}	hss:exportTask:queryExportTask	-
GET /v5/{project_id}/download/{file_id}	hss:file:downloadExportedFile	-
GET /v5/{project_id}/image/vulnerabilities	hss:image:listGlobalVulnerabilities	-
GET /v5/{project_id}/image/vulnerability/images	hss:image:listVulnerabilityImages	-
GET /v5/{project_id}/setting/docker-plugin-install-script	hss:setting:getPluginInstallScript	-
GET /v5/{project_id}/setting/plugins	hss:setting:getPluginList	-
GET /v5/{project_id}/setting/config/auto-open-quota	hss:setting:getAutoOpenQuotaStatus	-
PUT /v5/{project_id}/setting/config/auto-open-quota	hss:setting:changeAutoOpenQuotaStatus	-
POST /v5/{project_id}/image/swr-vulnerability/export	hss:image:batchExportSWRVulTask	-
POST /v5/{project_id}/image/local-vulnerability/export	hss:image:batchExportLocalVulTask	-
GET /v5/{project_id}/setting/config/agent-auto-upgrade	hss:setting:getAgentAutoUpgradeStatus	-
PUT /v5/{project_id}/setting/config/agent-auto-upgrade	hss:setting:changeAgentAutoUpgradeStatus	-
GET /v5/{project_id}/product/productdata/offering-infos	hss:quota:showProductdataOfferingInfos	-
GET /v5/{project_id}/image/local/apps	hss:image:listLocalImageAppInfo	-
GET /v5/{project_id}/image/local/app/vulnerabilities	hss:image:listLocalImageAppVulnerabilities	-
GET /v5/{project_id}/ransomware/protection/status	hss:antiransomware:getRansomwareProtectionStatus	-
GET /v5/{project_id}/ransomware/protection/auto-deploy-policy	hss:antiransomware:getAutoDeployAgentList	-
PUT /v5/{project_id}/ransomware/protection/auto-deploy-policy	hss:antiransomware:updateAutoDeployAgent	-
GET /v5/{project_id}/vulnerability/individual-statistics	hss:vulnerability:getVulIndividualStatistics	-
DELETE /v5/{project_id}/event/isolated-file	hss:event:deleteIsolatedFile	-
GET /v5/{project_id}/antivirus/handle-history	hss:antivirus:listAntivirusHandleHistory	-
GET /v5/{project_id}/honeypot-port/host-statistics	hss:decoyport:showStatistics	-
GET /v5/{project_id}/honeypot-port/default-config	hss:decoyport:showAutoBind	-
PUT /v5/{project_id}/honeypot-port/default-config	hss:decoyport:switchAutoBind	-
GET /v5/{project_id}/honeypot-port/host-list	hss:decoyport:showHostList	-
GET /v5/{project_id}/honeypot-port/policy-list	hss:decoyport:listPolicy	-
GET /v5/{project_id}/honeypot-port/support-list	hss:decoyport:listAvailableHost	-
PUT /v5/{project_id}/honeypot-port/host-policy/{policy_id}	hss:decoyport:switchHostPolicy	-
DELETE /v5/{project_id}/honeypot-port/host-policy/{policy_id}	hss:decoyport:deleteHostPolicy	-
POST /v5/{project_id}/honeypot-port/policy	hss:decoyport:createPolicy	-
PUT /v5/{project_id}/honeypot-port/policy/{policy_id}	hss:decoyport:modifyPolicy	-
GET /v5/{project_id}/honeypot-port/policy/{policy_id}	hss:decoyport:showPolicyDetails	-
DELETE /v5/{project_id}/honeypot-port/policy/{policy_id}	hss:decoyport:deletePolicy	-
PUT /v5/{project_id}/honeypot-port/policy-enable/{policy_id}	hss:decoyport:switchPolicy	-
GET /v5/{project_id}/export-task	hss:exportTask:queryLatestExportTaskByType	-
POST /v5/{project_id}/container-network/{cluster_id}/{namespace}/security-group-policy	hss:container:createSecurityGroupPolicy	-
PUT /v5/{project_id}/container-network/{cluster_id}/{namespace}/security-group-policy	hss:container:updateSecurityGroupPolicy	-
GET /v5/{project_id}/container-network/{cluster_id}/security-group-policies	hss:container:getSecurityGroupPolicyList	-
DELETE /v5/{project_id}/container-network/{cluster_id}/security-group-policy	hss:container:deleteSecurityGroupPolicy	-
GET /v5/{project_id}/container-network/{cluster_id}/security-group-policy-sync	hss:container:syncSecurityGroupPolicy	-
GET /v5/{project_id}/container-network/{cluster_id}/{namespace}/workloads	hss:container:getWorkloadList	-
GET /v5/{project_id}/container-network/security-groups	hss:container:getSecurityGroupList	-

Resources

A resource type indicates the resources that an identity policy applies to. If you specify a resource type for any action in Table 3, the resource URN must be specified in the identity policy statements using that action, and the identity policy applies only to resources of this type. If no resource type is specified, the Resource element is marked with an asterisk (*) and the identity policy applies to all resources. You can also set condition keys in an identity policy to define resource types.

The following table lists the resource types that you can define in identity policy statements for HSS.

**Table 3** Resource types supported by HSS
Resource Type	URN
event	hss:<region>:<account-id>:event:<event-id>
policy	hss:<region>:<account-id>:policy:<resource-type>/<type-id>
host	hss:<region>:<account-id>:host:<host-id>
baseline	hss:<region>:<account-id>:baseline:<type>/<check_rule_id>

Conditions

HSS does not support service-specific condition keys in identity policies.It can only use global condition keys applicable to all services. For details, see Global Condition Keys.

Parent topic: Security & Compliance

Previous topic: Web Application Firewall (WAF)

Next topic: SecMaster