Skip to main content

DescribeNetworkAclAttributes

Description

call the DescribeNetworkAclAttributes interface to query the details of the network ACL.

Request Method

POST

Request Path

/apsara/route/Vpc/DescribeNetworkAclAttributes

Request Parameters Common Parameters

NameLocationTypeRequiredSample valueDescription
NetworkAclIdBODYstringYesnacl-a2do9e413e0spzasx****ID of network ACL.
regionIdBODYstringYesNo sample value for this parameter.region id
RegionIdBODYstringYescn-qingdao-env17-d01the region ID where the network ACL is located. You can obtain the region ID by calling the DescribeRegions interface.
ClientTokenBODYstringNo0c593ea1-3bea-11e9-b96b-88e9fe****Ensure request idempotence. Generate a parameter value from your client to ensure that the parameter value is unique between different requests. ClientToken only ASCII characters are supported and cannot exceed 64 characters.
versionBODYstringNo2016-01-01version of api

Return data

NameTypeSample valueDescription
Policystringacceptauthorization policy, value: accept: allowed. drop: reject.
IngressAclEntriesarray of ingressaclentryNo sample value for this parameter.network ACL inbound rule information.
DescriptionstringThis is IngressAclEntries.description information of the entry direction rule.
Portstring-1/-1source port range.
NetworkAclAttributestructNo sample value for this parameter.details of network ACL.
OwnerIdlong12345678account d to which the network ACL belongs.
EgressAclEntriesarray of egressaclentryNo sample value for this parameter.network ACL outbound rule information.
IngressAclEntryNo sample value for this parameter.No description for this parameter.
SourceCidrIpstring10.0.0.0/24the network segment of the source address.
Protocolstringalltransport layer protocol, value: icmp: network control message protocol. gre: universal routing encapsulation protocol. tcp: transmission control protocol. udp: user datagram protocol. all: All protocols are supported.
StatusstringAvailablethe state of the associated resource. Available: available. Modifying: under configuration.
DestinationCidrIpstring10.0.0.0/24destination address segment.
NetworkAclIdstringnacl-a2do9e413e0spnhmj****ID of network ACL.
RequestIdstringF5905F9C-0161-4E72-9CB1-1F3F3CF6268Arequest ID.
ResourceNo sample value for this parameter.No description for this parameter.
ResourceTypestringVSwitchthe type of associated resource.
EgressAclEntryNo sample value for this parameter.No description for this parameter.
NetworkAclEntryNamestringacl-3The name of the entry direction rule.
EntryTypestringcustomrule type, value: custom: custom. system: system.
VpcIdstringvpc-a2d33rfpl72k5defr****ID of VPC associated with network ACL.
ResourceIdstringvsw-bp1de348lntdwxscd****the instance ID of the associated resource.
CreationTimestring2019-04-25 11:33:27the time when the network ACL was created.
NetworkAclNamestringacl-1the name of the network ACL.
RegionIdstringcn-qingdao-env17-d01the region ID to which the network ACL belongs.
Resourcesarray of resourceNo sample value for this parameter.associated resource.
NetworkAclEntryIdstringnae-a2dk86arlydmevfbg****ID of the entry direction rule entry.

Example

Successful Response example

{
"Policy":"accept",
"IngressAclEntries":"",
"Description":"This is IngressAclEntries.",
"Port":"-1/-1",
"NetworkAclAttribute":"",
"OwnerId":"12345678",
"EgressAclEntries":"",
"IngressAclEntry":"",
"SourceCidrIp":"10.0.0.0/24",
"Protocol":"all",
"Status":"Available",
"DestinationCidrIp":"10.0.0.0/24",
"NetworkAclId":"nacl-a2do9e413e0spnhmj****",
"RequestId":"F5905F9C-0161-4E72-9CB1-1F3F3CF6268A",
"Resource":"",
"ResourceType":"VSwitch",
"EgressAclEntry":"",
"NetworkAclEntryName":"acl-3",
"EntryType":"custom",
"VpcId":"vpc-a2d33rfpl72k5defr****",
"ResourceId":"vsw-bp1de348lntdwxscd****",
"CreationTime":"2019-04-25 11:33:27",
"NetworkAclName":"acl-1",
"RegionId":"cn-qingdao-env17-d01",
"Resources":"",
"NetworkAclEntryId":"nae-a2dk86arlydmevfbg****"
}

Failed Response example

{
"errorSample":
{
"resultCode":-1,
"resultMsg":"system error",
"result":null
}

}