# Alibaba Cloud AccessAnalyzer API

> Alibaba Cloud AccessAnalyzer API on Apizie: 21 endpoints (Archives findings that match the specified archive rule, Creates a new Analyzer to analyze over-privileged access or external access for an account or resource…, Creates an archive rule for an analyzer to automatically archive findings that meet the specified conditions, Deletes an Analyzer with the specified name, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-accessanalyzer`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/accessanalyzer
- Page: https://zieapi.vercel.app/api/cloud/aliyun-accessanalyzer
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-accessanalyzer/openapi.json

Alibaba Cloud OpenAPI for AccessAnalyzer (accessanalyzer, version 2024-02-01). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Archives findings that match the specified archive rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/apply-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RuleName | string | yes | The name of the archive rule |
| AnalyzerName | string | yes | The name of the analyzer |

### Creates a new Analyzer to analyze over-privileged access or external access for an account or resource…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/create-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The name of the Analyzer |
| Type | string | no | The type of the Analyzer. Valid values: ExternalAccess: external access OverPrivileged: over-privileged access |
| Scope | string | no | The scan scope of the Analyzer. Valid values: Account: account ResourceDirectory: resource directory |
| Configuration | string | no | The configuration information of the Analyzer instance (JSON-encoded) |

### Creates an archive rule for an analyzer to automatically archive findings that meet the specified conditions
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/create-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Filter | string | yes | The list of filter conditions (JSON-encoded) |
| RuleName | string | yes | The name of the archive rule |
| AnalyzerName | string | yes | The name of the analyzer |

### Deletes an Analyzer with the specified name
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/delete-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The analyzer name |

### Deletes an archive rule under a specified Analyzer
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/delete-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RuleName | string | yes | The name of the archive rule |
| AnalyzerName | string | yes | The name of the analyzer |

### Generates governance recommendations based on the specified analyzer and finding
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/generate-finding-recommendation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The name of the analyzer |
| FindingId | string | yes | The ID of the finding |

### Queries the analysis details of a specified resource in Analyzer
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-analyzed-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ResourceArn | string | yes | The resource ARN |
| AnalyzerName | string | yes | The analyzer name |

### Queries the details of an Analyzer with the specified name
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The Analyzer name |

### Queries the details of an archive rule under a specified analyzer
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RuleName | string | yes | The name of the archive rule |
| AnalyzerName | string | yes | The name of the analyzer |

### Queries the details of a specified finding
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-finding` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| FindingId | string | yes | The ID of the finding |
| AnalyzerName | string | yes | The name of the analyzer to which the finding belongs |

### Queries the governance recommendations generated for a specified finding
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-finding-recommendation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The analyzer name |
| FindingId | string | yes | The ID of the finding |
| MaxResults | integer | no | The maximum number of governance recommendations to return in a single request |
| NextToken | string | no | The pagination token for the next page of data. If this parameter is empty, the first page is returned |

### Retrieves the findings statistics information for a specified analyzer
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/get-findings-statistics` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The name of the analyzer |

### Lists the analyzed resources
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/list-analyzed-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The analyzer name |
| MaxResults | integer | no | The maximum resource count to return in a single request |
| NextToken | string | no | The pagination token. Leave this parameter empty for the first request. For subsequent requests, use the NextToken value returned in the… |
| ResourceType | string | no | The resource type supported by the analyzer. You can use this parameter to filter resources by type |

### Lists all analyzers and supports filtering results by conditions
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/list-analyzers` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| MaxResults | integer | no | The maximum number of analyzers to return in a single request |
| NextToken | string | no | The pagination token |
| Type | string | no | Filters analyzers by type |
| Scope | string | no | Filters analyzers by scan scope |

### Queries all archive rules under a specified analyzer
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/list-archive-rules` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AnalyzerName | string | yes | The analyzer name |
| MaxResults | integer | no | The maximum number of archive rules to return in a single request |
| NextToken | string | no | The pagination token. Leave this parameter empty for the first request. For subsequent requests, use the NextToken value returned in the… |

### Lists all findings under a specified analyzer. You can filter results by specifying filter conditions
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/list-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Filter | string | no | The list of filter conditions (JSON-encoded) |
| AnalyzerName | string | yes | The analyzer name |
| MaxResults | integer | no | The maximum number of findings to return in a single request. Default value: 100 |
| NextToken | string | no | The pagination token. Leave this parameter empty for the first request. For subsequent requests, use the NextToken value returned in the… |

### Initiates an analysis scan for a specified resource
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/start-resource-scan` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ResourceArn | string | yes | The ARN of the resource to scan |
| AnalyzerName | string | yes | The name of the analyzer |

### Updates an existing archive rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/update-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Filter | string | yes | The list of filter conditions (JSON-encoded) |
| RuleName | string | yes | The name of the archive rule to update |
| AnalyzerName | string | yes | The name of the analyzer to which the archive rule belongs |

### Modifies the status of one or more specified findings. Findings with a resolved status cannot be modified
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/update-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| FindingIds | string | no | The list of finding IDs to update (JSON-encoded) |
| AnalyzerName | string | yes | The analyzer name |
| Status | string | yes | The target status to update to |
| ResourceArn | string | no | Updates the status of all findings under the specified resource by resource ARN |

### Validates an access policy and returns a list of analysis results
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/validate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyDocument | string | yes | The content of the access policy to validate. The maximum length is 61,440 characters |
| PolicyType | string | yes | The policy type |
| ValidatePolicyResourceType | string | no | The resource type. This parameter can be specified only when PolicyType is set to ResourceBasedPolicy. This parameter is used for more… |
| MaxResults | integer | no | The maximum number of validation results to return in a single request |
| NextToken | string | no | The pagination token. Leave this parameter empty for the first request. For subsequent requests, use the NextToken value returned in the… |

### version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/version` (byok)

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/apply-archive-rule" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud AccessAnalyzer API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-accessanalyzer/apply-archive-rule with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud AccessAnalyzer API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud AccessAnalyzer itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud AccessAnalyzer API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-accessanalyzer.

### What is the status of the Alibaba Cloud AccessAnalyzer API?
Needs your own provider key (bring your own key)