# Alibaba Cloud Secure Access Service Edge API

> Alibaba Cloud Secure Access Service Edge API on Apizie: 219 endpoints (Adds associated terminal devices to a static device tag in batches, Performs a batch append of entries to the virus scan blacklists and whitelists for a specified operating…, Attaches the private access applications of a Connector under the current Alibaba Cloud account, Attaches a business policy to a specified approval process, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-csas/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-csas`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/csas
- Page: https://zieapi.vercel.app/api/cloud/aliyun-csas
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-csas/openapi.json

Alibaba Cloud OpenAPI for Secure Access Service Edge (csas, version 2023-01-20). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Adds associated terminal devices to a static device tag in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/add-device-group-match-devices` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceGroupId | string | yes | The ID of the device tag |
| DevTags | string | yes | The IDs of the terminal devices to be added. Specify at least one ID, and duplicate IDs are not allowed (JSON-encoded) |

### Performs a batch append of entries to the virus scan blacklists and whitelists for a specified operating…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/add-virus-scan-additional-lists` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DevType | string | yes | The operating system type for which the list takes effect. Valid values: windows: Windows. macOS: macOS |
| AdditionalLists | string | no | The list of entries to be added. The list must contain at least one entry (JSON-encoded) |

### Attaches the private access applications of a Connector under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/attach-application2-connector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ConnectorId | string | yes | The Connector ID |
| ApplicationIds | string | yes | The set of private access application IDs. The number of private access applications that can be attached to a single Connector cannot… |

### Attaches a business policy to a specified approval process
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/attach-policy2-approval-process` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | yes | Policy type. Valid values: DomainBlacklist: Domain blacklist. DomainWhitelist: Domain whitelist. SoftwareBlock: Software disable.… |
| PolicyId | string | no | Business policy ID |
| ProcessId | string | yes | Approval process ID |

### Inserts domain name entries into a domain name list in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/batch-create-domain-items` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ListId | string | no | The list ID. This is a unique business identifier used for policy references and add, delete, and modify operations |
| ListType | string | no | The list type (Blacklist/Whitelist) |
| DomainItems | string | no | The domain name list (JSON-encoded) |

### Batch deletes domain name entries from a domain name list
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/batch-delete-domain-items` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ListId | string | no | The list ID. This is the unique business identifier used for policy references and CRUD operations |
| ListType | string | no | The list type (Blacklist/Whitelist) |
| ItemIds | string | no | The IDs of domain name list entries (JSON-encoded) |

### Deletes multiple private access applications
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/batch-delete-private-access-application` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApplicationIds | string | no | The IDs of the private access applications. You can specify up to 100 private access application IDs (JSON-encoded) |

### Deletes internal network access policies in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/batch-delete-private-access-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyIds | string | no | The IDs of the internal network access policies. You can specify up to 100 internal network access policy IDs (JSON-encoded) |

### Associates user tags
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/bind-sase-user-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagIds | string | no | The IDs of the user tags (JSON-encoded) |
| SaseUserIds | string | no | The IDs of the users (JSON-encoded) |

### Cancels multiple active on-demand virus scan tasks. After cancellation, endpoints no longer pull or execute…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/cancel-virus-scan-tasks` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskIds | string | yes | The IDs of the virus scan tasks to be canceled. Specify at least one ID. Duplicate IDs are not allowed (JSON-encoded) |

### Cancels multiple active on-demand vulnerability scanning tasks in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/cancel-vul-scan-tasks` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskIds | string | yes | The IDs of the vulnerability scanning tasks to be canceled. You can specify 1 to 100 IDs. Duplicate IDs are not allowed (JSON-encoded) |

### Creates an approval process under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-approval-process` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ProcessName | string | yes | The name of the process. The name must be 1 to 128 characters in length, and can contain Chinese characters, uppercase and lowercase… |
| Description | string | no | The description of the approval process. The description must be 1 to 128 characters in length, and can contain Chinese characters,… |
| ProcessNodes | string | yes | The list of approval nodes. Up to 5 approval nodes can be defined (JSON-encoded) |
| MatchSchemas | string | no | The matched approval templates (JSON-encoded) |

### Creates a backend report
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-backend-report` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | yes | The report policy type. Valid values: PrivateAccessBlock: Private network access. DomainWhitelist: Domain name whitelist. DomainBlacklist:… |
| Targets | string | yes | The list of target users in flat serialization format. You can specify 1 to 100 users. Only specific SASE users under the current Alibaba… |
| ReportObjects | string | yes | The list of report objects in flat serialization format. You can specify 1 to 100 report objects of the same policy type. The object… |
| ValidityType | string | no | The type of the validity period. If you do not specify this parameter, the default value is FixedTime. Valid values: FixedTime: Expires at… |
| EndTimestamp | integer | no | The expiration time of the report. The value is a UNIX timestamp in seconds. This parameter is required when ValidityType is set to… |
| Reason | string | yes | The reason for the report. The value must be 1 to 1,024 characters in length |

### Create a custom identity source user for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-client-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| IdpConfigId | string | yes | ID of the custom identity source configuration |
| Username | string | yes | Username |
| DepartmentId | string | no | Department ID |
| Email | string | yes | Email address |
| MobileNumber | string | no | Mobile phone number without country code |
| Password | string | no | Password. If empty, a random password is generated automatically |
| Description | string | no | User description |

### Creates a connector
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-connector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the connector. The name must be 1 to 128 characters in length, and can contain Chinese characters, uppercase and lowercase… |
| Region | string | yes | The region ID |
| SwitchStatus | string | yes | The instance status of the connector. Valid values: Enabled: Enabled. Disabled: Shutdown |
| Bandwidth | integer | no | The bandwidth value in Mbit/s |

### Creates a device tag
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-device-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the device tag. The name must be 1 to 128 characters in length and can contain Chinese characters, uppercase and lowercase… |
| Description | string | no | The description of the device tag. The description can contain Chinese characters, uppercase and lowercase letters, digits, spaces,… |
| GroupType | string | no | The type of the device tag. Valid values: static: Static device tag. After the tag is created, you can manually add devices by calling the… |
| DynamicOperator | string | no | The operator of the dynamic device group rule |
| DynamicRule | string | no | The matching rule for the dynamic device tag (JSON-encoded) |

### Creates a domain name list
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-domain-meta` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ListType | string | no | The list type |
| Name | string | no | The list name. Maximum length: 32 characters |

### Create dynamic routes for the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-dynamic-route` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The dynamic route name. It is 1 to 128 characters long. It supports Chinese characters, uppercase and lowercase letters, numbers, periods… |
| Description | string | no | The dynamic route description. It is 1 to 128 characters long. It supports Chinese characters, uppercase and lowercase letters, numbers,… |
| Status | string | yes | The dynamic route status. Valid values: Enabled: Enabled. Disabled: Disabled |
| Priority | integer | yes | The dynamic route priority. 1 indicates the highest priority. Valid values: 1-99 |
| RegionIds | string | yes | A list of regions supported by SASE POP cluster access points (JSON-encoded) |
| ApplicationType | string | yes | The application type of the dynamic route. Valid values: All: All applications. Application: Application. Tag: Tag |
| ApplicationIds | string | no | A collection of internal network access application IDs for the dynamic route. You can enter a maximum of 200 internal network access… |
| TagIds | string | no | A collection of internal network access tag IDs for the dynamic route. You can enter a maximum of 40 internal network access tag IDs.… |
| DynamicRouteType | string | yes | The dynamic route type. Valid values: connector: Leased line |
| NextHop | string | yes | The next hop instance ID of the dynamic route. Source: For more information, see [ListConnectors](): Query Connectors in batches |

### Creates an enterprise acceleration policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-enterprise-accelerate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | no | The policy name |
| Description | string | no | The description of the enterprise management policy. The description must be 1 to 512 characters in length |
| UpstreamType | string | yes | The acceleration instance |
| UpstreamHost | string | yes | The address (IP address or domain name) of the acceleration instance |
| UpstreamPort | integer | yes | The port of the acceleration instance. Valid values: 1000 to 60000 |
| UserAttributeGroup | string | yes | The acceleration user group |
| Priority | string | no | The priority |
| AccelerationType | string | no | The acceleration mode. Valid values: whiltelist: whitelist-based acceleration. global: global acceleration. build-in-list: built-in… |
| ShowInClient | integer | no | Specifies whether to display the policy in the client. Valid values: 0: not displayed. 1: displayed |

### Creates an enterprise acceleration address
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-enterprise-accelerate-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |
| Target | string | yes | The list of enterprise acceleration addresses (JSON-encoded) |

### Creates a forwarding rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-forward-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name. It must be 1 to 128 characters in length, and can contain Chinese characters, uppercase and lowercase letters, digits, periods… |
| Description | string | no | The description. It must be 1 to 128 characters in length, and can contain Chinese characters, uppercase and lowercase letters, digits,… |
| Status | string | yes | The policy status. Valid values: Enabled: Enabled. Disabled: Disabled |
| Priority | integer | yes | The policy priority. A value of 1 indicates the highest priority. Valid values: 1 to 100 |
| DestinationType | string | yes | The destination type. Valid values: Connector: Connector |
| DestinationId | string | yes | The target instance ID |

### Creates a department for a custom identity source in the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-idp-department` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| IdpConfigId | string | yes | The ID of the custom identity source configuration |
| DepartmentName | string | yes | The department name |

### Creates a diagnostic task for internal network access
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-padiagnosis-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DiagnoseType | string | yes | The diagnosis type. Valid values: FullLink: full-link diagnosis. Application: application diagnosis |
| Username | string | no | The username |
| DevTag | string | no | The ID of the terminal device |
| UserGroupId | string | no | The user group ID |
| Protocol | string | yes | The protocol used by the internal network access application. Valid values: TCP UDP |
| Host | string | yes | The address to diagnose |
| Port | string | yes | The port |
| PopMode | string | yes | The POP point selection mode. Valid values: AutoSelect: automatic selection. ManualSelect: manual selection |
| PopId | string | no | The POP point ID |
| UdpExtraConfigs | string | no | The extra configurations for UDP diagnosis. If this parameter is not specified, any response received is considered a success (JSON-encoded) |

### Creates a private access application within the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-private-access-application` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the private access application. The name must be 1 to 128 characters in length, and can contain Chinese characters, uppercase… |
| Description | string | no | The description of the private access application. The description must be 1 to 128 characters in length, and can contain Chinese… |
| Addresses | string | no | The collection of private access application addresses. You can enter up to 1,000 private access application addresses (JSON-encoded) |
| PortRanges | string | no | The collection of port ranges for the private access application. You can enter up to 65,535 port ranges. Multiple port ranges cannot be… |
| Protocol | string | yes | The protocol of the private access application. Valid values: All: All protocols. TCP UDP |
| Status | string | yes | The status of the private access application. Valid values: Enabled: Enabled. Disabled: Disabled |
| TagIds | string | no | The collection of private access tag IDs. You can associate up to six custom private access tags with a single private access application… |
| BrowserAccessStatus | string | no | The browser access status of the private access application. After you enable this feature, you can access private access applications… |
| L7ProxyDomainAutomaticPrefix | string | no | The prefix of the mapped proxy domain name in browser access mode. The prefix must be 3 to 20 characters in length, and can contain… |
| L7ProxyDomainCustom | string | no | The custom proxy domain name in browser access mode. The value must be a valid domain name |
| L7Config | string | no | The application configuration in browser access mode (JSON-encoded) |
| HealthCheckMode | string | no | The health check mode. Valid values: OnAccess: Checks upon access without proactive probing. Continuous: Performs continuous checks and… |
| HealthCheckConfig | string | no | The health check configuration. This parameter is required when HealthCheckMode is set to Continuous, and cannot be specified when… |
| ConfigMode | string | no | The configuration mode. Valid values: Empty string: Default mode. Precise: Precise mode |
| AddressGroups | string | no | The application address groups. This parameter is required when ConfigMode is set to Precise, and cannot be specified when ConfigMode is… |
| UnauthorizedAccessConfig | string | no | The configuration for unauthorized application access requests (JSON-encoded) |

### Create Private Access Policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-private-access-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | Name of the private access policy. The length is 1 to 128 characters, supporting Chinese and uppercase and lowercase English letters, and… |
| Description | string | no | Description of the private access policy. The length is 1 to 128 characters, supporting Chinese and uppercase and lowercase English… |
| PolicyAction | string | yes | Action of the private access policy. Values: Block: Block. Allow: Allow |
| ApplicationType | string | yes | Application type of the private access policy. Values: Application: Application. Tag: Tag |
| ApplicationIds | string | no | Set of application IDs for the private access policy. Up to 100 application IDs can be entered. Required when ApplicationType is… |
| TagIds | string | no | Set of tag IDs for the private access policy. Up to 100 tag IDs can be entered. Required when ApplicationType is Tag. Mutually exclusive… |
| UserGroupMode | string | yes | User group type of the private access policy. Values: Normal: Normal user group. Custom: Custom user group |
| UserGroupIds | string | no | Set of user group IDs for the private access policy. Required when the user group type is Normal. Mutually exclusive with the custom user… |
| CustomUserAttributes | string | no | Set of custom user groups for the private access policy. Required when the user group type is Custom. Mutually exclusive with the user… |
| Status | string | yes | The status of the private access policy. Values: Enabled: Enabled. Disabled: Disabled |
| Priority | integer | yes | The priority of the private access policy. The number 1 indicates the highest priority. Range: 1~1000, with the maximum value being the… |
| DeviceAttributeId | string | no | The ID of the security baseline policy |
| DeviceAttributeAction | string | no | The execution policy for not meeting the security baseline. Values: Block: Block. Observe: Observe |
| TriggerTemplateId | string | no | The trigger template ID |
| TrustedProcessStatus | string | no | The switch status of the trusted process. Values: Enabled: Enabled. Disabled: Disabled |
| TrustedProcessGroupIds | string | no | The ID of the trusted process group (JSON-encoded) |
| TrustedSoftwareIds | string | no | The ID of the trusted software (JSON-encoded) |
| ValidFrom | integer | no | The start time when the zero trust policy takes effect, represented as a timestamp in seconds |
| ValidUntil | integer | no | The expiration time of the zero trust policy, in seconds timestamp |
| ValidTimeStatus | string | no | Switch status for effective time. Values: - Enabled: On. - Disabled: Off |

### Creates an internal-facing access tag under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-private-access-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the internal-facing access tag. The name must be 1 to 128 characters in length and can contain letters, digits, periods (.),… |
| Description | string | no | The description of the internal-facing access tag. The description must be 1 to 128 characters in length and can contain letters, digits,… |

### Creates a prohibited software policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-prohibited-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | Policy Name of the prohibited software policy. Policy Name must be 1 to 128 characters in length and can contain Chinese characters,… |
| Description | string | no | The description of the prohibited software policy. The description can be up to 128 characters in length and can be empty |
| PolicyType | string | yes | The action to take. Valid values: Ban: blocks the software from running and displays a pop-up window on the terminal to notify the user.… |
| Enabled | string | yes | Specifies whether the policy is enabled. Valid values: true: The policy is enabled, delivered to terminals, and takes effect. false: The… |
| Whitelist | string | no | The list of exempted usernames (JSON-encoded) |
| PromptCh | string | yes | The Chinese prompt content in the terminal pop-up window |
| PromptEn | string | yes | The English prompt content in the terminal pop-up window |
| Priority | integer | yes | The policy priority. Valid values: 0 to 99. A smaller value indicates a higher priority |
| ObjectType | string | yes | The object type. Valid values: App: controls disable software. The managed objects are specified by SoftwareIds. Tag: controls disable… |
| SoftwareIds | string | no | The collection of prohibited software directly managed by the policy (JSON-encoded) |
| TagIds | string | no | The collection of prohibited software tag IDs managed by the policy (JSON-encoded) |
| MatchMode | string | yes | The effective scope. Valid values: UserGroupAll: The policy takes effect for all users under the current Alibaba Cloud account. You do not… |
| UserGroupIds | string | no | The collection of user group IDs for which the policy takes effect (JSON-encoded) |
| AllowReport | string | no | Specifies whether to allow terminal users to submit an exception request for the policy. Valid values: true: Exception requests are… |
| ForceKill | string | no | Specifies whether to forcibly terminate running processes of the software. Valid values: true: The terminal immediately terminates the… |
| TitleCh | string | no | The Chinese title of the terminal pop-up window |
| TitleEn | string | no | The English title of the terminal pop-up window |
| MainButtonTextCh | string | no | The Chinese text of the primary button in the terminal pop-up window |
| MainButtonTextEn | string | no | The English text of the primary button in the terminal pop-up window |
| MinorButtonTextCh | string | no | The Chinese text of the secondary button in the terminal pop-up window |
| MinorButtonTextEn | string | no | The English text of the secondary button in the terminal pop-up window |

### Creates custom blocked software
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-prohibited-software` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the blocked software |
| Description | string | no | The description of the blocked software |
| TagIds | string | no | The IDs of the custom blocked software tags to associate. Duplicate IDs are not allowed (JSON-encoded) |
| WindowsProcesses | string | no | The list of process configurations for the Windows operating system (JSON-encoded) |
| MacOSProcesses | string | no | The list of process configurations for the macOS operating system (JSON-encoded) |
| LinuxProcesses | string | no | The list of process configurations for the Linux operating system (JSON-encoded) |

### Creates a custom prohibited software tag
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-prohibited-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the prohibited software tag. Fuzzy match is supported. The name can be up to 128 characters in length and can contain Chinese… |
| Description | string | no | The description of the prohibited software tag. The description can be up to 128 characters in length and can contain Chinese characters,… |

### Create a device registration policy for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-registration-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the device registration policy. The name must be 1 to 128 characters in length. It can contain letters, digits, periods (.),… |
| Description | string | no | A description of the device registration policy. The description must be 1 to 128 characters in length. It can contain letters, digits,… |
| Status | string | yes | The status of the device registration policy. Valid values: Enabled: Enabled. Disabled: Disabled |
| Whitelist | string | no | The list of usernames in the whitelist for the device registration policy. You can specify up to 1,000 usernames (JSON-encoded) |
| Priority | integer | no | The priority of the device registration policy. A value of 0 indicates the highest priority. A value of 99 indicates the lowest priority |
| CompanyLimitType | string | yes | The restriction type for company devices. Valid values: Unlimited: No restrictions. LimitAll: Limit by total count. LimitDiff: Limit by… |
| CompanyLimitCount | string | no | The restriction count for company devices (JSON-encoded) |
| PersonalLimitType | string | yes | The restriction type for personal devices. Valid values: Unlimited: No restrictions. LimitAll: Limit by total count. LimitDiff: Limit by… |
| PersonalLimitCount | string | no | The restriction count for personal devices (JSON-encoded) |
| MatchMode | string | yes | The target type for policy matching. Valid values: UserGroupAll: Apply to all users. UserGroupNormal: Apply to selected user groups |
| UserGroupIds | string | no | The IDs of user groups to which the device registration policy applies. Required if MatchMode is set to UserGroupNormal. A maximum of 100… |

### Creates a user tag
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-sase-user-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | no | The name of the user tag |
| Description | string | no | The description of the user tag |

### Creates a software distribution task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-softwarelib-distribute-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The name of the task. The name must be 1 to 64 characters in length |
| SoftwareId | string | no | The ID of the software in the software library. You can call the [ListSoftwarelibSoftware](~~ListSoftwarelibSoftware~~) operation to… |
| SupportOs | string | no | The operating system to which the task applies. Only a single value is supported. Valid values: Windows: Windows Mac(Apple): macOS on… |
| ExecuteMode | string | no | The execution mode. Valid values: Once: Executes the task immediately. Schedule: Executes the task on a schedule |
| ExecuteParameters | string | no | The scheduled execution parameters. The value is a JSON string |
| ExecutePeriod | string | no | The execution period of the task. The value is a JSON string. The validType field specifies the period type. Valid values: Once: Executes… |
| MatchMode | string | no | The type of the target matched by the policy. Valid values: UserGroupAll: all users UserGroupNormal: specified user groups DevTagNormal:… |
| UserGroupIds | string | no | The IDs of the user groups. Duplicate IDs are not allowed. This parameter is required and at least one ID must be specified when MatchMode… |
| DeviceGroupIds | string | no | The IDs of the device groups. Duplicate IDs are not allowed. This parameter is required when MatchMode is set to DeviceGroupNormal. If… |
| DevTags | string | no | The IDs of the terminal devices. Duplicate IDs are not allowed. A single ID can be up to 1,000 characters in length. This parameter is… |
| GmtExpired | string | no | The expiration time of the task. The value is a UNIX timestamp in milliseconds. This parameter takes effect only when ExpireMode is set to… |
| RetryTimes | string | no | The number of retries after the task fails |
| Timeout | string | no | The timeout period for task execution. Unit: seconds. For example, a value of 3600 indicates 1 hour |
| ExpireMode | string | no | The expiration type. Valid values: Expire: The task expires at the time specified by GmtExpired. Never: The task never expires |
| VersionId | string | no | The ID of the software version to be distributed. You can call the [ListSoftwarelibVersion](~~ListSoftwarelibVersion~~) operation to… |
| TaskType | string | no | The type of the task. Valid values: server: a task issued from the console client: a task initiated by the client |
| SoftwareName | string | no | The name of the software. The name can be up to 128 characters in length |
| RunAsAccount | string | no | The name of the administrator account used to execute the task in Windows. The name can be up to 128 characters in length |

### Creates a software version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-softwarelib-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SoftwareId | string | yes | The software ID in the software library. The value can be up to 64 characters in length. You can call… |
| Os | string | no | The operating system to which the software package applies. Valid values: Windows: Windows. Mac(Apple): macOS with Apple silicon.… |
| SoftwareVersion | string | no | The software version number. The value can be up to 64 characters in length. The combination of operating system and version number must… |
| SoftwareUrl | string | no | The download URL of the software package. If the publisher type is local, the value is the relative path of the software package in the… |
| Md5 | string | no | The MD5 value of the software package. The value can be up to 64 characters in length |
| SoftwarePkgName | string | no | The file name of the software package. The value can be up to 128 characters in length |
| SoftwarePkgSize | integer | no | The size of the software package |
| SoftwareName | string | no | The software name. The value can be up to 128 characters in length |
| PublisherType | string | no | The software publisher type. Valid values: local: local upload. thirdparty: third-party link |

### Creates a user group for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Name | string | yes | The user group name. The name must be 1 to 128 characters long and can contain Chinese characters, letters, digits, periods (.),… |
| Description | string | no | The user group description. The description must be 1 to 128 characters long and can contain Chinese characters, letters, digits, periods… |
| Attributes | string | yes | The collection of user group attributes. You can specify a maximum of 3,000 attributes. The attributes are combined using a logical OR… |

### Creates a scheduled virus scan policy that automatically delivers scan tasks to user endpoints within the…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-virus-scan-scheduled-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyName | string | yes | Policy Name of the policy. Policy Name can contain Chinese characters, uppercase and lowercase letters, digits, periods (.), underscores… |
| StrategyDescription | string | no | The description of the policy. The description can contain Chinese characters, uppercase and lowercase letters, digits, spaces, periods… |
| Priority | integer | no | The policy priority. A smaller value indicates a higher priority. Valid values: 1 to 100 |
| Status | string | yes | The enabling status. Valid values: Enabled: Enabled. The policy immediately participates in periodic scheduling. Disabled: Disabled. The… |
| ScanTargets | string | yes | The types of viruses to be handled in this scan. You must specify at least one virus type. Duplicate values are not allowed (JSON-encoded) |
| ScanMode | string | yes | The path scope of the scan. Valid values: Quick: quick scan, which scans only system key directories and common risk locations Full: full… |
| ScanPath | string | no | The custom scan paths. This parameter is required when ScanMode is set to Custom, and cannot be specified when ScanMode is set to Quick or… |
| PerformanceMode | string | yes | The scan performance schema pattern. Valid values: SecurityFirst: security first, with a default maximum CPU usage of 50% Balance:… |
| HighRiskOperation | string | yes | The action to take on high-risk virus files. Valid values: Quarantine: quarantines quarantined files Notify: reports alerts only and does… |
| MidRiskOperation | string | yes | The action to take on medium-risk virus files. Valid values: Quarantine: quarantines quarantined files Notify: reports alerts only and… |
| LowRiskOperation | string | yes | The action to take on low-risk virus files. Valid values: Quarantine: quarantines quarantined files Notify: reports alerts only and does… |
| MatchMode | string | yes | The matching mode for the effective scope. Valid values: UserGroupAll: applies to all users under the current Alibaba Cloud account… |
| Whitelist | string | no | The whitelist of users. Users in the whitelist are excluded from the scan policy. You can specify up to 1,000 users. Duplicate values are… |
| UserGroupIds | string | no | The IDs of the effective user groups. This parameter is required when MatchMode is set to UserGroupNormal, and cannot be specified when… |
| ScanFrequency | string | yes | The unit of the trigger cycle. Valid values: day: day week: week |
| ScanInterval | integer | yes | The interval of the trigger cycle. This parameter and ScanFrequency determine the trigger cycle. Valid values: 1 to 30. For example, if… |
| ScanBeginTime | integer | yes | The start hour for triggering the scan. The value must be an integer on the hour. Valid values: 0 to 23. The specified hour is included.… |
| ScanEndTime | integer | yes | The end hour for triggering the scan. The value must be an integer on the hour. Valid values: 1 to 24. The specified hour is excluded and… |
| MaxCpuUsage | integer | no | The maximum percentage of the endpoint CPU usage during the scan. Valid values: 0 to 100. If you do not specify this parameter or set it… |

### Creates an instant virus scan task and delivers it to user endpoint devices within the effective scope. The…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-virus-scan-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskDescription | string | yes | The task description. The description can be up to 128 characters in length and can contain Chinese characters, uppercase and lowercase… |
| ScanTargets | string | yes | The collection of virus types to be handled in this scan. At least one type must be specified. Duplicate values are not allowed… |
| ScanMode | string | yes | The scan path scope. Valid values: Quick: quick scan. Only system critical directories and common risk locations are scanned. Full: full… |
| ScanPath | string | no | The collection of custom scan paths. This parameter is required when ScanMode is set to Custom and cannot be specified when ScanMode is… |
| PerformanceMode | string | yes | The scan performance pattern. Valid values: SecurityFirst: security first. The default CPU usage limit is 50%. Balance: balanced. The… |
| HighRiskOperation | string | yes | The action to take on high-risk virus files. Valid values: Quarantine: quarantine quarantined file. Notify: report an alert only without… |
| MidRiskOperation | string | yes | The action to take on medium-risk virus files. Valid values: Quarantine: quarantine quarantined file. Notify: report an alert only without… |
| LowRiskOperation | string | yes | The action to take on low-risk virus files. Valid values: Quarantine: quarantine quarantined file. Notify: report an alert only without… |
| MatchMode | string | yes | The matching mode for the effective scope. Valid values: UserGroupAll: applies to all users under the current Alibaba Cloud account.… |
| Whitelist | string | no | The list of exempt users. Users in this list do not execute this scan task. A maximum of 1000 users can be specified. Duplicate values are… |
| EndTime | integer | no | The task expiration time, in seconds-level UNIX timestamp. After this time, endpoints no longer pull and execute this task. If this… |
| UserGroupIds | string | no | The collection of user group IDs to which the task applies. This parameter is required when MatchMode is set to UserGroupNormal and cannot… |
| MaxCpuUsage | integer | no | The maximum percentage of endpoint CPU usage during scanning. Valid values: 0 to 100. If this parameter is not specified or is set to 0,… |

### Creates a scheduled vulnerability scanning policy that automatically sends vulnerability scanning tasks to…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-vul-scan-scheduled-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyName | string | yes | The policy name. The name can be up to 128 characters in length and can contain Chinese characters, uppercase and lowercase letters,… |
| StrategyDescription | string | no | The policy description |
| MatchMode | string | yes | The matching mode for the effective scope. Valid values: UserGroupAll: The policy takes effect for all users under the current Alibaba… |
| Priority | integer | no | The policy priority. A smaller value indicates a higher priority. Valid values: 1 to 100 |
| Status | string | no | The enabling status. Valid values: Enabled: Enabled. Disabled: Disabled |
| ScanFrequency | string | no | The unit of the trigger cycle. Valid values: day: by day. week: by week |
| ScanInterval | string | no | The interval number of the trigger cycle, which determines the trigger cycle together with ScanFrequency. Valid values: 1 to 30. For… |
| ScanBeginTime | string | no | The start hour during which the scan can be triggered. The value is an integer hour. Valid values: 0 to 23, inclusive. This field is not a… |
| ScanEndTime | string | no | The end hour during which the scan can be triggered. The value is an integer hour. Valid values: 1 to 24, exclusive of the specified hour.… |
| Whitelist | string | no | The list of exempt users. Users in this list are excluded from the scan of this policy. The list can contain up to 1000 entries. Duplicate… |
| UserGroupIds | string | no | The IDs of the user groups for which the policy takes effect. This parameter is required when MatchMode is set to UserGroupNormal and must… |

### Creates an instant vulnerability scanning task and delivers it to user endpoint devices within the effective…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-vul-scan-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskName | string | yes | The task name. The name can be up to 128 characters in length and can contain Chinese characters, uppercase and lowercase letters, digits,… |
| TaskDescription | string | no | The task description |
| MatchMode | string | yes | The matching mode for the effective scope. Valid values: UserGroupAll: Takes effect for all users under the current Alibaba Cloud account.… |
| UserGroupIds | string | no | The collection of user group IDs for which the task takes effect. This parameter is required when MatchMode is set to UserGroupNormal and… |
| Whitelist | string | no | The list of exempt usernames. Users in this list are excluded from this scan. The list can contain up to 1000 entries. Duplicate values… |
| EndTimestamp | integer | no | The task expiration time, in seconds-level UNIX timestamp. After this time is reached, endpoints no longer pull and execute this task, and… |

### Creates a vulnerability fix task that delivers the patch for a specified vulnerability to user endpoint…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-vulnerability-fix-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UpdateId | string | yes | The ID of the patch package corresponding to the vulnerability to be fixed. The value can be up to 64 characters in length. Value source:… |
| DevTags | string | no | The collection of unique identifiers of user endpoint devices to be fixed. This parameter is required when FixMode is set to DevTag, and… |
| MaxDownloadSpeed | integer | no | The maximum download speed for a single user endpoint device during this fix. Unit: Byte/s. A value of 0 indicates no speed limit |
| FixMode | string | yes | The method for specifying the fix scope. Valid values: DevAll: Fixes all user endpoint devices affected by the vulnerability. DevTags must… |
| WuyingVulFixConfig | string | no | The vulnerability fix configuration for WUYING Workspace. This configuration takes effect only for user endpoint devices of the WUYING… |

### Retrieves the invisible watermark transparent background image for web watermarks, screen watermarks, and…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-wm-base-image` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| WmType | string | yes | The watermark type. Valid values: PureWebappInvisible: web watermark. PureAppInvisible: App watermark. PureScreenInvisible: screen… |
| WmInfoSize | integer | no | The bit width of the watermark information capacity. Default value: 32. This parameter must be consistent between embedding and… |
| WmInfoUint | string | no | The watermark information in decimal number format. If this parameter is set, WmInfoBytesB64 cannot be set. The valid range depends on the… |
| WmInfoBytesB64 | string | no | The watermark information in Base64-encoded string format. The length is 1 to 300 characters. If this parameter is set, the WmInfoUint… |
| Scale | integer | yes | The scaling ratio of the watermark image |
| Width | integer | yes | The width of the watermark image, in pixels. Valid values: 100 to 5000 |
| Height | integer | yes | The height of the watermark image, in pixels. Valid values: 100 to 5000 |
| Opacity | integer | yes | The opacity of the watermark image. Valid values: 1 to 255. A larger value indicates lower transparency |
| ImageControl | string | no | The image watermark control parameters (JSON-encoded) |
| comment | string | no | The remarks |

### Creates a digital watermarking embedding task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-wm-embed-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| WmType | string | yes | The watermark type. Valid values: PureDocument: document watermark. PureImage: image watermark. PureAudio: audio watermark. PureVideo:… |
| Filename | string | yes | The name of the file to be embedded. The backend validates the file type based on the file name extension |
| FileUrl | string | yes | The URL for downloading the file to be embedded. The URL must be active for public network access |
| WmInfoSize | integer | no | The bit width of the watermark information capacity. Default value: 32. This parameter must be consistent between embedding and… |
| WmInfoUint | string | no | The watermark information in decimal number format. If this parameter is set, WmInfoBytesB64 cannot be set |
| WmInfoBytesB64 | string | no | The watermark information in Base64-encoded string format. If this parameter is set, WmInfoUint cannot be set |
| VideoIsLong | string | no | Video watermark parameter. Specifies whether to use the long video watermark SDK. Valid values: true: The long video watermark SDK is… |
| VideoBitrate | string | no | The short video watermark parameter that specifies the video bitrate. By default, the video bitrate is automatically obtained. You can use… |
| ImageEmbedLevel | integer | no | The image watermark parameter. A larger value indicates higher robustness but lower visual quality. Default value: 2. Valid values: 0 to 4 |
| ImageEmbedJpegQuality | integer | no | The image watermark parameter that specifies the expected JPEG compression quality factor of the output image. Default value: 95. Valid… |
| InvisibleEnable | string | no | Specifies whether to enable invisible watermark embedding. Default value: true |
| DocumentControl | string | no | The document watermark control parameters (JSON-encoded) |
| CsvControl | string | no | The CSV watermark embedding control parameters (JSON-encoded) |
| ImageControl | string | no | The image watermark control parameters (JSON-encoded) |
| VideoControl | string | no | The video control parameters (JSON-encoded) |
| AudioControl | string | no | The audio control parameters (JSON-encoded) |

### Creates a digital watermarking extraction task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-wm-extract-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| WmType | string | yes | The watermark type. Valid values: PureWebappInvisible: web page watermark. PureAppInvisible: app watermark. PureScreenInvisible: screen… |
| IsClientEmbed | string | no | The audio watermark parameter that specifies whether the watermark was embedded by the client SDK. Default value: false. Valid values:… |
| FileUrl | string | yes | The URL used to download the file from which the watermark is to be fetched. The URL must be accessible over the public network access |
| Filename | string | yes | The name of the file from which the watermark is to be extracted. The backend determines and validates the file type based on the file… |
| WmInfoSize | integer | no | The bit width of the watermark information capacity. Default value: 32. This parameter must be consistent between embedding and… |
| VideoSpeed | string | no | The long video watermark parameter that specifies the video playback speed as a floating-point string. Default value: 1, which indicates… |
| VideoIsLong | string | no | The video watermark parameter that specifies whether to use the long video watermark SDK. Default value: false. Valid values: true: Yes.… |
| DocumentIsCapture | string | no | The document watermark parameter that specifies whether the file to be extracted is a screenshot of a document with a background… |
| CsvControl | string | no | The CSV watermark control parameters. These must be consistent with the parameters used during embedding. Otherwise, extraction fails… |
| ImageExtractParamsOpenApi | string | no | The image extraction parameters (JSON-encoded) |

### Creates a mapping from string-format watermark information to digital-format watermark information
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/create-wm-info-mapping` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| WmType | string | yes | Watermark type. Valid values: PureWebappInvisible: Webpage watermark. PureAppInvisible: App watermark. PureScreenInvisible: Screen… |
| WmInfoSize | integer | no | The capacity bit width of the watermark information. Default is 32. This parameter must be consistent with the capacity bit width used… |
| WmInfoBytesB64 | string | yes | The Base64-encoded string-format watermark information. Length: 1 to 300 characters |

### Deletes approval processes in batches from your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-approval-processes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ProcessIds | string | yes | A collection of approval process IDs (JSON-encoded) |

### Delete a specified user from your Alibaba Cloud account's custom identity source
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-client-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Id | string | yes | The ID of the user to delete |

### Deletes a connector
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-connector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ConnectorId | string | yes | ConnectorID |

### Deletes a ConnectorClient under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-connector-client` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ConnectorId | string | yes | The connector ID. You can call [ListConnectors](~~ListConnectors~~) to obtain the ID |
| DevTag | string | yes | The unique identifier of the ConnectorClient device. You can call [ListConnectors](~~ListConnectors~~) to obtain the identifier |

### Deletes instance tags in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-device-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceGroupIds | string | no | The collection of instance tag IDs to delete. Duplicate values are not allowed (JSON-encoded) |

### Deletes detection records of a specified vulnerability from specified user endpoint devices in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-devices-vulnerability` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UpdateId | string | yes | The patch ID corresponding to the vulnerability. The value can be up to 64 characters in length. Valid source:… |
| DevTags | string | yes | The collection of unique identifiers of user endpoint devices whose records are to be deleted. The collection must contain at least 1 and… |

### Deletes a domain name list
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-domain-meta` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ListType | string | yes | The list type. Valid values: la_domain_white_list: domain name whitelist. la_domain_black_list: domain name blacklist |
| ListId | string | yes | The list ID, which is a unique business identifier used for policy references and create, update, and delete operations |

### Delete a dynamic route from your current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-dynamic-route` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DynamicRouteId | string | yes | The ID of the dynamic route |

### Deletes an enterprise acceleration policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-enterprise-accelerate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |

### Deletes enterprise acceleration addresses
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-enterprise-accelerate-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |
| Target | string | yes | The list of enterprise acceleration addresses (JSON-encoded) |

### Deletes a forwarding rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-forward-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ForwardId | string | yes | The forwarding rule ID |

### Delete a department from a custom identity provider in your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-idp-department` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| IdpConfigId | string | yes | ID of the custom identity provider configuration |
| DepartmentId | string | yes | ID of the department |

### Deletes a user's One-Time Password (OTP) configuration
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-otp-config` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Username | string | no | The username |

### Deletes an internal network access application from your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-private-access-application` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApplicationId | string | yes | The ID of the internal network access application. You can get this value from:… |

### Deletes a private network access policy for the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-private-access-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyId | string | yes | The ID of the private network access policy. Obtain this ID from: [ListPrivateAccessPolices](~~ListPrivateAccessPolices~~): Batch query… |

### Deletes an internal access tag from the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-private-access-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagId | string | yes | The ID of the internal access tag. You can obtain the value from the following operations:… |

### Deletes software prohibition policies in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-prohibited-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyIds | string | no | The IDs of the software prohibition policies to delete. Duplicate IDs are not allowed. You can specify up to 100 IDs (JSON-encoded) |

### Deletes custom prohibited software in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-prohibited-software` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SoftwareIds | string | yes | The IDs of the prohibited software to delete. Duplicate IDs are not allowed. You can specify up to 100 IDs (JSON-encoded) |

### Deletes custom prohibited software labels in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-prohibited-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagIds | string | yes | The IDs of the custom prohibited software labels to delete. Duplicate IDs are not allowed. You can specify up to 100 IDs (JSON-encoded) |

### Batch delete device registration policies under your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-registration-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyIds | string | yes | A collection of device registration policy IDs (JSON-encoded) |

### Deletes user tags
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-sase-user-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagIds | string | no | The collection of user tag IDs (JSON-encoded) |

### Deletes user endpoint devices in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-user-devices` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceTags | string | no | The collection of endpoint device IDs. A maximum of 100 entries are supported (JSON-encoded) |

### Delete a user group in your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserGroupId | string | yes | The ID of the user group. You can get this value from: [ListUserGroups](~~ListUserGroups~~): Query user groups.… |

### Deletes a virus file record that failed to be handled. Only records with a handling action of Fail can be…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-virus-file` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DevTag | string | yes | The unique identifier of the user's endpoint device where the virus file is located. The value can be up to 64 characters in length. You… |
| FilePath | string | yes | The full path of the virus file on the user's endpoint device. Only records with a handling action of Fail can be deleted. You can obtain… |
| FileMd5 | string | yes | The MD5 value of the virus file. The value must be a 32-character hexadecimal string. You can obtain the value from the following… |

### Deletes virus scheduled scan policies in batches. After deletion, no new scan tasks are triggered, but scan…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-virus-scan-scheduled-strategies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyIds | string | yes | The IDs of the virus scheduled scan policies to delete. The collection must contain at least 1 and at most 100 IDs. Duplicate IDs are not… |

### Deletes a specified scheduled vulnerability scanning policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/delete-vul-scan-scheduled-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyId | string | yes | The ID of the scheduled vulnerability scanning policy to delete. You can obtain the value from the following operations:… |

### Queries the health check reports for specified internal-facing applications within a specified time range.…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/describe-application-health-check-reports` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApplicationIds | string | yes | The IDs of the internal-facing applications. You can specify up to 100 application IDs (JSON-encoded) |
| StartTime | integer | no | The start time of the query. The value is a UNIX timestamp in seconds. If this parameter is not specified, the default value is 5 minutes… |
| EndTime | integer | no | The end time of the query. The value is a UNIX timestamp in seconds. If this parameter is not specified, the default value is the current… |

### Detach a business policy from an approval process
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/detach-policy2-approval-process` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyType | string | yes | Policy type. Valid values: DomainBlacklist: Domain blacklist. DomainWhitelist: Domain whitelist. SoftwareBlock: Software disable.… |
| PolicyId | string | yes | Business policy ID |
| ProcessId | string | yes | Approval process ID |

### Disables an enterprise acceleration policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/disable-enterprise-accelerate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |

### Enables an enterprise acceleration policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/enable-enterprise-accelerate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |

### Export a list of user terminal devices to an Excel file
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/export-user-devices` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Username | string | no | Username. Must be 1 to 128 characters long. Supports Chinese, uppercase and lowercase letters, digits, periods (.), underscores (_),… |
| SaseUserId | string | no | User ID |
| Department | string | no | Department name. Must be 1 to 128 characters long. Supports Chinese, uppercase and lowercase letters, digits, periods (.), commas (,),… |
| Hostname | string | no | Terminal device name. Must be 1 to 128 characters long. Supports Chinese, uppercase and lowercase letters, digits, periods (.), commas… |
| DeviceBelong | string | no | Terminal device ownership. Valid values: Personal: Personal device. Company: Company device |
| Mac | string | no | MAC address of the terminal device |
| SharingStatus | string | no | Whether device sharing is enabled. Valid values: true: Sharing is enabled. false: Sharing is disabled |
| DeviceStatuses | string | no | Collection of terminal device statuses (JSON-encoded) |
| AppStatuses | string | no | Collection of client statuses (JSON-encoded) |
| PaStatuses | string | no | Collection of private network access statuses (JSON-encoded) |
| IaStatuses | string | no | Collection of Internet access statuses (JSON-encoded) |
| DlpStatuses | string | no | Collection of office data protection statuses (JSON-encoded) |
| NacStatuses | string | no | Collection of network admission statuses (JSON-encoded) |
| DeviceTypes | string | no | Collection of terminal device operating system types (JSON-encoded) |
| DeviceTags | string | no | Collection of terminal device IDs (JSON-encoded) |

### Queries the identity provider configuration enabled for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-active-idp-config` (byok)

### Queries the real-time antivirus defense policy of the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-anti-virus-real-time-defence-strategy` (byok)

### Queries the details of an approval instance under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-approval` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApprovalId | string | yes | The approval instance ID. You can obtain the value from the following operations: [ListApprovals](~~ListApprovals~~): Lists approval… |

### Queries the details of an approval process under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-approval-process` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ProcessId | string | yes | The ID of the approval process. You can call the following operation to obtain the value:… |

### Retrieves the details of an approval template for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-approval-schema` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SchemaId | string | yes | The ID of the approval template. Call [ListApprovalSchemas](~~ListApprovalSchemas~~) to list approval templates.… |

### Queries the details of the auto-start and anti-uninstallation policies for the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-boot-and-anti-uninstall-policy` (byok)

### Retrieves the details of a user from a custom identity source in your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-client-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| IdpConfigId | string | yes | ID of the custom identity source configuration |
| Username | string | yes | Username |

### Queries the details of a connector
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-connector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ConnectorId | string | yes | The connector ID |

### Queries the details of a ConnectorClient
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-connector-client` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ConnectorId | string | yes | The connector ID. You can obtain this value from the [ListConnectors](~~ListConnectors~~) operation |
| DevTag | string | yes | The unique identifier of the ConnectorClient device. You can obtain this value from the [ListConnectors](~~ListConnectors~~) operation |

### Queries the details of a specified device group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-device-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceGroupId | string | yes | The device group ID. You can obtain the value from the following operations: [ListDeviceGroups](~~ListDeviceGroups~~): Lists device… |

### Queries the online time distribution of a specified terminal device on a specified date, aggregated by minute
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-device-online-heatmap` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DevTag | string | yes | The terminal device ID |
| SaseUserId | string | yes | The user ID. You can obtain this value from the following operations: [ListUserDevices](~~ListUserDevices~~): Lists user terminal devices.… |
| Date | string | yes | The date to query, in the format yyyyMMdd with a fixed length of 8 characters. Online data is retained for only 8 days. Dates beyond the… |

### Retrieves details about a dynamic route in your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-dynamic-route` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DynamicRouteId | string | yes | The ID of the dynamic route |

### Queries the details of a forwarding rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-forward-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ForwardId | string | yes | The ID of the forwarding rule |

### Retrieve the configuration details of a specified identity provider for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-idp-config` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Id | string | yes | ID of the identity provider configuration |

### Retrieves the phone number whitelist for visitor admission SMS logon
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-nac-portal-sms-phone-whitelist` (byok)

### Retrieves the details of a private access diagnostic task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-padiagnosis-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DiagnoseId | string | yes | The ID of the diagnostic task |

### Queries the details of a private access application under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-private-access-application` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApplicationId | string | yes | The ID of the private access application. You can obtain the value from the following operations:… |

### Query Intranet Access Policy Details
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-private-access-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyId | string | yes | Intranet access policy ID. The value can be obtained from: [ListPrivateAccessPolices](~~ListPrivateAccessPolices~~): Query multiple… |

### Queries the details of a specified software prohibition policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-prohibited-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyId | string | yes | The ID of the software prohibition policy. You can obtain the value from the following operations:… |

### Queries the details of the specified prohibited software
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-prohibited-software` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SoftwareId | string | no | The ID of the prohibited software (JSON-encoded) |

### Queries the details of a device registration policy for the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-registration-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyId | string | yes | The ID of the device registration policy. You can obtain the value from the following operations:… |

### Retrieves a single user tag
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-sase-user-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagId | string | no | The ID of the user tag. Related operations: [ListSaseUserTags](~~ListSaseUserTags~~): Lists user tags.… |

### Queries the details of user terminal devices under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-user-device` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceTag | string | yes | The ID of the terminal device. Valid values: [GetUserDevice](~~GetUserDevice~~): Queries the details of a user terminal device.… |

### Queries the workload usage trends of a specified endpoint device
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-user-device-workload-trend` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeviceTag | string | yes | The ID of the endpoint device. You can call the following operations to obtain the value: [GetUserDevice](~~GetUserDevice~~): Queries the… |
| WorkloadType | string | yes | The workload type. Valid values: cpu: CPU usage. mem: Memory usage |
| From | integer | yes | The start time of the query time range. The value is a UNIX timestamp in seconds. Valid values: greater than or equal to 0 and less than… |
| To | integer | yes | The end time of the query time range. The value is a UNIX timestamp in seconds. Valid values: greater than the value of From |

### Queries the details of a user group in the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserGroupId | string | yes | The ID of the user group. You can obtain the ID from the following sources: [ListUserGroups](~~ListUserGroups~~): Queries a list of user… |

### Queries the global antivirus configuration for the current Alibaba Cloud account, including the virus file…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-virus-scan-global-config` (byok)

### Queries the details of a specified scheduled virus scan policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-virus-scan-scheduled-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyId | string | no | The ID of the scheduled virus scan policy. You can obtain the value from the following operations:… |

### Queries the global vulnerability scanning configuration for the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-vul-scan-global-config` (byok)

### Queries the complete configuration of a specified scheduled vulnerability scanning policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-vul-scan-scheduled-strategy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StrategyId | string | yes | The ID of the scheduled vulnerability scanning policy. You can obtain the value from the following operations:… |

### Queries the details of a specified vulnerability
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-vulnerability` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UpdateId | string | yes | The patch ID corresponding to the vulnerability. The value can be up to 64 characters in length. You can obtain the value from the… |
| HistogramInterval | string | yes | The statistical granularity of the remediation trend, which determines the statistical range and bucket granularity of the histogram.… |

### Use the job ID obtained from creating a watermark embedding job to query the embedding job result.
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-wm-embed-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskId | string | yes | The job ID obtained when creating the embedding job. Source of the value: [CreateWmEmbedTask](~~CreateWmEmbedTask~~): Create a watermark… |

### Queries the result of a watermark extraction task using the task ID that is returned when you create the task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/get-wm-extract-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TaskId | string | yes | The ID of the extraction task. You can obtain the task ID by calling the [CreateWmExtractTask](~~CreateWmExtractTask~~) operation.… |

### Imports acceleration addresses in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/import-enterprise-accelerate-targets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EapId | string | yes | The ID of the enterprise acceleration policy |
| FileUrl | string | yes | The URL of the import file |

### Immediately invalidates a report
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/invalidate-approval` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ApprovalId | string | yes | The ID of the approval instance to invalidate immediately. You can obtain the ID by calling the ListApprovals operation. You can specify… |

### Queries the applications associated with one or more private access policies
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-applications-for-private-access-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyIds | string | yes | The IDs of the private access policies. You can specify up to 100 policy IDs (JSON-encoded) |

### Batch-query applications associated with private network access tags within your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-applications-for-private-access-tag` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| TagIds | string | yes | A collection of private network access tag IDs. You can specify up to 100 tag IDs (JSON-encoded) |

### Queries the approval processes under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-approval-processes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The page number of the current page for paging in a paged query. Valid values: 1 to 10000 |
| PageSize | integer | yes | The paging Settings for the number of entries to return on each page in a paged query. Valid values: 1 to 500 |
| ProcessName | string | no | The name of the approval process. The name must be 1 to 128 characters in length and can contain Chinese characters, letters, digits,… |
| ProcessIds | string | no | The IDs of the approval processes. A maximum of 100 approval process IDs are supported (JSON-encoded) |
| PolicyType | string | no | The type of the business policy. Valid values: DomainBlacklist: Domain name blacklist. DomainWhitelist: Domain name whitelist.… |
| PolicyId | string | no | The ID of the associated business policy. If you specify this parameter, you must also specify the PolicyType parameter |
| SaseUserId | string | no | The ID of the approver, which starts with su_. Only approval processes that include this approver in the approval nodes are returned.… |
| Username | string | no | The username of the approver. Fuzzy match is supported. Only approval processes that include this approver in the approval nodes are… |

### Queries the approval flows associated with approval rendering templates
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-approval-processes-for-approval-schemas` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SchemaIds | string | yes | A collection of approval template IDs (JSON-encoded) |

### Lists the approval templates for your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-approval-schemas` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The current page number for paged queries. Valid values: 1 to 10000 |
| PageSize | integer | yes | The number of entries per page for paged queries. Valid values: 1 to 500 |
| SchemaName | string | no | The template name. It can be 1 to 128 characters long. It supports Chinese characters, uppercase and lowercase English letters, numbers,… |
| SchemaIds | string | no | Collection of approval template IDs (JSON-encoded) |
| PolicyType | string | no | The policy type. Valid values: DomainBlacklist: Domain blacklist. DomainWhitelist: Domain whitelist. SoftwareBlock: Software disable.… |

### Queries the rendering templates associated with approval processes
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-approval-schemas-for-approval-processes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ProcessIds | string | yes | A collection of approval process IDs (JSON-encoded) |

### Queries the list of approval instances under the current Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-approvals` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The page number of the current page for a paging query. Valid values: 1 to 10000 |
| PageSize | integer | yes | The number of entries per page for a paging query. Valid values: 1 to 500 |
| ApprovalIds | string | no | The IDs of the approval instances (JSON-encoded) |
| Statuses | string | no | The statuses of the approval instances (JSON-encoded) |
| ReportTypes | string | no | The list of report types. The list uses the flat serialization format and cannot contain duplicate values. Valid values: ApprovalReport:… |
| EffectStatuses | string | no | The list of effective statuses of reports. The list uses the flat serialization format and cannot contain duplicate values. Only records… |
| SchemaId | string | no | The ID of the associated approval template |
| ProcessId | string | no | The ID of the associated approval process |
| PolicyType | string | no | The type of the adapted policy. Valid values: DomainBlacklist: Domain name blacklist. DomainWhitelist: Domain name whitelist.… |
| CreatorUserId | string | no | The ID of the user who created the approval instance |
| CreatorDevTag | string | no | The ID of the endpoint device on which the approval instance was created |
| OperatorUserId | string | no | The ID of the user who operated the approval instance |
| OperatorUsername | string | no | The username of the user who operated the approval instance |
| CreatorUsername | string | no | The username of the user who created the approval instance |
| CreatorDepartment | string | no | The department of the user who created the approval instance |
| CreateStartTime | integer | no | The start time when the approval instance was created. The value is a UNIX timestamp in seconds |
| CreateEndTime | integer | no | The end time when the approval instance was created. The value is a UNIX timestamp in seconds |
| ProcessName | string | no | The name of the associated approval process |
| SchemaName | string | no | The name of the associated approval template |

### Query user information from custom identity sources in your Alibaba Cloud account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-client-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| IdpConfigId | string | yes | Custom identity source configuration ID |
| DepartmentId | string | no | Department ID |
| Username | string | no | Username |
| Email | string | no | Email address |
| MobileNumber | string | no | Mobile phone number without country code |
| Status | string | no | User enable status. Valid values: Enabled: enabled. Disabled: disabled |
| CurrentPage | integer | no | Current page number |
| PageSize | integer | no | Page size |

### Queries connectors in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-connectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The page number of the current page for paging in a paged query. Valid values: 1 to 10000 |
| PageSize | integer | yes | The number of entries per page in the Settings for paging in a paged query. Valid values: 1 to 1000 |
| Name | string | no | The name of the connector. The name must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, periods… |
| Status | string | no | The connection status of the connector. Valid values: Online: Online. Offline: Offline |
| SwitchStatus | string | no | The connector instance status. Valid values: Enabled: Enabled. Disabled: Shutdown |
| ConnectorIds | string | no | The IDs of the connectors. You can specify up to 100 connector IDs (JSON-encoded) |

### Queries the list of device groups under the current Alibaba Cloud account by using paging in a paged query
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-device-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The page number of the current page displayed during paging in a paged query. Valid values: 1 to 10000 |
| PageSize | integer | yes | The Settings for the number of entries per page during paging in a paged query. Valid values: 1 to 500 |
| Name | string | no | The name of the device tag. The name can be up to 128 characters in length and supports Chinese characters and uppercase and lowercase… |
| DeviceGroupIds | string | no | The IDs of the device groups. Duplicate IDs are not allowed (JSON-encoded) |

### Queries the user terminal devices affected by a specified vulnerability and their remediation statuses by…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-devices-for-vulnerability` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| CurrentPage | integer | yes | The page number of the current page for paging in a paged query. Valid values: 1 to 10000 |
| PageSize | integer | yes | The paging Settings for the number of entries per page in a paged query. Valid values: 1 to 1000 |
| UpdateId | string | no | The ID of the patch package for the vulnerability. The value can be up to 64 characters in length. You can obtain the value from the… |
| Username | string | no | The username. Fuzzy match is supported. The value can be up to 128 characters in length and can contain Chinese characters, uppercase and… |
| SaseUserId | string | no | The user ID. Exact match is supported. You can obtain the value from the following operations: [ListUserDevices](~~ListUserDevices~~):… |
| Department | string | no | The department name. This parameter matches any level of department in the organizational structure to which the user belongs. Specify… |
| DevTag | string | no | The unique identifier of the user terminal device. Exact match is supported. The value can be up to 64 characters in length. You can… |
| DevType | string | no | The operating system type of the user terminal device. Valid values: windows: Windows. Currently, vulnerability scanning supports only… |
| Hostname | string | no | The hostname of the user terminal device. Fuzzy match is supported. The value can be up to 64 characters in length |
| Status | string | no | The remediation status used to filter results. Valid values: Pending: Pending remediation. Downloading: The patch is being downloaded.… |

### Lists Data Loss Prevention (DLP) outbound transfer logs
`POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/list-dlp-outbound-logs` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| StartTime | integer | yes | The start time of the query. The value is a UNIX timestamp in seconds |
| EndTime | integer | yes | The end time of the query. The value is a UNIX timestamp in seconds |
| PageSize | integer | yes | The number of entries per page. Maximum value: 100 |
| CurrentPage | integer | yes | The current page number. Pages start from 1 |
| UserName | string | no | The username. Exact match is supported |
| SrcFileName | string | no | The original file name. Fuzzy match is supported |
| SubChannelType | string | no | The secondary channel ID. Format: primary channel ID.secondary channel ID. Multiple values are separated by commas |
| PolicyAction | string | no | The policy action. Exact match for a single value is supported |
| LogId | string | no | The log ID |

…and 99 more. See the OpenAPI spec.

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-csas/add-device-group-match-devices" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Secure Access Service Edge API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-csas/add-device-group-match-devices with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Secure Access Service Edge API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Secure Access Service Edge itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Secure Access Service Edge API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-csas.

### What is the status of the Alibaba Cloud Secure Access Service Edge API?
Needs your own provider key (bring your own key)
