# Alibaba Cloud Bastionhost API

> Alibaba Cloud Bastionhost API on Apizie: 194 endpoints (If an O&M engineer runs a command that is configured in a command approval control policy, the administrator…, If an administrator enables O&M approval in a control policy, O&M engineers must submit an O&M request and…, Adds multiple database instances to a specified asset group, Adds multiple hosts to a specified asset group in a batch, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-yundun-bastionhost`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/yundun-bastionhost
- Page: https://zieapi.vercel.app/api/cloud/aliyun-yundun-bastionhost
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-yundun-bastionhost/openapi.json

Alibaba Cloud OpenAPI for Bastionhost (yundun-bastionhost, version 2019-12-09). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### If an O&M engineer runs a command that is configured in a command approval control policy, the administrator…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/accept-approve-command` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can call the DescribeInstances operation to query the bastion host instance ID |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| CommandId | string | yes | The ID of the command to be approved for execution. You can call the https://help.aliyun.com/document_detail/2584310.html operation to… |
| ProjectId | integer | no | The project ID |

### If an administrator enables O&M approval in a control policy, O&M engineers must submit an O&M request and…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/accept-operation-ticket` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| OperationTicketId | string | yes | The ID of the O&M request to approve. You can call the https://help.aliyun.com/document_detail/2584313.html operation to query all… |
| EffectCount | string | no | The limit on the number of logons allowed. Valid values: 0: No limit on the number of logons. The O&M engineer can log on an unlimited… |
| EffectStartTime | string | no | The start time of the validity period for logon (in seconds, UNIX timestamp format) |
| EffectEndTime | string | no | The end time of the validity period for logon (in seconds, UNIX timestamp format) |
| Comment | string | no | The approval remarks |
| ProjectId | integer | no | The project ID |

### Adds multiple database instances to a specified asset group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/add-databases-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the instance ID |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| HostGroupId | string | yes | The ID of the asset group to which you want to add the databases. You can call the https://help.aliyun.com/document_detail/201307.html… |
| DatabaseIds | string | yes | The array of database IDs (JSON-encoded) |

### Adds multiple hosts to a specified asset group in a batch
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/add-hosts-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the asset group to which you want to add hosts resides. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance where the asset group to which you want to add hosts resides. For the mapping between region… |
| HostGroupId | string | yes | The ID of the asset group to which you want to add hosts. You can call the https://help.aliyun.com/document_detail/201307.html operation… |
| HostIds | string | yes | The IDs of the hosts that you want to add to the asset group. This parameter is a JSON-formatted string. You can add up to 100 host IDs.… |
| ProjectId | integer | no | The project ID |

### Adds member accounts in a resource directory
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/add-instance-rd-member` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mappings between region IDs and region names, see… |
| MemberId | string | yes | The UID of the member accounts in a resource directory to be added |

### Adds users to a user group in a batch
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/add-users-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance to which the user group belongs. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the bastion host instance to which the user group belongs. For the mapping between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group to which you want to add users. You can call the https://help.aliyun.com/document_detail/204509.html operation to… |
| UserIds | string | yes | The IDs of the users to add to the user group. This parameter is a JSON-formatted string that supports up to 100 user IDs. Separate… |
| ProjectId | integer | no | The project ID |

### Approves an O&M task execution request
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/allow-operation-task-approval` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| ApproveId | string | yes | The approval ID of the O&M task. You can call the ListTodoOpsTaskApprovals operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Authorizes a user to manage databases and database accounts
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-database-accounts-to-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host whose user you want to grant permissions. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| UserId | string | yes | The ID of the user to be authorized. You can call the https://help.aliyun.com/document_detail/204522.html operation to query the user ID |
| Databases | string | no | An array that consists of database objects. You can specify up to 10 databases and 10 database accounts. The database accounts are not… |

### Grants a user group permissions on databases and database accounts
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-database-accounts-to-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group to which you want to grant permissions |
| Databases | string | no | The array of database objects. A maximum of 10 databases and 10 database accounts are supported. You can leave the database accounts… |
| ProjectId | integer | no | The project ID |

### Associates host accounts with a host shared key
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-host-accounts-to-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| HostShareKeyId | string | no | The ID of the host shared key. This parameter is required. You can call the https://help.aliyun.com/document_detail/462973.html operation… |
| HostAccountIds | string | no | The list of host account IDs. This parameter is required. You can call the https://help.aliyun.com/document_detail/462937.html operation… |
| ProjectId | integer | no | The project ID |

### Authorizes assets for a user. After the authorization, the user can use Bastionhost to perform O&M…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-host-accounts-to-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user to be granted authorization for hosts and host accounts belongs. You can… |
| RegionId | string | no | The region ID of the Bastionhost instance where the user to be authorized for hosts and host accounts resides. For the mappings between… |
| UserId | string | yes | The ID of the user to whom you want to authorize hosts and host accounts. You can call the… |
| Hosts | string | yes | The IDs of the hosts and host accounts to be authorized for the user. You can specify up to 10 host IDs, and up to 9 host account IDs for… |

### Grants a user group permissions on hosts and host accounts
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-host-accounts-to-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the user group that you want to grant authorization resides. You can call the… |
| RegionId | string | no | The region ID of the bastion host where the user group that you want to authorize resides. For the mapping between region IDs and region… |
| UserGroupId | string | yes | The ID of the user group that you want to authorize to manage hosts and host accounts. You can call the… |
| Hosts | string | yes | The host IDs and host account IDs that you want to authorize the user group to manage. You can specify up to 10 host IDs, and each host… |
| ProjectId | integer | no | The project ID |

### Grants permissions on host groups and host accounts to a user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-host-group-accounts-to-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user to be granted authorization on host groups and host accounts belongs. You… |
| RegionId | string | no | Specifies the region ID of the Bastionhost instance where the user to be granted permissions on host groups and host accounts is located.… |
| UserId | string | yes | The ID of the user to be granted permissions on host groups and host accounts. You can call the… |
| HostGroups | string | yes | The IDs of the host groups and the names of the host accounts to which you want to grant the user access. You can specify up to 10 host… |

### Grants permissions on host groups and host accounts to a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-host-group-accounts-to-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance where the user group resides. The user group is to be authorized to access host groups and host… |
| RegionId | string | no | Specifies the region ID of the Bastionhost instance that manages the user group to which you want to grant permissions on host groups and… |
| UserGroupId | string | yes | The ID of the user group to which you want to grant permissions on host groups and host accounts. You can call the… |
| HostGroups | string | yes | The IDs of the host groups and the names of the host accounts to which you want to grant the user group access. You can specify up to 10… |

### Associates members with a project
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-members-to-project` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The Bastionhost instance ID. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ProjectId | integer | yes | The ID of the project to which you want to associate member accounts. You can call the ListProjects operation to obtain this parameter |
| MemberIds | string | yes | The UIDs of the member accounts to associate with the project. You can call the ListMembersNotForProject operation to obtain this parameter |

### Associates project authorization administrators
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-project-managers-to-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AuthorizationId | integer | yes | The project authorization ID. You can call the ListProjectAuthorizations operation to query this parameter |
| Principals | string | no | The information about the project administrators specified in the project authorization (JSON-encoded) |

### Specifies the projects that can be managed in a project authorization. You can call this operation only when…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-projects-to-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of Bastionhost. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| AuthorizationId | integer | yes | The ID of the project authorization. You can call the ListProjectAuthorizations operation to obtain this parameter |
| ProjectIds | string | yes | The IDs of the projects that can be managed. You can call the ListProjects operation to obtain this parameter |

### Associates projects with the scope of an audit policy. You can invoke this operation only when the ScopeType…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-projects-to-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ReviewRuleId | integer | yes | The ID of the audit policy. You can invoke the ListReviewRules operation to obtain this parameter |
| ProjectIds | string | yes | The IDs of the projects to associate. You can call the ListProjects operation to obtain this parameter |

### Attaches auditors to an audit policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/attach-reviewers-to-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the DescribeInstances operation to obtain the Bastionhost instance ID |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| ReviewRuleId | integer | yes | The ID of the audit policy. You can invoke the ListReviewRules operation to obtain this parameter |
| Principals | string | no | The information about the auditors to be associated with the audit policy (JSON-encoded) |

### Configures the security groups that control inbound and outbound network traffic for a Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/config-instance-security-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| Lang | string | no | The language of the request and response. The default value is zh. Valid values: zh: Chinese en: English |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain the instance ID |
| RegionId | string | no | The region ID of the Bastionhost instance |
| AuthorizedSecurityGroups | string | yes | A list of authorized security group IDs (JSON-encoded) |

### Adds specified public IP addresses to the whitelist of a Bastionhost instance after public network access is…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/config-instance-white-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | Instance ID of the Bastionhost instance for which you want to configure the public IP address whitelist. You can call the… |
| RegionId | string | no | The region ID of the Bastionhost instance |
| WhiteList | string | no | The IP address whitelist to be configured (JSON-encoded) |
| WhiteListPolicies | string | no | The IP address whitelist to be configured (JSON-encoded) |

### Imports database assets into a bastion host. Supported database types include MySQL, SQL Server, PostgreSQL,…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-database` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| NetworkDomainId | string | no | The ID of the network domain to which the new database belongs. You can call the https://help.aliyun.com/document_detail/2758827.html… |
| DatabaseType | string | yes | The type of the database. Valid values: MySQL Oracle PostgreSQL SQLServer |
| ActiveAddressType | string | yes | The address type of the new database. Valid values: Public: public endpoint. Private: private endpoint |
| DatabasePrivateAddress | string | no | The private endpoint. IPv4 addresses and domain names are supported. This parameter is required if ActiveAddressType is set to Private |
| DatabasePublicAddress | string | no | The public endpoint. IPv4 addresses and domain names are supported. This parameter is required if ActiveAddressType is set to Public |
| DatabasePort | integer | no | The port of the database. This parameter is required if Source is set to Local |
| DatabaseName | string | no | The name of the new database instance. This parameter is required if Source is set to Local |
| SourceInstanceId | string | no | The instance ID of the new database. This parameter is required if Source is set to Rds or PolarDB |
| Source | string | yes | The source of the new database. Valid values: Local: self-managed database instance. Rds: ApsaraDB RDS instance. PolarDB: PolarDB cluster |
| Comment | string | no | The description of the new database. The value can be up to 500 characters in length |
| SourceInstanceRegionId | string | no | The region ID of the new database instance. This parameter is required if Source is set to Rds or PolarDB |
| PolarDBEndpointType | string | no | The endpoint type of the PolarDB cluster. This parameter is required if Source is set to PolarDB. Valid values: Cluster: cluster endpoint.… |
| InstanceMemberId | integer | no | The ID of the Alibaba Cloud account to which the new ApsaraDB RDS or PolarDB database instance belongs |
| ProjectId | integer | no | The project ID |

### After a database is created, you can create a database account for it. After the account is created, O&M…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-database-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance for which you want to create a database account. You can call the… |
| RegionId | string | no | The region ID of the bastion host for which you want to create a database account. For the mapping between region IDs and region names,… |
| DatabaseId | string | yes | The instance ID of the database for which you want to create an account. You can invoke the… |
| DatabaseAccountName | string | yes | The name of the database account to create. The name can be up to 128 characters in length |
| Password | string | no | The password of the database account to create |
| DatabaseSchema | string | no | The database name. This parameter is required when the database that corresponds to DatabaseId is PostgreSQL or Oracle |
| LoginAttribute | string | no | The logon property. This parameter is required for Oracle databases. Valid values: SERVICENAME SID |
| ProjectId | integer | no | The project ID |

### Creates a configuration backup export task. Only one configuration backup export task can run at a time for…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-export-config-job` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain the… |
| RegionId | string | no | The region ID of the Bastionhost instance for which you want to export the configuration backup. For more information about the mapping… |

### Creates a host in a Bastionhost instance. Bastionhost supports O&M for hosts from different sources,…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-host` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance where you want to create the host. You can call https://help.aliyun.com/document_detail/153281.html to… |
| RegionId | string | no | The region ID of the Bastionhost instance where you want to create the host. For the mapping between region IDs and region names, see… |
| HostPrivateAddress | string | no | The private network address of the host to create. You can set this parameter to a domain name or an IP address. This parameter is… |
| HostPublicAddress | string | no | The public address of the host to create. You can set this parameter to a domain name or an IP address. This parameter is required if… |
| ActiveAddressType | string | yes | The address type of the host to create. Valid values: Public: public address. Private: private network address |
| HostName | string | yes | The name of the host to create. The name can be up to 128 characters in length |
| Source | string | yes | The source of the host to create. Valid values: Local: on-premises host. Ecs: ECS instance. Rds: host in an ApsaraDB RDS dedicated cluster |
| OSType | string | yes | The operating system of the host to create. Valid values: Linux Windows |
| Comment | string | no | The description of the host. The description can be up to 500 characters in length |
| SourceInstanceId | string | no | The instance ID of the ECS instance or the host in the dedicated cluster. This parameter is required if Source is set to Ecs or Rds |
| InstanceRegionId | string | no | The region ID of the ECS instance or the host in the dedicated cluster. This parameter is required if Source is set to Ecs or Rds |
| NetworkDomainId | string | no | The ID of the network domain to which the host to create belongs. You can call https://help.aliyun.com/document_detail/2758827.html to… |
| InstanceMemberId | integer | no | The ID of the Alibaba Cloud account to which the ECS instance belongs |
| ProjectId | integer | no | The project ID |

### After you add a host to Bastionhost, you can create a host account for the host to manage the existing…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-host-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance where the host for which you want to create a host account resides. You can call the… |
| RegionId | string | no | The region ID of the Bastionhost instance where the host for which you want to create a host account resides. For more information about… |
| HostId | string | yes | The ID of the host for which you want to create a host account. You can call the https://help.aliyun.com/document_detail/200665.html… |
| ProtocolName | string | yes | The protocol name of the host account to create. Valid values: SSH RDP |
| HostAccountName | string | yes | The name of the host account to create. The name can be up to 128 characters in length |
| Password | string | no | The password of the host account to create |
| PrivateKey | string | no | The private key of the host account to create. The value is a Base64-encoded string. This parameter takes effect only when ProtocolName is… |
| PassPhrase | string | no | The passphrase of the private key for the host account to create. You can configure this parameter when ProtocolName is set to SSH. You do… |
| HostShareKeyId | string | no | The ID of the shared key for the host |
| PrivilegeType | string | no | The privilege type of the account. Default value: Normal. Privileged: privileged account. Normal: standard account. Only supported in… |
| RotationMode | string | no | The password change mode of the account. Default value: Self. Privileged: uses a privileged account to change the password. Self: does not… |
| ProjectId | integer | no | The project ID |

### You can create different asset groups based on your business requirements, add assets of the same type to an…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-host-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where you want to create the asset group. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance where you want to create the asset group. For more information about the mapping between region… |
| HostGroupName | string | yes | The name of the asset group. The name can be up to 128 characters in length |
| Comment | string | no | The description of the asset group. The description can be up to 500 characters in length |
| ProjectId | integer | no | The project ID |

### The shared key feature of Bastionhost allows you to store private keys used for host logon in Bastionhost.…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the instance ID |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| HostShareKeyName | string | yes | The name of the host shared key to create. Maximum length: 128 characters |
| PrivateKey | string | yes | The private key (Base64-encoded string). RSA keys and Ed25519 keys generated by using the ssh-keygen command are supported |
| PassPhrase | string | no | The passphrase of the private key (Base64-encoded string) |
| ProjectId | integer | no | The project ID |

### To centrally manage assets that are distributed across different network environments or that cannot…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-network-domain` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance for which you want to create a network domain. You can call the… |
| RegionId | string | no | The region ID of the Bastionhost instance for which you want to create a network domain. For the mapping between region IDs and region… |
| NetworkDomainName | string | yes | The name of the network domain to create. The name can be up to 128 characters in length |
| NetworkDomainType | string | yes | The type of the network domain to create. Valid values: Direct: The bastion host directly connects to the asset network without going… |
| Comment | string | no | The description of the network domain. The description can be up to 500 characters in length |
| Proxies | string | no | The proxy server information (JSON-encoded) |
| ProjectId | integer | no | The project ID |

### Creates an O&M request. When an administrator enables O&M approval in a control policy, O&M engineers must…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-operation-ticket` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AssetId | string | yes | The ID of the asset for which you want to request O&M access. You can call the https://help.aliyun.com/document_detail/2758856.html or… |
| ProtocolName | string | yes | The name of the protocol for which you want to request O&M access. Valid values: SSH RDP MySQL PostgreSQL Oracle SQLServer |
| AssetAccountName | string | yes | The logon name of the asset account for which you want to request O&M access |
| IsOneTimeEffect | string | no | The number of logon times allowed. Valid values: true: Only one logon is allowed within the validity period. false: Unlimited logons are… |
| EffectStartTime | integer | no | The start time of the validity period for the logon request. Unit: seconds. The value is a UNIX timestamp |
| EffectEndTime | integer | no | The end time of the validity period for the logon request. Unit: seconds. The value is a UNIX timestamp. The end time of the validity… |
| ApproveComment | string | yes | The remarks of the request |
| ProjectId | integer | no | The project ID |

### Manages O&M behaviors by configuring command control, command approval, protocol control, and access control…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance for which you want to create a control policy. You can call the… |
| RegionId | string | no | The region ID of the bastion host for which you want to create a control policy. For the mapping between region IDs and region names, see… |
| PolicyName | string | yes | The name of the control policy. Maximum length: 128 characters |
| Comment | string | no | The description of the control policy. Maximum length: 500 characters |
| Priority | string | no | The priority of the control policy. Valid values: 1 to 100. Default value: 1, which indicates the policy priority. Different control… |
| ProjectId | integer | no | The project ID |

### Creates a project
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-project` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| Name | string | yes | The name of the project |
| Description | string | no | The description of the project |
| MemberIds | string | no | The UIDs of the member accounts to associate with the project. You can call the ListMembersNotForProject operation to obtain this parameter |

### Creates a project authorization
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| Name | string | yes | The authorization name. The name must be 1 to 128 characters in length. It cannot start with a special character and can contain only the… |
| Description | string | no | The description of the authorization. The description can be up to 500 characters in length |
| ScopeType | integer | yes | The scope of manageable assets associated with the authorization. Valid values: 1: All projects. 2: Specified projects |

### Creates a project notification recipient
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-project-notify-receiver` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | no | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/462953.html operation to retrieve… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ProjectId | integer | yes | The project ID. You can call the ListProjects operation to retrieve this parameter |
| Name | string | yes | The name of the recipient. The name must be 1 to 128 characters in length. It cannot start with a special character and can contain only… |
| Phone | string | no | The mobile phone number of the recipient. You must specify at least one of the mobile phone number and the email address |
| Email | string | no | The email address of the recipient. You must specify at least one of the mobile phone number and the email address |

### Creates an audit policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the bastion… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| Name | string | yes | The name of the audit policy. The name must be 1 to 128 characters in length. It cannot start with a special character and can contain… |
| Description | string | no | The description of the audit policy. The description can be up to 500 characters in length |
| ScopeType | integer | yes | The type of the auditable asset scope rule. Valid values: 1: All projects. 2: Specified projects |

### Creates an authorization rule to grant multiple users batch access to assets and set the validity period for…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| RuleName | string | yes | The name of the authorization rule. Maximum length: 128 characters |
| Comment | string | no | The description of the authorization rule. Maximum length: 500 characters |
| EffectiveStartTime | integer | no | The start time of the validity period for the authorization rule, in seconds (timestamp format) |
| EffectiveEndTime | integer | no | The end time of the validity period for the authorization rule, in seconds (timestamp format) |
| UserIds | string | no | The array of user IDs (JSON-encoded) |
| UserGroupIds | string | no | The array of user group IDs (JSON-encoded) |
| Hosts | string | no | The host information (JSON-encoded) |
| Databases | string | no | The database information (JSON-encoded) |
| HostGroups | string | no | The asset group information to authorize (JSON-encoded) |
| ProjectId | integer | no | The project ID |

### Adds a user to a bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host to which you want to add a user. You can call the https://help.aliyun.com/document_detail/153281.html operation… |
| RegionId | string | no | The region ID of the bastion host to which you want to add a user. For more information about the mapping between region IDs and region… |
| Source | string | yes | The type of the user that you want to add. Valid values: Local: a local user. Ram: a RAM user. AD: an AD-authenticated user. LDAP: an… |
| UserName | string | yes | The logon name of the user that you want to add. The logon name must be 1 to 128 characters in length and can contain only letters,… |
| Password | string | no | The logon password of the user that you want to add. The logon password must be 8 to 128 characters in length. It must contain uppercase… |
| DisplayName | string | no | The display name of the user that you want to add. The display name can be up to 128 characters in length. If you leave this parameter… |
| Comment | string | no | The remarks of the user that you want to add. The remarks can be up to 500 characters in length |
| Email | string | no | The email address of the user that you want to add. This parameter is required if TwoFactorStatus is set to Enable and TwoFactorMethods is… |
| Mobile | string | no | The mobile phone number of the user that you want to add. This parameter is required if TwoFactorStatus is set to Enable and… |
| SourceUserId | string | no | The unique ID of the user that you want to add. This parameter uniquely identifies a RAM user of the bastion host. This parameter is… |
| MobileCountryCode | string | no | The location where the mobile phone number of the user is registered. Default value: CN. Valid values: CN: the Chinese mainland, whose… |
| EffectiveStartTime | integer | no | The start time of the validity period of the user. Specify a UNIX timestamp. Unit: seconds |
| EffectiveEndTime | integer | no | The end time of the validity period of the user. Specify a UNIX timestamp. Unit: seconds |
| NeedResetPassword | string | no | Specifies whether password reset is required upon the next logon. Valid values: true false If you leave this parameter empty, the default… |
| TwoFactorStatus | string | no | Specifies whether two-factor authentication is enabled for the user. Valid values: Global: The global settings apply. Disable: Two-factor… |
| TwoFactorMethods | string | no | The two-factor authentication method. You can select only one method. Valid values: sms: text message-based two-factor authentication.… |
| LanguageStatus | string | no | Specifies whether to send notifications in the language specified in the global settings or a custom language. Global Custom If you leave… |
| Language | string | no | This parameter is required if LanguageStatus is set to Custom. Valid values: zh-cn: simplified Chinese. en: English |

### Creates a user group for a bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance for which you want to create a user group. You can call the… |
| RegionId | string | no | The region ID of the bastion host for which you want to create a user group. For more information about the mapping between region IDs and… |
| UserGroupName | string | yes | The name of the user group to create. The name can be up to 128 characters in length |
| Comment | string | no | The description of the user group to create. The description can be up to 500 characters in length |
| ProjectId | integer | no | The project ID |

### Creates a public key for a bastion host user and hosts the public key in the bastion host. This way,…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/create-user-public-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| RegionId | string | no | Specifies the region ID of the bastion host on which you want to create a public key for the user. For more information about the mapping… |
| InstanceId | string | yes | The ID of the bastion host on which you want to create a public key for the user. You can call the… |
| UserId | string | yes | The ID of the user for whom you want to create a public key. You can call the https://help.aliyun.com/document_detail/204522.html… |
| PublicKeyName | string | yes | The name of the public key |
| PublicKey | string | yes | The public key. Encode the value by using the Base64 algorithm |
| Comment | string | no | The description of the public key. The description can be up to 500 characters in length |

### Deletes a single database instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-database` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the database instance that you want to delete resides. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| DatabaseId | string | yes | The instance ID of the database that you want to delete. You can invoke the https://help.aliyun.com/document_detail/2758822.html operation… |
| ProjectId | integer | no | The project ID |

### Deletes a single database account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-database-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance to which the database account to be deleted belongs. You can call the… |
| RegionId | string | no | The region ID of the bastion host to which the database account to be deleted belongs. For the mapping between region IDs and region… |
| DatabaseAccountId | string | yes | The ID of the database account to delete. You can call the https://help.aliyun.com/document_detail/2758839.html operation to query this… |
| ProjectId | integer | no | The project ID |

### Deletes a single host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-host` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the host to be deleted belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance to which the host to be deleted belongs. For the mapping between region IDs and region names,… |
| HostId | string | yes | The ID of the host to be deleted. You can call the https://help.aliyun.com/document_detail/200665.html operation to query this parameter |
| ProjectId | integer | no | The project ID |

### Deletes a single host account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-host-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance where the host account that you want to delete resides. You can call the… |
| RegionId | string | no | The region ID of the Bastionhost instance where the host account resides. For more information about the mapping between region IDs and… |
| HostAccountId | string | yes | The ID of the host account that you want to delete. You can call the https://help.aliyun.com/document_detail/204372.html operation to… |
| ProjectId | integer | no | The project ID |

### Deletes a single asset group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-host-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the asset group to be deleted belongs. You can call the… |
| RegionId | string | no | The region ID of the bastion host to which the asset group to be deleted belongs. For the mapping between region IDs and region names, see… |
| HostGroupId | string | yes | The ID of the asset group to be deleted. You can call the https://help.aliyun.com/document_detail/201307.html operation to query this… |
| ProjectId | integer | no | The project ID |

### Deletes a shared key
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The bastion host ID. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the bastion host ID |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| HostShareKeyId | string | no | The shared key ID. You must specify this parameter. You can call the https://help.aliyun.com/document_detail/462973.html operation to… |

### Deletes a single network domain
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-network-domain` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the network domain that you want to delete resides. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance where the network domain that you want to delete resides. For information about the mapping… |
| NetworkDomainId | string | yes | The ID of the network domain that you want to delete |
| ProjectId | integer | no | The project ID |

### Deletes a single control policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the control policy to be deleted belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| PolicyId | string | yes | The ID of the control policy to delete. You can call the https://help.aliyun.com/document_detail/2758876.html operation to query this… |
| ProjectId | integer | no | The project ID |

### Deletes a project authorization
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-project-authorizations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AuthorizationIds | string | yes | The IDs of the project authorizations to delete. You can call the ListProjectAuthorizations operation to query this parameter |

### Deletes notification recipients from a project
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-project-notify-receivers` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | no | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to retrieve… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ReceiverIds | string | yes | The IDs of the notification recipients to delete. You can call the GetProject operation to retrieve this parameter |

### Deletes projects in batches
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-projects` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the DescribeInstances operation to obtain the bastion host instance ID |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| ProjectIds | string | yes | The IDs of the projects that you want to delete. You can call the ListProjects operation to obtain this parameter |

### Deletes an audit policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-review-rules` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ReviewRuleIds | string | yes | The array of audit policy IDs to delete. You can call the ListReviewRules operation to obtain this parameter |

### Deletes a single authorization rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the authorization rule to be deleted belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance from which you want to delete the authorization rule. For the mapping between region IDs and… |
| RuleId | string | yes | The ID of the authorization rule to be deleted. You can call the https://help.aliyun.com/document_detail/2758868.html operation to query… |
| ProjectId | integer | no | The project ID |

### Deletes a bastion host user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host to which the user to be deleted belongs. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the bastion host to which the user to be deleted belongs. For more information about the mapping between region IDs and… |
| UserId | string | yes | The ID of the user to be deleted. You can call the https://help.aliyun.com/document_detail/204522.html operation to query the user ID |

### Deletes a single user group from a bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host from which you want to delete the user group. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host from which you want to delete the user group. For the mapping between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group that you want to delete. You can call the https://help.aliyun.com/document_detail/204509.html operation to query… |
| ProjectId | integer | no | The project ID |

### Deletes a public key from the specified user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/delete-user-public-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance to which the users to be queried belong. You can call the… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| PublicKeyId | string | yes | The public key ID. You can call the https://help.aliyun.com/document_detail/477555.html operation to query the public key ID |

### Queries all the attributes of an instance, such as the instance ID and description
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/describe-instance-attribute` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| RegionId | string | no | The region ID of the Bastionhost instance to query |
| InstanceId | string | yes | The ID of the Bastionhost instance to query. You can obtain the Bastionhost instance ID by calling the… |

### Queries the list of instances
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/describe-instances` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| PageNumber | integer | no | Specifies the page number of the returned results. Default value: 1 |
| PageSize | integer | no | Settings for a paged query. Specifies the number of Bastionhost instances to display on each page during paging. Default value: 10, which… |
| RegionId | string | no | The region ID of the instance |
| InstanceStatus | string | no | The status of the Bastionhost instance. Valid values: PENDING: Uninitialized CREATING: Creating RUNNING: Running EXPIRED: Expired… |
| ResourceGroupId | string | no | The ID of the resource group to which the Bastionhost instance belongs |
| InstanceId | string | no | The ID of the Bastionhost instance (JSON-encoded) |
| Tag | string | no | The tags of the Bastionhost instance (JSON-encoded) |

### Queries the Alibaba Cloud regions that support Bastionhost instances
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/describe-regions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| AcceptLanguage | string | no | The language of the response. Valid values: zh-CN (default): Chinese en-US: English ja: Japanese |
| RegionId | string | no | The ID of the region |

### Revokes permissions on databases and database accounts from a user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-database-accounts-from-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The bastion host ID. You can call the DescribeInstances operation to query the bastion host ID |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| UserId | string | yes | The ID of the user from whom you want to revoke the permissions on databases and database accounts. You can call the… |
| Databases | string | no | The databases (JSON-encoded) |

### Removes databases and database accounts that are authorized to a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-database-accounts-from-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call https://help.aliyun.com/document_detail/153281.html to obtain this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group from which you want to remove authorized databases and database accounts. You can call… |
| Databases | string | no | The information about the databases from which you want to remove authorization (JSON-encoded) |
| ProjectId | integer | no | The project ID |

### Removes the association between host accounts and a host shared key
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-host-accounts-from-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke https://help.aliyun.com/document_detail/153281.html to obtain this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| HostShareKeyId | string | yes | The ID of the host shared key. You can call https://help.aliyun.com/document_detail/462973.html to obtain this parameter |
| HostAccountIds | string | yes | The list of host account IDs. You can call https://help.aliyun.com/document_detail/462975.html to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Revokes permissions on hosts and host accounts from a user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-host-accounts-from-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host on which you want to revoke permissions on the specified hosts and host accounts from the user. You can call… |
| RegionId | string | no | The region ID of the bastion host on which you want to revoke permissions on the specified hosts and host accounts from the user. For more… |
| UserId | string | yes | The ID of the user from whom you want to revoke permissions on the specified hosts and host accounts. You can call the… |
| Hosts | string | yes | The IDs of the hosts and host accounts on which you want to revoke permissions from the user. You can specify up to 10 host IDs and up to… |

### Removes authorized hosts and host accounts from a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-host-accounts-from-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the user group from which you want to remove authorization for hosts and host accounts resides.… |
| RegionId | string | no | The region ID of the bastion host instance where the user group from which you want to remove authorized hosts and host accounts resides.… |
| UserGroupId | string | yes | The ID of the user group from which you want to remove authorized hosts and host accounts. You can call the… |
| Hosts | string | yes | The host IDs and host account IDs that you want to remove from the user group. You can specify up to 10 host IDs, and each host supports… |
| ProjectId | integer | no | The project ID |

### Removes host groups and host accounts from the list of host groups and host accounts that a user is…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-host-group-accounts-from-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host for which you want to revoke permissions on the specified host groups and host accounts from the user. You can… |
| RegionId | string | no | The region ID of the bastion host for which you want to revoke permissions on the specified host groups and host accounts from the user.… |
| UserId | string | yes | The ID of the user from which you want to revoke permissions on the specified host groups and host accounts. You can call the… |
| HostGroups | string | yes | The ID of the host group and the name of the host account on which you want to revoke permissions from the user. You can specify up to 10… |

### Revokes permissions on one or more host groups and host accounts from a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-host-group-accounts-from-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host for which you want to revoke permissions on the specified host groups and host accounts from the user group.… |
| RegionId | string | no | The region ID of the bastion host for which you want to revoke permissions on the specified host groups and host accounts from the user… |
| UserGroupId | string | yes | The ID of the user group from which you want to revoke permissions on the specified host groups and host accounts. You can call the… |
| HostGroups | string | yes | The ID of the host group and the name of host account on which you want to revoke permissions from the user group. You can specify up to… |

### Removes members from a project
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-members-from-project` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| ProjectId | integer | yes | The project ID. You can call the ListProjects operation to query this parameter |
| MemberIds | string | yes | The UIDs of the member accounts to remove. You can call the GetProject operation to query this parameter |

### Removes a project administrator from project authorization management
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-project-managers-from-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AuthorizationId | integer | yes | The project authorization ID. You can call the ListProjectAuthorizations operation to query this parameter |
| PrincipalIds | string | yes | The array of project administrator IDs to remove. You can call the GetProjectAuthorization operation to query this parameter |

### Removes projects from the scope of a project authorization. This operation can be called only when the…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-projects-from-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AuthorizationId | integer | yes | The project authorization ID. You can call the ListProjectAuthorizations operation to query this parameter |
| ProjectIds | string | yes | The array of project IDs to remove from the project authorization. You can call the GetProjectAuthorization operation to query this… |

### Removes projects from the scope of an audit policy. This operation can be called only when the ScopeType…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-projects-from-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to query this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| ReviewRuleId | integer | yes | The audit policy ID. You can call the ListReviewRules operation to query this parameter |
| ProjectIds | string | yes | The array of project IDs to remove from the audit policy. You can call the GetReviewRule operation to query this parameter |

### Unbinds an auditor from an audit rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/detach-reviewers-from-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to query this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| ReviewRuleId | integer | yes | The ID of the audit policy. You can invoke the ListReviewRules operation to query this parameter |
| PrincipalIds | string | yes | The IDs of the auditors to remove. You can call the GetReviewRule operation to query this parameter |

### Disables public network access for a Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/disable-instance-public-access` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance for which you want to disable public network access. Call the… |
| RegionId | string | no | The region ID of the Bastionhost instance |

### Disables an authorization rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/disable-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the instance ID |
| RegionId | string | no | The region ID of the bastion host. For information about the mapping between region IDs and region names, see… |
| RuleId | string | yes | The ID of the authorization rule that you want to disable. You can call the https://help.aliyun.com/document_detail/2758868.html operation… |
| ProjectId | integer | no | The project ID |

### Enables public network access for a specified Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/enable-instance-public-access` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the… |
| RegionId | string | no | The region ID of the Bastionhost instance |

### Enables an authorization rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/enable-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the instance ID |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| RuleId | string | yes | The ID of the authorization rule to enable. You can call the https://help.aliyun.com/document_detail/2758868.html operation to query the… |
| ProjectId | integer | no | The project ID |

### Applies for a host or database O&M token to perform O&M operations on assets
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/generate-asset-operation-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance for which you want to apply for an O&M token. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| AssetType | string | yes | The Asset Type for which you want to apply for a token. Valid values: Host: host Database: database |
| AssetId | string | yes | The ID of the asset for which you want to apply for an O&M token |
| AssetAccountId | string | no | The ID of the asset account for which you want to apply for an O&M token. You must specify at least one of AssetAccountId and… |
| AssetAccountName | string | no | The name of the host account. If the account is a custom account, specify the actual account name. If both AssetAccountId and… |
| AssetAccountPassword | string | no | The Base64-encoded password. This parameter is required when you apply for an O&M token for a custom account |
| AssetAccountProtocolName | string | no | The name of the protocol. Valid values: SSH RDP Oracle PostgreSQL MySQL SQLServer This parameter is required when you apply for an O&M… |
| OperationMode | string | no | The O&M logon method. Valid values: WebToken: obtain an O&M token Sso: log on by using a local client This parameter is supported only in… |
| LoginAttribute | string | no | The logon attribute. This parameter is required when OperationMode is set to Sso and the account is a custom Oracle account. Valid values:… |
| DatabaseSchema | string | no | The name of the database. This parameter is required when OperationMode is set to Sso, AssetAccountProtocolName is set to PostgreSQL or… |
| SsoClient | string | no | The type of the local client to be opened for O&M operations on Linux assets. This parameter is required when OperationMode is set to Sso… |
| OperationNote | string | no | The logon note. This parameter is required when the administrator enables the logon note feature in the control policy |

### Queries the details of a specified O&M task
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-auto-ops-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | no | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| TaskId | string | yes | The ID of the O&M task to query |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified database
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-database` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host where the database resides. You can invoke the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the bastion host where the database resides. For the mapping between region IDs and region names, see… |
| DatabaseId | string | yes | The ID of the database to query. You can call the https://help.aliyun.com/document_detail/2758822.html operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified database account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-database-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| DatabaseAccountId | string | yes | The ID of the database account to query. You can call the https://help.aliyun.com/document_detail/2758839.html operation to obtain this… |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a configuration backup export task. This operation is supported only for…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-export-config-job` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to query this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| JobId | string | yes | The ID of the configuration backup export task. This parameter is the JobId returned after you successfully call the CreateExportConfigJob… |

### Includes information such as the hostname, source, host address, and protocol port
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-host` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the host to query belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance to which the host to query belongs. For the mapping between region IDs and region names, see… |
| HostId | string | yes | The ID of the host to query. Only one host ID is supported. You can call the https://help.aliyun.com/document_detail/200665.html operation… |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified host account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-host-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the host account to query belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance to which the host account to query belongs. For the mapping between region IDs and region… |
| HostAccountId | string | yes | The ID of the host account to query. You can call the https://help.aliyun.com/document_detail/204372.html operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified asset group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-host-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the asset group belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host to which the asset group belongs. For the mapping between region IDs and region names, see… |
| HostGroupId | string | yes | The ID of the asset group that you want to query. You can call the https://help.aliyun.com/document_detail/201307.html operation to obtain… |
| ProjectId | integer | no | The project ID |

### Queries the details of a host shared key
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke https://help.aliyun.com/document_detail/153281.html to obtain this parameter |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| HostShareKeyId | string | yes | The ID of the host shared key to query. You can call https://help.aliyun.com/document_detail/462973.html to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Queries the Active Directory (AD) authentication configurations of a Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-instance-adauth-server` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the instance ID |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| UserSourceId | string | no | The UserSourceId |

### Queries the settings of Lightweight Directory Access Protocol (LDAP) authentication on a bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-instance-ldapauth-server` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the ID of the bastion… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |

### Queries the storage usage of a Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-instance-store-info` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |

### Queries the settings of two-factor authentication on a bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-instance-two-factor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the bastion host. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the ID of the bastion… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |

### Retrieves the details of a specified network domain
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-network-domain` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| NetworkDomainId | string | yes | The ID of the network domain to query. You can call the https://help.aliyun.com/document_detail/2758827.html operation to obtain this… |
| CheckProxyState | string | no | Specifies whether to immediately re-check the proxy server status. Valid values: true: Immediately re-checks the proxy server status and… |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified control policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the control policy belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance to which the control policy belongs. For the mapping between region IDs and region names, see… |
| PolicyId | string | yes | The ID of the control policy to query. You can call the https://help.aliyun.com/document_detail/2758876.html operation to obtain this… |
| ProjectId | integer | no | The project ID |

### Retrieves the asset scope of a specified control policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-policy-asset-scope` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| PolicyId | string | yes | The ID of the control policy. You can call the https://help.aliyun.com/document_detail/2758876.html operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Retrieves the effective user scope of a specified control policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-policy-user-scope` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host to which the control policy belongs. You can invoke the… |
| RegionId | string | no | The region ID of the bastion host instance to which the control policy belongs. For the mapping between region IDs and region names, see… |
| PolicyId | string | yes | The ID of the control policy to query. You can call the https://help.aliyun.com/document_detail/2758876.html operation to obtain this… |
| ProjectId | integer | no | The project ID |

### Queries the details of a specified project
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-project` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| ProjectId | integer | yes | The ID of the project to query. You can call the ListProjects operation to obtain this parameter |

### Queries the details of a project authorization
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-project-authorization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the bastion host. For the mapping between region IDs and region names, see… |
| AuthorizationId | integer | yes | The ID of the project authorization to query. You can call the ListProjectAuthorizations operation to obtain this parameter |

### Queries the details of an audit policy
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-review-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| ReviewRuleId | integer | yes | The audit policy ID. You can invoke the ListReviewRules operation to obtain this parameter |

### Retrieves the details of a specified authorization rule
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to retrieve this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| RuleId | string | yes | The ID of the authorization rule to query. You can call the https://help.aliyun.com/document_detail/2758868.html operation to retrieve… |
| ProjectId | integer | no | The project ID |

### Retrieves the details of a specified Bastionhost user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user belongs. You can invoke https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user belongs. For the mapping between region IDs and region names, see… |
| UserId | string | yes | The ID of the user that you want to query. You can call https://help.aliyun.com/document_detail/204522.html to obtain this parameter |

### Retrieves the details of a specified Bastionhost user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/get-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance for which you want to query user group details. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance for which you want to query user group details. For more information about the mapping between… |
| UserGroupId | string | yes | The ID of the user group that you want to query. You can call the https://help.aliyun.com/document_detail/204509.html operation to obtain… |
| ProjectId | integer | no | The project ID |

### Imports KMS secrets for a specified host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/import-kmssecrets-for-host` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | no | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about region IDs and names, see… |
| Secrets | string | no | The KMS secrets to import (JSON-encoded) |
| HostId | integer | yes | The ID of the host to import the KMS secrets to. Only ECS hosts can import KMS secrets. You can call the… |

### Retrieves the list of commands that require approval
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-approve-commands` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain the… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mappings between region IDs and region names, see… |
| PageNumber | string | yes | The page number of the page to return in a paged query. Default value: 1 |
| PageSize | string | yes | The maximum number of entries to return on each page in a paged query. The maximum value of the PageSize parameter is 1000. Default value:… |
| ProjectId | integer | no | The project ID |

### Retrieves a list of database accounts
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-database-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| DatabaseId | string | no | The ID of the database instance for which you want to query database accounts. You can call the… |
| PageNumber | string | no | The page number of the current page in a paging query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page in a paging query. The maximum value of the PageSize parameter is 100. Default value:… |
| DatabaseAccountName | string | no | The name of the database account to query. The name can be up to 128 characters in length. Only exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the database accounts of a database and whether a user is authorized to manage each database account
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-database-accounts-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The bastion host ID. You can call the https://help.aliyun.com/document_detail/153281.html operation to query the bastion host ID |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| UserId | string | yes | The ID of the user to query. This operation returns whether the user is authorized to manage each database account. You can call the… |
| DatabaseId | string | yes | The ID of the database whose accounts you want to query |
| PageNumber | string | no | The page number. Default value: 1 |
| PageSize | string | no | The number of entries per page. Valid values: 1 to 100. Default value: 20. If you leave this parameter empty, 20 entries are returned on… |
| DatabaseAccountName | string | no | The name of the database account to query. The name can be up to 128 characters in length. Only exact match is supported |

### Queries the list of authorized and unauthorized database accounts for a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-database-accounts-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain the value of… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group for which you want to query the authorized database accounts. You can call the… |
| DatabaseId | string | yes | The instance ID of the database for which you want to query database accounts. You can invoke the… |
| PageNumber | string | no | The page number of the current page for paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for paging in a paged query. The maximum value of the PageSize parameter is 100. The… |
| DatabaseAccountName | string | no | The name of the database account to query. The name can be up to 128 characters in length. Only exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the databases of a specified Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-databases` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| PageNumber | string | no | The page number of the current page for paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for paging in a paged query. The maximum value of the PageSize parameter is 100.… |
| DatabaseType | string | no | The type of the database. Valid values: MySQL Oracle PostgreSQL SQLServer |
| NetworkDomainId | string | no | The ID of the network domain to which the database belongs |
| Source | string | no | The source of the database. Valid values: Local: local database instance Rds: ApsaraDB RDS instance PolarDB: PolarDB instance |
| HostGroupId | string | no | The ID of the host group. You can call the https://help.aliyun.com/document_detail/201307.html operation to query the value of this… |
| ProjectId | integer | no | The project ID |

### Queries the list of databases authorized for a user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-databases-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain the instance ID |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| UserId | string | yes | The ID of the user whose authorized databases you want to query. You can call the https://help.aliyun.com/document_detail/204522.html… |
| PageNumber | string | no | The number of the page to return. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page in a paged query. Maximum value: 100. Default value: 20. If this paging parameter is… |
| DatabaseName | string | no | The name of the database instance to query |
| DatabaseAddress | string | no | The address of the database to query. Only exact match is supported |
| DatabaseType | string | no | The type of the database to query. Valid values: MySQL Oracle PostgreSQL SQLServer |
| NetworkDomainId | string | no | The ID of the network domain for which you want to query the authorized databases |
| ProjectId | integer | no | The project ID |

### Queries the databases authorized for a user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-databases-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| UserGroupId | string | yes | The ID of the user group for which you want to query authorized databases |
| PageNumber | string | no | The page number of the page to return in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page in a paged query. Maximum value: 100. Default value: 20. If this parameter is left… |
| DatabaseName | string | no | The name of the database instance to query |
| DatabaseAddress | string | no | The address of the database to query. Only exact match is supported |
| DatabaseType | string | no | The type of the database to query. Valid values: MySQL Oracle PostgreSQL SQLServer |
| NetworkDomainId | string | no | The ID of the network domain |
| ProjectId | integer | no | The project ID |

### Retrieves a list of host accounts
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance to which the host belongs. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the host belongs. For more information about the mapping between region IDs and region… |
| HostId | string | yes | The ID of the host whose accounts you want to query. You can call the https://help.aliyun.com/document_detail/200665.html operation to… |
| PageNumber | string | no | The page number of the current page in a paging query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page in a paging query. The maximum value of the PageSize parameter is 100. Default value:… |
| HostAccountName | string | no | The name of the host account to query. The name can be up to 128 characters in length. Only exact match is supported |
| ProtocolName | string | no | The protocol name of the host account to query. Valid values: SSH RDP |
| HostIds | string | no | The array of host IDs whose accounts you want to query. > If the HostId parameter is specified and its value is not 0, this parameter is… |
| ProjectId | integer | no | The project ID |

### Retrieves the host accounts associated with a host shared key
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-accounts-for-host-share-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to retrieve this… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| HostShareKeyId | string | no | The ID of the host shared key. You can call the https://help.aliyun.com/document_detail/462973.html operation to retrieve this parameter |
| PageNumber | string | no | Specifies the page number of the returned results. Default value: 1 |
| PageSize | string | no | The Settings for the paged query determine the number of host accounts associated with the host shared key to return on each page during… |
| ProjectId | integer | no | The project ID |

### Queries the list of authorized and unauthorized host accounts for a specified user on a specified host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-accounts-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user whose host accounts with authorization you want to query belongs. You can… |
| RegionId | string | no | The region ID of the Bastionhost instance where the user whose authorized host accounts you want to query is located. For more information… |
| UserId | string | yes | The ID of the user whose authorized and unauthorized host accounts you want to query. You can call the… |
| HostId | string | yes | The ID of the host for which you want to query the host accounts. You can call the https://help.aliyun.com/document_detail/200665.html… |
| PageNumber | string | no | The page number for paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for paging in a paged query. The maximum value of the PageSize parameter is 100.… |
| HostAccountName | string | no | The name of the host account. Exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the authorized and unauthorized host accounts of a specified user group on a specified host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-accounts-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user group belongs. You can query the list of host accounts with authorization… |
| RegionId | string | no | The region ID of the Bastionhost instance that contains the user group for which you want to query the list of authorized host accounts.… |
| UserGroupId | string | yes | The ID of the user group whose authorized host accounts you want to query. You can call the… |
| HostId | string | yes | The ID of the host for which you want to query the host accounts. You can call the https://help.aliyun.com/document_detail/200665.html… |
| PageNumber | string | no | The page number for paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for paging in a paged query. Maximum value: 100. Default value: 20. If you leave this… |
| HostAccountName | string | no | The name of the host account to query. Exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the names of host accounts authorized for a specified user in a specified host group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-group-account-names-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user belongs. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user belongs. For more information about the mapping between region IDs and region… |
| UserId | string | yes | The ID of the user to query. You can call the https://help.aliyun.com/document_detail/204522.html operation to obtain this parameter |
| HostGroupId | string | yes | The ID of the host group to query. You can call the https://help.aliyun.com/document_detail/201307.html operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Queries the names of host accounts authorized for a specified user group in a specified host group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-group-account-names-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the specified user group belongs. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the specified user group belongs. For more information about the mapping between region… |
| UserGroupId | string | yes | The ID of the user group. You can call the https://help.aliyun.com/document_detail/204509.html operation to obtain this parameter |
| HostGroupId | string | yes | The ID of the host group. You can call the https://help.aliyun.com/document_detail/201307.html operation to obtain this parameter |
| ProjectId | integer | no | The project ID |

### Queries the asset groups under a specified bastion host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the bastion host. You can invoke the https://help.aliyun.com/document_detail/462953.html operation to obtain the value… |
| RegionId | string | no | The region ID of the bastion host. For more information about the mapping between region IDs and region names, see… |
| PageNumber | string | no | The page number of the current page for paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for paging in a paged query. Maximum value: 100. Default value: 20. If this parameter… |
| HostGroupName | string | no | The name of the asset group. Only exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the authorized or unauthorized host groups for a specified Bastionhost user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-groups-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user belongs. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user belongs. For more information about the mapping between region IDs and region… |
| Mode | string | no | The mode of the host group list to query. Valid values: Authorized: Authorized host groups. This is the default value. Unauthorized:… |
| UserId | string | yes | The ID of the user to query. You can call the https://help.aliyun.com/document_detail/204522.html operation to obtain the parameter value |
| PageNumber | string | no | The page number for paging. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return per page for paging. The maximum value of the PageSize parameter is 100. Default value: 20. If you… |
| HostGroupName | string | no | The name of the host group to query. The name can be up to 128 characters in length. Only exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the authorized or unauthorized host groups for a specified Bastionhost user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-groups-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance to which the user group belongs. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user group belongs. For more information about the mapping between region IDs and… |
| Mode | string | no | The mode of the host group list to query. Valid values: Authorized: Authorized host groups. This is the default value. Unauthorized:… |
| UserGroupId | string | yes | The ID of the user group to query. You can call the https://help.aliyun.com/document_detail/204509.html operation to obtain this parameter |
| PageNumber | string | no | The page number of the current page when paging in a paged query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page when paging in a paged query. The maximum value of the PageSize parameter is 100. The… |
| HostGroupName | string | no | The name of the host group to query. Only exact match is supported |
| ProjectId | integer | no | The project ID |

### Queries the list of host shared keys
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-host-share-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| PageNumber | string | no | The number of the page to return. Default value: 1 |
| PageSize | string | no | Specifies the Settings for the number of host shared keys to return on each page during a paged query. Default value: 20, which indicates… |
| ProjectId | integer | no | The project ID |

### Queries the hosts in a specified Bastionhost instance
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-hosts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The instance ID of the Bastionhost instance whose hosts you want to query. You can invoke the… |
| RegionId | string | no | The region ID of the Bastionhost instance. For more information about the mapping between region IDs and region names, see… |
| PageNumber | string | no | The number of the page to return. Default value: 1 |
| PageSize | string | no | Specifies the number of hosts to return per page in a paged query. Default value: 10, which indicates that 10 hosts are returned per page.… |
| OSType | string | no | The operating system of the host. Valid values: Linux Windows |
| HostName | string | no | The name of the host. Fuzzy match is not supported. Only exact match is supported |
| HostAddress | string | no | The address of the host. You can use a domain name or an IP address. Fuzzy match is not supported. Only exact match is supported |
| Source | string | no | The source of the host. Valid values: Local: local host Ecs: ECS instance Rds: RDS dedicated cluster host |
| SourceInstanceId | string | no | The ECS instance ID or the dedicated cluster host ID to which the host corresponds. Fuzzy match is not supported. Only exact match is… |
| SourceInstanceState | string | no | The status of the host. Valid values: Normal: normal Release: released |
| HostGroupId | string | no | The ID of the host group to which the host belongs. You can call the https://help.aliyun.com/document_detail/201307.html operation to… |
| ProjectId | string | no | The project ID |

### Queries the list of authorized or unauthorized hosts for a specified Bastionhost user
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-hosts-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance to which the user belongs. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user belongs. For more information about the mapping between region IDs and region… |
| Mode | string | no | The mode of the host list to query. Valid values: Authorized: Authorized hosts. This is the default value. Unauthorized: Unauthorized hosts |
| UserId | string | yes | The ID of the user to query. You can call the https://help.aliyun.com/document_detail/204522.html operation to obtain this parameter |
| PageNumber | string | no | The page number of the current page in a paging query. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page for a paging query. The maximum value of the PageSize parameter is 100. Default… |
| HostAddress | string | no | The address of the host to query. You can use a domain name or an IP address. Only exact match is supported |
| HostName | string | no | The name of the host to query. Only exact match is supported |
| OSType | string | no | The operating system type of the host to query. Valid values: Linux Windows |
| ProjectId | integer | no | The project ID |

### Queries the list of authorized or unauthorized hosts for a specified Bastionhost user group
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-hosts-for-user-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance to which the user group belongs. You can call the https://help.aliyun.com/document_detail/153281.html… |
| RegionId | string | no | The region ID of the Bastionhost instance to which the user group belongs. For more information about the mapping between region IDs and… |
| Mode | string | no | The mode of the host list to query. Valid values: Authorized: authorized (default) Unauthorized: unauthorized |
| UserGroupId | string | yes | The ID of the user group whose authorized hosts you want to query. You can call the https://help.aliyun.com/document_detail/204509.html… |
| PageNumber | string | no | The page number of the current page in paging. Default value: 1 |
| PageSize | string | no | The maximum number of entries to return on each page in paging. Maximum value: 100. Default value: 20. If this parameter is left empty, 20… |
| HostAddress | string | no | The address of the host to query. You can use a domain name or an IP address. Only exact match is supported |
| HostName | string | no | The name of the host to query. Only exact match is supported |
| OSType | string | no | The operating system type of the host to query. Valid values: Linux Windows |
| ProjectId | integer | no | The project ID |

### Lists all importable KMS credentials for a specified host
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-importable-kmssecrets-for-host` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | no | The instance ID of the Bastionhost instance. You can invoke the https://help.aliyun.com/document_detail/153281.html operation to obtain… |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| HostId | integer | yes | The ID of the host to query. You can call the https://help.aliyun.com/document_detail/200665.html operation to obtain this parameter |
| Keyword | string | no | The name of the credential to query. Fuzzy match is supported |
| NextToken | string | no | The token required for the next cursor-based query. Leave this parameter empty for the initial query. For subsequent requests, specify the… |
| MaxResults | integer | no | The number of entries to return. If you do not specify this parameter, the default value is 20 |

### Retrieves a list of member accounts in a resource directory
`POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/list-instance-rd-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://bastionhost.ap-southeast-1.aliyuncs.com |
| InstanceId | string | yes | The ID of the Bastionhost instance. You can call the https://help.aliyun.com/document_detail/153281.html operation to obtain this parameter |
| RegionId | string | no | The region ID of the Bastionhost instance. For the mappings between region IDs and region names, see… |
| NextToken | string | no | The request token. Leave this parameter empty or do not specify it for the first request |
| MaxResults | integer | no | The maximum number of member accounts in a resource directory to return per request. Valid values: 1 to 100. Default value: 20 |

…and 74 more. See the OpenAPI spec.

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/accept-approve-command" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Bastionhost API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-yundun-bastionhost/accept-approve-command with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Bastionhost API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Bastionhost itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Bastionhost API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-yundun-bastionhost.

### What is the status of the Alibaba Cloud Bastionhost API?
Needs your own provider key (bring your own key)