alicloud-security-center-sas

Category: service

Security Center

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Security Center.

Workflow

• Confirm region, resource identifiers, and desired action.

• Discover API list and required parameters (see references).

• Call API with SDK or OpenAPI Explorer.

• Verify results with describe/list APIs.

AccessKey priority (must follow)

• Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.

• Shared config file: ~/.alibabacloud/credentials

API discovery

• Product code: Sas

• Default API version: 2021-01-14

• Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

• Inventory/list: prefer List* / Describe* APIs to get current resources.

• Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.

• Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code <ProductCode> --version <Version>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/alicloud-security-center-sas/

Validation

mkdir -p output/alicloud-security-center-sas
for f in skills/security/host/alicloud-security-center-sas/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-security-center-sas/validate.txt

Pass criteria: command exits 0 and output/alicloud-security-center-sas/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/alicloud-security-center-sas/.

• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

• Configure least-privilege Alibaba Cloud credentials before execution.

• Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.

• If region is unclear, ask the user before running mutating operations.

References

• Sources: references/sources.md

Weekly Installs198Repositorycinience/alicloud-skillsGitHub Stars355First SeenFeb 26, 2026Security AuditsGen Agent Trust HubPassSocketPassSnykPassInstalled ongemini-cli196github-copilot196codex196kimi-cli196amp196cursor196